Re: Safely enabling internode TLS encryption on live cassandra cluster

2020-07-06 Thread vishal kharjul
Agree. We were planning same change and tested multiple scenarios with conclusion that it needs downtime to be on safer side. With right automation in place implementation can be made faster but not without downtime at least in our case. On Mon, Jul 6, 2020, 1:26 PM Durity, Sean R wrote: > I pl

RE: Safely enabling internode TLS encryption on live cassandra cluster

2020-07-06 Thread Durity, Sean R
I plan downtime for changes to security settings like this. I could not come up with a way to not have degraded access or inconsistent data or something else bad. The foundational issue is that unencrypted nodes cannot communicate with encrypted ones. I depend on Cassandra’s high availability f

Re: Safely enabling internode TLS encryption on live cassandra cluster

2020-07-06 Thread Egan Neuhengen
Thank you for the expedient answer. That is what we suspected and it's helpful to get that confirmation. On Mon, Jul 6, 2020 at 10:12 AM Jeff Jirsa wrote: > The optional setting in 4.0 is designed to fix this. Without optional, you > basically have to take an outage - the only control you have i

Re: Safely enabling internode TLS encryption on live cassandra cluster

2020-07-06 Thread Jeff Jirsa
The optional setting in 4.0 is designed to fix this. Without optional, you basically have to take an outage - the only control you have is the nature of that outage. On Mon, Jul 6, 2020 at 9:50 AM Egan Neuhengen wrote: > Hello, > > We are trying to come up with a safe way to turn on internode