Skip to content

Enable use of a Cassandra proxy using the resty cluster interface #138

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 1 commit into from

Conversation

mpenick
Copy link

@mpenick mpenick commented Apr 6, 2020

Also, pass client certificates configuration through the cluster
interface to the peer options.

Also, pass client certificates configuration through the cluster
interface to the peer options.
@thibaultcha
Copy link
Owner

Hi,

Thanks for the efforts, however, have you tested your changes in production? I doubt they will work, since unfortunately OpenResty's cosockets does not support TLS client certificate yet, hence why the limitation in this driver. Client certificates are supported by the LuaSocket fallback implemented by this driver for the init_by_lua phase (in which OpenResty's cosockets aren't supported), but those sockets should never be used after this phase or else they will block the NGINX workers' event loop.

Support for mTLS cosockets has recently been proposed by openresty/lua-resty-core#278 + openresty/lua-nginx-module#1602. Given that we are currently working on OpenResty 1.15.8.4 and 1.17.8.1 releases, these PRs aren't going to land in a mainstream release until later this year.

Also, in order for me to merge this I'd ask of you for tests and documentation around the new options, should we get there some day.

Best,

@mpenick
Copy link
Author

mpenick commented May 28, 2020

Thanks so much for the feedback! Yes, we had to force lua sockets instead of ngx.socket for the reasons above. I'll re-open a PR when client certificates are better supported.

@mpenick mpenick closed this May 28, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants