Skip to content
This repository has been archived by the owner on Jan 27, 2021. It is now read-only.

Support HTTPS #15

Closed
krancour opened this issue Dec 14, 2018 · 2 comments
Closed

Support HTTPS #15

krancour opened this issue Dec 14, 2018 · 2 comments
Assignees
Labels
feature request Requests or implements improvements that are, specifically, new features

Comments

@krancour
Copy link
Contributor

What would you like to be added?

Support for HTTPS.

Why is this needed?

Currently, HTTPS is not supported by Osiris at all. For the most common case, this can be worked around by using an ingress controller that terminates SSL and makes HTTP calls to backend services, but this inadequately addresses two somewhat common use cases:

  1. Applications / organizations with an end-to-end encryption requirement.
  2. Intra-cluster traffic that may have an encryption requirement, but is not routed through an ingress controller since it does not originate from outside the cluster.
@krancour krancour added the feature request Requests or implements improvements that are, specifically, new features label Dec 14, 2018
@krancour krancour self-assigned this Dec 14, 2018
@krancour krancour mentioned this issue Dec 14, 2018
@krancour
Copy link
Contributor Author

krancour commented Dec 14, 2018

A practical consideration here is that this will likely impact how we go about collecting and aggregating the metrics on which we base scaling decisions.

My sense is that the most practical method of implementing an HTTPS proxy without access to the upstream's certificate and private key (which it should not have anyway) is to implement an L4 (i.e. TCP) proxy. Since TCP is a stream-based protocol (not request-based), counting requests would be both meaningless and impossible. It might be necessary, instead, to count active connections-- or, more accurately, number of connections active at any point over the last interval.

@krancour
Copy link
Contributor Author

This was closed by #27.

@krancour krancour unpinned this issue May 21, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
feature request Requests or implements improvements that are, specifically, new features
Projects
None yet
Development

No branches or pull requests

1 participant