search

biokoda / actordb

ActorDB distributed SQL database
Mozilla Public License 2.0
1.89k stars 72 forks source link

TLS - traffic security #33

Closed glycerine closed 7 years ago

glycerine commented 7 years ago

Is any of the mysql, thrift client-to-node, or inter-node traffic in actordb secured with TLS/certs?

If not, how could I add such protection?

(shared secret encryption would be okay as well; if certs are too complex).

SergejJurecko commented 7 years ago

We considered it, but never came to the conclusion it's worth the effort and overhead. Of course we can always be persuaded otherwise from someone with a use case we did not consider.

glycerine commented 7 years ago

is all inter-node traffic at least using the erlang shared-secret? It looks like it is, and if there is no other tcp/udp outside erlang, that would be at least some comfort.

SergejJurecko commented 7 years ago

Hardly any. Erlang protocol is completely insecure anyway.

glycerine commented 7 years ago

okay. Thanks @SergejJurecko for clarifying the situation. For on-premise installs, when you are self-hosting, this makes perfect sense.

This was the information I was looking for. I'll close the issue.