Re: About encrypting data in CloudStack VM.

2012-10-22 Thread Nguyen Anh Tu
@Chiradeep Vittal: Thanks for your information. Many things to learn. I'm going to deploy my own Key Management Server, some steps to securely exchange key will be done with asymmetric encryption. @all: Beside, which features do you think that need to be implemented in a data encryption solution?

Re: About encrypting data in CloudStack VM.

2012-10-21 Thread Chiradeep Vittal
It is an interesting problem no doubt. It is essentially the same as "how do I keep credentials secret in the cloud". Most people use the 'user data' feature, but that is by no means bulletproof. For a comprehensive overview of the possible solutions check this: http://shlomoswidler.com/2009/08/how

Re: About encrypting data in CloudStack VM.

2012-10-20 Thread Nguyen Anh Tu
SecureCloud is the commercial product, so I'm not willing to use it. I'd like to deploy my own solution, based on open-source. I'm considering about the flow when users interact with. Some questions: how to secure user private key? how to prevent Cloud Admin to see user data?... @Wido: LUKS is a

Re: About encrypting data in CloudStack VM.

2012-10-19 Thread Kishore Yerrapragada
Trendmicro's secure cloud (commercial product) has done the integration with Cloudstack to provide disk encryption. You will have an idea if you look at that. Cheers Kish. Kishore Yerrapragada Citrix Systems Inc. Ph: 650 479 5325 On 10/19/12 5:49 AM, "Nguyen Anh Tu" wrote: >Hi guys, >

Re: About encrypting data in CloudStack VM.

2012-10-19 Thread Wido den Hollander
Hi, For now you could use LUKS inside the Linux virtual machines. In the longer term we could for example include QCOW2 encryption for KVM, but that is not on the roadmap. I don't know what VMware or Xen support with this, but I except they do some encryption. For now I'd however advise to

About encrypting data in CloudStack VM.

2012-10-19 Thread Nguyen Anh Tu
Hi guys, I'm thinking about the solution to encrypt VM data (user's data in volumes). Who has the idea? I knew that S3 API will be integrated to CS 4.0, but that's only an option. I'd like to deploy a private solution for my cloud. Thanks for any help. -- N.g.U.y.e.N.A.n.H.t.U