Show HN: log-shuttle – log delivery over HTTPs written in Go(log-shuttle.io)

71 pointsby ryandotsmith13 ปีที่แล้ว5 comments

Show HN: log-shuttle – log delivery over HTTPs written in Go

http://log-shuttle.io/

4 comments

codexon13 ปีที่แล้ว

TLS transport mapping for Syslog requires that you maintain both client & server certificates for authentication.

The point of requiring certificates for the client is so your server doesn't get spoofed logs.

bgentry13 ปีที่แล้ว

That is correct. However, using and maintaining client certificates is a huge pain, especially for a massively multitenant service such as Heroku.

HTTP Basic Auth is quite a bit simpler as an authentication mechanism and, over TLS, is sufficiently secure.

wc-13 ปีที่แล้ว

This reminds me of another log shipping tool, http://logio.org/ which I think recently added support for encryption as well.

mgorsuch13 ปีที่แล้ว

Great work as usual, Ryan. Glad to see this make it out there!

glockular13 ปีที่แล้ว

You don't need a client certificate for rsyslog's tls transport.