If you are looking to do encryprion in the serializer, you could use this as a refernce - https://github.com/rogers/change-data-capture/tree/master/kafka
FS encryprion is easier, but if you cannot do that, this is a good alternative. It also offloads the encryption work off the broker. On May 26, 2016 4:48 AM, "Jens Rantil" <jens.ran...@tink.se> wrote: > > How can we do file system encryption? > > Google "LUKS" and you should be able to find some reasources on disk-level > encryption. > > Cheers, > Jens > > On Wed, May 25, 2016 at 11:59 AM Tom Crayford <tcrayf...@heroku.com> > wrote: > > > If you're using EBS then it's a single flag to use encrypted drives at > the > > provision time of the volume. I don't know about the other storage > options, > > I'd recommend looking at the AWS documentation. > > > > Thanks > > > > Tom Crayford > > Heroku Kafka > > > > On Wednesday, 25 May 2016, Snehalata Nagaje < > > snehalata.nag...@harbingergroup.com> wrote: > > > > > > > > > > > Thanks, > > > > > > How can we do file system encryption? > > > > > > we are using aws environment. > > > > > > Thanks, > > > Snehalata > > > > > > ----- Original Message ----- > > > From: "Gerard Klijs" <gerard.kl...@dizzit.com <javascript:;>> > > > To: "Users" <users@kafka.apache.org <javascript:;>> > > > Sent: Tuesday, May 24, 2016 7:26:27 PM > > > Subject: Re: Kafka encryption > > > > > > For both old and new consumers/producers you can make your own > > > (de)serializer to do some encryption, maybe that could be an option? > > > > > > On Tue, May 24, 2016 at 2:40 PM Tom Crayford <tcrayf...@heroku.com > > > <javascript:;>> wrote: > > > > > > > Hi, > > > > > > > > There's no encryption at rest. It's recommended to use filesystem > > > > encryption, or encryption of each individual message before producing > > it > > > > for this. > > > > > > > > Only the new producer and consumers have SSL support. > > > > > > > > Thanks > > > > > > > > Tom Crayford > > > > Heroku Kafka > > > > > > > > On Tue, May 24, 2016 at 11:33 AM, Snehalata Nagaje < > > > > snehalata.nag...@harbingergroup.com <javascript:;>> wrote: > > > > > > > > > > > > > > > > > > > Thanks for quick reply. > > > > > > > > > > Do you mean If I see messages in kafka, those will not be readable? > > > > > > > > > > And also, we are using new producer but old consumer , does old > > > consumer > > > > > have ssl support? > > > > > > > > > > As mentioned in document, its not there. > > > > > > > > > > > > > > > Thanks, > > > > > Snehalata > > > > > > > > > > ----- Original Message ----- > > > > > From: "Mudit Kumar" <mudit.ku...@askme.in <javascript:;>> > > > > > To: users@kafka.apache.org <javascript:;> > > > > > Sent: Tuesday, May 24, 2016 3:53:26 PM > > > > > Subject: Re: Kafka encryption > > > > > > > > > > Yes,it does that.What specifically you are looking for? > > > > > > > > > > > > > > > > > > > > > > > > > On 5/24/16, 3:52 PM, "Snehalata Nagaje" < > > > > > snehalata.nag...@harbingergroup.com <javascript:;>> wrote: > > > > > > > > > > >Hi All, > > > > > > > > > > > > > > > > > >We have requirement of encryption in kafka. > > > > > > > > > > > >As per docs, we can configure kafka with ssl, for secured > > > communication. > > > > > > > > > > > >But does kafka also stores data in encrypted format? > > > > > > > > > > > > > > > > > >Thanks, > > > > > >Snehalata > > > > > > > > > > > > > > > -- > > Jens Rantil > Backend Developer @ Tink > > Tink AB, Wallingatan 5, 111 60 Stockholm, Sweden > For urgent matters you can reach me at +46-708-84 18 32. >
