Cluster - Jgroups authentication & authorization config #15076

GretUp · 2022-10-21T07:08:20Z

GretUp
Oct 21, 2022

For production environment it is recommended to enable cluster authentication and to encrypt cluster communication.
I am using keycloak 18.0.2 on quarkus.
I found these links:
https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.3/html/configuration_guide/configuring_high_availability#using_asym_encrypt_generating_secret_key
https://infinispan.org/blog/2019/03/05/enhanced-jgroups-configuration/
http://jgroups.org/manual4/index.html#CommonProps

But sill I am struggling to understand all of the parameters and their effects.

So far this is my config:

<org.jgroups.protocols.kubernetes.KUBE_PING
port_range="1"
namespace="${kubeping_namespace}"
labels="${kubeping_label}"
stack.position="MPING"
stack.combine="REPLACE"/>
<FD_SOCK start_port="57600"
stack.combine="REPLACE"
stack.position="FD_SOCK"/>
<SSL_KEY_EXCHANGE keystore_name="/opt/jboss/rundir-safe/ha.keystore"
keystore_password="${env.KEYSTORE_SECRET}"
session_verifier_class="org.jgroups.protocols.CertficateCNMatcher"
session_verifier_arg="CN=sec-access-mgmt"
port="2157"
ssl_protocol="TLSv1.2"
stack.combine="INSERT_AFTER"
stack.position="VERIFY_SUSPECT"/>
<ASYM_ENCRYPT asym_keylength="2048"
change_key_on_leave="true"
change_key_on_coord_leave="true"
use_external_key_exchange="true"
sym_keylength="128"
sym_algorithm="AES"
asym_algorithm="RSA"
stack.combine="INSERT_AFTER"
stack.position="SSL_KEY_EXCHANGE"/>
<pbcast.GMS max_join_attempts="5"
join_timeout="30000"
stack.combine="REPLACE"
stack.position="pbcast.GMS"/>

Is there somewhere a comprehensive guide describing how to setup cluster authn & authz?

Navigation Menu

Repository navigation

Cluster - Jgroups authentication & authorization config #15076

Uh oh!

{{title}}

Uh oh!

Uh oh!

{{editor}}'s edit

{{editor}}'s edit

Uh oh!

Replies: 0 comments

Select a reply

Uh oh!

Cluster - Jgroups authentication & authorization config #15076

Uh oh!

Uh oh!

GretUp Oct 21, 2022

Replies: 0 comments

GretUp
Oct 21, 2022