Red Hat Summit Red Hat Summit지원콘솔개발자평가판 시작연락처

이 콘텐츠는 선택한 언어로 제공되지 않습니다.

Chapter 5. Red Hat Lightspeed client data obfuscation

IP addresses, Media Access Control (MAC) addresses, and hostnames are used to uniquely define a device on the internet. Red Hat Lightspeed has optional controls for excluding the IP address, Media Access Control (MAC) address, and hostname from the data file transmitted to Red Hat and to obfuscate the values within the user interface. This helps to protect the privacy of your systems and users by masking sensitive information.

5.1. Obfuscation overview
링크 복사

The Red Hat Lightspeed client obfuscation feature uses a Python data cleaning process, which you can optionally enable to replace the hostname, IP address, or MAC address with preset values when it processes the Red Hat Lightspeed archive. The processed archive file containing the obfuscated values is then sent to Red Hat Lightspeed. Obfuscation is disabled by default.

Note
  • The Python data cleaning process automatically generates the masked values. You cannot choose the values for obfuscation.
  • The Red Hat Lightspeed compliance service uses OpenSCAP tools to generate compliance reports based on information from the host system. The collaboration with OpenSCAP prevents the compliance service’s ability to completely obfuscate or redact hostname and IP address data. Also, host information is sent to Red Hat Lightspeed when a compliance data collection job launches on the host system. Red Hat Lightspeed is working to improve obfuscation options for host information.

For information about how Red Hat Lightspeed handles data collection, see Red Hat Lightspeed Data & Application Security.

5.2. Enabling obfuscation in Red Hat Satellite
링크 복사

For more information about enabling obfuscation in Satellite, see the Red Hat Cloud settings chapter of the Administering Red Hat Satellite guide.

Important

Double obfuscation is required if you use Red Hat Satellite to manage clients and register them on console.redhat.com. This means you must enable obfuscation in both the insights-client.conf file and on the Satellite web UI.

5.3. Obfuscating hostnames, IP addresses, and MAC addresses
링크 복사

Red Hat Lightspeed supports the obfuscation of the following internet connectivity protocols:

  • IPv4
  • IPv6
  • Hostname
  • MAC address

You can mask the IP address of a host in the archive file before it is sent to Red Hat Lightspeed by setting the obfuscation configuration option, obfuscation_list, in the /etc/insights-client/insights-client.conf file. You can also set a custom display name for the identification of obfuscated hosts to help you identify the host in the Red Hat Hybrid Cloud Console UI.

The following sections describe how to obfuscate the hostname, IP address, and MAC address of a system in Red Hat Lightspeed.

5.3.1. Obfuscating IPv6 IP addresses
링크 복사

If your hosts use IPv6 IP addresses, you can enable obfuscation of this data in the archive file before it is sent to Red Hat Lightspeed by setting an option in the insights-client configuration file. This helps to protect the privacy of your systems and users by masking sensitive information.

When you enable obfuscation, the original IP address of the host is replaced with a generated value in the archive file. This obfuscated value is used in the Red Hat Hybrid Cloud Console UI, logs, and any archive data files that Red Hat collects. However, you will still see the original IP address in the command-line output of some insights-client commands.

Important

The obfuscation process uses a Python data cleaning process to generate a unique value for each host. You cannot configure the value provided for obfuscation. You also cannot obfuscate or select the portion of the host IP address to obfuscate.

Prerequisites

  • If you are using Red Hat Satellite to manage clients and register them on console.redhat.com, you must also configure the Red Hat Cloud settings before you can enable obfuscation in Red Hat Lightspeed:

    • In the Satellite web UI, navigate to Administer > Settings > Red Hat Cloud and enable the required obfuscation settings that apply to your environment.

Procedure

  1. Open the /etc/insights-client/insights-client.conf file with an editor.

  2. Locate the following section: 

    # Specify which will be obfuscated in the data collection,
# empty by default, and supported options are: ipv4, ipv6, hostname, mac
# (comma separated list)
# obfuscation_list=
    Copy to Clipboard Toggle word wrap

  3. Remove the preceding hash (#) character, before obfuscation_list= and add the following line: 

    obfuscation_list=ipv6
    Copy to Clipboard Toggle word wrap

  4. If your configuration file contains the older obfuscate=True or obfuscate=False Red Hat Lightspeed obfuscation setting, remove that line of configuration.

