Systems and methods for increased security in cluster formation
An apparatus may include one or more processors and non-transitory, computer-readable instructions which, when executed by the one or more processors, cause the one or more processors to receive, using a first security model, an indication to form a cluster including a set of nodes, establish, using the first security model, a connection with the set of nodes, in response to the set of nodes forming the cluster, automatically disable the first security model, and receive, as part of the cluster, using a second security model, a request directed to the cluster.
1 . An apparatus comprising one or more processors and non-transitory, computer-readable instructions which, when executed by the one or more processors, cause the one or more processors to:
receive, using a first security model, an indication to form a cluster including a set of nodes;
establish a connection with the set of nodes;
in response to the set of nodes forming the cluster, automatically disable the first security model; and
receive, as part of the cluster, using a second security model, a request directed to the cluster.
2 . The apparatus of claim 1 , wherein the first security model is a node-based security model, and wherein the second security model is a cluster-based security model.
3 . The apparatus of claim 1 , wherein the second security model includes quorum-based verification from the set of nodes forming the cluster.
4 . The apparatus of claim 1 , wherein each node of the set of nodes receives, using the first security model, the indication to form the cluster.
5 . The apparatus of claim 1 , wherein disabling the first security model includes closing one or more ports associated with the first security model.
6 . The apparatus of claim 1 , wherein the request directed to the cluster includes a request for a cluster formation status of the cluster.
7 . The apparatus of claim 1 , wherein the second security model includes authenticating requests to the cluster using a cluster-level password.
8 . The apparatus of claim 7 , wherein the indication to form the cluster includes the cluster-level password.
9 . The apparatus of claim 1 , wherein the instructions further cause the one or more processors to transmit one or more messages to the set of nodes to form the cluster.
10 . The apparatus of claim 1 , wherein the instructions further cause the one or more processors to:
provide a status of the set of nodes to a client device using the first security model prior to the first security model being disabled; and
provide a status of the cluster to the client device using the second security model after the first security model is disabled.
11 . A method comprising:
receiving, at a node, using a first security model, an indication to form a cluster comprising a set of nodes;
establishing, by the node, a connection with the set of nodes;
in response to the set of nodes forming the cluster, automatically disabling, by the node, the first security model;
receiving, at the node, as part of the cluster, using a second security model, a request directed to the cluster.
12 . The method of claim 11 , wherein the first security model is a node-based security model, and wherein the second security model is a cluster-based security model.
13 . The method of claim 11 , wherein the second security model includes quorum-based verification from the set of nodes forming the cluster.
14 . The method of claim 11 , wherein each node of the set of nodes receives, using the first security model, the indication to form the cluster.
15 . The method of claim 11 , wherein disabling the first security model includes closing one or more ports associated with the first security model.
16 . The method of claim 11 , wherein the request directed to the cluster includes a request for a cluster formation status of the cluster.
17 . The method of claim 11 , wherein the second security model includes authenticating requests to the cluster using a cluster-level password.
18 . The method of claim 17 , wherein the indication to form the cluster includes the cluster-level password.
19 . The method of claim 11 , further comprising transmitting, by the node, one or more messages to the set of nodes to form the cluster.
20 . The method of claim 11 , further comprising:
providing a status of the set of nodes to a client device using the first security model prior to the first security model being disabled; and
providing a status of the cluster to the client device using the second security model after the first security model is disabled.