exjutsu
Where Next?
Trending in Discussions
Other Trending Topics
Latest on Elixir Forum
Sponsor Spotlight
Deploy Phoenix to your own VPS with PaaS ease: push-to-deploy, zero downtime, auto SSL, managed Postgres. 14-day free trial at potions.io
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #library
- #deployment
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #discussion
- #code-sync
- #podcasts
- #javascript
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #elixirconf-us
- #ai
- #blog-post
- #elixir-ls
- #phoenix_html
- #iex
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #hex
- #security
- #metaprogramming
Our Sponsors
Build Elixir applications with speed and confidence.
Supporting innovation across the BEAM ecosystem.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Practical resources that improve the lives of professional developers.
Master modern tools, write cleaner code, and tackle real-world challenges.
The deployment platform built for Elixir: PaaS ease, VPS control.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
Showing Posts 1 to 3- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
shanesveller
Distributed Erlang has a security model that is unofficially described as “this space intentionally left blank.” Do not run it over a WAN or other public network layer, because the shared cookie is not a form of privacy, encryption, or meaningful authentication. It has about the authority of a code word to a kid’s tree house.
On economy hosting like OVH/Kimsufi/Hetzner that means opting for the private network options, which may come with a shocking premium or other caveats that put the pin in the too-good-to-be-true pricing.
I really, really recommend you do your own homework here after you receive whatever feedback this thread includes, including about my own points. It’s very hard to mitigate security risks without a solid understanding of the threats involved.
akashv
Don’t know about others but Hetzner does provide free private networking between your resources.
ityonemo
You can also run erlang distribution over tls with two-way encryption (iirc) which will be secure, at which point the only thing you have to worry about is latency.