Forwarding Over Ssl
This is a quick tutorial on how to use the secure forward plugin to enable SSL for Fluentd-to-Fluentd data transport.
It is intended as a quick introduction. For comprehensive documentation, including parameter definitions, please checkout out the out_secure_forward and in_secure_forward.
First, install the secure forward plugin.
- Fluentd:
gem install fluent-plugin-secure-forward - td-agent v2:
/usr/sbin/td-agent-gem install fluent-plugin-secure-forward - td-agent v1:
/usr/lib/fluent/ruby/bin/fluent-gem install fluent-plugin-secure-forward
Then, set up the configuration file as follows:
<source>
@type secure_forward
shared_key YOUR_SHARED_KEY
self_hostname server.fqdn.local
cert_auto_generate yes
</source>
<match secure.**>
@type stdout
</match>
The
<match> clause is there to print out the forwarded message into STDOUT (which is fed into var/log/td-agent/td-agent.log for td-agent) using out_stdout.Then, (re)start Fluentd/td-agent.
First, install the secure forward plugin.
- Fluentd:
fluent-gem install fluent-plugin-secure-forward - td-agent v2:
/usr/sbin/td-agent-gem install fluent-plugin-secure-forward - td-agent v1:
/usr/lib/fluent/ruby/bin/fluent-gem install fluent-plugin-secure-forward
Then, set up the configuration file as follows:
<source>
@type forward
</source>
<match secure.**>
@type secure_forward
shared_key YOUR_SHARED_KEY
self_hostname "#{Socket.gethostname}"
<server>
host RECEIVER_IP
port 24284
</server>
</match>
The
<source> clause is there to feed test data into Fluentd using in_forward. Make sure that YOUR_SHARED_KEY is same with the receiver's.Then, (re)start td-agent.
On the sender machine, run the following command using
fluent-cat- Fluentd:
echo '{"message":"testing the SSL forwarding"}' | fluent-cat --json secure.test - td-agent v2:
echo '{"message":"testing the SSL forwarding"}' | /opt/td-agent/embedded/bin/fluent-cat --json secure.test - td-agent v1:
echo '{"message":"testing the SSL forwarding"}' | /usr/lib/fluent/ruby/bin/fluent-cat --json secure.test
Now, checking the receiver's Fluentd's log (for td-agent, this would be
/var/log/td-agent/td-agent.log), there should be a line like this:2014-10-21 18:18:26 -0400 secure.test: {"message":"testing the SSL forwarding"}
If this article is incorrect or outdated, or omits critical information, please let us know. Fluentd is a open source project under Cloud Native Computing Foundation (CNCF). All components are available under the Apache 2 License.
Last modified 3yr ago