I'm developing an application that will connect to Microsoft SQL Server in a local network:
- I'm considering whether these connections need to use TLS
- Or whether to leave it to the customer's administrators to use an encrypted tunnel, if they see fit. they may have other third party applications, also connecting to SQL Server.
But i'm not familiar with the solutions available to administrators to use an encrypted tunnel, besides VPN (and maybe a load balancer?).
- What would you do?
- What are the disadvantages to not using TLS in this context?
- Are there any solutions available for sending connections through an encrypted tunnel? (examples of products please)
I would prefer the simpler case, where i'm not responsible for the encryption
I expect that SQL Server will be running in a local network