...

• Background re-encryption may affect performance. Performance impact can be managed using the following configuration options:
  1. reencryptionThreadCnt - number of threads used for re-encryption.
     
  2. reencryptionBatchSize - number of pages that are scanned during re-encryption under checkpoint lock.
     
  3. reencryptionRateLimit - page scanning speed limit in megabytes per second.
     
• The WAL history can be not enough to store all entries between checkpoints (this should be carefully tuned by properly setting the size of the WAL history and tuning the re-encryption performance).
• The WAL history (for delta rebalancing) may be lost for all cache groups due to background re-encryption.

Process management

• Launch cache key rotation
• View key identifiers for the cache group
• View re-encryption status for the cache group
• Start re-encryption
• Stop re-encryption
• View/change reencryption rate limit

// TBD

Public API changes

IgniteEncryption

...