|
|
@ -37,7 +37,7 @@ on legacy clients.
|
|
|
|
|
|
|
|
|
|
|
|
Enforcement is always done by the server nodes. All servers must be [configured
|
|
|
|
Enforcement is always done by the server nodes. All servers must be [configured
|
|
|
|
to provide](/docs/agent/options.html) an `acl_datacenter`, which enables
|
|
|
|
to provide](/docs/agent/options.html) an `acl_datacenter`, which enables
|
|
|
|
ACL enforcement but also specified the authoritative datacenter. Consul does not
|
|
|
|
ACL enforcement but also specifies the authoritative datacenter. Consul does not
|
|
|
|
replicate data cross-WAN, and instead relies on [RPC forwarding](/docs/internal/architecture.html)
|
|
|
|
replicate data cross-WAN, and instead relies on [RPC forwarding](/docs/internal/architecture.html)
|
|
|
|
to support Multi-Datacenter configurations. However, because requests can be
|
|
|
|
to support Multi-Datacenter configurations. However, because requests can be
|
|
|
|
made across datacenter boundaries, ACL tokens must be valid globally. To avoid
|
|
|
|
made across datacenter boundaries, ACL tokens must be valid globally. To avoid
|
|
|
|