Is SSL used for master-backup when Netty SSL is used?

[vtatai]

I've configured the Netty acceptor / connector with SSL, but it is not clear to me if it provides, besides client communication encryption, also encryption for:

1. Live - backup regular communication
2. Live - backup initial journal replication

Thanks!

Victor

[clebert.suconic]

It all depends on how you configure the cluster connection

[vtatai]

I have connector-ref (inside cluster-connections) pointing to a NettyConnectorFactory configured to use SSL, should that be enough?

[clebert.suconic]

Why don't you post your config here (edit out IPs and password just to be safe or anything that could be used to access your system).. I'm only interested on the hornetq parts.

[vtatai]

My hornetq-configuration.xml follows attached.

[clebert.suconic]

Looks ok to me. Only thing is. make sure you define those properties or localhost won't connect to other nodes.

Also: make sure you don't copy data folders between servers (especially binding, and the lock file) as the UUID of the server is stored there.

[vtatai]

Cool thanks, the live - backup cluster is already working, I just wanted to make sure all data is transferred using SSL.

Thanks again for the help!

[clebert.suconic]

Well, the message data transfer is being done through SSL. But you understand you also have UDP heart beating the connectors, right?

[vtatai]

Yes that's fine with me, what matters are the message payloads. In my case I'm using jgroups for discovery, no need to encrypt that