Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add SSL encryption #1228

Merged
merged 1 commit into from
Nov 18, 2021
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -33,6 +33,8 @@ Exchange具有以下优点:

- 支持导入SST:支持将不同来源的数据转换为SST文件,用于数据导入。

- 支持SSL加密:支持在Exchange与Nebula Graph之间建立SSL加密传输通道,保障数据安全。

- 支持断点续传:导入数据时支持断点续传,有助于节省时间,提高数据导入效率。

!!! Note
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -49,6 +49,14 @@
|`nebula.user`|string|-|是|拥有Nebula Graph写权限的用户名。|
|`nebula.pswd`|string|-|是|用户名对应的密码。|
|`nebula.space`|string|-|是|需要导入数据的的图空间名称。|
|`nebula.ssl.enable.graph`|bool|`false`|是|开启Exchange与Graph服务之间的[SSL加密](https://en.wikipedia.org/wiki/Transport_Layer_Security)传输。当值为`true`时开启,下方的SSL相关参数生效。如果Exchange运行在多机集群上,在设置以下SSL相关路径时,需要在每台机器的相同路径都存储相应的文件。|
|`nebula.ssl.sign`|string|`ca`|是|签名方式,可选值:`ca`(CA签名)或`self`(自签名)。|
|`nebula.ssl.ca.param.caCrtFilePath`|string|`"/path/caCrtFilePath"`|是|`nebula.ssl.sign`的值为`ca`时生效,用于指定CA证书的存储路径。|
|`nebula.ssl.ca.param.crtFilePath`|string|`"/path/crtFilePath"`|是|`nebula.ssl.sign`的值为`ca`时生效,用于指定CRT证书的存储路径。|
|`nebula.ssl.ca.param.keyFilePath`|string|`"/path/keyFilePath"`|是|`nebula.ssl.sign`的值为`ca`时生效,用于指定私钥文件的存储路径。|
|`nebula.ssl.self.param.crtFilePath`|string|`"/path/crtFilePath"`|是|`nebula.ssl.sign`的值为`self`时生效,用于指定CRT证书的存储路径。|
|`nebula.ssl.self.param.keyFilePath`|string|`"/path/keyFilePath"`|是|`nebula.ssl.sign`的值为`self`时生效,用于指定私钥文件的存储路径。|
|`nebula.ssl.self.param.password`|string|`"nebula"`|是|`nebula.ssl.sign`的值为`self`时生效,用于指定密码文件的存储路径。|
|`nebula.path.local`|string|`"/tmp"`|否|导入SST文件时需要设置本地SST文件路径。|
|`nebula.path.remote`|string|`"/sst"`|否|导入SST文件时需要设置远端SST文件路径。|
|`nebula.path.hdfs.namenode`|string|`"hdfs://name_node:9000"`|否|导入SST文件时需要设置HDFS的namenode。|
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,10 @@

仅企业版Exchange支持导出Nebula Graph数据到CSV文件。

!!! note

导出Nebula Graph数据时不支持SSL加密传输。

## 环境准备

本示例在Linux系统的虚拟机环境下完成,导出数据前准备的软硬件信息如下。
Expand Down Expand Up @@ -107,7 +111,7 @@ CentOS 7.9.2009
]
}
```

3. 使用如下命令导出Nebula Graph中的数据。

```bash
Expand Down