Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

S01E08: Secure public RabbitMQ #20

Merged
merged 27 commits into from
Jan 11, 2021
Merged

S01E08: Secure public RabbitMQ #20

merged 27 commits into from
Jan 11, 2021

Conversation

Gsantomaggio
Copy link
Member

@Gsantomaggio Gsantomaggio commented Nov 26, 2020

TGIR S01E08: Secure public RabbitMQ

TGIR S01E08: Secure public RabbitMQ

How do you make your RabbitMQ clusters public & secure? Think HTTPS & AMQPS. What about using a single IP for multiple RabbitMQ clusters? And what about connection throttling?

We try out RabbitMQ Cluster Operator v1.3, cert-manager v1.1 & Traefik v2.3 on Digital Ocean Kubernetes v1.19.3.

Topics covered:

  • cert-manager with CloudFlare DNS
  • SNI in RabbitMQ, PerfTest & Erlang
  • Istio as an alternative to Traefik

Related to #16

LINKS

gerhard and others added 14 commits November 18, 2020 16:18
Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
Maybe @Gsantomaggio will want to try and understand why $XDG_CONFIG_HOME
does not work for doctl as expected...

Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
Because it is closer to @Gsantomaggio than either London or Amsterdam

Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
Add a few more targets to make it easy knowing what DKE options are
available.

Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
directly with the load balancer
Gsantomaggio and others added 4 commits December 14, 2020 16:33
Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
@gerhard gerhard changed the title WIP DO NOT MERGE S01 e08 S01E08: Secure connections to publicly accessible RabbitMQ clusters Dec 16, 2020
@gerhard gerhard changed the title S01E08: Secure connections to publicly accessible RabbitMQ clusters S01E08: Secure connections to publicly accessible RabbitMQ instances Dec 16, 2020
@gerhard gerhard changed the title S01E08: Secure connections to publicly accessible RabbitMQ instances S01E08: Secure publicly accessible RabbitMQ instances Dec 16, 2020
Gsantomaggio and others added 7 commits December 18, 2020 16:25
Add the insecureSkipVerify option ( thanks to @spagno for the help)

Split the files
add perftest utils to execute the tests
Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
Signed-off-by: Gerhard Lazu <gerhard@lazu.co.uk>
@gerhard gerhard changed the title S01E08: Secure publicly accessible RabbitMQ instances S01E08: Secure public RabbitMQ Jan 11, 2021
@gerhard gerhard merged commit c45727d into master Jan 11, 2021
@gerhard gerhard deleted the S01E08 branch January 11, 2021 13:09
@stefano-v
Copy link

So great! Thanks @gerhard and @Gsantomaggio .
Can't wait to test it.
I saw you used traefik, would it be any issue if I replace it with HAProxy ?

@gerhard
Copy link
Contributor

gerhard commented Jan 12, 2021

That's great to hear! I would be most interested in the HAProxy version. Link back here so that we can take a look too.

@Gsantomaggio is looking into Istio next, and I'm keen on Linkerd. Trying out different proxies & service meshes with RabbitMQ sound like a great way of learning about the different strengths and weaknesses. It's a fantastic idea 😉

@Gsantomaggio
Copy link
Member Author

Ciao Stefano,
Glad to hear :) Let us know!
Thank you

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants