Coming soon...New Support-Specific categorization of Knowledge Articles in the NetApp Knowledge Base site to improve navigation, searchability and your self-service journey.

Home
Advice and Troubleshooting
Hybrid Cloud Infrastructure
StorageGRID
RFC 6797 flagged against StorageGRID S3 load balancer end point TCP ports

RFC 6797 flagged against StorageGRID S3 load balancer end point TCP ports

Last updated
Save as PDF
Share
1. Share
2. Tweet
3. Share

Views:: 93

Visibility:: Public

Votes:: 0

Category:: storagegrid-webscale

Specialty:: sgrid

Last Updated:

Applies to

StorageGRID 11.5

Issue

RFC 6797 is flagged against TCP ports 10443 (or custom TCP port) with the following:

The web server is not enforcing HSTS, as defined by RFC 6797. HSTS is an optional response header that can be configured on the server to instruct the browser to only communicate via HTTPS. The lack of HSTS allows downgrade attacks, SSL-stripping man-in-the-middle attacks, and weakens cookie-hijacking protections.