[SOLVED] Is corosync traffic encrypted?

[krikey]

I'm looking at using a low powered QDEVICE as my third NODE in a 2 node cluster. I don't have a local connection between the nodes or the qdevice, so I'll be relying on the WAN.

Is corosync traffic encrypted, or should I consider protecting it in some way ie a VPN or other tunneling technique?

 

[fabian]

the qdevice doesn't get regular corosync traffic, it's a separate mechanism that is just used to provide the tie breaker vote.

regular corosync traffic is encrypted by default in PVE ("secauth: on" in /etc/pve/corosync.conf).

you can configure the qdevice to also use TLS - see https://manpages.debian.org/bullseye/corosync-qdevice/corosync-qdevice.8.en.html