DataStax Academy FAQ

DataStax Academy migrated to a new learning management system (LMS) in July 2020. We are also moving to a new Cassandra Certification process so there are changes to exam bookings, voucher system and issuing of certificates.

Check out the Academy FAQ pages for answers to your questions:


question

nagasree963_193876 avatar image
nagasree963_193876 asked ·

Does Cassandra support encryption?

Did cassandra supports encryption -data at rest encryption(storage/db)

- in transit .

If it supports, how can we achieve those two

cassandraencryption
10 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

Erick Ramirez avatar image
Erick Ramirez answered ·

To add to Bettina's answer, the open-source distribution of Apache Cassandra does not support data-at-rest encryption so you'll need to look at other solutions such as volume encryption or OS-level filesystem encryption.

There are several solutions on the market such Vormetric Transparent Encryption from Thales. Cheers!

Share
10 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.

bettina.swynnerton avatar image
bettina.swynnerton answered ·

Hi,

Cassandra has no out-of-the-box support for encryption at rest.

Node-to-node and client-node encryption is supported with SSL:

https://docs.datastax.com/en/cassandra-oss/3.0/cassandra/configuration/secureSSLIntro.html?hl=ssl

DataStax Enterprise (DSE) has a Transparent Data Encryption (TDE) feature to protect at-rest data using a local encryption key file or via a remotely stored and managed KMIP encryption key.

You can read more about it here for example:

https://docs.datastax.com/en/security/6.8/security/secEncryptTDE.html

I hope this helps.

Share
10 |1000 characters needed characters left characters exceeded

Up to 8 attachments (including images) can be used with a maximum of 1.0 MiB each and 10.0 MiB total.