Encrypted Telemetry in Transit
Talkat Observability Day 2025 · on Tuesday, 2025-04-01· at 12:55· Level 1 | Hall Entrance S10 | Room B·
summary
Shows how to encrypt OpenTelemetry traffic end-to-end using off‑the‑shelf components: OpenTelemetry Collector, Java agent, OpenSSL and keytool. Demonstrates generating a self‑signed cert, configuring the collector receiver for TLS 1.3 on port 4318, importing the cert into the JVM truststore, and verifying with a Wireshark capture. One example packet ~10 KB leaks host, PID, DB and query info; after cert import the wire shows only encrypted gibberish. Mentions mTLS and FedRAMP/FIPS constraints.
AI-written summary · about
chapters (11)
- 0:00Introduction
- 1:03Telemetry encryption needs
- 2:51Unencrypted telemetry risks
- 8:35TLS for secure transit
- 10:19TLS in OpenTelemetry Collector
- 12:45TLS certificates setup
- 16:42Certificate trust chains
- 19:12Internal CAs for TLS
- 21:20Verifying encrypted telemetry
- 21:40TLS adoption challenges
- 23:47Q&A
related talks
52mHow to effectively spy on your systems
38mThe State of OpenTelemetry
32mOpenTelemetry feat. logs, metrics and traces
22mOpenTelemetry – An Observability Framework for Cloud-Native Software
01h 10mHow to Effectively Spy on Your Systems
38mPractical introduction to OpenTelemetry tracing
46mThe State of OpenTelemetry
02h 41mThe Science of Signals: Mastering Telemetry for Observability