[Gluster-users] Question concerning TLS encryption of network traffic

[David Spisla]

Hello Gluster Community,

according to that set steps I have configured network encryption for
management and I/O traffic:
https://www.cyberciti.biz/faq/how-to-enable-tlsssl-encryption-with-glusterfs-storage-cluster-on-linux/

I have chose the option for self-signed certificates, so each of the nodes
has its own certificate and all of them are stored in the file glusterfs.ca.
Each node in my cluster has a copy of that file.

Everything is working fine.

I set the volume option "auth.ssl-allow" with "*", but I am not sure what
does this exactly means?

1. Does it mean, that only all clients which are listed in glusterfs.ca has
access to the volume?
or
2. Does it mean, that any TLS authenticated client can access the volume
(maybe a client which is not in the glusterfs.ca list)?

Regards
David Spisla
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.gluster.org/pipermail/gluster-users/attachments/20180412/7da23f7a/attachment.html>