Apache Camel Security

Apache Camel is unsecured by default. Before deploying to production, security must be explicitly enabled at one or more layers.

Security Layers

Camel provides four layers of security. Use only what is necessary -- avoid redundant encryption when transport security already covers the payload.

1. Endpoint Security

Secures the transport between Camel and external systems.

• Provides peer authentication (and sometimes authorization) at the transport level
• Configuration varies by transport type:
  • JMS / ActiveMQ: SSL/TLS and JAAS for client-to-broker and broker-to-broker
  • Jetty: HTTP Basic Authentication and SSL/TLS
• Use the JSSE Utility (Camel 2.8+) to configure SSL/TLS across components

2. Payload Security