You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/examples/mtls-inter-node/README.md
+11-3Lines changed: 11 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,12 +1,20 @@
1
-
# mtls-inter-node Example
1
+
# Mutual TLS Peer Verification (Mutual TLS Authentication, mTLS) for Inter-node Traffic Example
2
2
3
-
This example shows how to [secure the Erlang Distribution with TLS](https://www.rabbitmq.com/clustering-ssl.html) so that RabbitMQ cluster nodes communicate over secure channels.
3
+
When a clustered RabbitMQ node connects to its cluster peer, both
4
+
can [verify each other's certificate chain](https://www.rabbitmq.com/ssl.html#peer-verification) for trust.
5
+
6
+
When such verification is performed on both ends, the practice is sometimes
7
+
referred to "mutual TLS authentication" or simply "mTLS". This example
8
+
focuses on enabling mutual peer verifications for inter-node connections (as opposed to [client communication](../mtls)).
9
+
10
+
This example first makes RabbitMQ cluster nodes [communicate via TLS-enabled cluster links](https://www.rabbitmq.com/clustering-ssl.html)
11
+
for additional security.
4
12
In the future, the RabbitMQ Cluster Operator may make this easier to configure but it is already possible with the [`envConfig`](https://www.rabbitmq.com/kubernetes/operator/using-operator.html#env-config) and [`override`](https://www.rabbitmq.com/kubernetes/operator/using-operator.html#override) properties.
5
13
6
14
The most important parts of this example are:
7
15
8
16
-`rabbitmq.yaml` - `RabbitmqCluster` definition with all the necessary configuration
9
-
-`inter_node_tls.config` - Erlang Distribution configuration file that will be mounted as a volume
17
+
-`inter_node_tls.config` - inter-node communication configuration (Erlang distribution) file that will be mounted as a volume
10
18
11
19
The other files serve as an example for setting up certificates with [Cert Manager](https://cert-manager.io/docs/).
0 commit comments