3 ms·
RethinkDB and CoreOS: Navigating Digital Ocean Together
- coffeemug 12y agoThe `fleetctl` command is incredible. Just being able to say "give me six RethinkDB nodes" without having to ssh into six machines, or writing chef/puppet scripts feels like a small improvement, but it makes everything dramatically better in practice.
- dividuum 12y agoPlease note that private networking on DigitalOcean doesn't limit this network interface to your own instances. All other customers on the same datacenter can connect to services exposed there. I don't have any experience with RethinkDB, so I might be wrong here, but you probably opened up your cluster to all other customers.
- neumino 12y agoThanks, I didn't pay enough attention to that. A simple fix is to run some `iptable` commands in the discovery service and allow only the servers listed in `announce/services` to connect.
- opendais 12y agoMitM. Be sure to at least do it via SSL or stunnel or something.
- toomuchtodo 12y agoAlso have your client verify the SSL fingerprint if possible.