| 2017-10-25 19:58:05 |
Piyush Srivastava |
bug |
|
|
added bug |
| 2017-10-25 19:58:26 |
Piyush Srivastava |
bug |
|
|
added subscriber wpc-contrail |
| 2017-10-26 20:58:51 |
Piyush Srivastava |
description |
Release 3.2.x
We are presently deploying Contrail API and Cassandra on different nodes. There is a security requirement in our data centers to have API -> Cassandra communication and Cassandra -> Cassandra communication encrypted.
It seems like there is no TLS support for Contrail API -> Cassandra communication. This is probably due to the limitations of the Pycassa library.
Inter node encryption between Cassandra nodes in a cluster works. |
Release 3.2.x
We are presently deploying Contrail API and Cassandra on different nodes. There is a security requirement in our data centers to have API -> Cassandra communication and Cassandra -> Cassandra communication encrypted.
It seems like there is no TLS support for Contrail API -> Cassandra communication. Contrail uses pycassa for interfacing with Cassandra.
It is possible to estabilsh ssl connection to Cassandra using pycassa
by providing it a SSL socket factory. Pycassa already has a helper function that can be used to create a ssl socket factory.
Here's the code snippet I used to get pycassa connect securely to a SSL
enabled Cassandra.
```
import pycassa
"""
Create a SSL socket factory. This returns a factory
function that can be used by pycassa to create ssl sockets
"""
ssl_socket_factory = pycassa.connection.make_ssl_socket_factory(
'/root/rootCa.crt', validate=True)
# Create a connection pool to a system_auth keyspace
pool = pycassa.ConnectionPool('system_auth',
['10.140.66.73:9160'],
socket_factory=ssl_socket_factory)
```
Inter node encryption between Cassandra nodes in a cluster works. |
|
| 2017-10-26 22:27:46 |
Fawad |
tags |
|
wpc |
|
| 2017-10-27 21:24:18 |
Megh Bhatt |
tags |
wpc |
analytics wpc |
|
| 2017-10-31 16:49:28 |
Piyush Srivastava |
opencontrail: assignee |
|
Piyush Srivastava (piyush0101) |
|
| 2017-12-21 23:40:31 |
Piyush Srivastava |
opencontrail: status |
New |
In Progress |
|
| 2017-12-22 16:30:38 |
OpenContrail Admin |
nominated for series |
|
juniperopenstack/r3.2 |
|
| 2017-12-22 16:30:38 |
OpenContrail Admin |
bug task added |
|
juniperopenstack/r3.2 |
|
| 2017-12-22 16:30:38 |
OpenContrail Admin |
bug task added |
|
juniperopenstack/r3.2 |
|
| 2018-01-09 18:02:04 |
OpenContrail Admin |
juniperopenstack/r3.2: status |
In Progress |
Fix Committed |
|
| 2018-01-09 18:02:06 |
OpenContrail Admin |
juniperopenstack/r3.2: milestone |
|
r3.2.9.0 |
|
| 2018-01-31 17:50:26 |
Jeba Paulaiyan |
nominated for series |
|
juniperopenstack/trunk |
|
| 2018-01-31 17:50:26 |
Jeba Paulaiyan |
bug task added |
|
juniperopenstack/trunk |
|
| 2018-01-31 17:50:26 |
Jeba Paulaiyan |
nominated for series |
|
juniperopenstack/r4.0 |
|
| 2018-01-31 17:50:26 |
Jeba Paulaiyan |
bug task added |
|
juniperopenstack/r4.0 |
|
| 2018-01-31 17:50:26 |
Jeba Paulaiyan |
nominated for series |
|
juniperopenstack/r4.1 |
|
| 2018-01-31 17:50:26 |
Jeba Paulaiyan |
bug task added |
|
juniperopenstack/r4.1 |
|
