Re: Safely enabling internode TLS encryption on live cassandra cluster

2020-07-06 Thread vishal kharjul
> *Sent:* Monday, July 6, 2020 12:50 PM > *To:* user@cassandra.apache.org > *Subject:* [EXTERNAL] Safely enabling internode TLS encryption on live > cassandra cluster > > > > Hello, > > > > We are trying to come up with a safe way to turn on internode (NOT > clien

Re: Safely enabling internode TLS encryption on live cassandra cluster

2020-07-06 Thread Egan Neuhengen
Thank you for the expedient answer. That is what we suspected and it's helpful to get that confirmation. On Mon, Jul 6, 2020 at 10:12 AM Jeff Jirsa wrote: > The optional setting in 4.0 is designed to fix this. Without optional, you > basically have to take an outage - the only control you have

Re: Safely enabling internode TLS encryption on live cassandra cluster

2020-07-06 Thread Jeff Jirsa
The optional setting in 4.0 is designed to fix this. Without optional, you basically have to take an outage - the only control you have is the nature of that outage. On Mon, Jul 6, 2020 at 9:50 AM Egan Neuhengen wrote: > Hello, > > We are trying to come up with a safe way to turn on internode

Safely enabling internode TLS encryption on live cassandra cluster

2020-07-06 Thread Egan Neuhengen
Hello, We are trying to come up with a safe way to turn on internode (NOT client-server) TLS encryption on a cassandra cluster with two datacenters, anywhere from 3 to 20 nodes in each DC, 3+ racks in each DC. Cassandra version is 3.11.6, OS is CentOS 7. We have full control over cassandra