>
> ... where dc-1 have encryption enabled and dc-2 does't have encryption?

... is there a way to specify encrypt within DC?


The quick answer to your question is no. But you've got me really curious
now because you have a very strange setup which makes no sense to me and
I'm hoping you could elaborate. Effectively you're saying:
(a) you trust the network between DC1 and DC2 so you don't encrypt intra-DC
comms,
(b) but you don't trust the network in DC2 so comms between nodes in DC2
are encrypted.

That doesn't make sense to me. Is DC2 in some untrusted DMZ?

This statement also begs the question:

... where existing dc don't have encryption between the nodes but the new
> DC have encryption enabled


How do you plan to bootstrap the new nodes? And if they're already
bootstrapped, are you trying to join 2 separate clusters together? Because
if you are, that's a very bad idea. You'll end up corrupting the schema
assuming you know enough to override the cluster_name in system.local. I
would strongly advise against it if that's what you're trying to achieve.
Cheers!

Erick Ramirez  |  Developer Relations

erick.rami...@datastax.com | datastax.com <http://www.datastax.com>
<https://www.linkedin.com/company/datastax>
<https://www.facebook.com/datastax> <https://twitter.com/datastax>
<http://feeds.feedburner.com/datastax> <https://github.com/datastax/>

<https://www.datastax.com/accelerate>



On Thu, 13 Feb 2020 at 02:54, Jai Bheemsen Rao Dhanwada <
jaibheem...@gmail.com> wrote:

> Hello,
>
> Is there a way we can have a multi DC Cassandra cluster, where dc-1 have
> encryption enabled and dc-2 does't have encryption?
>
> I am trying to add a new DC to the existing cluster, where existing dc
> don't have encryption between the nodes but the new DC have encryption
> enabled?
>
> I see the below options, is there a way to specify encrypt within DC?
>
>    - all - Encrypt all inter-node communications
>    - none - No encryption
>    - dc - Encrypt the traffic between the datacenters
>    - rack - Encrypt the traffic between the racks
>
>

Reply via email to