| 2018-01-31 17:50:32 |
Jeba Paulaiyan |
juniperopenstack/r3.2: importance |
Undecided |
High |
|
| 2018-01-31 17:50:34 |
Jeba Paulaiyan |
juniperopenstack/r4.0: importance |
Undecided |
High |
|
| 2018-01-31 17:50:35 |
Jeba Paulaiyan |
juniperopenstack/r4.1: importance |
Undecided |
High |
|
| 2018-01-31 17:50:37 |
Jeba Paulaiyan |
juniperopenstack/trunk: importance |
Undecided |
High |
|
| 2018-01-31 17:50:45 |
Jeba Paulaiyan |
juniperopenstack/r4.0: assignee |
|
Sundaresan Rajangam (srajanga) |
|
| 2018-01-31 17:53:18 |
Jeba Paulaiyan |
juniperopenstack/r4.1: assignee |
|
Sundaresan Rajangam (srajanga) |
|
| 2018-01-31 17:53:26 |
Jeba Paulaiyan |
juniperopenstack/trunk: assignee |
|
Sundaresan Rajangam (srajanga) |
|
| 2018-01-31 17:53:30 |
Jeba Paulaiyan |
juniperopenstack/r4.0: milestone |
|
r4.0.3.0 |
|
| 2018-01-31 17:53:33 |
Jeba Paulaiyan |
juniperopenstack/r4.1: milestone |
|
r4.1.1.0 |
|
| 2018-01-31 17:53:35 |
Jeba Paulaiyan |
juniperopenstack/trunk: milestone |
|
r5.0.0 |
|
| 2018-02-01 22:38:58 |
Sundaresan Rajangam |
juniperopenstack/r4.0: assignee |
Sundaresan Rajangam (srajanga) |
Sachin Bansal (sbansal) |
|
| 2018-02-01 22:39:06 |
Sundaresan Rajangam |
juniperopenstack/r4.1: assignee |
Sundaresan Rajangam (srajanga) |
Sachin Bansal (sbansal) |
|
| 2018-02-01 22:39:15 |
Sundaresan Rajangam |
juniperopenstack/trunk: assignee |
Sundaresan Rajangam (srajanga) |
Sachin Bansal (sbansal) |
|
| 2018-02-01 22:39:21 |
Sundaresan Rajangam |
opencontrail: assignee |
Piyush Srivastava (piyush0101) |
Sachin Bansal (sbansal) |
|
| 2018-02-02 22:39:12 |
Sachin Bansal |
juniperopenstack/r4.0: assignee |
Sachin Bansal (sbansal) |
Sahil Sabharwal (ssabharwal) |
|
| 2018-02-02 22:39:18 |
Sachin Bansal |
juniperopenstack/r4.1: assignee |
Sachin Bansal (sbansal) |
Sahil Sabharwal (ssabharwal) |
|
| 2018-02-02 22:39:24 |
Sachin Bansal |
juniperopenstack/trunk: assignee |
Sachin Bansal (sbansal) |
Sahil Sabharwal (ssabharwal) |
|
| 2018-02-02 22:39:30 |
Sachin Bansal |
opencontrail: assignee |
Sachin Bansal (sbansal) |
Sahil Sabharwal (ssabharwal) |
|
| 2018-03-08 21:39:17 |
OpenContrail Admin |
juniperopenstack/trunk: importance |
High |
Undecided |
|
| 2018-03-08 21:39:17 |
OpenContrail Admin |
juniperopenstack/trunk: status |
New |
In Progress |
|
| 2018-03-13 01:27:21 |
OpenContrail Admin |
juniperopenstack/r4.1: importance |
High |
Undecided |
|
| 2018-03-13 01:27:21 |
OpenContrail Admin |
juniperopenstack/r4.1: status |
New |
In Progress |
|
| 2018-03-13 21:48:25 |
OpenContrail Admin |
juniperopenstack/r4.0: importance |
High |
Undecided |
|
| 2018-03-13 21:48:25 |
OpenContrail Admin |
juniperopenstack/r4.0: status |
New |
In Progress |
|
| 2018-03-14 05:38:30 |
OpenContrail Admin |
juniperopenstack/trunk: status |
In Progress |
Fix Committed |
|
| 2018-03-14 15:05:59 |
OpenContrail Admin |
juniperopenstack/r4.0: status |
In Progress |
Fix Committed |
|
| 2018-03-15 13:31:22 |
OpenContrail Admin |
juniperopenstack/r4.1: status |
In Progress |
Fix Committed |
|
| 2018-03-22 23:17:24 |
Sachin Bansal |
opencontrail: status |
In Progress |
Fix Committed |
|
