[ClusterLabs] Question regarding the security of corosync
arvidjaar at gmail.com
Wed Jun 22 01:12:37 EDT 2022
On 22.06.2022 02:27, Antony Stone wrote:
> On Friday 17 June 2022 at 11:39:14, Mario Freytag wrote:
>> I’d like to ask about the security of corosync. We’re using a Proxmox HA
>> setup in our testing environment and need to confirm it’s compliance with
>> PCI guidelines.
>> We have a few questions:
>> Is the communication encrypted?
>> What method of encryption is used?
>> What method of authentication is used?
>> What is the recommended way of separation for the corosync network? VLAN?
> Your first three questions are probably well-answered by
This is thirteen years old file which is not present in the current
corosync sources. I hesitate to use it as the answer to anything
*today*. If it is still relevant, why it was removed?
> For the fourth, I agree with Jan Friesse - a dedicated physical network is
> best; a dedicated VLAN is second best.
More information about the Users