Getting Started with HashiCorp Nomad - Secure Gossip Encryption

The video tutorial explains the importance of gossip encryption in securing clusters using the SURF protocol. It covers the configuration of encryption keys, sharing them across data centers, and generating a 32-byte key using the Nomad tool. The tutorial also demonstrates how to implement encryption in server configuration files and validate its activation. A practical demo shows the process of enabling gossip encryption in a lab setting.

What is the default state of gossip in a Nomad cluster?

• Encrypted

• Compressed

• Clear text

• Hashed

Which tool is recommended for generating a gossip encryption key in Nomad?

• Nomad CLI

• Nomad operator gossip key ring generate

• OpenSSL

• Terraform

What is the format of the gossip encryption key used in Nomad?

• 64-byte hexadecimal

• 16-byte binary

• 128-byte ASCII

• 32-byte base64

Where should the generated encryption key be placed in the Nomad configuration?

• In the environment variables

• In the client configuration file

• In the Nomad binary directory

• Under the 'encrypt' parameter in the server configuration stanza

How can you verify that gossip encryption is enabled in a Nomad cluster?

• By checking the server logs

• Using the 'nomad agent info' command

• By inspecting the network traffic

• Using the 'nomad encrypt status' command