NATS-Sync: Secure, Multi-Tenant, Cross Cluster Message Routing

on YouTube ↗39m

" summary

NATS-Sync routes NATS messages across firewalled clusters by running an outbound sync client that pulls messages from a cloud sync server, with per-message AES keys encrypted with client public keys so only the target can decrypt. Prototype runs on a three-node AWS replica set, tests on x86 and ARM, shows an echo roundtrip at ~124 ms, uses RSA2048 and AES-256, stores registrations in pluggable file or DB backends, and exposes an HTTPS API (gRPC planned).

AI-written summary · about

" chapters (19)

1. 0:00Introduction
2. 0:20Agenda
3. 0:40The Problem
4. 2:25The Basics Environment
5. 2:46Distributed Design
6. 3:20Firewalls
7. 4:44Unicorn Rainbow
8. 5:04Addressing Scheme
9. 6:22Client ID
10. 7:58Authentication
11. 9:06Exchange
12. 13:14Cryptographic Challenge
13. 14:33Data Storage
14. 15:55Scale
15. 21:00Demo
16. 22:25Cluster Layout
17. 23:17Demonstration
18. 31:23Future Work
19. 35:12Getting Involved

" related talks

• 35mDeep Dive: NATSWaldemar Quevedo · KubeCon + CloudNativeCon Europe 2019
• 33mBuilding a Secure, Multi-Protocol and Multi-Tenant Cluster for Internet-Facing Services [A]Bich Le · KubeCon + CloudNativeCon North America 2017
• 14mNimble: Rollback Protection for Confidential Cloud ServicesSrinath Setty, Sebastian Angel, Trent Jaeger, Aditya Basu, Weidong Cui, Stella Lau, Sudheesh Singanamalla · OSDI 2023
• 27mAuthenticated Network Time SynchronizationBenjamin Dowling, Douglas Stebila, Greg Zaverucha · USENIX Security '16
• 01h 28mCreating a Fast, Secure, Location Agnostic Mesh Network with NebulaRyan Huber · All Things Open 2020
• 32mBuilding Zero Trust with EnvoyFlorin Coras, Pradheep Shrinivasan · EnvoyCon NA 2024
• 55mZero Trust Security For AlwaysOn APIsKamalika Majumder · apidays India 2026
• 25mConsul Terraform Sync - Awesome Use CasesLev Andelman · HashiTalks 2022