TechPrufer
Get started
Cloudflare
Cloudflare logoCloudflare · Feature trail

Secure Data Replication

1 post · Dec 2014

What this trail covers

Cloudflare has evolved its data replication mechanisms to ensure secure data transfer between data centers. Initially, data was replicated in plaintext. This has evolved to include mutually-authenticated encryption tunnels using TLS, preventing unauthorized parties from reading or modifying data in transit. This enhancement is crucial for distributing sensitive data like session ticket keys and DNS information across Cloudflare's global network.

All Cloudflare trails
  1. Kyoto Tycoon Secure ReplicationThis post details the implementation of mutually-authenticated TLS for Kyoto Tycoon replication. Previously, Kyoto Tycoon replicated data in plaintext. The contribution involves adding support for TLS mutual authentication using OpenSSL and an internal Certificate Authority (CA) to sign and validate client and server certificates. This ensures that data transferred between data centers is encrypted and that only trusted clients can connect to the replication endpoints. The source code for these changes is released on GitHub.