Re: [mosquitto-dev] Advice needed (long, sorry)

[Stefano Costa <stefano.costa@xxxxxxxxxxx>]

On 12/02/2015 09:32, Oegma2 wrote:
> With AWS this is dead easy :) - can use the ELB to connect the TSL
> clients on SSL, say port 8883 and terminate this to clear text TCP port
> say 1883
> So the Amazon's ELB takes care of your security side - you just load the

Yes, I agree this is one way to go in this situation. The "cons" are 
that you have to deal with two different points of configuration and 
potential failure/hole regarding crypto and authentication, one located 
in the ELB the other in the broker (or associated authentication 
plugin). Terminating TLS on the broker could be a simple setup.


--
  Stefano Costa
  Skype stefanocosta.bluewind
  Twitter @stefanobluewind
  http://www.bluewind.it