Re: [openstack-dev] [Neutron][LBaaS] Feedback on SSL implementation

2014-02-24 Thread Eugene Nikanorov
Hi, Barbican is the storage option we're considering, however it seems that there's not much progress with incubation of it. Another week point of our current state is a lack of secure communication between neutron server and the agent, but that is solvable. Thanks, Eugene. On Fri, Feb 21, 201

Re: [openstack-dev] [Neutron][LBaaS] Feedback on SSL implementation

2014-02-21 Thread Jay Pipes
On Wed, 2014-02-19 at 22:01 -0800, Stephen Balukoff wrote: > Front-end versus back-end protocols: > It's actually really common for a HTTPS-enabled front-end to speak > HTTP to the back-end. The assumption here is that the back-end > network is "trusted" and therefore we don't need to bother with

[openstack-dev] [Neutron][LBaaS] Feedback on SSL implementation

2014-02-19 Thread Stephen Balukoff
Hi y'all! Good news! This is the last of the mile-long posts I said I would write after the initial post last week proposing the major model change. Yay for small miracles, right? I'm mostly working off this document in producing this feedback: https://wiki.openstack.org/wiki/Neutron/LBaaS/SSL *