Chris Chiu

[ENHANCEMENT] Improve the security by restricting port access

3

**Is your enhancement related to a problem? Please describe.** There should be a way to blacklist external network or whitelist the Harvester node network only to protection from malicious scan...

[Doc] Add missing ports in Hardware and Network Requirement doc

1

**Is your doc request related to a problem? Please describe or add related issue ID.** When doing white list to allow mandatory ports to be accessed for nodes, found some...

**Problem:** RKE2 requires a default route to start, some installations are stuck with no obvious message if there is no default route on the system. **Solution:** Check the existence of...

**Problem:** Please refer [harvester/harvester#5178](https://github.com/harvester/harvester/issues/5178). The additional mgmt-br.VLAN_ID interface would cause confusion and not helpful when debugging packet flow on network problem. **Solution:** Do not create the additional bridge interface while...

fix: http(s) connection time out from VMs in VLAN netwok

2

**Problem:** The VM attached to the VLAN network fails to http(s) with management URL. However, there's no problem with SSH/ping which connect to ports other then http(s) since http(s) needs...

[BUG] Maximum call stack size exceeded while removing node

2

**Describe the bug**  Fail to remove node (both worker and witness) due to the warning message `Maximum call stack size exceeded` shown in the attached snapshot. Rebooting the management...

**Problem:** Need to add a basic security to Harvester to prevent unnecessary ports been used. Will need a UI in the future to allow users to add ports manually **Solution:**...

backport: Disable iptables bridge forwarding on initialization

4

(cherry picked from commit 652162909d48f81d2759c49538e2ac42ecd75eb9) Signed-off-by: Chris Chiu **Problem:** In the Harvester cluster whose management network has a VLAN ID, the VM will be unable to access the host port...

**IMPORTANT: Please do not create a Pull Request without creating an issue first.** **Problem:** Enable the network-controller to support basic VxLAN configuration **Solution:** Use the current `ip` and `bridge` utility...

[BUG] Neuvector cannot learn network policy for VM traffic when Harvester VM network type is bridge

21

**Describe the bug** The VM traffic can be learned when VM's NIC in masquerade mode, but can not be learned when the NIC is bridge mode **To Reproduce** Steps to...