Re: Resurrection of CASSANDRA-9633 - SSTable encryption

2021-11-18 Thread Joseph Lynch
> > I've seen this be a significant obstacle for people who want to adopt > Apache Cassandra many times and an insurmountable obstacle on multiple > occasions. From what I've seen, I think this is one of the most watched > tickets with the most "is this coming soon" comments in the project backlog

Re: Resurrection of CASSANDRA-9633 - SSTable encryption

2021-11-18 Thread Joseph Lynch
On Thu, Nov 18, 2021 at 7:23 PM Kokoori, Shylaja wrote: > To address Joey's concern, the OpenJDK JVM and its derivatives optimize > Java crypto based on the underlying HW capabilities. For example, if the > underlying HW supports AES-NI, JVM intrinsics will use those for crypto > operations.

RE: Resurrection of CASSANDRA-9633 - SSTable encryption

2021-11-18 Thread Kokoori, Shylaja
To address Joey's concern, the OpenJDK JVM and its derivatives optimize Java crypto based on the underlying HW capabilities. For example, if the underlying HW supports AES-NI, JVM intrinsics will use those for crypto operations. Likewise, the new vector AES available on the latest Intel

Re: [VOTE] CEP-17: SSTable format API

2021-11-18 Thread Dinesh Joshi
+1 > On Nov 17, 2021, at 1:22 AM, Benjamin Lerer wrote: > > +1 > > Le mar. 16 nov. 2021 à 18:05, Joshua McKenzie a > écrit : > >> +1 >> >> On Tue, Nov 16, 2021 at 10:14 AM Andrés de la Peña >> wrote: >> >>> +1 >>> >>> On Tue, 16 Nov 2021 at 08:39, Sam Tunnicliffe wrote: >>> +1

Re: Implementing a secondary index

2021-11-18 Thread Caleb Rackliffe
Hi Claude, In code space, the best place to start would be the secondary index API and the manager that maintains the indexes on a per-table basis: https://github.com/apache/cassandra/blob/trunk/src/java/org/apache/cassandra/index/Index.java

Re: [DISCUSS] Mentoring newcomers

2021-11-18 Thread Caleb Rackliffe
You have my bow. On Fri, Nov 12, 2021 at 11:05 AM Benjamin Lerer wrote: > Hi everybody > > As discussed in the *Creating a new slack channel for newcomers* thead, a > solution to help newcomers engage with the project would be to provide a > list of mentors that newcomers can contact when they

Re: Resurrection of CASSANDRA-9633 - SSTable encryption

2021-11-18 Thread bened...@apache.org
I agree with Joey that most users may be better served by OS level encryption, but I also think this ticket can likely be delivered fairly easily. If we have a new contributor willing to produce a patch then the overhead for the project in shepherding it shouldn’t be that onerous. If we also

Re: Resurrection of CASSANDRA-9633 - SSTable encryption

2021-11-18 Thread Ben Slater
I wanted to provide a bit of background in the interest we've seen in this ticket/feature (at Instaclustr) - essentially it comes down to in-db encryption at rest being a feature that compliance people are used to seeing in databases and having a very hard time believing that operating system