Encryption for a distributed filesystem
A computing device comprising a frontend and a backend is operably coupled to a plurality of storage devices. The backend comprises a plurality of buckets. Each bucket is operable to build a failure-protected stipe that spans two or more of the plurality of the storage devices. The frontend is operable to encrypt data as it enters the plurality of storage devices and decrypt data as it leaves the plurality of storage devices.
1. A system comprising:
a processor operable to configure a plurality of failure-protected stripes in a plurality of storage devices, wherein:
the plurality of storage devices are distributed such that at most an allowed number of storage devices are within any particular node of a plurality of nodes,
the processor is operable to encrypt data according to a file key,
the file key is rotated when a file is copied, and
all failure-protected stripes built by a plurality of buckets are associated with a filesystem key.
2. The system of claim 1 , wherein the processor is operable to decrypt data as it leaves the system.
3. The system of claim 1 , wherein the file key is encrypted by the filesystem key.
4. The system of claim 1 , wherein the file key is re-encrypted when the filesystem key is rotated.
5. The system of claim 1 , wherein the system comprises a cluster of computing devices, and wherein the cluster of computing devices is associated with a cluster key.
6. The system of claim 5 , wherein the processor registers a long-term key with a leader of the cluster when the system joins the cluster of computing devices.
7. The system of claim 6 , wherein prior to a transfer of the data, a session key is negotiated using an ephemeral key pair signed with the long-term key.
8. A method comprising:
building, via a processor, a plurality of failure-protected stripes in a plurality of storage devices;
distributing the plurality of storage devices such that at most an allowed number of storage devices are within any particular node of a plurality of nodes
encrypting data, via the processor, according to a file key;
rotating the file key when a file is copied; and
associating all failure-protected stripes, built by a plurality of buckets, with a filesystem key.
9. The method of claim 8 , wherein the method comprises decrypting data, via the processor, as it leaves a storage device.
10. The method of claim 8 , wherein the file key is encrypted by the filesystem key.
11. The method of claim 8 , wherein the file key is re-encrypted when the filesystem key is rotated.
12. The method of claim 8 , wherein a cluster of computing devices is associated with a cluster key.
13. The method of claim 12 , wherein the method comprises:
registering a long-term key with a leader of the cluster when the computing device joins the cluster of computing devices.
14. The method of claim 13 , wherein the method comprises:
negotiating a session key, prior to a transfer of the data, using an ephemeral key pair signed with the long-term key.
15. A system comprising:
a processor operable to configure a plurality of failure-protected stripes in a plurality of storage devices; and
a cluster of computing devices associated with a cluster key, wherein:
the plurality of storage devices are distributed such that at most an allowed number of storage devices are within any particular node of a plurality of nodes, and
the processor is configured to register a long-term key with a leader of the cluster when the system joins the cluster of computing devices.
16. The system of claim 15 , wherein the processor is operable to decrypt data as it leaves the system.
17. The system of claim 15 , wherein the processor is operable to encrypt data according to a file key.
18. The system of claim 17 , wherein the file key is rotated when a file is copied.
19. The system of claim 17 , wherein all failure-protected stripes built by a plurality of buckets are associated with a filesystem key.
20. The system of claim 19 , wherein the file key is encrypted by the filesystem key.
21. The system of claim 19 , wherein the file key is re-encrypted when the filesystem key is rotated.
22. The system of claim 15 , wherein prior to a transfer of the data, a session key is negotiated using an ephemeral key pair signed with the long-term key.
23. A method comprising:
building, via a processor, a plurality of failure-protected stripes in a plurality of storage devices;
distributing the plurality of storage devices such that at most an allowed number of storage devices are within any particular node of a plurality of nodes;
associating a cluster of computing devices with a cluster key; and
registering a long-term key with a leader of the cluster when the computing device joins the cluster of computing devices.
24. The method of claim 23 , wherein the method comprises decrypting data, via the processor, as it leaves a storage device.
25. The method of claim 23 , wherein the processor encrypts the data according to a file key.
26. The method of claim 25 , wherein the file key is rotated when a file is copied.
27. The method of claim 25 , wherein all failure-protected stripes built by a plurality of buckets in the processor are associated with a filesystem key.
28. The method of claim 27 , wherein the file key is encrypted by the filesystem key.
29. The method of claim 27 , wherein the file key is re-encrypted when the filesystem key is rotated.
30. The method of claim 23 , wherein the method comprises:
negotiating a session key, prior to a transfer of the data, using an ephemeral key pair signed with the long-term key.