yyyar / gobetween

:cloud: Modern & minimalistic load balancer for the Сloud era
http://gobetween.io
Other
1.94k stars 211 forks source link

Provide DTLS support #107

Open drasko opened 7 years ago

drasko commented 7 years ago

UDP proxying is supported, and so DTLS termination is needed.

yyyar commented 7 years ago

@drasko Thanks for the idea! Could you please describe possible use cases and the way you think it should be implemented in gobetween in terms of configuration, properties & etc? It would be very helpful.

drasko commented 7 years ago

Use-case is the same as for TLS, but when you connect UDP clients.

For example, we at Mainflux provide CoAP support (server) for IoT devices. CoAP is very popular IoT protocol, and is UDP based. The idea is to use gobetween to do DTLS terminationon for CoAP and similar UDP-based protocols at the system entry (LB).

yyyar commented 5 years ago

Sorry for freezing this one for infinite time. It's good time to resurrect this issue. @illarion there is a library we could integrate to easily support DTLS termination: https://github.com/pion/dtls

fire commented 5 years ago

Here's a usecase:

jvwag commented 4 years ago

Another usecase:

New IoT networks (NB-IoT) allow UDP connections to transfer data. We would like to encrypt this using DTLS. Our micro-service architecture could benefit from a TLS terminating load balancing solution like gobetween. We are very happy to use this without DTLS and it would be a great feature.