Skip to content

rgw: support obj encryption stack on compression#36539

Closed
Zhiwei-Dai wants to merge 1 commit intoceph:masterfrom
Zhiwei-Dai:wip-rgw-crypto-stack-on-compress
Closed

rgw: support obj encryption stack on compression#36539
Zhiwei-Dai wants to merge 1 commit intoceph:masterfrom
Zhiwei-Dai:wip-rgw-crypto-stack-on-compress

Conversation

@Zhiwei-Dai
Copy link
Contributor

@Zhiwei-Dai Zhiwei-Dai commented Aug 10, 2020

add implementation for obj encryption stack on compression. Compressing first and then encrypting.

Fixes: https://tracker.ceph.com/issues/19988

Signed-off-by: Dai Zhiwei daizhiwei3@huawei.com
Signed-off-by: luo rixin luorixin@huawei.com

add implementation for obj encryption stack on compression. Compressing first and then encrypting.

Fixes: https://tracker.ceph.com/issues/19988
Signed-off-by: Zhiwei-Dai <daizhiwei3@huawei.com>
Signed-off-by: luo rixin <luorixin@huawei.com>
@Zhiwei-Dai
Copy link
Contributor Author

Security and trustworthiness framework of ceph is important for data storage. Now, cephx and https base on openssl enhance the security of transport layer, and rgw encrytion implementation supports data protection for object store.
Nevertheless, as issues said, #36539, space usage and data security are exclusive.
New compression and encryption filters do not stack, but logically could do so. Users must choose between at rest data reduction and data security.
The pr solves this problem. Why compressing first and then encrypting, discussion about data encryption and compression has answer
https://crypto.stackexchange.com/questions/33737/is-it-better-to-encrypt-before-compression-or-vice-versa

@stale
Copy link

stale bot commented Oct 12, 2020

This pull request has been automatically marked as stale because it has not had any activity for 60 days. It will be closed if no further activity occurs for another 30 days.
If you are a maintainer or core committer, please follow-up on this pull request to identify what steps should be taken by the author to move this proposed change forward.
If you are the author of this pull request, thank you for your proposed contribution. If you believe this change is still appropriate, please ensure that any feedback has been addressed and ask for a code review.

@stale stale bot added the stale label Oct 12, 2020
@tchaikov tchaikov removed the stale label Oct 12, 2020
@stale
Copy link

stale bot commented Dec 13, 2020

This pull request has been automatically marked as stale because it has not had any activity for 60 days. It will be closed if no further activity occurs for another 30 days.
If you are a maintainer or core committer, please follow-up on this pull request to identify what steps should be taken by the author to move this proposed change forward.
If you are the author of this pull request, thank you for your proposed contribution. If you believe this change is still appropriate, please ensure that any feedback has been addressed and ask for a code review.

@stale stale bot added the stale label Dec 13, 2020
@github-actions
Copy link

This pull request can no longer be automatically merged: a rebase is needed and changes have to be manually resolved

@mattbenjamin mattbenjamin self-requested a review December 16, 2020 17:38
@stale stale bot removed the stale label Dec 16, 2020
@mattbenjamin mattbenjamin requested a review from cbodley December 16, 2020 17:38
@mattbenjamin
Copy link
Contributor

@Zhiwei-Dai sorry, can you rebase please?

@stale
Copy link

stale bot commented Jul 21, 2021

This pull request has been automatically marked as stale because it has not had any activity for 60 days. It will be closed if no further activity occurs for another 30 days.
If you are a maintainer or core committer, please follow-up on this pull request to identify what steps should be taken by the author to move this proposed change forward.
If you are the author of this pull request, thank you for your proposed contribution. If you believe this change is still appropriate, please ensure that any feedback has been addressed and ask for a code review.

@Zhiwei-Dai
Copy link
Contributor Author

close since #46188 could replace it.

@Zhiwei-Dai Zhiwei-Dai closed this May 7, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants