[Kea-users] HA with TLS

[Stefan G. Weichinger]

Am 25.10.26 um 15:46 schrieb Peter Davies via Kea-users:
> Hi Stefan,
>    Good to hear that you have got things working.
> The HA peer endpoints (port 8005 in your case) should be used 
> exclusively for HA communication.
> See: https://kea.readthedocs.io/en/latest/arm/hooks.html#hook-libraries
> 
> Kea uses the "control-sockets" to accept incoming API command.
> See: https://kea.readthedocs.io/en/latest/arm/dhcp4-srv.html#management- 
> api-for-the-dhcpv4-server
I remember having the control-sockets on localhost only (before I 
noticed the failed HA).

As far as I understand: if the stork-agent runs on the same box, the 
control-socket on localhost is even better, right?

We run in a protected LAN, and I know a few bigger risks than this, but 
just to learn and improve ... ;-)