Re: Mesos Security Recommendations

2015-06-04 Thread Vinod Kone
On Thu, Jun 4, 2015 at 5:12 PM, John Sirois wrote: > Its not a design doc, but the issue breakdown spells out much: > https://issues.apache.org/jira/browse/MESOS-910 > Joris will be sending out a doc soon (O(week))!

Re: Mesos Security Recommendations

2015-06-04 Thread John Sirois
On Thu, Jun 4, 2015 at 5:58 PM, Kevin Sweeney wrote: > Jeff, have you succfessfully run stunnel with a Mesos cluster? I'd > anticipate it to be a bit difficult due to the way that slaves dynamically > discover masters via zookeeper. If I remember correctly, with stunnel you > need to configure al

Re: Mesos Security Recommendations

2015-06-04 Thread Kevin Sweeney
Jeff, have you succfessfully run stunnel with a Mesos cluster? I'd anticipate it to be a bit difficult due to the way that slaves dynamically discover masters via zookeeper. If I remember correctly, with stunnel you need to configure all the tunnels beforehand, which would mean that every master wo

Re: Mesos Security Recommendations

2015-06-04 Thread Jeff Schroeder
For securing insecure network communication you can use something like stunnel, then point the app at the local stunnel. It would be a fair bit of hoops to configure it all with any your config management system, but is totally doable. On Thursday, June 4, 2015, John Webb wrote: > All, > > I'm l

Mesos Security Recommendations

2015-06-04 Thread John Webb
All, I'm looking for some recommendations on how to encrypt Mesos Slave & Framework communication to the Mesos Master until Mesos v0.23 is released which will include SSL support. I'm concerned about having the slave & framework user/password being sent across our network in clear text. I would