gubernator-io / gubernator

High Performance Rate Limiting MicroService and Library - Developed at Mailgun
Apache License 2.0
71 stars 6 forks source link

Peering authentication #2

Closed japem closed 2 months ago

japem commented 4 months ago

I originally opened this issue on the mailgun/gubernator repo and was told to move it here

Is there any way to authenticate peering requests? As far as I can tell, there is to be no way to hook into the gRPC client created by the peering instance to add any sort of credentials to the peering request object, nor is there support for mTLS.

How is a use case that considers rate limit statuses to be sensitive supposed to make use of the peering feature?

thrawn01 commented 3 months ago

@japem I'm now back from holiday, sorry for the wait.

You can specify TLS for the client Gubernator will use by setting these config options. https://github.com/gubernator-io/gubernator/blob/master/example.conf#L117-L119

Authentication is preformed via TLS certificate authentication.

thrawn01 commented 2 months ago

Closed due to age