[
https://issues.apache.org/jira/browse/MESOS-910?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Niklas Quarfot Nielsen updated MESOS-910:
-----------------------------------------
Description:
Currently all the messages that flow through the Mesos cluster are unencrypted
making it possible for intruders to intercept and potentially control your
task. We plan to add encryption support by adding SSL/TLS support to
libprocess, the low-level communication library that Mesos uses for all network
communication between Mesos components.
As a first step, we should replace the hand-coded http code in libprocess with
a standard library, ensuring that any mesos custom code like routing remains.
Then, transition to https should be easier.
h3. Road map to SSL
# Isolate libev dependencies to a manageable set of implementing files.
##
# Provide alternative implementation with libevent.
# Introduce socket factory
#
was:
Currently all the messages that flow through the Mesos cluster are unencrypted
making it possible for intruders to intercept and potentially control your
task. We plan to add encryption support by adding SSL/TLS support to
libprocess, the low-level communication library that Mesos uses for all network
communication between Mesos components.
As a first step, we should replace the hand-coded http code in libprocess with
a standard library, ensuring that any mesos custom code like routing remains.
Then, transition to https should be easier.
Road map to SSL:
> Add SSL support to Mesos
> ------------------------
>
> Key: MESOS-910
> URL: https://issues.apache.org/jira/browse/MESOS-910
> Project: Mesos
> Issue Type: Epic
> Components: general, libprocess
> Reporter: Adam B
> Labels: encryption, security
>
> Currently all the messages that flow through the Mesos cluster are
> unencrypted making it possible for intruders to intercept and potentially
> control your task. We plan to add encryption support by adding SSL/TLS
> support to libprocess, the low-level communication library that Mesos uses
> for all network communication between Mesos components.
> As a first step, we should replace the hand-coded http code in libprocess
> with a standard library, ensuring that any mesos custom code like routing
> remains. Then, transition to https should be easier.
> h3. Road map to SSL
> # Isolate libev dependencies to a manageable set of implementing files.
> ##
> # Provide alternative implementation with libevent.
> # Introduce socket factory
> #
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
