Hi everyone,
Apologies for the delayed announcement—I forgot posting this when it
was first submitted.
A proposal is available that introduces Transport Layer Security (TLS)
support to the JGroups TCP-based transports:
https://github.com/wildfly/wildfly-proposals/pull/552
Brief Summary: This proposal addresses
https://issues.redhat.com/browse/WFLY-15836 by integrating TLS support
directly into the JGroups TCP transports. This change ensures that
intra-cluster communication within a WildFly cluster can be encrypted
with TLS, which is crucial for certain production environments
requiring encryption. This mechanism effectively replaces native
JGroups functionality which would combine ASYM_ENCRYPT with AUTH
protocols.
The implementation is available at
https://github.com/wildfly/wildfly/pull/19373 and scheduled for WF 39
at community-level stability.
People are encouraged to review the analysis document and provide any
feedback or comments on the PR.
Thanks!
Best regards,
Rado