Managed encryption keys for WAN federation gateways
Open
needs-investigation
theme/connect
theme/mesh-gw
type/enhancement
- Dominant language
- Go
- Stars
- 30.1k
- Forks
- 4.6k
- Avg merge
- 2d 6h
- Merged PRs (30d)
- 43
Description
#### Feature Description
Due to policy we have restrictions that internal facing endpoints should have certificates assigned by internal company CA.
#### Use Case(s)
- inter-connectivity between data-centers with BYOK (bring your own key)
#### Details
- this should be quite easily achievable by wrapping TLS connection between WAN gateways
Contributor guide
Research direction
Start by tracing how Consul establishes connections between WAN federation gateways and where certificate configuration is handled. Define the required BYOK and internal-CA behavior for data-center inter-connectivity, then identify how encrypted gateway communication can be verified; the issue names no files or tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go
- Domain
- distributed-systems, networking, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100