Did cassandra supports encryption -data at rest encryption(storage/db)
- in transit .
If it supports, how can we achieve those two
Bringing together the Apache Cassandra experts from the community and DataStax.
Want to learn? Have a question? Want to share your expertise? You are in the right place!
Not sure where to begin? Getting Started
Cassandra has no out-of-the-box support for encryption at rest.
Node-to-node and client-node encryption is supported with SSL:
DataStax Enterprise (DSE) has a Transparent Data Encryption (TDE) feature to protect at-rest data using a local encryption key file or via a remotely stored and managed KMIP encryption key.
You can read more about it here for example:
I hope this helps.
To add to Bettina's answer, the open-source distribution of Apache Cassandra does not support data-at-rest encryption so you'll need to look at other solutions such as volume encryption or OS-level filesystem encryption.
There are several solutions on the market such Vormetric Transparent Encryption from Thales. Cheers!
7 People are following this question.