Skip to content

Commit

Permalink
Populate the SSL section in Observability and centralization points -… (
Browse files Browse the repository at this point in the history
netdata#17035)

* Populate the SSL section in Observability and centralization points -> Metrics centralization points - > configuration

* Update configuration.md

* Update docs/observability-centralization-points/metrics-centralization-points/configuration.md

* Update docs/observability-centralization-points/metrics-centralization-points/configuration.md

* add note about install directory

* Update configuration.md

* Update configuration.md

---------

Co-authored-by: Ilya Mashchenko <[email protected]>
  • Loading branch information
Ancairon and ilyam8 authored Feb 20, 2024
1 parent 5a24b47 commit c9f92a6
Showing 1 changed file with 26 additions and 0 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -56,6 +56,32 @@ Save the file and restart Netdata.

## Enable TLS/SSL Communication

While encrypting the connection between your parent and child nodes is recommended for security, it's not required to get started.

This example uses self-signed certificates.

> **Note**
> This section assumes you have read the documentation on [how to edit the Netdata configuration files](https://github.com/netdata/netdata/blob/master/docs/netdata-agent/configuration.md).
<!-- here we need link to the section that will contain the restarting instructions -->
1. **Parent node**
To generate an SSL key and certificate using `openssl`, take a look at the related section around [Securing Netdata Agents](https://github.com/netdata/netdata/blob/master/src/web/server/README.md#enable-httpstls-support) in our Documentation.

2. **Child node**
Update `stream.conf` to enable SSL/TLS and allow self-signed certificates. Append ':SSL' to the destination and uncomment 'ssl skip certificate verification'.

```conf
[stream]
enabled = yes
destination = 203.0.113.0:SSL
ssl skip certificate verification = yes
api key = 11111111-2222-3333-4444-555555555555
```
3. Restart the Netdata Agent on both the parent and child nodes, to stream encrypted metrics using TLS/SSL.
## Troubleshooting Streaming Connections
You can find any issues related to streaming at Netdata logs.
Expand Down

0 comments on commit c9f92a6

Please sign in to comment.