You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cassandra.apache.org by "Vijay (JIRA)" <ji...@apache.org> on 2011/06/21 18:33:47 UTC

[jira] [Created] (CASSANDRA-2802) Enable encryption for data across the DC only.

Enable encryption for data across the DC only.
----------------------------------------------

                 Key: CASSANDRA-2802
                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
             Project: Cassandra
          Issue Type: New Feature
          Components: Contrib
    Affects Versions: 0.7.7
         Environment: JVM
            Reporter: Vijay
            Assignee: Upayavira
            Priority: Trivial
             Fix For: 0.8.1


Make DC level Encryption option

1) Modify EncryptionOptions to add inter_dc option.
2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (CASSANDRA-2802) Enable encryption for data across the DC only.

Posted by "Brandon Williams (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/CASSANDRA-2802?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13098974#comment-13098974 ] 

Brandon Williams commented on CASSANDRA-2802:
---------------------------------------------

Doesn't apply to 0.8 for me, can you rebase?

> Enable encryption for data across the DC only.
> ----------------------------------------------
>
>                 Key: CASSANDRA-2802
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Core
>    Affects Versions: 0.8.0
>         Environment: JVM
>            Reporter: Vijay
>            Assignee: Vijay
>            Priority: Minor
>             Fix For: 0.8.6
>
>         Attachments: 0001-2802-Commiting-New-Port-For-SSL.patch, 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch
>
>
> Make DC level Encryption option
> 1) Modify EncryptionOptions to add inter_dc option.
> 2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CASSANDRA-2802) Enable encryption for data across the DC only.

Posted by "Vijay (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CASSANDRA-2802?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vijay updated CASSANDRA-2802:
-----------------------------

    Attachment:     (was: 0001-2802-Commiting-New-Port-For-SSL.patch)

> Enable encryption for data across the DC only.
> ----------------------------------------------
>
>                 Key: CASSANDRA-2802
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Core
>    Affects Versions: 0.8.0
>         Environment: JVM
>            Reporter: Vijay
>            Assignee: Vijay
>            Priority: Minor
>             Fix For: 0.8.5
>
>
> Make DC level Encryption option
> 1) Modify EncryptionOptions to add inter_dc option.
> 2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Assigned] (CASSANDRA-2802) Enable encryption for data across the DC only.

Posted by "Vijay (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CASSANDRA-2802?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vijay reassigned CASSANDRA-2802:
--------------------------------

    Assignee: Vijay  (was: Upayavira)

> Enable encryption for data across the DC only.
> ----------------------------------------------
>
>                 Key: CASSANDRA-2802
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Contrib
>    Affects Versions: 0.7.7
>         Environment: JVM
>            Reporter: Vijay
>            Assignee: Vijay
>            Priority: Trivial
>             Fix For: 0.8.1
>
>
> Make DC level Encryption option
> 1) Modify EncryptionOptions to add inter_dc option.
> 2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CASSANDRA-2802) Enable encryption for data across the DC only.

Posted by "Vijay (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CASSANDRA-2802?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vijay updated CASSANDRA-2802:
-----------------------------

    Attachment: 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch
                0001-2802-Commiting-New-Port-For-SSL.patch

Attached patch to support selective communication SSL DC/RACK/ALL... This patch separates the communication port into 2 encrypted and unencrypted ports. 
Assumption: Firewall should block the unencrypted ports to block the unauthorized use.

> Enable encryption for data across the DC only.
> ----------------------------------------------
>
>                 Key: CASSANDRA-2802
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Core
>    Affects Versions: 0.7.0
>         Environment: JVM
>            Reporter: Vijay
>            Assignee: Vijay
>            Priority: Minor
>             Fix For: 0.8.5
>
>         Attachments: 0001-2802-Commiting-New-Port-For-SSL.patch, 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch
>
>
> Make DC level Encryption option
> 1) Modify EncryptionOptions to add inter_dc option.
> 2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Issue Comment Edited] (CASSANDRA-2802) Enable encryption for data across the DC only.

Posted by "Vijay (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/CASSANDRA-2802?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13092026#comment-13092026 ] 

Vijay edited comment on CASSANDRA-2802 at 8/26/11 8:48 PM:
-----------------------------------------------------------

Fixed the typo's... Moved the isEncrypted check to OTCP because we have the ID there.... all the time...

      was (Author: vijay2win@yahoo.com):
    Fixed the typo's... Moved the isEncripted check to OTCP because we have the ID there.... all the time...
  
> Enable encryption for data across the DC only.
> ----------------------------------------------
>
>                 Key: CASSANDRA-2802
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Core
>    Affects Versions: 0.8.0
>         Environment: JVM
>            Reporter: Vijay
>            Assignee: Vijay
>            Priority: Minor
>             Fix For: 0.8.5
>
>         Attachments: 0001-2802-Commiting-New-Port-For-SSL.patch, 0001-2802-Commiting-New-Port-For-SSL.patch, 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch, 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch
>
>
> Make DC level Encryption option
> 1) Modify EncryptionOptions to add inter_dc option.
> 2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CASSANDRA-2802) Enable encryption for data across the DC only.

