Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable secure comms with DKV GRPC endpoints #9

Open
KalyanAkella opened this issue Mar 10, 2020 · 0 comments
Open

Enable secure comms with DKV GRPC endpoints #9

KalyanAkella opened this issue Mar 10, 2020 · 0 comments
Assignees
Labels
enhancement New feature or request feature-request Feature Request

Comments

@KalyanAkella
Copy link
Contributor

KalyanAkella commented Mar 10, 2020

We must provide secure means for clients to interact with DKV GRPC endpoints. Specifically, this issue asks for encrypted communication between both client-server as well as server-server interactions. A separate issue will handle servers and possible clients authentication #109 .

We propose to use TLS 1.2 for encrypting both client-server and server-server interactions regardless of the application protocol (GRPC/HTTP). Additionally, we must provide means (via command line flag) for the user to disable security so as to simplify onboarding to DKV during development. Unless the users specify such an override, all the following interactions must be encrypted by default.

  1. Interactions from dkvctl and language specific clients
  2. Change propagation feed between masters and slaves
  3. Nexus interactions between masters

Note that, support for encrypting Nexus interactions will be built inside the Nexus module and enabled by DKV during bootstrap.

@KalyanAkella KalyanAkella added the enhancement New feature or request label Mar 10, 2020
@KalyanAkella KalyanAkella self-assigned this Mar 10, 2020
@kingster kingster added the feature-request Feature Request label Oct 1, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request feature-request Feature Request
Projects
None yet
Development

No branches or pull requests

2 participants