Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-47316

Add support for XDCR transport proxy

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Fixed
    • Major
    • 7.1.0
    • None
    • ns_server
    • 1

    Description

      Related to MB-9982, XDCR need a way to security send checkpoints to relevant destination nodes per vbmap. Since XDCR does not expose any external network interfaces and is not certificate aware, NS_SERVER is asked to act as a "transport proxy", assisting with hauling these payloads.

      High level:

      1. NS_SERVER need to pass on certificate location to XDCR on bootstrap and also restart it when certs changes.
      2. XDCR on node A, can make a call to NS_SERVER on node B, via special proxy endpoint (_xdcr), which will be proxied to B's XDCR service.
      3. NS_SERVER should enforce high privileged internal service authenticate on the special xdcr endpoint .

      More details about the proposal can be found here: https://docs.google.com/document/d/1eTDw3Jx0HPXoQ4_iCEwdGeRttZQzAtEl2pXplldqJDo/edit?ts=60e8b5ad

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              pavithra.mahamani Pavithra Mahamani (Inactive)
              meni.hillel Meni Hillel (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              11 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty