From the course: HashiCorp Certified: Consul Associate (003) Cert Prep
Unlock this course with a free trial
Join today to access over 25,500 courses taught by industry experts.
Introduction to gossip encryption
From the course: HashiCorp Certified: Consul Associate (003) Cert Prep
Introduction to gossip encryption
All right, so as promised, we're going to quickly review the security model here. So again, remember the console security threat model has multiple components to it. We're talking about the gossip protocol encryption here in this section. But there were other components of the security model. If you remember, we talked about the built in ACL system, which we talked about in the previous objective, we talked about console agent communication, and how we're going to to use TLS to secure our RPC and our API communications. We talked about using mutual TLS for both authenticity and encryption when we're using the console service mesh feature. And finally, we talked about how console has a built-in certificate authority. If we choose, we want to use that or we can integrate with an external CA, maybe something like Vault, maybe something that we already have deployed on-premises or in the cloud. So that's just a quick review of the security model. Again, we're gonna jump into the top one…
Practice while you learn with exercise files
Download the files the instructor uses to teach the course. Follow along and learn by watching, listening and practicing.
Contents
-
-
-
-
-
-
-
-
-
-
-
(Locked)
Objective 9: Section overview2m 6s
-
(Locked)
Introduction to gossip encryption4m
-
(Locked)
Configure gossip encryption6m 43s
-
(Locked)
Lab session: Configure gossip encryption5m 30s
-
(Locked)
Manage the lifecycle of encryption keys7m 12s
-
(Locked)
Lab session: Managing the lifecycle of encryption keys4m 26s
-
(Locked)
Objective 9: Section recap1m 3s
-
(Locked)