File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change 1414// limitations under the License.
1515= Transparent Data Encryption
1616
17- WARNING: This feature is in beta and not recommended for use in production environments.
18-
1917== Overview
2018Transparent data encryption (TDE) allows users to encrypt their data at rest.
2119
@@ -43,7 +41,7 @@ Transparent Data Encryption has some limitations that you should be aware of bef
4341
4442*Snapshots and Recovery*
4543
46- * No support for snapshots. Snapshots are not encrypted and it's not possible to recover from a snapshot that includes an encrypted table or cache .
44+ * Encryption, changing of master key or cache group key are not allowed during snapshot operations .
4745
4846== Configuration
4947To enable encryption in the cluster, provide a master key in the configuration of each server node. A configuration example is shown below.
Original file line number Diff line number Diff line change @@ -253,8 +253,9 @@ The snapshot procedure has some limitations that you should be aware of before u
253253
254254* Snapshotting of specific caches/tables is unsupported. You always create a full cluster snapshot.
255255* Caches/tables that are not persisted in Ignite Persistence are not included into the snapshot.
256- * Encrypted caches are not included in the snapshot .
256+ * Encrypted caches in the snapshot must be encrypted with the same master key .
257257* You can have only one snapshotting operation running at a time.
258+ * The snapshot operation is prohibited during a master key change and/or cache group key change.
258259* The snapshot procedure is interrupted if a server node leaves the cluster.
259260
260261If any of these limitations prevent you from using Apache Ignite, then select alternate snapshotting implementations for
You can’t perform that action at this time.
0 commit comments