Re: IPsec and Riak

2012-10-08 Thread Kresten Krab Thorup
You would need a range large enough to at least let all nodes connect to one another; I don't know exactly how the port allocation work for Erlang distribution but you could experiment with range sizes starting from the number of Erlang nodes, plus some extra to allow riak-admin and riak command

IPsec and Riak

2012-10-08 Thread Dennis Forbes
Operating under the assumption that the local network may be hostile, for communications between the nodes of the cluster I would like to use IPsec PSK restrictioned access and encryption to restrict cluster communications to members of the cluster. Per http://wiki.basho.com/Network-Security-and-Fi