Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

out_nats: protocol info before TLS handshake #46

Closed
edsiper opened this issue Feb 26, 2016 · 4 comments
Closed

out_nats: protocol info before TLS handshake #46

edsiper opened this issue Feb 26, 2016 · 4 comments
Assignees
Milestone

Comments

@edsiper
Copy link
Member

edsiper commented Feb 26, 2016

When a connection is issued to a NATS server, the client receives an INFO message as soon the connection is established, e.g:

{"server_id":"e1d84d38a2c8f11f4209f079d8c82203",
 "version":"0.7.5",
 "go": "go1.5.3", 
 "host":"0.0.0.0", 
 "port":4449,
 "auth_required":true,
 "ssl_required":true,
 "tls_required":true,
 "tls_verify":true,
 "max_payload":1048576
}

so based on this information the client (out_nats) must be able to switch to TLS mode. Fluent Bit already supports TLS but we need a tweak to do:

  • connect to NATS server
  • parse INFO message
  • if TLS is enable, use Fluent Bit I/O TLS support, otherwise raw TCP backend
@edsiper edsiper added this to the 0.7 milestone Feb 26, 2016
@edsiper edsiper self-assigned this Feb 26, 2016
@edsiper
Copy link
Member Author

edsiper commented Mar 4, 2016

NATS + TLS support will come in v0.8

@edsiper edsiper modified the milestones: 0.8, 0.7 Mar 4, 2016
@edsiper
Copy link
Member Author

edsiper commented Apr 19, 2017

Marking this enhancement request as "wonfix-until-requested", meaning, we will reconsider it implementation until some users really require it.

@edsiper edsiper closed this as completed Apr 19, 2017
fujimotos pushed a commit to fujimotos/fluent-bit that referenced this issue Jul 22, 2019
@enozcan
Copy link

enozcan commented Jul 5, 2022

we will reconsider it implementation until some users really require it.

@edsiper Hi, FWIW we got blocked by this issue where we secure NATS cluster with TLS and want to publish messages thru FluentBit.

@jm-amt
Copy link

jm-amt commented Mar 19, 2024

Is TLS for the NATS output still not supported?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants