Skip to content

Commit 7b1fda7

Browse files
Ditto but for mutual peer verification of inter-node communication links
1 parent 773f7c8 commit 7b1fda7

File tree

1 file changed

+11
-3
lines changed

1 file changed

+11
-3
lines changed

docs/examples/mtls-inter-node/README.md

Lines changed: 11 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,20 @@
1-
# mtls-inter-node Example
1+
# Mutual TLS Peer Verification (Mutual TLS Authentication, mTLS) for Inter-node Traffic Example
22

3-
This example shows how to [secure the Erlang Distribution with TLS](https://www.rabbitmq.com/clustering-ssl.html) so that RabbitMQ cluster nodes communicate over secure channels.
3+
When a clustered RabbitMQ node connects to its cluster peer, both
4+
can [verify each other's certificate chain](https://www.rabbitmq.com/ssl.html#peer-verification) for trust.
5+
6+
When such verification is performed on both ends, the practice is sometimes
7+
referred to "mutual TLS authentication" or simply "mTLS". This example
8+
focuses on enabling mutual peer verifications for inter-node connections (as opposed to [client communication](../mtls)).
9+
10+
This example first makes RabbitMQ cluster nodes [communicate via TLS-enabled cluster links](https://www.rabbitmq.com/clustering-ssl.html)
11+
for additional security.
412
In the future, the RabbitMQ Cluster Operator may make this easier to configure but it is already possible with the [`envConfig`](https://www.rabbitmq.com/kubernetes/operator/using-operator.html#env-config) and [`override`](https://www.rabbitmq.com/kubernetes/operator/using-operator.html#override) properties.
513

614
The most important parts of this example are:
715

816
- `rabbitmq.yaml` - `RabbitmqCluster` definition with all the necessary configuration
9-
- `inter_node_tls.config` - Erlang Distribution configuration file that will be mounted as a volume
17+
- `inter_node_tls.config` - inter-node communication configuration (Erlang distribution) file that will be mounted as a volume
1018

1119
The other files serve as an example for setting up certificates with [Cert Manager](https://cert-manager.io/docs/).
1220

0 commit comments

Comments
 (0)