GitHub user parshimers added a comment to the discussion: Encrypting internal RESTful requests between micro services
I think between services, there should be encryption, one way or another. It can easily be the case that different services are on different machines. In this case it can be important not only for privacy, but for stopping someone from injecting spoofed messages between the two services. How this is done more concretely, I am a little less certain of. Asterix implements the ability to have certificate auth between all nodes in the cluster, which wraps all the IPC. However this was implemented before k8s was popular and basically assumes it can be running on bare metal. If you assume everything will always be running in k8s if it's distributed, then I think you can use a service mesh like istio that presents a proxy on each pod that manages the encryption separately. Which would be a lot more convenient than having to add this functionality internally and figure out some way to deal with all the certificate management. I'd be interested to hear Madhu's take on that idea however. GitHub link: https://github.com/apache/texera/discussions/6059#discussioncomment-17512996 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]
