Distributing entropy between machines

Jim Cheetham jim at gonzul.net
Tue Jun 24 05:44:28 BST 2014


Currently thinking about how to effectively use a OneRNG to provide good entropy to a number of machines (e.g. virtual servers) across a network, rather than having each key dedicated to a single server instance.

Entropy Broker http://www.vanheusden.com/entropybroker/ might be interesting, but I wonder if it is a little heavyweight.

Depending on how much trust there is in your system, a VM host with a healthy /dev/random can probably talk over a dedicated network to the VM guests, there are some examples out there just using netcat; but they don't scale. Perhaps some simple solution with ZeroMQ in a PUSH-PULL mode might be interesting.


More information about the Discuss mailing list