Mantenha tudo organizado com as coleções
Salve e categorize o conteúdo com base nas suas preferências.
Nesta seção, descrevemos as diferentes camadas de criptografia no armazenamento. O appliance isolado do Google Distributed Cloud (GDC)
Criptografia em repouso
O dispositivo isolado do GDC oferece diferentes camadas de criptografia de dados em repouso.
Criptografia em trânsito
Os dados em trânsito são criptografados usando IPsec em dois tipos de tráfego OTS:
Tráfego externo entre hosts bare metal e máquinas virtuais de armazenamento (SVMs) do OTS.
Tráfego interno entre nós de trabalho do OTS.
O IPsec em ambos os tráfegos é implementado pela biblioteca de terceiros strongSwan (https://strongswan.org/). O tráfego interno do OTS é criado com o túnel vxlan do OpenVSwitch e também usa o strongSwan para criptografar o fluxo de dados na camada.
[[["Fácil de entender","easyToUnderstand","thumb-up"],["Meu problema foi resolvido","solvedMyProblem","thumb-up"],["Outro","otherUp","thumb-up"]],[["Difícil de entender","hardToUnderstand","thumb-down"],["Informações incorretas ou exemplo de código","incorrectInformationOrSampleCode","thumb-down"],["Não contém as informações/amostras de que eu preciso","missingTheInformationSamplesINeed","thumb-down"],["Problema na tradução","translationIssue","thumb-down"],["Outro","otherDown","thumb-down"]],["Última atualização 2025-09-04 UTC."],[[["\u003cp\u003eGoogle Distributed Cloud (GDC) air-gapped appliance encrypts all customer content stored at rest by default.\u003c/p\u003e\n"],["\u003cp\u003eThe GDC air-gapped appliance storage layer uses dm-crypt with the Linux Unified Key Setup (LUKS) extension for encryption.\u003c/p\u003e\n"],["\u003cp\u003eBlock and object encryption are available to provide double encryption for increased security.\u003c/p\u003e\n"],["\u003cp\u003eData in transit is encrypted, using a secure mode for internal data and FIPS-compliant OpenSSL for external communication.\u003c/p\u003e\n"]]],[],null,["# Data encryption\n\n| **Important:** To access the URLs on this page, you must connect to the internet. The URLs are provided for use when you have such access.\n\nThis section describes the different layers of encryption in storage. Google Distributed Cloud (GDC) air-gapped appliance\n\n\nEncryption at rest\n------------------\n\nThere are different layers of data at rest encryption that GDC air-gapped appliance provides.\n\n\nEncryption in transit\n---------------------\n\nData in transit is encrypted using IPsec on two types of OTS traffic:\n\n- External traffic between bare metal hosts and OTS Storage Virtual Machines (SVMs).\n- Internal traffic between OTS worker nodes.\n\nThe IPsec on both traffic is implemented by the third party library strongSwan (\u003chttps://strongswan.org/\u003e). The OTS internal traffic is built with the OpenVSwitch vxlan tunnel and it also uses strongSwan to encrypt the data flow under the layer."]]
