*** pcaruana has quit IRC | 00:02 | |
*** tonyb has quit IRC | 00:33 | |
*** tonyb has joined #openstack-trove | 00:35 | |
*** kumarmn has joined #openstack-trove | 00:53 | |
*** kumarmn has quit IRC | 01:15 | |
*** kumarmn has joined #openstack-trove | 01:20 | |
*** kumarmn has quit IRC | 01:25 | |
*** dougshelley66 has quit IRC | 01:57 | |
*** zhaochao has joined #openstack-trove | 02:05 | |
*** tianhui has left #openstack-trove | 02:51 | |
*** tianhui has joined #openstack-trove | 02:53 | |
*** kumarmn has joined #openstack-trove | 03:42 | |
*** kumarmn has quit IRC | 03:49 | |
*** kumarmn has joined #openstack-trove | 04:05 | |
*** kumarmn has quit IRC | 04:10 | |
*** tianhui_ has joined #openstack-trove | 05:15 | |
*** tianhui has quit IRC | 05:17 | |
*** rajinir has quit IRC | 05:18 | |
*** links has joined #openstack-trove | 06:16 | |
*** tesseract has joined #openstack-trove | 06:49 | |
*** pcaruana has joined #openstack-trove | 06:58 | |
*** rcernin has quit IRC | 07:16 | |
*** damien_r has joined #openstack-trove | 07:42 | |
*** dkehn_ has joined #openstack-trove | 07:50 | |
*** dkehn has quit IRC | 07:54 | |
*** kumarmn has joined #openstack-trove | 08:06 | |
*** kumarmn has quit IRC | 08:11 | |
*** tosky has joined #openstack-trove | 08:13 | |
*** jcosmao has left #openstack-trove | 09:09 | |
*** jcosmao has joined #openstack-trove | 09:26 | |
*** jcosmao has left #openstack-trove | 09:26 | |
*** maciejjozefczyk has joined #openstack-trove | 09:37 | |
*** maciejjozefczyk has left #openstack-trove | 09:39 | |
*** jcosmao has joined #openstack-trove | 09:40 | |
*** dougshelley66 has joined #openstack-trove | 10:17 | |
*** dougshelley66 has quit IRC | 10:54 | |
*** kei_yama has quit IRC | 11:18 | |
*** dougshelley66 has joined #openstack-trove | 11:22 | |
*** Kevin_Zheng has quit IRC | 12:11 | |
*** Kevin_Zheng has joined #openstack-trove | 12:12 | |
*** Guest46098 has quit IRC | 12:32 | |
*** Guest46098 has joined #openstack-trove | 12:32 | |
*** maciejjozefczyk1 has joined #openstack-trove | 12:45 | |
*** maciejjozefczyk1 has left #openstack-trove | 12:55 | |
*** kumarmn has joined #openstack-trove | 13:14 | |
*** zhaochao has quit IRC | 13:43 | |
*** rajinir has joined #openstack-trove | 14:15 | |
*** links has quit IRC | 14:42 | |
*** tesseract has quit IRC | 15:06 | |
*** tesseract has joined #openstack-trove | 15:06 | |
*** kumarmn has quit IRC | 15:25 | |
*** kumarmn has joined #openstack-trove | 15:37 | |
*** kumarmn has quit IRC | 15:40 | |
*** kumarmn has joined #openstack-trove | 15:43 | |
*** kumarmn has quit IRC | 15:45 | |
*** damien_r has quit IRC | 15:50 | |
*** pcaruana has quit IRC | 15:51 | |
*** kumarmn has joined #openstack-trove | 16:06 | |
*** kumarmn_ has joined #openstack-trove | 16:09 | |
*** kumarmn has quit IRC | 16:10 | |
*** kumarmn_ has quit IRC | 16:26 | |
*** pcaruana has joined #openstack-trove | 16:43 | |
*** kumarmn has joined #openstack-trove | 16:47 | |
*** kumarmn has quit IRC | 16:52 | |
*** itlinux has joined #openstack-trove | 16:57 | |
*** dkehn_ has quit IRC | 17:27 | |
*** kumarmn has joined #openstack-trove | 17:28 | |
*** kumarmn has quit IRC | 17:33 | |
*** kumarmn has joined #openstack-trove | 17:39 | |
*** kumarmn has quit IRC | 17:59 | |
*** kumarmn has joined #openstack-trove | 18:20 | |
*** kumarmn has quit IRC | 18:24 | |
*** pcaruana has quit IRC | 18:32 | |
*** kumarmn has joined #openstack-trove | 19:01 | |
*** tesseract has quit IRC | 19:26 | |
*** kumarmn has quit IRC | 20:01 | |
*** kumarmn has joined #openstack-trove | 20:02 | |
*** itlinux has quit IRC | 20:13 | |
*** itlinux has joined #openstack-trove | 20:19 | |
*** kumarmn has quit IRC | 20:24 | |
*** dougshelley66 has quit IRC | 20:26 | |
rtsisyk | Could anybody explain please how RPC message encryption [1] solves the problem that entirely RabbitMQ instance will be compromised? | 20:29 |
---|---|---|
rtsisyk | [1]: https://docs.openstack.org/trove/pike/admin/secure_oslo_messaging.html | 20:29 |
rtsisyk | I don't understand how encryption helps | 20:29 |
*** kumarmn has joined #openstack-trove | 20:29 | |
rtsisyk | I watched "OpenStack Message Bus Security with Trove Database-as-a-Service" talk (https://www.youtube.com/watch?v=dzvcKlt3Lx8&feature=youtu.be&t=739) | 20:30 |
rtsisyk | Assume I have all trove-guestagent, trove-conductor and trove-taskmanager messages encryption. It this case I still can use RabbitMQ credentials to controll RabbitMQ server, i.e. configure queues, exchanges and so on. How encryption can help to solve this problem? | 20:31 |
rtsisyk | in this* | 20:31 |
rtsisyk | an attacker and delete all queues and exchanges from rabbit and make entirely Trove service inoperable. | 20:32 |
rtsisyk | can* | 20:32 |
*** kumarmn has quit IRC | 20:34 | |
*** damien_r has joined #openstack-trove | 20:38 | |
*** damien_r has quit IRC | 20:38 | |
*** damien_r has joined #openstack-trove | 20:38 | |
rtsisyk | amrith: I wanted to say thanks for the great talk on RPC encryptuon. Could you elaborate on RabbitMQ controlling problem? I don't understand how encryption will prevent an attacker to gain the full control to the RabbitMQ server using credentials and starting doing harmful things like removing queues and exchanges. What do you think about it? | 20:41 |
*** damien_r has quit IRC | 20:44 | |
*** dougshelley66 has joined #openstack-trove | 20:57 | |
*** kumarmn has joined #openstack-trove | 20:58 | |
*** itlinux has quit IRC | 21:12 | |
*** rajinir has quit IRC | 21:12 | |
*** kumarmn has quit IRC | 22:04 | |
*** dougshelley66 has quit IRC | 23:02 | |
*** dougshelley66 has joined #openstack-trove | 23:02 | |
*** kei_yama has joined #openstack-trove | 23:20 | |
*** hoonetorg has quit IRC | 23:52 | |
*** tosky has quit IRC | 23:58 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!