Security
The connection between the LiveRig collector and the live plugin can optionally be encrypted with TLS (using the default Java settings). When encrypted, the collector authenticates the live plugin through its public key hash (public key pinning).
Built-in cryptography
The status of the cryptography is shown on the collectors web interface.
Deployment upon OpenVPN
Alternatively, we can use OpenVPN between the Live and the collector instances. An OpenVPN server would run close to the Intelie Live instance, and every collector would run an instance of an OpenVPN client on it.
Last updated
