Security

Security covers three layers of the storage stack. The NVMe-oF transport between an initiator and a storage node is authenticated and encrypted, a volume is encrypted at rest with keys that can be held outside the cluster, and the tenants of a cluster are isolated from each other through separate storage pools and credentials.

Topic	Purpose
Host Authentication and Encryption	Authenticating and encrypting the NVMe-oF transport of a cluster.
Multi-Tenancy	Isolating tenants from each other within one storage cluster.
Volume Encryption	Encrypting the data of a single volume at rest.