Page History

...

Proposal: We propose an encryption layer on top of UDP messages. Each message will be encrypted and decrypted using a cluster wide secret key. This secret cluster-key will be created by a coordinator and any member can get the cluster-key using a member-coordinator private key.  Using the existing authentication mechanism, Geode can be configured to authenticate a new member at with the coordinator.  This authentication happens when a member joins the cluster. Thus the new member will see the cluster-key only when it is authenticated by an application. In that way all members can have a cluster-key, which can be used to encrypt and decrypt the UDP messages.

...