You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@kudu.apache.org by Jordan Birdsell <jo...@statefarm.com> on 2016/05/12 15:26:26 UTC
Encryption
Hi,
A while back we had a thread going about using dm-crypt as a means to encrypt kudu data. Out of curiosity, has any one actually done this?
Thanks,
Jordan Birdsell
RE: Encryption
Posted by Jordan Birdsell <jo...@statefarm.com>.
Thanks, I’ll see if I can find some available cycles
From: Todd Lipcon [mailto:todd@cloudera.com]
Sent: Thursday, May 12, 2016 6:25 PM
To: user@kudu.incubator.apache.org
Subject: Re: Encryption
On Thu, May 12, 2016 at 9:45 AM, Jordan Birdsell <jo...@statefarm.com>> wrote:
Thanks Todd. From a roadmap perspective, do think this will be the recommended way of enabling encryption for Kudu or should a design be put together for something more integrated with Kudu itself?
I think for the short term it's the best recommendation.
I do think there would be some value in a "built-in" encryption feature, for example in order to support things like different encryption keys per column or per table, etc. It's just a matter of prioritization and the number of people working on Kudu. If you think the dm-crypt solution isn't sufficient for your needs, would be great to have some contributions in this area.
-Todd
From: Todd Lipcon [mailto:todd@cloudera.com<ma...@cloudera.com>]
Sent: Thursday, May 12, 2016 12:31 PM
To: user@kudu.incubator.apache.org<ma...@kudu.incubator.apache.org>
Subject: Re: Encryption
Hi Jordan,
I'm not aware of someone doing this yet, but since dm-crypt operates at the device level and not the filesystem level, I don't see any reasons it wouldn't work.
It's possible some developers here have already been running like this if they use dm-crypt on their laptops. Maybe someone else will pipe up if they have tried it.
-Todd
On Thu, May 12, 2016 at 8:26 AM, Jordan Birdsell <jo...@statefarm.com>> wrote:
Hi,
A while back we had a thread going about using dm-crypt as a means to encrypt kudu data. Out of curiosity, has any one actually done this?
Thanks,
Jordan Birdsell
--
Todd Lipcon
Software Engineer, Cloudera
--
Todd Lipcon
Software Engineer, Cloudera
Re: Encryption
Posted by Todd Lipcon <to...@cloudera.com>.
On Thu, May 12, 2016 at 9:45 AM, Jordan Birdsell <
jordan.birdsell.kdvm@statefarm.com> wrote:
> Thanks Todd. From a roadmap perspective, do think this will be the
> recommended way of enabling encryption for Kudu or should a design be put
> together for something more integrated with Kudu itself?
>
I think for the short term it's the best recommendation.
I do think there would be some value in a "built-in" encryption feature,
for example in order to support things like different encryption keys per
column or per table, etc. It's just a matter of prioritization and the
number of people working on Kudu. If you think the dm-crypt solution isn't
sufficient for your needs, would be great to have some contributions in
this area.
-Todd
>
>
> *From:* Todd Lipcon [mailto:todd@cloudera.com]
> *Sent:* Thursday, May 12, 2016 12:31 PM
> *To:* user@kudu.incubator.apache.org
> *Subject:* Re: Encryption
>
>
>
> Hi Jordan,
>
>
>
> I'm not aware of someone doing this yet, but since dm-crypt operates at
> the device level and not the filesystem level, I don't see any reasons it
> wouldn't work.
>
>
>
> It's possible some developers here have already been running like this if
> they use dm-crypt on their laptops. Maybe someone else will pipe up if they
> have tried it.
>
>
>
> -Todd
>
>
>
> On Thu, May 12, 2016 at 8:26 AM, Jordan Birdsell <
> jordan.birdsell.kdvm@statefarm.com> wrote:
>
> Hi,
>
>
>
> A while back we had a thread going about using dm-crypt as a means to
> encrypt kudu data. Out of curiosity, has any one actually done this?
>
>
>
> Thanks,
>
> Jordan Birdsell
>
>
>
>
>
>
>
> --
>
> Todd Lipcon
> Software Engineer, Cloudera
>
--
Todd Lipcon
Software Engineer, Cloudera
RE: Encryption
Posted by Jordan Birdsell <jo...@statefarm.com>.
Thanks Todd. From a roadmap perspective, do think this will be the recommended way of enabling encryption for Kudu or should a design be put together for something more integrated with Kudu itself?
From: Todd Lipcon [mailto:todd@cloudera.com]
Sent: Thursday, May 12, 2016 12:31 PM
To: user@kudu.incubator.apache.org
Subject: Re: Encryption
Hi Jordan,
I'm not aware of someone doing this yet, but since dm-crypt operates at the device level and not the filesystem level, I don't see any reasons it wouldn't work.
It's possible some developers here have already been running like this if they use dm-crypt on their laptops. Maybe someone else will pipe up if they have tried it.
-Todd
On Thu, May 12, 2016 at 8:26 AM, Jordan Birdsell <jo...@statefarm.com>> wrote:
Hi,
A while back we had a thread going about using dm-crypt as a means to encrypt kudu data. Out of curiosity, has any one actually done this?
Thanks,
Jordan Birdsell
--
Todd Lipcon
Software Engineer, Cloudera
Re: Encryption
Posted by Todd Lipcon <to...@cloudera.com>.
Hi Jordan,
I'm not aware of someone doing this yet, but since dm-crypt operates at the
device level and not the filesystem level, I don't see any reasons it
wouldn't work.
It's possible some developers here have already been running like this if
they use dm-crypt on their laptops. Maybe someone else will pipe up if they
have tried it.
-Todd
On Thu, May 12, 2016 at 8:26 AM, Jordan Birdsell <
jordan.birdsell.kdvm@statefarm.com> wrote:
> Hi,
>
> A while back we had a thread going about using dm-crypt as a means to
> encrypt kudu data. Out of curiosity, has any one actually done this?
>
> Thanks,
> Jordan Birdsell
>
>
--
Todd Lipcon
Software Engineer, Cloudera