Provide DTLS support - Githubissues

yyyar / gobetween

:cloud: Modern & minimalistic load balancer for the Сloud era

http://gobetween.io

Other

1.94k stars 211 forks source link

Provide DTLS support #107

Open drasko opened 7 years ago

drasko commented 7 years ago

UDP proxying is supported, and so DTLS termination is needed.

yyyar commented 7 years ago

@drasko Thanks for the idea! Could you please describe possible use cases and the way you think it should be implemented in gobetween in terms of configuration, properties & etc? It would be very helpful.

drasko commented 7 years ago

Use-case is the same as for TLS, but when you connect UDP clients.

For example, we at Mainflux provide CoAP support (server) for IoT devices. CoAP is very popular IoT protocol, and is UDP based. The idea is to use gobetween to do DTLS terminationon for CoAP and similar UDP-based protocols at the system entry (LB).

yyyar commented 5 years ago

Sorry for freezing this one for infinite time. It's good time to resurrect this issue. @illarion there is a library we could integrate to easily support DTLS termination: https://github.com/pion/dtls

fire commented 5 years ago

Here's a usecase:

For game servers Godot Engine is working on DTLS support. Since there is a lack of udp loadbalancers, this seems to be the the few systems that support udp load balancing. The idea is to do DTLS termination and then route to a random but hashed udp Godot server.

jvwag commented 4 years ago

Another usecase:

New IoT networks (NB-IoT) allow UDP connections to transfer data. We would like to encrypt this using DTLS. Our micro-service architecture could benefit from a TLS terminating load balancing solution like gobetween. We are very happy to use this without DTLS and it would be a great feature.