Hi, does StarRocks support encryption at rest? Th...
# questions-and-troubleshooting
b
Hi, does StarRocks support encryption at rest? There seems to be some confusion: - Issue #46223 mentions Transparent Data Encryption. - PR #52179 mentions partial TDE support for non-cloud-native rowset read/write. - However, I could not find clear official documentation explaining whether TDE is supported, from which version, in which deployment modes, and how to configure it. Could you please clarify: 1. Is TDE / encryption at rest officially supported in StarRocks? 2. If yes, which versions and deployment modes are supported? - Shared-data / cloud-native - Shared-nothing / local BE storage 3. What data is encrypted? - Rowset/segment files - Metadata - Temp/spill files - Logs - Backups/snapshots 4. Is this feature open-source, enterprise-only, experimental, or GA? 5. Can the official documentation be updated with configuration steps, limitations, and key-management details?