Another open source project dies of neglect, leaving thousands scrambling

13 pointsposted 2 months ago
by defrost

3 Comments

rvz

2 months ago

> Unfortunately, even that announcement failed to generate additional interest in helping maintain Ingress NGINX or develop InGate to replace it."

So this is what happens when no-one cares:

> The final nail in the coffin was when security company Wix found a killer Ingress NGINX security hole. How bad was it? Wix declared: "Exploiting this flaw allows an attacker to execute arbitrary code and access all cluster secrets across namespaces, which could lead to complete cluster takeover."

Another disaster waiting to happen.

lordkrandel

2 months ago

That's actually the nicest part of opensource. When you make it, you are free to let it die. There is a sunsetting best practice, but that's about it.

lionkor

2 months ago

Can someone with some Ingress NGINX experience chime in as to whether Traefik would be a suitable replacement?