« Back to Blog

Now on ObjectRocket: Encryption at Rest for Elasticsearch

Steve Croce

By Steve Croce

Posted on: October 20, 2016

You’ve asked, and now it’s here… Encryption at rest is now available as an option on ObjectRocket for Elasticsearch with Kibana. As of today, encrypted instances can be created in the ObjectRocket control panel and existing instances can also be converted to encrypted instances with our always-free migration services.

Security features, like SSL encrypted connections, ACLs/IP whitelisting, user-based authentication, and container-based instance isolation have been a standard on the ObjectRocket platform, but adding encryption at rest helps us expand that list and offer a capability today that few Elasticsearch providers can.

What is encryption at rest?

If you’re feeling déjà vu, it may be because we launched this feature for MongoDB back in February. Encryption at rest is a common method of protecting database data where it’s stored, by encrypting it, so only the attached database instance can access it. It’s a key feature when storing sensitive data and for many customers, it’s a compliance requirement.

Elasticsearch does not support encrypting data natively, so ObjectRocket manages the volume encryption on the running cluster, encryption of backups, and key management via the ObjectRocket platform. This makes data protection super easy – You check a box for an encrypted instance and we do the work behind the scenes to protect the data.

Go get encrypted!

If you want to test it out, we’ll be offering the encryption feature for free until December 1, 2016. To get started, check the box that says Encrypted during instance creation and you’re all set. If you already have a running Elasticsearch cluster at ObjectRocket, we can quickly migrate you to an encrypted cluster when you contact support. Conversion to an encrypted cluster is similar to a plan resize and causes no downtime. See the ObjectRocket pricing page for details on plans, pricing, and availability.

Here are the details on what we offer with every ObjectRocket for Elasticsearch cluster:

  • Industry-standard AES-256 encryption
  • Encryption available as an option on all instance sizes
  • Encryption at rest including the underlying storage and automated backups
  • SSL-enabled with per instance ACLs
  • Secure hosting environment
  • Easy scaling from GBs to TBs and beyond
  • Fully Managed Service by data specialists proactively monitoring your instances 24x7x365
  • Global datacenters with Rackspace ServiceNet and AWS Direct Connect

eBook: Everything you need to know about DBaaS

Learn why DBaaS is booming and get a checklist of questions to ask vendors to find the right fit for your business.

Learn More →

DBaaS for Elasticsearch JetpackeBook: DBaaS for Elasticsearch JetpackEverything you need to know about Elasticsearch with Kibana. Plus, learn how DBaaS can save you time and money.Learn More →

Keep in the know!

Subscribe to our emails and we’ll let you know what’s going on at ObjectRocket. We hate spam and make it easy to unsubscribe.