4 ms·
Genuine question (that I've been seriously wondering about for a long time): how do you implement validated attestation that a piece of log data has reached non
by exikyut 5y ago
Genuine question (that I've been seriously wondering about for a long time): how do you implement validated attestation that a piece of log data has reached nonvolatile storage, triggered appropriate alarms, and that those alarm events have been acknowledged, while using a data diode type setup?
- jtchang 5y agoDepends on your setup but a message bus architecture with polling would work.
- 8note 5y agoWhat do you do when this attestation fails? Eg. A fox chewed through the cable and the ack can't be received.
- mikewarot 5y agoIf it is critical to have the log, it has to be local. Infrastructure shouldn't die if an internet connection goes down. You can sent the status of the log out through the data diode, along with a copy of the data.