# Security

**URL:** https://discuss.aerospike.com/c/aerospike-features/security/47.md

[Latest](https://discuss.aerospike.com/latest.md) · [Categories](https://discuss.aerospike.com/categories.md) · [Tags](https://discuss.aerospike.com/tags.md)

---

## [About the Security category](https://discuss.aerospike.com/t/about-the-security-category/69)

<div class="topic-metadata">

**Author:** [@kporter](https://discuss.aerospike.com/u/kporter)\
**Replies:** 0

</div>

Discuss Aerospike’s Security (Enterprise Feature)

---

## [Disable specific TLS cipher suits in Aerospike server configuration](https://discuss.aerospike.com/t/disable-specific-tls-cipher-suits-in-aerospike-server-configuration/7682)

<div class="topic-metadata">

**Author:** [@kmurakon](https://discuss.aerospike.com/u/kmurakon)\
**Replies:** 7\
**Last updated:** [September 4, 2020, 3:19am UTC](https://discuss.aerospike.com/t/disable-specific-tls-cipher-suits-in-aerospike-server-configuration/7682 "2020-09-04T03:19:39Z")

</div>

We have a organization security requirement to disable and stop using DES, 3DES, IDEA or RC2 ciphers. How can we achieve this with aerospike server side configuration? Should we have to enable cipher-suite in network st…

---

## [AQL - Setting whitelist of of over 32 IPs gives AEROSPIKE\_INVALID\_WHITELIST](https://discuss.aerospike.com/t/aql-setting-whitelist-of-of-over-32-ips-gives-aerospike-invalid-whitelist/7342)

<div class="topic-metadata">

**Author:** [@jonathan](https://discuss.aerospike.com/u/jonathan)\
**Replies:** 1\
**Last updated:** [April 24, 2020, 7:24pm UTC](https://discuss.aerospike.com/t/aql-setting-whitelist-of-of-over-32-ips-gives-aerospike-invalid-whitelist/7342 "2020-04-24T19:24:18Z")

</div>

I’m trying to set a whitelist for a role using AQL. $ aql -U root -P root -c "set whitelist $WHITELIST for $ROLE" OK This works fine until the whitelist contains over 32 IP addresses. $ aql -U root -P root -c "set whi…

---

## [Is there a way to enable role-based access in community-version](https://discuss.aerospike.com/t/is-there-a-way-to-enable-role-based-access-in-community-version/3725)

<div class="topic-metadata">

**Author:** [@Akshaykapoor](https://discuss.aerospike.com/u/Akshaykapoor)\
**Replies:** 3\
**Last updated:** [March 18, 2019, 7:08pm UTC](https://discuss.aerospike.com/t/is-there-a-way-to-enable-role-based-access-in-community-version/3725 "2019-03-18T19:08:18Z")

</div>

Hi, I’m currently using community version 3.8. Currently only the enterprise version supports role-based access, but is there a way to achieve something similar in the community version. Anybody who has come up with s…

---

## [How to restrict Aerospike data in a cluster to the VPN in which it exists](https://discuss.aerospike.com/t/how-to-restrict-aerospike-data-in-a-cluster-to-the-vpn-in-which-it-exists/2446)

<div class="topic-metadata">

**Author:** [@chipmunk1101](https://discuss.aerospike.com/u/chipmunk1101)\
**Replies:** 0\
**Last updated:** [January 29, 2016, 9:58pm UTC](https://discuss.aerospike.com/t/how-to-restrict-aerospike-data-in-a-cluster-to-the-vpn-in-which-it-exists/2446 "2016-01-29T21:58:21Z")

</div>

I have 4 nodes inside a VPN configured with mesh heartbeats. Is there a way to restrict the data so that it is not available to the entire Internet but only the machines that exist in that VPN. Please excise me if this …

---

## [Security option details required](https://discuss.aerospike.com/t/security-option-details-required/2186)

<div class="topic-metadata">

**Author:** [@Dennis](https://discuss.aerospike.com/u/Dennis)\
**Replies:** 4\
**Last updated:** [January 1, 2016, 6:44am UTC](https://discuss.aerospike.com/t/security-option-details-required/2186 "2016-01-01T06:44:02Z")

</div>

Hi! Could you please describe how absence of security limits Community Version? In my understanding, I won’t be able to create users and limit their permissions. Is this correct? Does this mean that production servers …

---

## [Security mechanisms to prevent MongoDB security issue](https://discuss.aerospike.com/t/security-mechanisms-to-prevent-mongodb-security-issue/945)

<div class="topic-metadata">

**Author:** [@Kali](https://discuss.aerospike.com/u/Kali)\
**Replies:** 3\
**Last updated:** [March 11, 2015, 10:02pm UTC](https://discuss.aerospike.com/t/security-mechanisms-to-prevent-mongodb-security-issue/945 "2015-03-11T22:02:30Z")

</div>

I just read the news about Mongo leaving 40,000 MongoDB databases unsecured and open for access on the Internet in this article. Do you have guidelines or best practices for setting up Aerospike servers with Internet ac…

---

## [When we backup using Aerospike, is it possible to encrypt the backup file?](https://discuss.aerospike.com/t/when-we-backup-using-aerospike-is-it-possible-to-encrypt-the-backup-file/800)

<div class="topic-metadata">

**Author:** [@akhilkk](https://discuss.aerospike.com/u/akhilkk)\
**Replies:** 1\
**Last updated:** [December 31, 2014, 9:44am UTC](https://discuss.aerospike.com/t/when-we-backup-using-aerospike-is-it-possible-to-encrypt-the-backup-file/800 "2014-12-31T09:44:10Z")

</div>

Can the backup File be encrypted? If yes, is it possible with the open source edition Or will it require any extra software for encryption?

---

## [Role that only can use registered udf](https://discuss.aerospike.com/t/role-that-only-can-use-registered-udf/506)

<div class="topic-metadata">

**Author:** [@arypurnomoz](https://discuss.aerospike.com/u/arypurnomoz)\
**Replies:** 1\
**Last updated:** [November 13, 2014, 12:36am UTC](https://discuss.aerospike.com/t/role-that-only-can-use-registered-udf/506 "2014-11-13T00:36:37Z")

</div>

When having a very sensitive information, it would be best if there is a role that will only able to execute registered UDFs, so when the client has been compromised (by malware) the server still able to validate every q…
