Question concerning TLS encryption of network traffic

[David Spisla <spisla80@xxxxxxxxx>]

Hello Gluster Community,

according to that set steps I have configured network encryption for management and I/O traffic:
https://www.cyberciti.biz/faq/how-to-enable-tlsssl-encryption-with-glusterfs-storage-cluster-on-linux/

I have chose the option for self-signed certificates, so each of the nodes has its own certificate and all of them are stored in the file glusterfs.ca. Each node in my cluster has a copy of that file.

Everything is working fine.

I set the volume option "auth.ssl-allow" with "*", but I am not sure what does this exactly means?

1. Does it mean, that only all clients which are listed in glusterfs.ca has access to the volume?

or

2. Does it mean, that any TLS authenticated client can access the volume (maybe a client which is not in the glusterfs.ca list)?

Regards

David Spisla

_______________________________________________
Gluster-users mailing list
Gluster-users@xxxxxxxxxxx
http://lists.gluster.org/mailman/listinfo/gluster-users