Enabling Gossip Encryption in Nomad

30 minutes
  • 4 Learning Objectives

About this Hands-on Lab

By default, Nomad does not use any encryption between the agents running in Server mode. Encryption is available however, and can be enabled fairly easily. In this hands-on lab, you are provided with three servers built out as Server Agents, that are part of the same cluster. Your task is to enable Gossip encryption between the servers. Once enabled, you should still be able to see all three servers, and they should be able to continue to work together in the cluster.

Learning Objectives

Successfully complete this lab by achieving the following learning objectives:

Log in to the Provided Servers
  1. Log in to the server using the credentials provided.
  2. Test to ensure that all server nodes are working in the cluster.
Create the Required Key
  1. Use the appropriate process to create the required 16 bytes, base 64 encoded key.
  2. Copy the key as it will be used for the configuration of the servers.
Enable Gossip Encryption on all Server Nodes and Restart
  1. Edit the Nomad configuration file on each of the server agents, and update the correct stanza to add the encryption.
  2. Once the changes have been made, restart each instance of Nomad.
Ensure All Server Agents Are Working and Able to See Each Other
  1. Verify that you can see all three agents.

Additional Resources

Management has heard that you can setup some form of encryption between Nomad agents in Server mode. They have tasked you with setting this up in a test environment, using three server agents.

Once the changes have been made, and the nomad service has been restarted on all three servers, verify that they are all still visible.

What are Hands-on Labs

Hands-on Labs are real environments created by industry experts to help you learn. These environments help you gain knowledge and experience, practice without compromising your system, test without risk, destroy without fear, and let you learn from your mistakes. Hands-on Labs: practice your skills before delivering in the real world.

Sign In
Welcome Back!

Psst…this one if you’ve been moved to ACG!

Get Started
Who’s going to be learning?