graphite-dev team mailing list archive

[chrismd <question167336@xxxxxxxxxxxxxxxxxxxxx>]

Question #167336 on Graphite changed:
https://answers.launchpad.net/graphite/+question/167336

    Status: Needs information => Answered

chrismd proposed the following answer:
Cluster communication happens through various channels. The carbon
daemons do not speak http to one another but the webapps do. The
CLUSTER_SERVERS setting lists other webapps in the cluster but only http
is supported for webapp-to-webapp communication. There is a lot of
overhead to establishing https connections and the connections are not
persistent (there is no pooling) so it would not scale at all. If you
really need to have communications between webapps encrypted then I
would suggest setting up a lower-level secure transport like a vpn or an
ssh tunnel.

In general, Graphite is designed to be run in a trusted environment by
trusted users. It is very easy to denial-of-service Graphite if that is
one's goal.

-- 
You received this question notification because you are a member of
graphite-dev, which is an answer contact for Graphite.