[CLOUDSTACK-5017] If SSVM is unavailable DownloadCommands will be routed to mgmt server

• Type: Bug
• Status: Resolved
• Priority: Blocker
• Resolution: Fixed
• Affects Version/s: 4.2.0
• Fix Version/s: 4.3.0
• Component/s: Storage Controller
• Security Level: Public (Anyone can view this level - this is the default.)
• Assignee: Min Chen
• Reporter: Darren Shepherd
• Created: 31/Oct/13 18:01
• Updated: 05/Nov/13 00:51
• Resolved: 05/Nov/13 00:51

Description

If a SSVM in the zone is not available, meaning either it does not exist or the host entry is not Up or Connecting, DownloadCommand will get routed to LocalHostEndpoint. This is particularily dangerous in a NFS setup. If the mgmt server handles the DownloadCommand it has sudo access to mount NFS and perform the action. This mean the mgmt server is now in the data path, or worse, it could hang if it does not have network access to the NFS server.