monolith: allow ganglia and http on subnet