Posted by "Brandon Williams (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CASSANDRA-2802?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brandon Williams updated CASSANDRA-2802:
----------------------------------------

    Affects Version/s:     (was: 0.8.0)
        Fix Version/s:     (was: 0.8.8)
                       1.0.1
    
> Enable encryption for data across the DC only.
> ----------------------------------------------
>
>                 Key: CASSANDRA-2802
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Core
>         Environment: JVM
>            Reporter: Vijay
>            Assignee: Vijay
>            Priority: Minor
>             Fix For: 1.0.1
>
>         Attachments: 0001-2802-Commiting-New-Port-For-SSL.patch, 0001-Changes-to-Snitch-to-avoid-NPE-v2.patch, 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch, 0002-Commiting-New-Port-For-SSL-v2.patch, 0003-yaml-changes-for-ssl-port-v2.patch
>
>
> Make DC level Encryption option
> 1) Modify EncryptionOptions to add inter_dc option.
> 2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CASSANDRA-2802) Enable encryption for data across the DC only.

Posted by "Jonathan Ellis (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CASSANDRA-2802?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jonathan Ellis updated CASSANDRA-2802:
--------------------------------------

             Reviewer: brandon.williams
    Affects Version/s:     (was: 0.8.5)
                       0.8.0

> Enable encryption for data across the DC only.
> ----------------------------------------------
>
>                 Key: CASSANDRA-2802
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Core
>    Affects Versions: 0.8.0
>         Environment: JVM
>            Reporter: Vijay
>            Assignee: Vijay
>            Priority: Minor
>             Fix For: 0.8.5
>
>         Attachments: 0001-2802-Commiting-New-Port-For-SSL.patch, 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch
>
>
> Make DC level Encryption option
> 1) Modify EncryptionOptions to add inter_dc option.
> 2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CASSANDRA-2802) Enable encryption for data across the DC only.

Posted by "Vijay (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CASSANDRA-2802?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vijay updated CASSANDRA-2802:
-----------------------------

    Attachment:     (was: 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch)

> Enable encryption for data across the DC only.
> ----------------------------------------------
>
>                 Key: CASSANDRA-2802
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Core
>    Affects Versions: 0.8.0
>         Environment: JVM
>            Reporter: Vijay
>            Assignee: Vijay
>            Priority: Minor
>             Fix For: 0.8.5
>
>
> Make DC level Encryption option
> 1) Modify EncryptionOptions to add inter_dc option.
> 2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CASSANDRA-2802) Enable encryption for data across the DC only.

Posted by "Brandon Williams (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CASSANDRA-2802?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Brandon Williams updated CASSANDRA-2802:
----------------------------------------

    Fix Version/s:     (was: 1.0.2)
                   1.0.1
    
> Enable encryption for data across the DC only.
> ----------------------------------------------
>
>                 Key: CASSANDRA-2802
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Core
>         Environment: JVM
>            Reporter: Vijay
>            Assignee: Vijay
>            Priority: Minor
>             Fix For: 1.0.1
>
>         Attachments: 0001-2802-Commiting-New-Port-For-SSL.patch, 0001-Changes-to-Snitch-to-avoid-NPE-v2.patch, 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch, 0002-Commiting-New-Port-For-SSL-v2.patch, 0003-yaml-changes-for-ssl-port-v2.patch
>
>
> Make DC level Encryption option
> 1) Modify EncryptionOptions to add inter_dc option.
> 2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (CASSANDRA-2802) Enable encryption for data across the DC only.

Posted by "Brandon Williams (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/CASSANDRA-2802?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13089747#comment-13089747 ] 

Brandon Williams commented on CASSANDRA-2802:
---------------------------------------------

Encryption is typo'd as 'encription' in many places in the first patch.  In the second, I'd like to see the unknown rack/dc strings made class constants instead.

> Enable encryption for data across the DC only.
> ----------------------------------------------
>
>                 Key: CASSANDRA-2802
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Core
>    Affects Versions: 0.8.0
>         Environment: JVM
>            Reporter: Vijay
>            Assignee: Vijay
>            Priority: Minor
>             Fix For: 0.8.5
>
>         Attachments: 0001-2802-Commiting-New-Port-For-SSL.patch, 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch
>
>
> Make DC level Encryption option
> 1) Modify EncryptionOptions to add inter_dc option.
> 2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CASSANDRA-2802) Enable encryption for data across the DC only.

