10. Security

This section describes the main security related points of PyScaler

10.1. Django authentication

Being PyScaler a Django based application it delegates the security to Django’s security mechanisms.

All urls are protected except the homepage. If an user tries to access a secured page without being logged it will be automatically redirected to a login page.

Users can be managed from the administration pages.

10.2. Django protection

Django provides the following protection mechanisms againts possible attackers:

  • Cross site scripting (XSS) protection
  • Cross site request forgery (CSRF) protection
  • SQL injection protection
  • SSL/HTTPS

10.3. Key based ssh

All SSH communications must be authenticatd using key files. The usage of key files provides a higher level of control and enables easier automation.

10.4. Authenticated JMX

JMX connection to JVM can be secured using user and password

10.5. Key based AWS authentication

All communications agains Amazon Web Services are authenticad using a public key authentication.

Project Versions

Table Of Contents

Previous topic

9. High Availability

Next topic

11. API

This Page