Hi,
I'm trying to run the RTI perftest application with DDS Security plugin enabled in Kubernetes pods. As multicast is not enabled by most k8s CNIs, I have to run cloud discovery service to make participants discover each other. However, I got the following error on the publisher:
RTI Perftest 3.1.0 (RTI Connext DDS 6.0.1)Mode: THROUGHPUT TEST(Use "-latencyTest" for Latency Mode)Perftest Configuration:Reliability: ReliableKeyed: NoPublisher ID: 0Latency count: 1 latency sample every 10000 samplesData Size: 100Batching: 8192 Bytes (Use "-batchSize 0" to disable batching)Publication Rate: Unlimited (Not set)Number of samples: 100000000Receive using: ListenersDomain: 1Dynamic Data: NoFlatData: NoZero Copy: NoAsynchronous Publishing: NoXML File: perftest_qos_profiles.xmlTransport Configuration:Kind: UDPv4 & SHMEM (taken from QoS XML file)Use Multicast: FalseSHMEM message_size_max: 65536SHMEM received_message_count_max: 102SHMEM receive_buffer_size: 6684672Secure Configuration:Encrypt discovery: FalseEncrypt topic (user) data: TrueEncrypt submessage: TrueSign data: FalseGovernance file: ./resource/secure/signed_PerftestGovernance_EncryptBoth.xmlPermissions file: ./resource/secure/signed_PerftestPermissionsPub.xmlPrivate key file: ./resource/secure/pubkey.pemCertificate file: ./resource/secure/pub.pemCertificate authority file: ./resource/secure/cacert.pemPlugin library: Not SpecifiedWaiting to discover 1 subscribers ...PRESParticipant_assertRemoteParticipantI:!assert remote participant 96a413df a72d5f0b 948fb957 due to different ro areaDISCParticipantDiscoveryPlugin_assertRemoteParticipant:!assert remote participant: 0X96A413DF,0XA72D5F0B,0X948FB957,0X1C1DISCSimpleParticipantDiscoveryPluginReaderListener_onDataAvailable:!assert remote participantPRESParticipant_processMatchedRemoteEndpointSecurity:[Local Participant: f33b450a 5a940447 7010e182 | Local Endpoint: 1c1] [Remote Participant: 96a413df a72d5f0b 948fb957 | Remote Endpoint: 80000004] !security function missing remote participant interceptor handle for register_matched_remote_endpointPRESPsService_assertMatchSecurity:[Local Participant: f33b450a 5a940447 7010e182 | Local Endpoint: 80000003] [Remote Participant: 96a413df a72d5f0b 948fb957 | Remote Endpoint: 80000004] !security function process matched remote endpoint securityPRESPsService_linkToLocalWriter:!process match security...
Similar on the subscriber:
RTI Perftest 3.1.0 (RTI Connext DDS 6.0.1)Perftest Configuration:Reliability: ReliableKeyed: NoSubscriber ID: 0Data Size: 100Receive using: ListenersDomain: 1Dynamic Data: NoFlatData: NoZero Copy: NoXML File: perftest_qos_profiles.xmlTransport Configuration:Kind: UDPv4 & SHMEM (taken from QoS XML file)Use Multicast: FalseSHMEM message_size_max: 65536SHMEM received_message_count_max: 102SHMEM receive_buffer_size: 6684672Secure Configuration:Encrypt discovery: FalseEncrypt topic (user) data: TrueEncrypt submessage: TrueSign data: FalseGovernance file: ./resource/secure/signed_PerftestGovernance_EncryptBoth.xmlPermissions file: ./resource/secure/signed_PerftestPermissionsSub.xmlPrivate key file: ./resource/secure/subkey.pemCertificate file: ./resource/secure/sub.pemCertificate authority file: ./resource/secure/cacert.pemPlugin library: Not SpecifiedPRESParticipant_assertRemoteParticipantI:!assert remote participant f33b450a 5a940447 7010e182 due to different ro areaDISCParticipantDiscoveryPlugin_assertRemoteParticipant:!assert remote participant: 0XF33B450A,0X5A940447,0X7010E182,0X1C1DISCSimpleParticipantDiscoveryPluginReaderListener_onDataAvailable:!assert remote participantWaiting to discover 1 publishers ...PRESParticipant_assertRemoteParticipantI:!assert remote participant f33b450a 5a940447 7010e182 due to different ro areaDISCParticipantDiscoveryPlugin_assertRemoteParticipant:!assert remote participant: 0XF33B450A,0X5A940447,0X7010E182,0X1C1DISCSimpleParticipantDiscoveryPluginReaderListener_onDataAvailable:!assert remote participant...
Hi KKVandy,
Cloud Disovery Service (CDS) does not support using security in RTI Connext DDS 6.0.1 release. With the upcoming RTI Connext DDS 6.1.0 release, we are adding support for symmetric key encryption using preshared keys to protect the exchange of participant announcements between CDS and other DomainParticipants. This will be done using the property com.rti.serv.secure.authentication.participant_discovery_protection_key, within the new XML configuration schema (<security><property>) of CDS.
Best,
Pralhad
OK, thank you.