DataStax Security

Security for DataStax Enterprise 6.7, 6.0, and 5.1 and DataStax Distribution of Apache Cassandra.

Security guides 6.7 | 6.0 | 5.1 | DDACLinks to the top-level of the security guides for each version of DataStax Enterprise and the DataStax Distribution of Apache Cassandra™ 3.11.

DDAC security authentication | authorization | SSL | firewallDDAC uses the security capabilities present in Apache Cassandra, not DSE Advanced Security.

Security FAQs 6.7 | 6.0 | 5.1Answers to general questions about securing your applications with DSE Advanced Security. This is a good place to start.

Securing Spark 6.7 | 6.0 | 5.1How to encrypt communication between Spark applications and transactional nodes, masters and workers, and intercommunication between Spark drivers and executors.

Links to common topics

Security checklists: 6.7 | 6.0 | 5.1
Checklists for the various kinds of security measures required for protecting a DSE database depending on the type of node.
Setting up logins and users: 6.7 | 6.0 | 5.1
Set up roles to manage permissions on database objects.
LDAP: 6.7 | 6.0 | 5.1
Configure an external LDAP server for authentication and/or role management.
Port and TMP directory protection: 6.7 | 6.0 | 5.1 | DDAC
Ensure that your network is secure and temporary files are secure
Transparent data encryption (TDE): 6.7 | 6.0 | 5.1
Protects sensitive at-rest data stored in configuration files and in database tables.
SSL: 6.7 | 6.0 | 5.1 | DDAC
Secure data in-flight on DataStax Enterprise.
Kerberos: 6.7 | 6.0 | 5.1
Set up DSE authentication with Kerberos protocol to prove identity for users and applications without passing credentials, only a Kerberos ticket.