Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update 4.ssl.md #1041

Merged
merged 2 commits into from
Oct 15, 2021
Merged

Update 4.ssl.md #1041

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
c643902
Update 4.ssl.md
cooper-lzy Oct 12, 2021
2a08dbc
Update 4.ssl.md
foesa-yang Oct 13, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions docs-2.0/7.data-security/4.ssl.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,11 +34,11 @@ Nebula Graph支持在客户端、Graph服务、Meta服务和Storage服务之间

Nebula Graph支持三种加密策略。加密涉及的具体进程请参见[详细说明](https://github.com/vesoft-inc/nebula/blob/a67d166b284cae1b534bf8d19c936ee38bf12e29/docs/rfcs/0001-ssl-transportation.md#usage-explanation)。

- 对客户端、Graph服务、Meta服务和Storage服务之间的数据传输进行加密。
- 加密客户端、Graph服务、Meta服务和Storage服务之间的数据传输。

需要修改`nebula-graphd.conf`、`nebula-metad.conf`和`nebula-storaged.conf`配置文件，设置`enable_ssl = true`。

- 加密客户端与Graph服务之间的数据传输。
- 加密客户端和Graph服务之间的数据传输。

适用于集群设置在同一个机房内，仅对外开放Graph服务的端口。因为其他服务可以通过内部网络通信，无需加密。需要修改`nebula-graphd.conf`配置文件，设置`enable_graph_ssl = true`。

Expand All @@ -61,4 +61,4 @@ Nebula Graph支持三种加密策略。加密涉及的具体进程请参见[详
--enable_ssl=true
```

3. 客户端设置安全套接字并添加受信任的CA。示例代码请参见[nebula-test-run.py](https://github.com/vesoft-inc/nebula/blob/{{nebula.branch}}/tests/nebula-test-run.py)。
3. 客户端设置安全套接字并添加受信任的CA。示例代码请参见[nebula-test-run.py](https://github.com/vesoft-inc/nebula/blob/{{nebula.branch}}/tests/nebula-test-run.py)。