jtimberman/ossec-cookbook — pull request #13 by evan2645 (2013-10-01 10:21:42+00:00)
Title: Add support for cloud ip detection

When running OSSEC on an infrastructure that spans multiple cloud providers, using `node.ipaddress` is not effective as the hosted machine is frequently NAT'd. This results in the clients trying to use a private address to communicate with the OSSEC server on a different network.

In order to work around this problem, I'd like to introduce an attribute which will instruct the recipes to consult the node's cloud attribute in order to obtain public addresses. This allows the infrastructure to span multiple cloud providers. Since most providers have reachability on both public and private addresses, there should be no caveats other than a change in the network route.

Default is disabled for backward compatibility.