Setting Up SSL/TLS on a Cluster

Elastic Stack Elasticsearch
1

Hi,

I am using Elastic Search 5.2.2, Kibana 5.2.2 and X-Pack 5.2.2. I am planning for Data Encryption.
I use both Http and TCP call from my Java Code.

Will there be performance over head after SSL/TLS implementation.

I would like to understand performance of cluster post implementation as I have millions of Document In my Index and Size of Indices is around 60 GB.

Thanks,
Amit Sinha.

2

That really depends on what kind of platform your running. Modern OS and hardware has optimizations for fast SSL/TLS support.

I suggest that you do benchmark using esrally in the target platform to verify.

3

Thank you. I also have same understanding with modern OS, Hardware and Software, performance overhead should be negligible.

4

Just FYI https://istlsfastyet.com/
I hope the question is just for data encryption in transit, there would be other performance aspect you need to consider when doing data encryption at rest.

Regards,
Yogesh

5

Hi,

Thank you for your input. I am not using Rest from my Java client code now, its Tcp call. My requirement is more of data encryption in transit. But yes some curiosity, if I go for Rest call in future, will there be much difference in performance. And what if I go for ECE cloud in future, where it supports Java REST Client only.

Thanks,
Amit Sinha.

6

I am sorry if I confused you with data encryption at rest as this is not related to RESTful web services. I was talking more on the storage of the data on File system https://en.wikipedia.org/wiki/Data_at_rest.

For REST client access, things should not be different in performance terms.

Regards,
Yogesh

7

Thank You Yogesh.

8

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.