mTLS between cluster application nodes using consul service mesh

[ashwinkupatkar]

Hello guys,

How do we use consul service mesh for clustered applications ?

Meaning to say i have kafka broker nodes which are connected to it each other using the configuration as BROKER_LIST=node1:port,node2:port,node3:port

How do we implement mTLS between these peer nodes using consul service mesh ?

[blake]

Hi @ashwinkupatkar,

Are you using Consul service mesh on Kubernetes?

If so, you should be able to use transparent proxy, headless services, and dialed directly enabled in order to enable this type of communication between peer nodes. See https://www.consul.io/docs/connect/transparent-proxy#headless-services for more info.

[ashwinkupatkar]

Hi @blake, I have the application setup on a vm infrastructure. How do i use transparent proxy on a vm based environment ? Few examples might help.

[blake]

The following thread has links to some unofficial resources for running tproxy on VMs. That deployment model currently only supports a single Envoy proxy per VM.

I recently resumed my exploration for running multiple proxies on a single VM. I’m hoping to have a solution soon, and will update the my GitHub repo with those examples.

Does consul Transparent Proxy supported in VM service mesh?

Hi, we feel the Transparent Proxy is really useful, but from the doc it only shows how to use it in k8s. We want to enable consul service mesh on the VM services, so we want to conform that does consul Transparent Proxy supported in VM? And to make sure, when using transparent proxy in k8s, is it right that can connect the upstream service by KubeDNS hostname and don’t need to use in downstream service’s code?

[ashwinkupatkar]

Sure @blake I will go through the discussion and get back. Thanks again.