overview

* ruby based
* requires at least one server
* client/server interaction is encrypted with SSL (default private CA)

More detailed "howto configure puppet"