Learn how to improve the security of the CrowdSec multi-server installation with HTTPS between agents.
This article is a follow-up from the Crowdsec multi-server setup. It applies to a configuration with at least two servers (referred to as server-1
and one of server-2
or server-3
).
To address security issues posed by clear http communication in our previous crowdsec multi-server installation, we propose solutions to achieve communication between Crowdsec agents over encrypted channels. On top of that, the third solution allows server-2
or server-3
to trust server-1
identity, and avoid man-in -the -middle attacks.