本文介绍了如何为MongoDB Community Edition实施静态数据加密?的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！
问题描述
我已经阅读过 MongoDB文档，其中介绍了如何配置加密，仅在MongoDB Enterprise中可用.
I've gone through MongoDB docs that explain how to configure encryption which is available in MongoDB Enterprise only.
如何在 MongoDB Community Edition v3.4中实现静态数据?
How to implement data at rest in MongoDB Community Edition v3.4?
推荐答案
几个月前，我向自己问了同样的问题.这是我到目前为止找到的选项列表:
I was asking the same question to myself just few month ago. This is a list of options I have found so far:
- 在文件系统级别加密存储卷.这是Atlas提供的，大多数云提供商都支持: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html ， https://docs.microsoft.com/zh-cn/azure/security-center/security-center-disk-encryption 仅举几例.结合云密钥管理，这是恕我直言的最简单方法.对于大多数操作系统的本地存储，可以实现相同的目的.请在相关的StackExchange社区中询问该如何做，以提供有关底层操作系统的足够详细信息.
- Percona MongoDB服务器具有某些企业功能，包括审核和加密. IIRC使用操作系统提供的磁盘加密，因此与上一个基本相同.
- 在应用程序级别加密敏感数据.例如 https://www.openssl.org/docs/manmaster/man1/rsautl. html .它稍微灵活一些，但是您将放弃一些功能，例如全文本搜索和加密字段上的排序索引.
- 购买企业许可证.不能直接回答问题，但与以前的选择相比可能更具成本效益.
- encrypt storage volumes on the file system level. It is what Atlas offers, and most of cloud providers support: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html, https://docs.microsoft.com/en-us/azure/security-center/security-center-disk-encryption to name a few. Combined with cloud key management it is the simplest way IMHO. The same can be achieved for on-premises storages for most operation systems. Please ask how to do that in relevant StackExchange community providing enough details about underlying OS.
- Percona MongoDB server has some enterprise features, including audit and encryption. IIRC it uses disk encryption provided by OS, so it's basically the same as the previous one.
- encrypt sensitive data on application level. e.g. https://www.openssl.org/docs/manmaster/man1/rsautl.html. It is a bit more flexible, but you will loose some features like full text search and sorting index on encrypted fields.
- buy enterprise license. Does not answer the question directly, yet may be more cost-efficient comparing to the previous options.
这篇关于如何为MongoDB Community Edition实施静态数据加密?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持！