Secure Daemon Overview

This section describes the two daemons that offer secure client connections:

•

rvsd, the Rendezvous secure communications daemon, corresponds to rvd. Rendezvous Daemon (rvd) describes rvd, the Rendezvous communications daemon.

•

rvsrd, the Rendezvous secure routing daemon, corresponds to rvrd. Routing Daemon (rvrd) describes rvrd, the Rendezvous routing daemon.

Secure Connections

The two ordinary Rendezvous daemons, rvd and rvrd, communicate with clients over non-secure TCP connections. In contrast, their secure counterparts, rvsd and rvsrd, communicate with clients over TLS connections, allowing secure client communication over non-secure networks.

Restricting Access

Secure daemons restrict client access in three ways:

•

Only authorized clients can connect to a secure daemon.

•

Secure daemons restrict the combinations of network and UDP service over which client transports can communicate.

•

Secure daemons limit the subject space that its clients can access.

Plaintext Communication

Although they ensure secure client connections, both secure daemons transmit messages as plaintext. That is, when they publish messages from clients to local networks, those messages are not encrypted.