Support IPFIX with TLS/DTLS

Edgio / vflow

Enterprise Network Flow Collector (IPFIX, sFlow, Netflow)

http://www.verizonmedia.com

Apache License 2.0

1.07k stars 226 forks source link

Support IPFIX with TLS/DTLS #115

Open Koenie8 opened 4 years ago

Koenie8 commented 4 years ago

Is it possible with this collector to receive IPFIX packages over TCP with TLS or UDP with DTLS? For the moment the IPFIX packages are all over UDP without encryption if I am correct.

glowa001 commented 4 years ago

I think you can do it. What you have to do is pass received payload to ipfix.Decoder.

Koenie8 commented 4 years ago

So I could just send IPFIX over TLS without adjustments in the code (since decoding is always done on the payload I assume) There is TCP decoding in the transport.go, but I don't see TLS supported here? And the provided stress test does not provided to send ipfix with TLS (only UDP possible)?

Sorry for the overload of questions, but I currently don't see how the vflow-project supports encryption when transferring IPFIX over TCP or where it should be provided?