Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Multiple Instances of osquery on a Host Causes Issues #108

Open
obelisk opened this issue Nov 14, 2019 · 0 comments
Open

Multiple Instances of osquery on a Host Causes Issues #108

obelisk opened this issue Nov 14, 2019 · 0 comments
Labels
bug Something isn't working mock server New API For issues or PRs that add functionality to goquery the requires new backend support osquery This is related to the osquery process on the remote machine wishlist

Comments

@obelisk
Copy link
Collaborator

obelisk commented Nov 14, 2019

The way goserver and goquery work using UUIDs instead of Node Keys means that it's not deterministic when connecting to a UUID. You could have multiple instances of osquery and your request could go to any of them.

There should be something in goserver to detect this and goquery might want to be informed so a choice can be made (though that decision would be opaque behind the Node Key).

We should definitely at least guarantee that when you connect to a host, that all the queries are going to the same node key...some how.

@obelisk obelisk added bug Something isn't working mock server wishlist osquery This is related to the osquery process on the remote machine New API For issues or PRs that add functionality to goquery the requires new backend support labels Nov 14, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working mock server New API For issues or PRs that add functionality to goquery the requires new backend support osquery This is related to the osquery process on the remote machine wishlist
Projects
None yet
Development

No branches or pull requests

1 participant