    Important

    The obfuscate and obfuscate_hostname options are deprecated and will be removed in a future release of Red Hat Lightspeed. If your configuration file contains obfuscation_list and the deprecated obfuscation options, the obfuscation_list configuration takes precedence and you will see a warning message in the output.

  5. Save and close the /etc/insights-client/insights-client.conf file.

Result

When obfuscation is successfully enabled, the original IPv6 address is masked in the console UI, logs, and in any archive data files that Red Hat collects, as shown in the following example.

Important

After you enable obfuscation, you will continue to see the original IP address in the command-line output of some insights-client commands.

Example

  • Original host system IPv6 addresses: 

    ff00:f800:f801:f802::f806
ff00:f800:f801:f802:f00:f803:f804:f805
ff01::f00:f803:f804:f805
    Copy to Clipboard Toggle word wrap

  • Obfuscated host IPv6 addresses: 

    fc47:d0f1:5ae7:e4e9::0477,
fc47:d0f1:5ae7:e4e9:fee:3939:5b4a:2c55,
70f1::fee:3939:5b4a:2c55,
    Copy to Clipboard Toggle word wrap

  • The following image shows a screen capture of the example obfuscated IPv6 IP addresses in the Red Hat Hybrid Cloud Console UI:

    An example of an obfuscated IP addresses in the Red Hat Hybrid Cloud Console UI

Note

When you enable obfuscation on multiple systems, the same obfuscated IP address gets generated. Therefore, in the scenario provided, when you search or filter by IP address in the Red Hat Lightspeed UI on the Hybrid Cloud Console you might see several instances of 70f1::fee:3939:5b4a:2c55. This is because the Python data cleaning process that the Red Hat Lightspeed obfuscation feature uses, can generate the same obfuscated IP address in the archive file.

5.3.2. Obfuscating IPv4 IP addresses
링크 복사

If your hosts use IPv4 IP addresses, you can enable obfuscation of this data in the archive file before it is sent to Red Hat Lightspeed by setting an option in the insights-client configuration file. This helps to protect the privacy of your systems and users by masking sensitive information.

When you enable obfuscation, the original IP address of the host is replaced with a generated value in the archive file. This obfuscated value is used in the Red Hat Hybrid Cloud Console UI, logs, and any archive data files that Red Hat collects. However, you will still see the original IP address in the command-line output of some insights-client commands.

Important

The obfuscation process uses a Python data cleaning process to generate a unique value for each host. You cannot configure the value provided for obfuscation. You also cannot obfuscate or select the portion of the host IP address to obfuscate.

Prerequisites

  • If you are using Red Hat Satellite to manage clients and register them on console.redhat.com, you must also configure the Red Hat Cloud settings before you can enable obfuscation in Red Hat Lightspeed:

    • In the Satellite web UI, navigate to Administer > Settings > Red Hat Cloud and enable the required obfuscation settings that apply to your environment.

Procedure

  1. Open the /etc/insights-client/insights-client.conf file with an editor.

  2. Locate the following section: 

    # Specify which will be obfuscated in the data collection,
# empty by default, and supported options are: ipv4, ipv6, hostname, mac
# (comma separated list)
# obfuscation_list=
    Copy to Clipboard Toggle word wrap

  3. Remove the preceding hash (#) character, before obfuscation_list= and add the following line: 

    obfuscation_list=ipv4
    Copy to Clipboard Toggle word wrap

  4. If your configuration file contains the older obfuscate=True or obfuscate=False Red Hat Lightspeed obfuscation setting, remove that line of configuration.

    Important

    The obfuscate and obfuscate_hostname options are deprecated and will be removed in a future release of Red Hat Lightspeed. If your configuration file contains obfuscation_list and the deprecated obfuscation options, the obfuscation_list configuration takes precedence and you will see a warning message in the output.

