# How really secure Percona cluster?

**URL:** <https://forums.percona.com/t/how-really-secure-percona-cluster/2531>\
**Category:** Percona XtraDB Cluster 5.x\
**Created:** [January 27, 2013, 1:49pm UTC](https://forums.percona.com/t/how-really-secure-percona-cluster/2531 "2013-01-27T13:49:02Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![joepmeloen12](https://avatars.discourse-cdn.com/v4/letter/j/bcef8e/32.png) [@joepmeloen12](https://forums.percona.com/u/joepmeloen12)\
**Post date:** [January 27, 2013, 1:49pm UTC](https://forums.percona.com/t/how-really-secure-percona-cluster/2531/1 "2013-01-27T13:49:02Z")

</div>

Hi forum,

Setup: 3-node cluster, 60KM node-to-node distance, hosted at different providers, communicating over untrusted networks.

A little sniffing at port 4567 revealed a lot of readable information. Information / data is clearly visible.

Sure we know how to tunnel over SSL/SSH or how to use VPN connections, but that’s not an easy to manage/maintain way of securing and it makes the cluster configuration more complex - and by making it more complex it’s more likely eventually something will go wrong.

I couldn’t find much about this; all results refer to securing MySQL which is _not_ the point since MySQL in our setup will only be access from localhost.

Any clues on this?

Regards,  
Joep

---

<div class="post-metadata">

**Author:** ![miguelangelnieto](https://avatars.discourse-cdn.com/v4/letter/m/b9e5f3/32.png) [@miguelangelnieto](https://forums.percona.com/u/miguelangelnieto)\
**Post date:** [January 28, 2013, 4:06am UTC](https://forums.percona.com/t/how-really-secure-percona-cluster/2531/2 "2013-01-28T04:06:18Z")

</div>

Hi,

Percona XtraDB Cluster (Galera) supports SSL to encrypt the inter-node traffic. Please, check this link:

[URL][http://www.codership.com/wiki/doku.php?id=ssl\_support[/URL]](http://www.codership.com/wiki/doku.php?id=ssl_support%5B/URL%5D)

Regards.

---

<div class="post-metadata">

**Author:** ![joepmeloen12](https://avatars.discourse-cdn.com/v4/letter/j/bcef8e/32.png) [@joepmeloen12](https://forums.percona.com/u/joepmeloen12)\
**Post date:** [January 28, 2013, 6:38am UTC](https://forums.percona.com/t/how-really-secure-percona-cluster/2531/3 "2013-01-28T06:38:52Z")

</div>

Hi,

Thanks! Works like a charm. Hard to find anything about the subject because it’s a Galera property, not Percona. The last barrier; securing the SST. Do you have any hints on that?

Regards,  
Hidde