Hi, I'm evaluating on the encryption feature provided by Pulsar. We need to encrypt data at wire-level and at rest, also we are having an existing Kafka application which we are planning to port to Pulsar using Kafka adaptor without any code change.
Now I understand that Encryption of data is possible pulsar in below ways: 1. End-to-End Encryption: From my understanding, this method covers both transport and at rest encryption of data and looks a viable option. But this needs adaptation to our producer and consumer to implement CryptoKeyReader, which is not possible for us as we are planning to port our Kafka producer and consumer as is. 2. Encryption using TLS: In this option, I see only the transport layer is encrypted but the data stored by Bookkeeper will be in plain text. Can someone let me know is there any possible way to encrypt data at both transport and at rest if our applications are using Kafka Adaptor? Regards, Subash Kunjupillai
