search

PowerDNS / weakforced

Anti-Abuse for servers at authentication time
GNU General Public License v3.0
124 stars 33 forks source link

Support dynamic management of siblings and per-sibling encryption keys #324

Closed neilcook closed 3 years ago

neilcook commented 3 years ago

This PR addresses two issues with the current version of wforce: 1) the single encryption key that has to be shared between all wforce instances 2) the inability to dynamically add siblings, which would extremely useful in environments such as kubernetes, where cluster membership could be highly dynamic

Utility functions for adding/removing/setting siblings are also added, which are used to manage siblings from Lua as well as from the new REST API commands to manage siblings.

chbruyand commented 3 years ago

Apart from tests that fail, LGTM!