Trusted Hosts
Setting your trusted hosts is a great security measure because it helps prevent cache poisoning and phishing attacks. By explicitly defining which Host headers VirtFusion will accept, you reduce the risk of attackers injecting malicious or unauthorized hostnames into requests.
Hosts can only be managed via CLI on the control server using the vfcli-ctrl trusted-hosts
command.
Adding a Host
You can add as many hosts as you like.
From CLI, run the following command:
vfcli-ctrl trusted-hosts add <HOST or IP>
Replace HOST|IP
with the domain of your control server. You can also specify IPv4 and IPv6 addresses.
Example
vfcli-ctrl trusted-hosts add cp.control.com
Deleting a Host
From CLI, run the following command:
vfcli-ctrl trusted-hosts del <HOST or IP>
Resetting Hosts
This command will remove all the hosts you have defined and will set the system to allow all.
From CLI, run the following command:
vfcli-ctrl trusted-hosts reset
Replace HOST|IP
with the host you would like to delete.
Example
vfcli-ctrl trusted-hosts del cp.control.com
Listing Hosts
vfcli-ctrl trusted-hosts list