[Security] Don't bind tcp zmq socket to all interfaces (#17197)

Signed-off-by: Russell Bryant <rbryant@redhat.com>
2025-04-28 13:08:20 -04:00
parent c7941cca18
commit a0304dc504
2 changed files with 5 additions and 1 deletions
--- a/vllm/distributed/device_communicators/shm_broadcast.py
+++ b/vllm/distributed/device_communicators/shm_broadcast.py
@@ -241,7 +241,7 @@ class MessageQueue:
                self.remote_socket.setsockopt(IPV6, 1)
                remote_addr_ipv6 = True
                connect_ip = f"[{connect_ip}]"
-            socket_addr = f"tcp://*:{remote_subscribe_port}"
+            socket_addr = f"tcp://{connect_ip}:{remote_subscribe_port}"
            self.remote_socket.bind(socket_addr)
            remote_subscribe_addr = f"tcp://{connect_ip}:{remote_subscribe_port}"
        else: