Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Mongodb tap does not support SSL (when forced on mongodb server side) #1048

Open
gerardjp opened this issue Dec 6, 2022 · 0 comments
Open
Labels
enhancement New feature or request

Comments

@gerardjp
Copy link

gerardjp commented Dec 6, 2022

Is your feature request related to a problem? Please describe.
I've set up a tap/target from mongodb to Postgres, but I can't configure the use of SSL when using a mongodb tap. On the remote mongodb server we force the use of SSL, but without forcing client side SSL indentity validation. So it's loosely implemented, but minimally, (it should be) at least encrypted.

Since SSL is mandatory by GDPR legislation, to name one, and it's not uncommon for people to replicate data between remote sites. One would think this is a minimum requirement nowadays.

Describe the solution you'd like
Add the relevant parm(s) to pipelinewise tap config that singer.io already supports. See the SSL boolean already in the Singer tap config: https://github.com/singer-io/tap-mongodb

Describe alternatives you've considered
A workaround is setting up a site-to-site vpn so encryption takes place on a different layer (OSI network layer instead of application layer). However, this is overkill if one replicates several database from multiple different geographical locations into a single datawarehouse.

Additional context
I had a similar issue with replicating a Postgres instance from GCP (Google cloud platform) a while back, where there were configuration limitations on Postgres on the GCP side and could not make it work. There we also implemented a site-to-site vpn, but it's cumbersome and overkill. In this case we needed to replicate multiple instances so the vpn server setup was less overhead. However, since the different database engines like Postgres and Mongodb and possibly others support SSL/TLS one would expect the client side to support SSL on this.

Thanks a lot!

@gerardjp gerardjp added the enhancement New feature or request label Dec 6, 2022
@gerardjp gerardjp changed the title Mongodb tap does not support SSL, when it's forced on mongodb server side Mongodb tap does not support SSL (when forced on mongodb server side) Dec 6, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant