From ce037918864b2187d27857497cbad9c6b6bd403d Mon Sep 17 00:00:00 2001 From: cooper-lzy <78672629+cooper-lzy@users.noreply.github.com> Date: Wed, 20 Sep 2023 14:39:54 +0800 Subject: [PATCH] Update 4.ssl.md added enable_storage_ssl --- docs-2.0/7.data-security/4.ssl.md | 22 ++++++++++++++++------ 1 file changed, 16 insertions(+), 6 deletions(-) diff --git a/docs-2.0/7.data-security/4.ssl.md b/docs-2.0/7.data-security/4.ssl.md index 84409ff14da..7bcfc9a4cc1 100644 --- a/docs-2.0/7.data-security/4.ssl.md +++ b/docs-2.0/7.data-security/4.ssl.md @@ -30,9 +30,13 @@ To use SSL encryption, SSL certificates are required. NebulaGraph supports two c - Policies for the NebulaGraph community edition. - |-| External device access to Graph | Graph access Meta/Storage |External device access to Graph
Graph access Meta/Storage| - |:---|:---|:---|:---| - |TLS| Modify the Graph configuration file to add the following parameters:
`--enable_graph_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`|In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_meta_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`|In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`| + |Scenes | TLS | + |:---|:---| + |External device access to Graph| Modify the Graph configuration file to add the following parameters:
`--enable_graph_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`| + |Graph access Meta |In the Graph/Meta configuration file, add the following parameters:
`--enable_meta_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx` | + |Graph access Storage
Meta access Storage |In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_storage_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx` | + |Graph access Meta/Storage
Meta access Storage |In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_meta_ssl = true`
`--enable_storage_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx` | + |External device access to Graph
Graph access Meta/Storage
Meta access Storage |In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx` | The parameters are described below. @@ -45,14 +49,19 @@ To use SSL encryption, SSL certificates are required. NebulaGraph supports two c | `enable_ssl` | `false` | Whether to enable SSL encryption in all services. only. | | `enable_graph_ssl` | `false` | Whether to enable SSL encryption in the Graph service only. | | `enable_meta_ssl` | `false` | Whether to enable SSL encryption in the Meta service only. | + | `enable_storage_ssl` | `false` | Whether to enable SSL encryption in the Storage service only. | {{ent.ent_begin}} - Policies for the NebulaGraph enterprise edition. - |-| External device access to Graph | Graph access Meta/Storage |External device access to Graph
Graph access Meta/Storage| - |:---|:---|:---|:---| - |mTLS|Modify the Graph configuration file to add the following parameters:
`--enable_graph_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx`|In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_meta_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx`|In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx`| + |Scenes | mTLS | + |:---|:---| + |External device access to Graph| Modify the Graph configuration file to add the following parameters:
`--enable_graph_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx`| + |Graph access Meta |In the Graph/Meta configuration file, add the following parameters:
`--enable_meta_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx` | + |Graph access Storage
Meta access Storage |In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_storage_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx` | + |Graph access Meta/Storage
Meta access Storage |In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_meta_ssl = true`
`--enable_storage_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx` | + |External device access to Graph
Graph access Meta/Storage
Meta access Storage |In the Graph/Meta/Storage configuration file, add the following parameters:
`--enable_ssl = true`
`--ca_path=xxxxxx`
`--cert_path=xxxxxx`
`--key_path=xxxxxx`
`--ca_client_path=xxxxxx` | !!! note @@ -70,6 +79,7 @@ To use SSL encryption, SSL certificates are required. NebulaGraph supports two c | `enable_ssl` | `false` | Whether to enable SSL encryption in all services. only. | | `enable_graph_ssl` | `false` | Whether to enable SSL encryption in the Graph service only. | | `enable_meta_ssl` | `false` | Whether to enable SSL encryption in the Meta service only. | + | `enable_storage_ssl` | `false` | Whether to enable SSL encryption in the Storage service only. | {{ent.ent_end}}