Salt Master Minion Communication over RabbitMQ

[ashoka devanampriya]

Hi,

There is a need @job to route all the communication between end-points over RabbitMQ AMQP Channel.  (This is a legacy product and customers are wary of opening any-other additional ports or direct ip communication).  

However, we are evaluating SALT and really liked it for configuration management.  As Salt Master and Minion talk - directly over ip, wanted to check is there a possibility to route the messages from master to minion and vise versa via an existing Rabbit MQ Channel.

Any thoughts of this front would be very helpful

Thank you for all your help in advance :-)

Ashoka

[Daniel Wallace]

To do it currently, you need two ports open on the master.  If rabbitmq has two ports, you could just assign the salt master or minion to that.

https://docs.saltstack.com/en/latest/ref/configuration/master.html#publish-port

https://docs.saltstack.com/en/latest/ref/configuration/master.html#ret-port

If there are not, you would then need to tunnel over the one port, and then pass zeromq through the tunnel.

--
You received this message because you are subscribed to the Google Groups "Salt-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to salt-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/salt-users/d40acebf-9983-42be-8df6-ba671f2956ac%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[C. R. Oldham]

I actually read your question as "can we use RabbitMQ as a transport in place of zmq or the TCP (Tornado) transport?" as opposed to "can we make Salt talk over the RabbitMQ ports".

In case that's what you meant, Salt's transport layer is pluggable, but we do not have a RabbitMQ implementation.

--cro

C. R. Oldham

Senior Platform Engineer, Integrations Team Lead, SaltStack

c...@saltstack.com / 801-564-4673

To view this discussion on the web visit https://groups.google.com/d/msgid/salt-users/CAA2%2B9hAc4FsGXLVNrZfS%3DqnCKUNBok6M62scWVRcoWWDLc5-Gw%40mail.gmail.com.