Did cassandra supports encryption -data at rest encryption(storage/db)
- in transit .
If it supports, how can we achieve those two
Bringing together the Apache Cassandra experts from the community and DataStax.
Want to learn? Have a question? Want to share your expertise? You are in the right place!
Not sure where to begin? Getting Started
Hi,
Cassandra has no out-of-the-box support for encryption at rest.
Node-to-node and client-node encryption is supported with SSL:
https://docs.datastax.com/en/cassandra-oss/3.0/cassandra/configuration/secureSSLIntro.html?hl=ssl
DataStax Enterprise (DSE) has a Transparent Data Encryption (TDE) feature to protect at-rest data using a local encryption key file or via a remotely stored and managed KMIP encryption key.
You can read more about it here for example:
https://docs.datastax.com/en/security/6.8/security/secEncryptTDE.html
I hope this helps.
To add to Bettina's answer, the open-source distribution of Apache Cassandra does not support data-at-rest encryption so you'll need to look at other solutions such as volume encryption or OS-level filesystem encryption.
There are several solutions on the market such Vormetric Transparent Encryption from Thales. Cheers!
7 People are following this question.
