You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@druid.apache.org by GitBox <gi...@apache.org> on 2021/03/08 22:28:10 UTC
[GitHub] [druid] averma111 opened a new issue #10959: Encryption and Decryption of data segments in Druid
averma111 opened a new issue #10959:
URL: https://github.com/apache/druid/issues/10959
Hi Team,
I am looking for options as to have to encrypt and decrypt data segments in Druid.
I work for the bank and they are looking forward for this encryption and decryption model.
Any help will be appreciated.
Thanks,
Ashish
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
[GitHub] [druid] zhangyue19921010 commented on issue #10959: Encryption and Decryption of data segments in Druid
Posted by GitBox <gi...@apache.org>.
zhangyue19921010 commented on issue #10959:
URL: https://github.com/apache/druid/issues/10959#issuecomment-793418743
As far as I know, Druid maybe could not ingest and encrypt data after ingest and decrypt data during query. But I think you can use `druid-basic-security` extension to control access and protect your local data(https://druid.apache.org/docs/0.17.0/development/extensions-core/druid-basic-security.html).
As for data in DeepStorage you can enable `druid.storage.sse.type` for S3(https://druid.apache.org/docs/0.17.0/development/extensions-core/s3.html#server-side-encryption)
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
[GitHub] [druid] zhangyue19921010 commented on issue #10959: Encryption and Decryption of data segments in Druid
Posted by GitBox <gi...@apache.org>.
zhangyue19921010 commented on issue #10959:
URL: https://github.com/apache/druid/issues/10959#issuecomment-793299474
What kind of encrypt would you like to use? Batch ingest or Stream Ingest(Kafka/kinesis)?
Is that means Druid ingest encrypt data and decrypt it during ingestion?
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
[GitHub] [druid] egor-ryashin commented on issue #10959: Encryption and Decryption of data segments in Druid
Posted by GitBox <gi...@apache.org>.
egor-ryashin commented on issue #10959:
URL: https://github.com/apache/druid/issues/10959#issuecomment-804644672
Google cloud storage encrypts all data at rest, when you send/recieve data to GCS it's SSL encrypted. To encrypt data during querying you can setup TLS https://druid.apache.org/docs/latest/operations/tls-support.html
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
[GitHub] [druid] averma111 commented on issue #10959: Encryption and Decryption of data segments in Druid
Posted by GitBox <gi...@apache.org>.
averma111 commented on issue #10959:
URL: https://github.com/apache/druid/issues/10959#issuecomment-793403542
Also its for both batch and streaming jobs.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
[GitHub] [druid] soumyajose0784 commented on issue #10959: Encryption and Decryption of data segments in Druid
Posted by GitBox <gi...@apache.org>.
soumyajose0784 commented on issue #10959:
URL: https://github.com/apache/druid/issues/10959#issuecomment-793862911
Does it support server side encryption for GCP bucket as well. Could you share any reference?
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org
[GitHub] [druid] averma111 commented on issue #10959: Encryption and Decryption of data segments in Druid
Posted by GitBox <gi...@apache.org>.
averma111 commented on issue #10959:
URL: https://github.com/apache/druid/issues/10959#issuecomment-793402073
Encryption of data when they are ingested in segments and decryption should happen while querying the data either from presto and superset or any other reporting tool connecting to Druid.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@druid.apache.org
For additional commands, e-mail: commits-help@druid.apache.org