Vector mTLS Demo

README.md

Example Vector mTLS

Testing to confirm that mTLS works in Vector to Vector connections.

Alice and Bob are mutually authenticated using their own TLS self signed certificates. A malicious attacker, Mallory, can not impersonate Alice, nor can they impersonate Bob if both Alice and bob set tls.verify_certificate = true and set tls.ca_file to the other's self signed certificate.

docker-compose up -d
docker-compose logs -f

# check out Alice, who produces logs and writes them to Bob
vector top --url http://localhost:8686/graphql

# check out Bob, who receives logs from Alice and writes them to the console
vector top --url http://localhost:8687/graphql

Certificate Info

Passwords for the *-key.pem files:

• alice
• robert
• mallory

Without the encrypted key:

openssl req  -nodes -new -x509  -keyout server.key -out server.cert
openssl req  -nodes -new -x509  -keyout client.key -out client.cert

alice-cert.crt

-----BEGIN CERTIFICATE-----
MIIEnDCCAoQCCQCrzg9n5LvnzzANBgkqhkiG9w0BAQsFADAQMQ4wDAYDVQQDDAVh
bGljZTAeFw0yMzAxMjYyMjIzMzhaFw0zMzAxMjMyMjIzMzhaMBAxDjAMBgNVBAMM
BWFsaWNlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAz/2AqV06Y8Vg
z4kBGVwUT0tQXGnx7QHB/hmRFgSiWVg7+/GtRaIsK4mjZ/hGIkELhByG4AlVSFU2
ZboImKGynxU/qOCsJpFYt7igNyC0OspmzYR0rITxsEIg/Y/jaCov1qIPpwQf1S/X
/SU911u9xRsituYW+zlROVlRe9ydQWMqGcNFKi7THvc6neF64N3xs0bsJ5hYBV8F
ZSGiu9wbFrpFCIkqi6D16K4IFzCkBpLNGI0pDcZa9vCTP7/P/mtWmsLOhBU2VDk0
6rG1lvswl8DA38amzh2PaKYgGsTd6EM6HlzNpN4dll0b2CJyWhxhGkAnynAHoQYq
tHa9YK7EBWfxv8Mrp0rMMO8JizB7/Us738f67RyudrUHdUwnzgNFbdBKd7aKbP5/
Em15Ggh9i+zCxumqHZrkfwLJvoqgc5fdIwTqA413RUNVFB51jfj2hvbLO4B3rzRc
ahu/oacFNn3EoeGFakr3nT+NxgXZh2j+mdlCrvzoBx9OW8ZSKXGujxz6O4EIPD0K
uRn1t9s6OuwOJJzdVJoorD/xJdMckvSXtHJf4tccplLlcxHPhP6+5wJhBbtPoHjJ
9zaksQb4c0k+yBrcke2MGL7YMgHmPploWaUcVIUSwbfEt5FLz9xDxf3qpoKHEcs3
WaJ8+e1O5KGqHhkWCorUnF1V7lVfQ1UCAwEAATANBgkqhkiG9w0BAQsFAAOCAgEA
iWTHMbj57tEkAlTQOu9c1SstRhSyOqFnkdgtGJoQlzGIxhzT79vOVel39nzm2mV4
4a4/b5WveIAWqzK9aPs2qbCumY0ZN6kWePjuCVlZ+POGcK9V20dH+3eBlcM6tAqd
fARJAVgFlF9tsFvuzhPrIN5M/2O6xAsTmdzK6lcB/LTx6YIvy3lwDWpyRH9Y/apV
LJzWiG1rn/3rYa0WtBvCrEQ7v3e2cnDD/QLqP1XFcQMChiqD0uSNnXK5BcJ0rUAC
ZtFHXex8zc3rEx5g9G5cER7VQDO8H0+BCV540sOPKSOQOlWDHBqFsCUwMaVO6jI0
GV1SDyaExNjPUhAROLTt0Hw2bzPrmnfRKm8M8/g1aro0Ch56Z9eye1VBUT3HZ0wC
37SSfV/L71PUly5oKcXYM1x+AYO209e2pyxg4pZt133NKfA6tgqfZ8t3kf6mzPBm
VWQKeaHiwgHn0mS5uxiN+KP/+LVKkfQY6fAPELL0Sn9TA8K/oUpR6RdZVRrWxj3O
2nvkONHloTq1FFfBTAV68XJ0QapPTLVrKTtoqlpixdFvLfj9Oe5wHQwsYQvkokx8
Cw5a+XuoddoIPZj9VYiqsGrsjYAlPRS/QSVTCJan4BURiU+II1QRQx7TV2IgBQSv
l8PrpRg9tRWNiTA6kg6l6KWSiAfUqNlNcIjHKvbDC8E=
-----END CERTIFICATE-----

