- Subscribe to RSS Feed
- Mark Question as New
- Mark Question as Read
- Float this Question for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
HDFS Rest Encryption vs Linux based Encryption
- Labels:
-
Apache Hadoop
Created ‎09-08-2016 07:11 AM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Dear Team,
If i used linux based encryption on hadoop cluster then is it encrypt hdfs data.
Created ‎09-08-2016 04:25 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can use Linux based encryption on your disks which would give you encryption of HDFS data stored on those encrypted filesystems. While the performance is good, it is not as flexible. You should read this: https://hadoop.apache.org/docs/r2.7.0/hadoop-project-dist/hadoop-hdfs/TransparentEncryption.html
When you use Hadoop Transparent Data Encryption, you have the ability to selectively encrypt data. You can use different keys for different encryption zones which gives you finer grained access controls.
I also recommend you take a look at this: https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.4.0/bk_hdfs_admin_tools/content/hdfs-encryption...
Created ‎09-08-2016 04:25 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
You can use Linux based encryption on your disks which would give you encryption of HDFS data stored on those encrypted filesystems. While the performance is good, it is not as flexible. You should read this: https://hadoop.apache.org/docs/r2.7.0/hadoop-project-dist/hadoop-hdfs/TransparentEncryption.html
When you use Hadoop Transparent Data Encryption, you have the ability to selectively encrypt data. You can use different keys for different encryption zones which gives you finer grained access controls.
I also recommend you take a look at this: https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.4.0/bk_hdfs_admin_tools/content/hdfs-encryption...
