[GH-ISSUE #1147] [Usage]: Does MooncakeStore support two-way certificate authentication between Master Service and Clients? #383

New issue

Closed

opened 2026-10-29 21:13:39 +00:00 by bsakaguchi · 2 comments

bsakaguchi commented

2026-10-29 21:13:39 +00:00

Owner

Originally created by @Pz1116 on GitHub (Dec 1, 2025).
Original GitHub issue: https://github.com/kvcache-ai/Mooncake/issues/1147

Describe your usage question

Some production environments may require two-way certificate authentication (e.g. openssl) between MooncakeStore's Master Service and Clients (metadata server=P2PHANDSHAKE) for security reasons. Is this feature currently supported?

If yes, is there a readme about how to setup everything? I can't seem to find it in the docs. Otherwise, is there a plan for supporting this feature in the future?

Before submitting a new issue...

Make sure you already searched for relevant issues and read the documentation

Originally created by @Pz1116 on GitHub (Dec 1, 2025). Original GitHub issue: https://github.com/kvcache-ai/Mooncake/issues/1147 ### Describe your usage question Some production environments may require two-way certificate authentication (e.g. openssl) between MooncakeStore's Master Service and Clients (metadata server=P2PHANDSHAKE) for security reasons. Is this feature currently supported? If yes, is there a readme about how to setup everything? I can't seem to find it in the docs. Otherwise, is there a plan for supporting this feature in the future? ### Before submitting a new issue... - [x] Make sure you already searched for relevant issues and read the [documentation](https://kvcache-ai.github.io/Mooncake/)

bsakaguchi closed this issue

2026-10-29 21:13:39 +00:00

bsakaguchi commented

2026-10-29 21:13:40 +00:00

Author

Owner

@stmatengss commented on GitHub (Dec 1, 2025):

Yes, Mooncake plans to support certificate authentication for improved security. It should be optional.

@stmatengss commented on GitHub (Dec 1, 2025): Yes, Mooncake plans to support certificate authentication for improved security. It should be optional.

bsakaguchi commented

2026-10-29 21:13:40 +00:00

Author

Owner

@Pz1116 commented on GitHub (Dec 5, 2025):

Great to hear that. Looking forward to it!

@Pz1116 commented on GitHub (Dec 5, 2025): Great to hear that. Looking forward to it!