alice-key.pem

-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----

bob-cert.crt

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

bob-key.pem

-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----

docker-compose.yaml

version: '3'
services:
  alice:
    container_name: alice
    image: timberio/vector:0.26.0-debian
    volumes:
      - ./vector-alice.toml:/etc/vector/vector.toml:ro
      - ./alice-cert.crt:/etc/vector/alice-cert.crt:ro
      - ./alice-key.pem:/etc/vector/alice-key.pem:ro
      - ./bob-cert.crt:/etc/vector/bob-cert.crt:ro
    ports:
      - 8686:8686
    networks:
      - net
  bob:
    container_name: bob
    image: timberio/vector:0.26.0-debian
    volumes:
      - ./vector-bob.toml:/etc/vector/vector.toml:ro
      - ./bob-cert.crt:/etc/vector/bob-cert.crt:ro
      - ./bob-key.pem:/etc/vector/bob-key.pem:ro
      - ./alice-cert.crt:/etc/vector/alice-cert.crt:ro
    ports:
      - 8687:8686
      - 6000:6000
    networks:
      - net
  mallory:
    container_name: mallory
    image: timberio/vector:0.26.0-debian
    volumes:
      - ./vector-mallory.toml:/etc/vector/vector.toml:ro
      - ./mallory-cert.crt:/etc/vector/mallory-cert.crt:ro
      - ./mallory-key.pem:/etc/vector/mallory-key.pem:ro
      - ./bob-cert.crt:/etc/vector/bob-cert.crt:ro
    ports:
      - 8688:8686
    networks:
      - net

networks:
  net:

mallory-cert.crt

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

mallory-key.pem

-----BEGIN ENCRYPTED PRIVATE KEY-----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-----END ENCRYPTED PRIVATE KEY-----

vector-alice.toml

[api]
enabled = true
address = "0.0.0.0:8686"

[sources.logs]
type = "demo_logs"
format = "json"

[sinks.bob]
type = "vector"
inputs = [ "logs" ]
address = "bob:6000"
tls.enabled = true
tls.crt_file = "/etc/vector/alice-cert.crt"
tls.key_file = "/etc/vector/alice-key.pem"
tls.ca_file = "/etc/vector/bob-cert.crt"
tls.verify_certificate = true
tls.key_pass = "alice"

vector-bob.toml

[api]
enabled = true
address = "0.0.0.0:8686"

[sources.logs]
type = "vector"
address = "0.0.0.0:6000"
version = "2"
tls.enabled = true
tls.crt_file = "/etc/vector/bob-cert.crt"
tls.key_file = "/etc/vector/bob-key.pem"
tls.ca_file = "/etc/vector/alice-cert.crt"
tls.verify_certificate = true
tls.key_pass = "robert"


[sinks.console]
type = "console"
inputs = [ "logs" ]

  [sinks.console.encoding]
  codec = "json"

vector-mallory.toml

[api]
enabled = true
address = "0.0.0.0:8686"

[sources.logs]
type = "demo_logs"
format = "syslog"

[sinks.bob]
type = "vector"
inputs = [ "logs" ]
address = "bob:6000"
tls.enabled = true
tls.crt_file = "/etc/vector/mallory-cert.crt"
tls.key_file = "/etc/vector/mallory-key.pem"
tls.ca_file = "/etc/vector/bob-cert.crt"
tls.key_pass = "mallory"

vector-mTLS-demo.png