  5. Save and close the /etc/insights-client/insights-client.conf file.

Result

When obfuscation is successfully enabled, the original IPv4 address is masked in the console UI, logs, and in any archive data files that Red Hat collects, as shown in the following example.

Important

After you enable obfuscation, you will continue to see the original IPv4 address in the command-line output of some insights-client commands.

Example

  • The original host system IP address: 

    192.168.0.24
    Copy to Clipboard Toggle word wrap

  • The obfuscated host IP address 

    10.230.230.1
    Copy to Clipboard Toggle word wrap

  • The following screenshot provides an example of an obfuscated IPv4 IP address in the Red Hat Hybrid Cloud Console UI:

    An example of an obfuscated IPv4 IP address in the Red Hat Hybrid Cloud Console UI

Note

When you enable obfuscation on multiple systems, the same obfuscated IP address gets generated. Therefore, in the example scenario provided, when you search or filter by IP address in the Red Hat Lightspeed UI on the Hybrid Cloud Console you might see several instances of 10.230.230.1. This is because the Python data cleaning process that the Red Hat Lightspeed obfuscation feature uses, can generate the same obfuscated IP address in the archive file.

5.3.3. Obfuscating MAC addresses
링크 복사

You can mask the Media Access Control (MAC) addresses of your hosts in the archive file before it is sent to Red Hat Lightspeed by enabling obfuscation.

Important

The obfuscation process uses a Python data cleaning process to generate a unique value for each host. You cannot configure the value provided for obfuscation. You also cannot obfuscate or select the portion of the host MAC address to obfuscate.

Prerequisites

  • If you are using Red Hat Satellite to manage clients and register them on console.redhat.com, you must also configure the Red Hat Cloud settings before you can enable obfuscation in Red Hat Lightspeed:

    • In the Satellite web UI, navigate to Administer > Settings > Red Hat Cloud and enable the required obfuscation settings that apply to your environment.

Procedure

  1. Open the /etc/insights-client/insights-client.conf file with an editor.

  2. Locate the following section: 

    # Specify which will be obfuscated in the data collection,
# empty by default, and supported options are: ipv4, ipv6, hostname, mac
# (comma separated list)
# obfuscation_list=
    Copy to Clipboard Toggle word wrap

  3. Remove the preceding hash (#) character, before obfuscation_list= and add the following line: 

    obfuscation_list=mac
    Copy to Clipboard Toggle word wrap

  4. If your configuration file contains the older obfuscate=True or obfuscate=False Red Hat Lightspeed obfuscation setting, remove that line of configuration.

    Important

    The obfuscate and obfuscate_hostname options are deprecated and will be removed in a future release of Red Hat Lightspeed. If your configuration file contains obfuscation_list and the deprecated obfuscation options, the obfuscation_list configuration takes precedence and you will see a warning message in the output.

  5. Save and close the /etc/insights-client/insights-client.conf file.

Result

When obfuscation is successfully enabled, the original MAC address is masked in the console UI, logs, and in any archive data files that Red Hat collects, as shown in the following example.

Important

After you enable obfuscation, you will continue to see the original MAC address in the command-line output of some insights-client commands.

Example

  • The original host system MAC address: 

    08:00:27:7c:fc:0f
    Copy to Clipboard Toggle word wrap

  • The obfuscated host MAC address 

    1e:fb:bc:2e:4a:6d
    Copy to Clipboard Toggle word wrap

  • The following image shows a screen capture of the example obfuscated MAC address in the Red Hat Hybrid Cloud Console UI:

    An example of an obfuscated MAC address in the Red Hat Hybrid Cloud Console UI

Note

When you enable obfuscation on multiple systems, the same obfuscated MAC address gets generated. Therefore, in the example scenario provided, when you search or filter by MAC address in the Red Hat Lightspeed UI on the Hybrid Cloud Console you might see several instances of 1e:fb:bc:2e:4a:6d. This is because the Python data cleaning process that the Red Hat Lightspeed obfuscation feature uses, can generate the same obfuscated MAC address in the archive file.

5.3.4. Obfuscating hostnames
링크 복사

When you obfuscate the hostnames of your systems in Red Hat Lightspeed, the value of the hostname configured in /etc/hostname is masked in the console GUI and in the archive file before it is sent to Red Hat. When obfuscation is enabled, the hostname value in /etc/hostname changes to a 12-character UUID that is automatically generated by the Python data cleaning process.

