Authentication for InfluxDB line protocol
Blog post from QuestDB
QuestDB, an open-source time-series database designed for high-demand environments, has enhanced its capabilities by integrating authentication for the InfluxDB line protocol, which is widely used due to its simplicity and minimal overhead. The protocol allows data to be sent line by line via UDP or TCP, but previously lacked robust security measures. To address this, QuestDB introduced a challenge/response authentication mechanism using elliptic curve cryptography (ECC curve P-256) with SHA-256 for strong, future-proof security. This method allows QuestDB to be configured with only public cryptographic keys, reducing the risk of storing sensitive data. The authentication process involves the client sending a key ID to the server, which responds with a nonce that the client signs and returns, ensuring that only authorized clients can send data. This development allows users with specific security needs to implement authentication without the complexity of full encryption, maintaining the efficiency and portability of QuestDB while keeping endpoints secure.