Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support access control policy filtering on GRPC Proxies #1829

Closed
ravenac95 opened this issue Jun 19, 2019 · 0 comments · Fixed by #2475
Closed

Support access control policy filtering on GRPC Proxies #1829

ravenac95 opened this issue Jun 19, 2019 · 0 comments · Fixed by #2475
Assignees
Labels
c:ops Category: operations c:security Category: security issues

Comments

@ravenac95
Copy link
Contributor

ravenac95 commented Jun 19, 2019

We need to expose the access control policy for GRPC proxies to use to filter traffic ingress

Details

We would like to support an architecture that would look something like this for grpc and libp2p proxies:

LibP2P_GRPC Proxy Architecture

General Ideas:

  • The proxy layer should terminate TLS and validate the Client TLS certificate is from a valid node identity in the access control policy.

Acceptance Criteria

  • An interface is designed to properly expose the required access control policy to support a GRPC proxy
  • The Ekiden-Node can be configured to accept proxied requests over GRPC.
@ravenac95 ravenac95 added the c:ops Category: operations label Jun 19, 2019
@ravenac95 ravenac95 mentioned this issue Jun 19, 2019
4 tasks
@ravenac95 ravenac95 added epic Epic (costed tracking issue) and removed epic Epic (costed tracking issue) labels Jun 27, 2019
@ravenac95 ravenac95 changed the title Enable filtering and auth for GRPC and LibP2P Enable expose access control filtering policy for GRPC Jun 27, 2019
@ravenac95 ravenac95 changed the title Enable expose access control filtering policy for GRPC Enable expose access control filtering policy for GRPC Proxies Jun 27, 2019
@ravenac95 ravenac95 changed the title Enable expose access control filtering policy for GRPC Proxies Support access control filtering policy for GRPC Proxies Jun 27, 2019
@ravenac95 ravenac95 changed the title Support access control filtering policy for GRPC Proxies Support access control policy for GRPC Proxies Jun 27, 2019
@ravenac95 ravenac95 changed the title Support access control policy for GRPC Proxies Support access control policy filtering on GRPC Proxies Jun 27, 2019
@kostko kostko added the c:security Category: security issues label Dec 2, 2019
@ptrus ptrus mentioned this issue Dec 16, 2019
1 task
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
c:ops Category: operations c:security Category: security issues
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants