[CRIU] [PATCH 0/4] p.haul: add ability to use ssh tunneling for encrypting and compressing traffic

Ruslan Kuprieiev kupruser at gmail.com
Mon Oct 13 03:12:43 PDT 2014


Currently, all p.haul traffic goes without any encryption, which is
not safe at all, cosidering that attacker can easily peek memory pages
of migrating process. Lets solve that using optional ssh tunneling for
p.haul port.

Ruslan Kuprieiev (4):
  p.haul: allow IP:PORT dest on p.haul and add --port to p.haul-service
  p.haul: enable ssh tunneling with --ssh* cmdline options
  p.haul: add --ssh-port and --ssh-fwd-port cmdline options
  p.haul: add some minor comments

 fs_haul_subtree.py |  4 +++-
 p.haul             | 49 +++++++++++++++++++++++++++++++++++++++++++++++--
 p.haul-service     |  8 +++++++-
 p_haul_iters.py    |  6 +++---
 xem_rpc.py         | 20 ++++++++++----------
 5 files changed, 70 insertions(+), 17 deletions(-)

-- 
1.9.3



More information about the CRIU mailing list