You need to log in to create posts and topics. Login · Register

PetaSAN volume encryption at rest

With the pending release of PetaSAN 3.2 is there any scope to add encryption at rest in regard PetaSAN native volumes? While we can encrypt VM's that does not encrypt the PetaSAN storage volumes themselves. We are facing more and more for the need to have encryption at rest where we hold client data meaning we can not use PetaSAN in production environments only Dev / Test.

Or will this feature never be possible due to the underlying technology used within PetaSAN?

It is not scheduled in 3.2

Note that PetaSAN is Ceph underneath, you should be able to create your own OSDs manually.

If there is enough demand, we can add it. You can also automated this in PetaSAN by modifying sources.

Encryption at rest is also a feature that we would like to see, as I'm sure would many of the European customers as most interpretations of GDPR call for encryption at rest of any customer data.

I wasn't aware that we could create the OSD's manually and that things would still behave with PetaSAN's management UI, that's certainly something we'll be having a play around with!

+1 to this feature. We are starting to have a lot of customers demanding this for compliance

It is in 3.3, should be out later this month.

That's great news, thank you for the update.