Improve The CrowdSec Multi-Server Installation With HTTPS Between A...

Advisories

Discover Cryptography News

Improve The CrowdSec Multi-Server Installation With HTTPS Between Agents

Improve The CrowdSec Multi-Server Installation With HTTPS Between Agents

Learn how to improve the security of the CrowdSec multi-server installation with HTTPS between agents.

This article is a follow-up from the Crowdsec multi-server setup. It applies to a configuration with at least two servers (referred to as server-1 and one of server-2 or server-3).

To address security issues posed by clear http communication in our previous crowdsec multi-server installation, we propose solutions to achieve communication between Crowdsec agents over encrypted channels. On top of that, the third solution allows server-2 or server-3 to trust server-1 identity, and avoid man-in -the -middle attacks.

We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.