Posted by "Vijay (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CASSANDRA-2802?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vijay updated CASSANDRA-2802:
-----------------------------

    Attachment: 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch
                0001-2802-Commiting-New-Port-For-SSL.patch

> Enable encryption for data across the DC only.
> ----------------------------------------------
>
>                 Key: CASSANDRA-2802
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Core
>    Affects Versions: 0.8.0
>         Environment: JVM
>            Reporter: Vijay
>            Assignee: Vijay
>            Priority: Minor
>             Fix For: 0.8.5
>
>         Attachments: 0001-2802-Commiting-New-Port-For-SSL.patch, 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch
>
>
> Make DC level Encryption option
> 1) Modify EncryptionOptions to add inter_dc option.
> 2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Commented] (CASSANDRA-2802) Enable encryption for data across the DC only.

Posted by "Jonathan Ellis (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/CASSANDRA-2802?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13098989#comment-13098989 ] 

Jonathan Ellis commented on CASSANDRA-2802:
-------------------------------------------

We should probably be looking at this for 1.0, not 0.8

> Enable encryption for data across the DC only.
> ----------------------------------------------
>
>                 Key: CASSANDRA-2802
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Core
>    Affects Versions: 0.8.0
>         Environment: JVM
>            Reporter: Vijay
>            Assignee: Vijay
>            Priority: Minor
>             Fix For: 0.8.6
>
>         Attachments: 0001-2802-Commiting-New-Port-For-SSL.patch, 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch
>
>
> Make DC level Encryption option
> 1) Modify EncryptionOptions to add inter_dc option.
> 2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CASSANDRA-2802) Enable encryption for data across the DC only.

Posted by "Vijay (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CASSANDRA-2802?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vijay updated CASSANDRA-2802:
-----------------------------

    Attachment: 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch
                0001-2802-Commiting-New-Port-For-SSL.patch

Fixed the typo's... Moved the isEncripted check to OTCP because we have the ID there.... all the time...

> Enable encryption for data across the DC only.
> ----------------------------------------------
>
>                 Key: CASSANDRA-2802
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Core
>    Affects Versions: 0.8.0
>         Environment: JVM
>            Reporter: Vijay
>            Assignee: Vijay
>            Priority: Minor
>             Fix For: 0.8.5
>
>         Attachments: 0001-2802-Commiting-New-Port-For-SSL.patch, 0001-2802-Commiting-New-Port-For-SSL.patch, 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch, 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch
>
>
> Make DC level Encryption option
> 1) Modify EncryptionOptions to add inter_dc option.
> 2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CASSANDRA-2802) Enable encryption for data across the DC only.

Posted by "Vijay (Updated) (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CASSANDRA-2802?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Vijay updated CASSANDRA-2802:
-----------------------------

    Attachment: 0001-Changes-to-Snitch-to-avoid-NPE-v2.patch
                0002-Commiting-New-Port-For-SSL-v2.patch
                0003-yaml-changes-for-ssl-port-v2.patch

Another take on the ticket. OTCP will give the required abstraction for the Internal IP/Public IP and Encrypt/UnEncrypted this also provides abstraction for streaming to happen via the private/public-ip for aws users. Thank You!
                
> Enable encryption for data across the DC only.
> ----------------------------------------------
>
>                 Key: CASSANDRA-2802
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Core
>    Affects Versions: 0.8.0
>         Environment: JVM
>            Reporter: Vijay
>            Assignee: Vijay
>            Priority: Minor
>             Fix For: 0.8.8
>
>         Attachments: 0001-2802-Commiting-New-Port-For-SSL.patch, 0001-Changes-to-Snitch-to-avoid-NPE-v2.patch, 0002-2802-Changes-to-Snitch-to-avoid-NPE.patch, 0002-Commiting-New-Port-For-SSL-v2.patch, 0003-yaml-changes-for-ssl-port-v2.patch
>
>
> Make DC level Encryption option
> 1) Modify EncryptionOptions to add inter_dc option.
> 2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

[jira] [Updated] (CASSANDRA-2802) Enable encryption for data across the DC only.

Posted by "Jonathan Ellis (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/CASSANDRA-2802?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jonathan Ellis updated CASSANDRA-2802:
--------------------------------------

          Component/s:     (was: Contrib)
                       Core
             Priority: Minor  (was: Trivial)
    Affects Version/s:     (was: 0.7.7)
                       0.7.0
        Fix Version/s:     (was: 0.8.1)
                       0.8.2

> Enable encryption for data across the DC only.
> ----------------------------------------------
>
>                 Key: CASSANDRA-2802
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-2802
>             Project: Cassandra
>          Issue Type: New Feature
>          Components: Core
>    Affects Versions: 0.7.0
>         Environment: JVM
>            Reporter: Vijay
>            Assignee: Vijay
>            Priority: Minor
>             Fix For: 0.8.2
>
>
> Make DC level Encryption option
> 1) Modify EncryptionOptions to add inter_dc option.
> 2) Modify OutboundTCPConnection.connect() to check if it is in the same DC and if the encryption option is enabled.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira