3 ms·
What about data in motion? Is it viable to use an SSH tunnel with each service listening on localhost alone and using an encrypted tunnel to send data?
by statictype 10y ago
What about data in motion?
Is it viable to use an SSH tunnel with each service listening on localhost alone and using an encrypted tunnel to send data?
- mikegioia 10y agoThat's what the firewall is for. I set up iptables rules on all machines that only allow fixed IPs on the local network access to specific ports. If you're running it over the public 'net, then I think Mongo and Redis allow for username/passwords and/or encrypted transit.
- tostaki 10y agoNo it's not. It's secure but not reliable, your ssh tunnel will disconnect at some point. Use firewall and/or native security.
- statictype 10y agoThanks! I read somewhere that this was a good way to secure redis for compliances. Good to know it may not always work.