v2024.2 LTS Stable release with long-term support v2.23 Preview Preview release - not for production v2024.1 STS Stable release with standard-term support v2.20 LTS Stable release with long-term support v2.18 STS Stable release with standard-term support v2.14 LTS Stable release with long-term support Unsupported versions

Encryption in transit

Enable encryption in transit (using TLS) to protect network communication

YugabyteDB can be configured to protect data in transit using the following:

  • Server-to-server encryption for inter-node communication between YB-Master and YB-TServer nodes.
  • Client-to-server encryption for communication between clients and nodes when using CLIs, tools, and APIs for YSQL and YCQL.

YugabyteDB supports Transport Layer Security (TLS) encryption based on OpenSSL (v. 1.0.2u or later), an open source cryptography toolkit that provides an implementation of the Transport Layer Security (TLS) and Secure Socket Layer (SSL) protocols.

Create server certificates
Create server certificates (using TLS) for protecting data in transit between YugabyteDB nodes.
Enable encryption in transit
Enable encryption (using TLS) between YB-Master and YB-TServer nodes.
Connect to clusters
Connect clients, tools, and APIs to encryption-enabled YugabyteDB clusters.
TLS and authentication
Use TLS encryption in conjunction with authentication.