David Handermann created NIFI-16184:
---------------------------------------
Summary: Add TLS Endpoint Identification for Cluster Node
Communication
Key: NIFI-16184
URL: https://issues.apache.org/jira/browse/NIFI-16184
Project: Apache NiFi
Issue Type: Improvement
Components: Core Framework
Reporter: David Handermann
Assignee: David Handermann
Current NiFi cluster node communication involves a separate socket
communication with mutual TLS, in addition to HTTPS request replication for
coordinated operations. FlowFile load balancing and cluster status
communication do not use the HTTP protocol, but should enforce the same
endpoint identification requirements as HTTPS request handling for consistency.
Existing cluster configurations require DNS Subject Alternative Names that
match peer hostnames for HTTPS request replication, so enabling endpoint
identification for other cluster socket communication provides a unified
handling strategy for all node-to-node TLS handshaking.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
