search

gubernator-io / gubernator

High Performance Rate Limiting MicroService and Library - Developed at Mailgun
Apache License 2.0
71 stars 6 forks source link

Add memberlist gossip encryption. #9

Closed hashi-derek closed 2 months ago

hashi-derek commented 2 months ago

This commit adds configuration fields to enable gossip encryption of memberlist. Without encryption, a malicious actor is able to add and remove members from the pool and cause general disruption to the service. Enabling encryption also acts as a pseudo-checksum and helps to ensure that no malformed UDP packets are accepted as valid messages.

thrawn01 commented 2 months ago

Thank you for the pull request, this is a great addition!