[Abandoned] Parameterize SSH ingress rule about minecloud HOT 2 CLOSED

Hi krajla,
Sorry for the late reply.
Honestly I'm not sure how many security benefit it will bring by disabling SSH. But it surely will be more safer I believe (please let me know if there's any good article/research that suggesting to disable SSH for security reason)

The only concern I'm having about this is currently our auto shut down script will also check for SSH connections in case someone is configuring the server.
So if we aren't connect it with SSH, and there's no player online, the instance will shutdown while doing player online count check - which will add some complexity for adding this feature.

Let me know what do you think though!

from minecloud.

There are legitimate reasons to reduce the number of open ports/services: less overhead for patching and upgrading; less opportunities to miss-configure; less vectors of attack for zero-days, etc.

That being said security lives in balance with usability, and I agree the auto shut down script is a good enough reason to let this open. It's part of the stack and depends on this service so my case for making it optional is less founded.

I'll close this thank.

from minecloud.