Did cassandra supports encryption -data at rest encryption(storage/db)
- in transit .
If it supports, how can we achieve those two
Did cassandra supports encryption -data at rest encryption(storage/db)
- in transit .
If it supports, how can we achieve those two
Hi,
Cassandra has no out-of-the-box support for encryption at rest.
Node-to-node and client-node encryption is supported with SSL:
https://docs.datastax.com/en/cassandra-oss/3.0/cassandra/configuration/secureSSLIntro.html?hl=ssl
DataStax Enterprise (DSE) has a Transparent Data Encryption (TDE) feature to protect at-rest data using a local encryption key file or via a remotely stored and managed KMIP encryption key.
You can read more about it here for example:
https://docs.datastax.com/en/security/6.8/security/secEncryptTDE.html
I hope this helps.
To add to Bettina's answer, the open-source distribution of Apache Cassandra does not support data-at-rest encryption so you'll need to look at other solutions such as volume encryption or OS-level filesystem encryption.
There are several solutions on the market such Vormetric Transparent Encryption from Thales. Cheers!
7 People are following this question.
DataStax Enterprise is powered by the best distribution of Apache Cassandra ™
© 2023 DataStax, Titan, and TitanDB are registered trademarks of DataStax, Inc. and its subsidiaries in the United States and/or other countries.
Apache, Apache Cassandra, Cassandra, Apache Tomcat, Tomcat, Apache Lucene, Lucene, Apache Solr, Apache Hadoop, Hadoop, Apache Spark, Spark, Apache TinkerPop, TinkerPop, Apache Kafka and Kafka are either registered trademarks or trademarks of the Apache Software Foundation or its subsidiaries in Canada, the United States and/or other countries.
Privacy Policy Terms of Use