Clustered at-rest encryption

MySQL & MariaDB Percona XtraDB Cluster 5.x
1

Hello,

From this blog post ([url]https://www.percona.com/blog/2016/04/08/mysql-data-at-rest-encryption/[/url]), I see that a few changes are needed to the my.cnf file, and then you just run “alter table table_name encryption=‘Y’”.

Is that replicated across all cluster nodes?

Thanks

2

Hi,

The "alter table table_name encryption=‘Y’ " will replicate. However, for this to work the keyring-file-data must be configured on each node.

[url]https://dev.mysql.com/doc/refman/5.7/en/innodb-tablespace-encryption.html[/url]

On nodes where the keyring is not configured, the tables will not be encrypted.