Populate the SSL section in Observability and centralization points -… (#17035)
* Populate the SSL section in Observability and centralization points -> Metrics centralization points - > configuration * Update configuration.md * Update docs/observability-centralization-points/metrics-centralization-points/configuration.md * Update docs/observability-centralization-points/metrics-centralization-points/configuration.md * add note about install directory * Update configuration.md * Update configuration.md --------- Co-authored-by: Ilya Mashchenko <ilya@netdata.cloud>
Fotis Voutsas committed
Feb 20, 2024 at 11:02 UTC
c9f92a691c38b7bc4c55804738fb55023597a746
1 file changed
+26
docs/observability-centralization-points/metrics-centralization-points/configuration.md
+26
@@ -56,6 +56,32 @@ Save the file and restart Netdata.
56
57
## Enable TLS/SSL Communication
58
59
+While encrypting the connection between your parent and child nodes is recommended for security, it's not required to get started.
60
+
61
+This example uses self-signed certificates.
62
+
63
+> **Note**
64
+> This section assumes you have read the documentation on [how to edit the Netdata configuration files](https://github.com/netdata/netdata/blob/master/docs/netdata-agent/configuration.md).
65
+<!-- here we need link to the section that will contain the restarting instructions -->
66
+
67
+1. **Parent node**
68
+ To generate an SSL key and certificate using `openssl`, take a look at the related section around [Securing Netdata Agents](https://github.com/netdata/netdata/blob/master/src/web/server/README.md#enable-httpstls-support) in our Documentation.
69
+
70
+2. **Child node**
71
+ Update `stream.conf` to enable SSL/TLS and allow self-signed certificates. Append ':SSL' to the destination and uncomment 'ssl skip certificate verification'.
72
+
73
+ ```conf
74
+ [stream]
75
+ enabled = yes
76
+ destination = 203.0.113.0:SSL
77
+ ssl skip certificate verification = yes
78
+ api key = 11111111-2222-3333-4444-555555555555
79
+ ```
80
+
81
+3. Restart the Netdata Agent on both the parent and child nodes, to stream encrypted metrics using TLS/SSL.
82
+
83
+
84
+
85
## Troubleshooting Streaming Connections
86
87
You can find any issues related to streaming at Netdata logs.