diff --git a/docs-2.0/7.data-security/4.ssl.md b/docs-2.0/7.data-security/4.ssl.md index 84409ff14da..7bcfc9a4cc1 100644 --- a/docs-2.0/7.data-security/4.ssl.md +++ b/docs-2.0/7.data-security/4.ssl.md @@ -30,9 +30,13 @@ To use SSL encryption, SSL certificates are required. NebulaGraph supports two c - Policies for the NebulaGraph community edition. - |-| External device access to Graph | Graph access Meta/Storage |External device access to Graph
Graph access Meta/Storage| - |:---|:---|:---|:---| - |TLS| Modify the Graph configuration file to add the following parameters:
`--enable_graph_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`|In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_meta_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`|In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`| + |Scenes | TLS | + |:---|:---| + |External device access to Graph| Modify the Graph configuration file to add the following parameters:
`--enable_graph_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`| + |Graph access Meta |In the Graph/Meta configuration file, add the following parameters:
`--enable_meta_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx` | + |Graph access Storage
Meta access Storage |In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_storage_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx` | + |Graph access Meta/Storage
Meta access Storage |In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_meta_ssl = true`
`--enable_storage_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx` | + |External device access to Graph
Graph access Meta/Storage
Meta access Storage |In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx` | The parameters are described below. @@ -45,14 +49,19 @@ To use SSL encryption, SSL certificates are required. NebulaGraph supports two c | `enable_ssl` | `false` | Whether to enable SSL encryption in all services. only. | | `enable_graph_ssl` | `false` | Whether to enable SSL encryption in the Graph service only. | | `enable_meta_ssl` | `false` | Whether to enable SSL encryption in the Meta service only. | + | `enable_storage_ssl` | `false` | Whether to enable SSL encryption in the Storage service only. | {{ent.ent_begin}} - Policies for the NebulaGraph enterprise edition. - |-| External device access to Graph | Graph access Meta/Storage |External device access to Graph
Graph access Meta/Storage| - |:---|:---|:---|:---| - |mTLS|Modify the Graph configuration file to add the following parameters:
`--enable_graph_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx`|In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_meta_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx`|In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx`| + |Scenes | mTLS | + |:---|:---| + |External device access to Graph| Modify the Graph configuration file to add the following parameters:
`--enable_graph_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx`| + |Graph access Meta |In the Graph/Meta configuration file, add the following parameters:
`--enable_meta_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx` | + |Graph access Storage
Meta access Storage |In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_storage_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx` | + |Graph access Meta/Storage
Meta access Storage |In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_meta_ssl = true`
`--enable_storage_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx` | + |External device access to Graph
Graph access Meta/Storage
Meta access Storage |In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx` | !!! note @@ -70,6 +79,7 @@ To use SSL encryption, SSL certificates are required. NebulaGraph supports two c | `enable_ssl` | `false` | Whether to enable SSL encryption in all services. only. | | `enable_graph_ssl` | `false` | Whether to enable SSL encryption in the Graph service only. | | `enable_meta_ssl` | `false` | Whether to enable SSL encryption in the Meta service only. | + | `enable_storage_ssl` | `false` | Whether to enable SSL encryption in the Storage service only. | {{ent.ent_end}}