Public iSCSI targets on MAAS region controller

[Jonas Wagner]

Hello,

I'd like to ask a question about how MAAS uses iSCSI. Apparently, the MAAS
region controller exposes iSCSI targets for supported Ubuntu images. These
are flagged as vulnerable by the Nessus scanner running at our university.

I've described this in more detail here:
https://askubuntu.com/questions/847854/maas-disable-iscsi-or-require-authentication

I would be curious as to how MAAS uses these iSCSI targets. Is it possible
to make them available to the internal network only (where the MAAS-managed
cluster is) rather than the region controller's external interface? Would
MAAS break if we close the corresponding ports in our firewall?

Best,
Jonas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/maas-devel/attachments/20161129/20a8e46f/attachment.html>