Return-Path: X-Original-To: apmail-hbase-issues-archive@www.apache.org Delivered-To: apmail-hbase-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 942F810366 for ; Wed, 26 Feb 2014 18:59:29 +0000 (UTC) Received: (qmail 62055 invoked by uid 500); 26 Feb 2014 18:59:24 -0000 Delivered-To: apmail-hbase-issues-archive@hbase.apache.org Received: (qmail 62023 invoked by uid 500); 26 Feb 2014 18:59:24 -0000 Mailing-List: contact issues-help@hbase.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list issues@hbase.apache.org Received: (qmail 61984 invoked by uid 99); 26 Feb 2014 18:59:23 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 26 Feb 2014 18:59:23 +0000 Date: Wed, 26 Feb 2014 18:59:23 +0000 (UTC) From: "Andrew Purtell (JIRA)" To: issues@hbase.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (HBASE-10077) Per family WAL encryption MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/HBASE-10077?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13913322#comment-13913322 ] Andrew Purtell commented on HBASE-10077: ---------------------------------------- bq. So one Mutation write will involve write to 2 WALs. Maybe. If the edit spans families and the families are partitioned to different WALs. bq. Atomicity for 2 WAL writes (?) Most likely not. The thing about security is, as soon as you need it, you must accept something else that sucks :-), be it a performance drop, or this. > Per family WAL encryption > ------------------------- > > Key: HBASE-10077 > URL: https://issues.apache.org/jira/browse/HBASE-10077 > Project: HBase > Issue Type: Improvement > Affects Versions: 0.98.0 > Reporter: Andrew Purtell > Assignee: Andrew Purtell > > HBASE-7544 introduces WAL encryption to prevent the leakage of protected data to disk by way of WAL files. However it is currently enabled globally for the regionserver. Encryption of WAL entries should depend on whether or not an entry in the WAL is to be stored within an encrypted column family. -- This message was sent by Atlassian JIRA (v6.1.5#6160)