mesos-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Niklas Quarfot Nielsen (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (MESOS-910) Add SSL support to Mesos
Date Fri, 14 Nov 2014 00:24:34 GMT

     [ https://issues.apache.org/jira/browse/MESOS-910?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Niklas Quarfot Nielsen updated MESOS-910:
-----------------------------------------
    Description: 
Currently all the messages that flow through the Mesos cluster are unencrypted making it possible
for intruders to intercept and potentially control your task. We plan to add encryption support
by adding SSL/TLS support to libprocess, the low-level communication library that Mesos uses
for all network communication between Mesos components.
As a first step, we should replace the hand-coded http code in libprocess with a standard
library, ensuring that any mesos custom code like routing remains. Then, transition to https
should be easier.

Road map to SSL:




  was:
Currently all the messages that flow through the Mesos cluster are unencrypted making it possible
for intruders to intercept and potentially control your task. We plan to add encryption support
by adding SSL/TLS support to libprocess, the low-level communication library that Mesos uses
for all network communication between Mesos components.
As a first step, we should replace the hand-coded http code in libprocess with a standard
library, ensuring that any mesos custom code like routing remains. Then, transition to https
should be easier.


> Add SSL support to Mesos
> ------------------------
>
>                 Key: MESOS-910
>                 URL: https://issues.apache.org/jira/browse/MESOS-910
>             Project: Mesos
>          Issue Type: Epic
>          Components: general, libprocess
>            Reporter: Adam B
>              Labels: encryption, security
>
> Currently all the messages that flow through the Mesos cluster are unencrypted making
it possible for intruders to intercept and potentially control your task. We plan to add encryption
support by adding SSL/TLS support to libprocess, the low-level communication library that
Mesos uses for all network communication between Mesos components.
> As a first step, we should replace the hand-coded http code in libprocess with a standard
library, ensuring that any mesos custom code like routing remains. Then, transition to https
should be easier.
> Road map to SSL:



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message