Company
Date Published
Author
Ian McCloy, Director Product Management
Word count
1498
Language
English
Hacker News points
None

Summary

Couchbase 7.0 introduces significant security enhancements, notably supporting Linux Unified Key Setup (LUKS) for disk encryption to secure data at rest, alongside role-based access control for Scopes and Collections. LUKS, an open-source tool and the standard for disk encryption in Linux environments, encrypts storage at the disk-block level and is compatible with Couchbase-certified Linux operating systems. Despite its robust security features, including support for multiple key slots and a 512-bit AES key, LUKS is not suitable for non-Linux platforms or users without an OS-vendor support contract, and alternatives like Microsoft Encrypted File System or third-party partners are recommended in such cases. The document details implementation steps for LUKS in a Linux environment, emphasizing its role in protecting data against unauthorized access, especially in compliance with various regulatory standards.