[zeromq-dev] ELI5: Why can't I get the IP address of the machine that sent a message?
Michel Pelletier
pelletier.michel at gmail.com
Thu Sep 25 04:03:25 CEST 2014
IP addresses are easily spoofed, they should not be used as a security
mechanism. If you want security, you have to either trust all your
networks or use curvemq security or some other authentication
mechanism like a vpn.
0mq doesn't expose the IP because this is an implementation detail of
the tcp transport.
-Michel
On Wed, Sep 24, 2014 at 6:57 PM, Scott <alcoholiday at gmail.com> wrote:
> Hi folks,
>
> We had a problem a while back where some 'unknown machine' was sending
> malformed messages and causing our ZMQ based app to lose it's mind. It took
> a while to figure that out... And then once a developer on our team found
> the nastygram he had trouble figuring out what machine was doing this.
>
> Is there a design reason that we lose this information in the area between
> plain ol sockets and ZMQ messages getting delivered to the application?
>
> Thanks for your patience and such a great library!
>
> -Scott
>
>
> _______________________________________________
> zeromq-dev mailing list
> zeromq-dev at lists.zeromq.org
> http://lists.zeromq.org/mailman/listinfo/zeromq-dev
>
More information about the zeromq-dev
mailing list