TEIID and infinispan + encryption

[gioppoluca]

Just to understand better the TEIID caching system.

Does it uses Infinispan (it seems it does looking to the standalone.conf file since there is a TEIID cache in the infinispan subsystem.

In case of positive answer.

in relation to what written here: https://github.com/infinispan/infinispan/wiki/Security

Will it be possible to apply these approaches to the TEIID cache?

The need is to encrypt data in cloud so that even the cache is secure.

Thanks.

Luca

[rareddy]

Teiid only uses Infinispan to cache the cache keys and references to data in the buffer manager.

[shawkins]

To further what Ramesh is saying, the cache key for result set caching contains the user sql, so that may need to be secured in a WAN/Cloud deployment.  The replication of data/buffer entries is done directly over JGroups, which can be secured as well.  See the note at the bottom of the Infinispan security link that talks about using an ENCRYPT protocol.  I believe SSL is also supported.