On Wed, 17 Sep 2014 15:16:22 -0300
Gui Maluf <guimal...@gmail.com> wrote:

> Replicas are copied between storage nodes and swift presume all storage
> nodes are running in a secure network. Taking any scenario of a Globally
> Distributed OpenStack Swift Cluster
> <https://swiftstack.com/blog/2012/09/16/globally-distributed-openstack-swift-cluster/>,
> how could nodes replicates through Regions, or even between zones, using
> VPN, SSL or any secure/encrypted way?

I'm afraid there's no other practical way but create VPNs between
datacenters and tunnel your back-end Swift traffic. Although it
could be possible to use SSL (with minimal changes), there's no
authentication or authorization in Swift back-end services.
If you let attackers on your replication network, it's game over.

-- Pete

_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Reply via email to