[jira] [Created] (NIFI-16184) Add TLS Endpoint Identification for Cluster Node Communication

["David Handermann (Jira)" <ji...@apache.org>]

David Handermann created NIFI-16184:
---------------------------------------

             Summary: Add TLS Endpoint Identification for Cluster Node Communication
                 Key: NIFI-16184
                 URL: https://issues.apache.org/jira/browse/NIFI-16184
             Project: Apache NiFi
          Issue Type: Improvement
          Components: Core Framework
            Reporter: David Handermann
            Assignee: David Handermann


Current NiFi cluster node communication involves a separate socket communication with mutual TLS, in addition to HTTPS request replication for coordinated operations. FlowFile load balancing and cluster status communication do not use the HTTP protocol, but should enforce the same endpoint identification requirements as HTTPS request handling for consistency.

Existing cluster configurations require DNS Subject Alternative Names that match peer hostnames for HTTPS request replication, so enabling endpoint identification for other cluster socket communication provides a unified handling strategy for all node-to-node TLS handshaking.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)