dask / dask/dask-gateway

Allow disabling TLS for workers and schedulers

Open
#449 2 comments 1 reaction 0 assignees View on GitHub
Dominant language
Python
Stars
148
Forks
93
PR merge metrics
No merged PRs in 30d

Description

Using TLS between workers and schedulers is appropriate in some situations, but in others it is not required. It also adds a non-trivial overhead and another entire failure mode to a Dask cluster.

Take for example a Dask cluster deployed to Kubernetes within AWS. Within the cluster VPC there isn't a strong need to enable TLS as the security boundary _is_ the cluster. If someone is inside and able to intercept traffic then they are [already so past the airtight hatchway](https://devblogs.microsoft.com/oldnewthing/20060508-22/?p=31283) that it's not important.

Currently you can't disable TLS. It would be handy to have an option to do so.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.