GitHub user dzueck added a comment to the discussion: Encrypting internal RESTful requests between micro services
Further looking into this, I believe that https is actually not what we are looking for here. The important features of https we need are: 1. **Encryption** to prevent external parties from reading sensitive information 2. **Authentication** to prevent man in the middle attacks where a third party pretends to be a CU or micro service. This would allow them to request sensitive data or provide fake data among other things. 3. **Integrity** to prevent external parties from modifying requests to provide fake data/requests. While https provides all 3 of these, they are actually provided by TLS which https uses. For this reason we should be discussing providing TLS between containers instead. There are a few existing tools to do this (often called service meshes), however the most light weight and simple one I could find is linkerd which I will be looking into using. Note: Due to the proposal to utilize VMs #8430 for container runtimes, any solution we choose to use should utilize sidecars instead of the sidecar less modern approaches. This is due to the fact that vms use a separate kernel with a separate networking stack which can interfere with non sidecar approaches. GitHub link: https://github.com/apache/texera/discussions/6059#discussioncomment-18437847 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]
