Versions Compared

Old Version 1

changes.mady.by.user Nikolay Izhikov

Saved on

compared with

New Version 2

changes.mady.by.user Pavel Pereslegin

Saved on

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Current state of cache key rotation: node -> group name -> status -> encryption key hash.

Cache group keys 

roration

rotation: 

Process start: 

Administrator initiates process via some kind of user interface(CLI, Visor, WebConsole, JMX, etc). 

Process description: 

  1. New key generated using configured EncryptionSPI. 

  2. Message with new key(encrypted with master key) is sent by discovery. 

  3. On message receive following actions are executed: 

  4. Process state: IN PROGRESS. 

  5. New key saved in metastore(WAL record about this event is written to the disk). 

  6. Further WAL records are encrypted with the new key. 

  7. Further page are encrypted with the new key. 

  8. Pages reencryption process is initiated. 

...