Mutual TLS

As explained in Logs and Telemetry

Mutual TLS is a TLS mode in which both communicating endpoints authenticate each other with certificates.

Mutual TLS (mTLS) extends TLS so communicating endpoints authenticate each other with certificates. In an enterprise Fluent Bit observability pipeline, it protects traffic between distributed deployments and central operations. section 11.7

Operationally, mTLS is positioned as a deployment upgrade:

• Apply TLS to communications carrying OpenTelemetry Protocol traffic and forward-protocol edge cases. section 11.7
• Extend TLS to mutual authentication when infrastructure can roll out certificates quickly. section 11.7
• Use the pattern between distributed MMS deployments, central Fluent Bit, and operations infrastructure. section 11.7

Figure 11.2 Architecture of our use case, made up of modern cloud-native technologies and private data center deployments using virtualization and private Kubernetes clusters

Use the architecture to trace where TLS and prospective mTLS fit between distributed customer deployments, private infrastructure, Kubernetes clusters, and central operations. section 11.7

How Logs and Telemetry covers it

How deep it goes

Defines mTLS as a planned extension of TLS but defers certificate rollout and configuration details.

Examples

Uses distributed MMS deployments sending telemetry to central Fluent Bit in an enterprise monitoring architecture.

What it assumes

Assumes TLS-based communications and requires infrastructure capable of rapidly rolling out certificates.

What you can do after

Operate secure Fluent Bit communications and plan mTLS adoption once rapid certificate deployment is available.

How it connects

Connects TLS with certificates, OpenTelemetry Protocol, the forward protocol, Fluent Bit, and Kubernetes deployments.

liveBookmanning.com

Read Logs and Telemetry on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Software Security for DevelopersMutual TLS is a TLS configuration in which both communicating parties authenticate each other with digital certificates.
• 

  liveBookmanning.com
  Google Anthos in ActionMutual TLS (mTLS) is a Transport Layer Security configuration in which both communicating parties authenticate each other with certificates and encrypt the connection.
• 

  liveBookmanning.com
  Kafka for ArchitectsMutual TLS is a TLS authentication mechanism in which both communicating parties verify each other's identities with certificates.
• 

  liveBookmanning.com
  Authorization in ActionMutual TLS is a Transport Layer Security configuration in which both communicating parties authenticate each other with certificates.
• 

  liveBookmanning.com
  Secure APIsMutual Transport Layer Security is a TLS configuration in which both communicating parties authenticate each other with certificates.
• 

  liveBookmanning.com
  gRPC Microservices in GomTLS, or mutual TLS, is a TLS communication mode in which both the client and server present certificates to authenticate each other.
• 

  liveBookmanning.com
  Apache Kafka in ActionMutual TLS is a TLS configuration in which both communicating endpoints authenticate each other with certificates.

Compare how 8 books explain mutual TLS →

Related concepts

• TLSkind of · Transport Layer Security (TLS) is a cryptographic protocol that protects network communications through confidentiality, integrity, and authentication of communicating endpoints.
• certificateuses · A digital certificate is a digitally signed credential that binds an identity to a public key and supports authentication or secure communication.
• authenticationuses · Authentication is the process of establishing or verifying the identity of a user, service, device, or other communicating entity.
• API keyalternative to · An API key is a credential used to identify or authorize a client accessing an application programming interface.
• Cloud Service Meshused by · Cloud Service Mesh is Google's managed service mesh for controlling, securing, and observing communication among distributed services, formerly known as Anthos Service Mesh.

This explainer was generated by Manning's knowledge graph from the text of Logs and Telemetry. The section links point to the parts of the book it draws on.