Teachings from years of HomeLab (blog.cloudhub.social)

submitted 4 months ago by jax@lemmy.cloudhub.social to c/homelab@lemmy.cloudhub.social

10 comments fedilink hide all child comments

Starting a new Cloud/HomeLab blog at this domain - let me know if you want a contributor invite!

you are viewing a single comment's thread
view the rest of the comments

[-] jax@lemmy.cloudhub.social 2 points 4 months ago

That makes sense!

Have you played with anything like Istio to secure in-cluster communications? I think Hashicorp Consul can do something similar to encrypt service to service communications.

[-] notfromhere@lemmy.ml 1 points 4 months ago

I looked into it but I felt at the time it was too complex, maybe I’ll look at it again. Currently I am using wireguard for all cluster node-to-node traffic. It seemed like a reasonable tradeoff at the time, but it is at the network layer instead of application, so I really should revisit that at some point.

[-] jax@lemmy.cloudhub.social 2 points 4 months ago

Yeah it very adds some extra complexity and it’s more important for if you are hosting in public clouds anyways IMO.

this post was submitted on 07 May 2024

19 points (95.2% liked)

Homelab

683 readers

3 users here now

founded 1 year ago

MODERATORS

jax@lemmy.cloudhub.social