Hide presence of load balancer [Qualys]
I have an OpenVPN AS node, our security team gave me a report that there's a qualys vulnerability says
"Presence of a Load-Balancing Device Detected"
On the solution section says: To prevent detection by analyzing IP TTL values, IP ID values, and TCP ISN values, you may use hosts with a TCP/IP implementation that generates randomized numbers for these values. However, most operating systems available today do not come with such a TCP/IP implementation.
I don't know what to do, is changing default TTL of the node will solve this?
Any idea how to solve this?
Thanks.
|