diff options
| author |  Joe Banks <[email protected]> | 2024-06-06 00:33:50 +0100 |
|---|---|---|
| committer | Joe Banks <[email protected]> | 2024-06-06 00:49:32 +0100 |
| commit | 768c0aaf100709b765c147631197f8cba6f1349a (patch) | |
| tree | 0bcbaba80229e0dee5c776839bd6ebcdf397ad6c /kubernetes/namespaces | |
| parent | Set proxied to true for paste record (diff) | |
Switch to using designated placeholder IPv4 for originless records
We currently used something like 1.2.3.4 or 1.1.1.1 as placeholder IP
addresses for DNS records where we ran in "originless" mode (the request
is always answered by a Cloudflare Worker or a redirect).
This changes that so we use designated reserved IPv4
addresses (192.0.2.0) to capture that traffic instead, ensuring that in
no circumstance would we leak traffic to an address like 1.1.1.1 or
1.2.3.4 if there was a Cloudflare misconfiguration.
Despite the potential risk vectors here being very small, it's a minor
change and also helps us ensure configuration works correctly in the future.
Diffstat (limited to 'kubernetes/namespaces')
0 files changed, 0 insertions, 0 deletions