Tip

An obfuscated hostname can be difficult to recognize. Setting a display name can help you to more easily identify your obfuscated hosts. The display name does not get obfuscated and displays in the Red Hat Lightspeed console UI. Only the value of /etc/hostname gets obfuscated.

Prerequisites

  • If you are using Red Hat Satellite to manage clients and register them on console.redhat.com, you must also configure the Red Hat Cloud settings before you can enable obfuscation in Red Hat Lightspeed:

    • In the Satellite web UI, navigate to Administer > Settings > Red Hat Cloud and enable the required obfuscation settings that apply to your environment.

Procedure

  1. Open the /etc/insights-client/insights-client.conf file with an editor.

  2. Locate the following section: 

    obfuscation_list=
    Copy to Clipboard Toggle word wrap

  3. Add the following line to the obfuscation_list section to enable hostname obfuscation: 

    obfuscation_list=hostname
    Copy to Clipboard Toggle word wrap
    Note

    To add multiple obfuscation options, separate them with commas. For example, to obfuscate the hostname and an IPv6 IP address, you would add: 

    obfuscation_list=hostname,ipv6
    Copy to Clipboard Toggle word wrap

  4. If your configuration file contains the older obfuscate_hostname=True or obfuscate_hostname=False Red Hat Lightspeed obfuscation setting, remove that line of configuration.

    Important

    The obfuscate and obfuscate_hostname options are deprecated and will be removed in a future release of Red Hat Lightspeed. If your configuration file contains obfuscation_list and the deprecated obfuscation options, the obfuscation_list configuration takes precedence and you will see a warning message in the output.

  5. Optional: Assign a display name to your system so that you can more easily find and manage your obfuscated hosts in the Red Hat Lightspeed console UI by adding the following line: 

    display_name=example-display-name
    Copy to Clipboard Toggle word wrap
    Note

    You can also set a display name by using the following command: 

    [root@rhlightspeed]# insights-client --display-name ITC-4
    Copy to Clipboard Toggle word wrap
  6. Save and close the /etc/insights-client/insights-client.conf file.

Result

When obfuscation is successfully enabled, the hostname gets masked in the Red Hat Lightspeed console UI, logs, and any archive data files that Red Hat collects.

Note
  • If you configure hostname obfuscation on more than one system, you might see multiple systems with the same hostname in the Red Hat Lightspeed GUI as a result of obfuscation.
  • After you enable obfuscation, there might be instances where the original hostname displays in the command-line output of some insights-client commands.

Example

  • The original hostname of the system in /etc/hostname: 

    RTP.data.center.01
    Copy to Clipboard Toggle word wrap

  • The obfuscated /etc/hostname as it displays in Red Hat Lightspeed: 

    90f4a9365ce0.example.com
    Copy to Clipboard Toggle word wrap

  • The following screenshot of the Red Hat Hybrid Cloud Console UI shows an example of a system whose hostname and IP address are obfuscated:

    An example of an obfuscated hostname in the Red Hat Hybrid Cloud Console UI

맨 위로 이동
Red Hat logoGithubredditYoutubeTwitter

자세한 정보

평가판, 구매 및 판매

커뮤니티

Red Hat 문서 정보

Red Hat을 사용하는 고객은 신뢰할 수 있는 콘텐츠가 포함된 제품과 서비스를 통해 혁신하고 목표를 달성할 수 있습니다. 최신 업데이트를 확인하세요.

보다 포괄적 수용을 위한 오픈 소스 용어 교체

Red Hat은 코드, 문서, 웹 속성에서 문제가 있는 언어를 교체하기 위해 최선을 다하고 있습니다. 자세한 내용은 다음을 참조하세요.Red Hat 블로그.

Red Hat 소개

Red Hat은 기업이 핵심 데이터 센터에서 네트워크 에지에 이르기까지 플랫폼과 환경 전반에서 더 쉽게 작업할 수 있도록 강화된 솔루션을 제공합니다.

Theme

© 2025 Red Hat