Ask Your Question
3

Are there any plans to make Swift with SSL production ready?

asked 2013-03-26 11:17:42 -0500

adam-morris gravatar image

I have looked at the Swift Proxy settings for SSL and we can turn this on, but it is not production ready.

Are there any plans to make Swift with SSL production ready in the near future?

Are there any plans to use encryption on the connection between the Swift Proxy and the Swift nodes?

edit retag flag offensive close merge delete
add a comment

2 answers

Sort by ยป oldest newest most voted
11

answered 2013-03-26 11:36:50 -0500

chmouel gravatar image

Usually if you want to have Swift with SSL we advise to use a load balancer like pound or HaProxy, there is multiple issues with python eventlet and ssl and it's much easier to have a dedicated service to do SSL instead of having to do it directly on Swift.

edit flag offensive delete link more
add a comment
2

answered 2013-05-01 16:53:15 -0500

notmyname gravatar image

With regards to your second question (the connection between the proxy and storage nodes), there is https://blueprints.launchpad.net/swift/+spec/secure-internal-network-requests, but I don't think anyone has picked it up yet.

edit flag offensive delete link more
add a comment

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

subscribe to rss feed

Stats

Asked: 2013-03-26 11:17:42 -0500

Seen: 403 times

Last updated: May 01 '13

Related questions

Neutron uses wrong os-auth-url

Recomended eventlet version

LookupError: Entry point 'gatekeeper' not found in egg 'swift'

How to auditing user's actions on Swift? [closed]

Account HEAD failed 503 Internal Server Error

How can I enable S3 for Swift storage

Is there solution to set account expiration in openstack swift?

How do I "push" or "repush" a swift ring?

Openstack Swift error

swift [Errno 111] Connection refused [closed]