search

dalmatinerdb / ddb_proxy

Proxy for other metric protocols
MIT License
9 stars 5 forks source link

Authentication for metric pushes #25

Open fire opened 7 years ago

fire commented 7 years ago

How would you recommend forcing all clients to be authenticated?

A tls mutal authentication proxy would work, but a password and username on a regular tls would be ideal. Establishing a PKI infrastructure is not trivial.

What do you recommend?

Licenser commented 7 years ago

Mostly not, the protocols implemented don't provide authentication support as far as I know. If that is a concern a secure network is a way to go or a VPN? Basically, it's up to whoever deploys it.

fire commented 7 years ago

I believe the influxdb protocol allows password and username.

You can check which ones have authentication via https://github.com/influxdata/telegraf#output-plugins

For example:

https://github.com/influxdata/telegraf/tree/master/plugins/outputs/influxdb has password and username and mutal auth.

Licenser commented 7 years ago

Ah I didn't know that. Still it doesn't warrant the extra work involved when no one is using it, influx is just one of the many protocols so it'd be quite the special case.

That said if you fancy authentication go ahead, I've no objections to it.