Setting up access controls v6.3.1

Encrypt and authenticate connections at every point in a PGD cluster to protect replication traffic, control application access, and prevent unauthorized nodes from joining. Access control operates at three levels:

• Inter-node connections are the connections PGD nodes make to each other for replication and Raft consensus. Securing these connections ensures that replication traffic is encrypted and that only authorized nodes can join the cluster.

• Client to Connection Manager covers how applications authenticate and connect to the cluster. Securing these connections controls how applications authenticate, which ports they connect to, and whether the HTTP management endpoint uses TLS.

• Connection Manager to nodes covers how Connection Manager connects to backend nodes on behalf of clients. Each node must be configured to accept these connections.