AbGuthrie / goquery

Provide a shell like interface by utilizing osquery's distributed API
MIT License
80 stars 10 forks source link

Multiple Instances of osquery on a Host Causes Issues #108

Open obelisk opened 5 years ago

obelisk commented 5 years ago

The way goserver and goquery work using UUIDs instead of Node Keys means that it's not deterministic when connecting to a UUID. You could have multiple instances of osquery and your request could go to any of them.

There should be something in goserver to detect this and goquery might want to be informed so a choice can be made (though that decision would be opaque behind the Node Key).

We should definitely at least guarantee that when you connect to a host, that all the queries are going to the same node key...some how.