Is Nitro end-to-end Encryption Support on Bare Metal Instance?
Is the Nitro end-to-end encryption feature available on bare metal instances, specifically the i3.metal?
My current understanding is that this is supported only in the network optimized Nitro instances (e.g. i3.en), but would like additional verification.
- 新しい順
- 投票が多い順
- コメントが多い順
No, I don't believe that the i3.metal supports this feature. According to our documentation for EC2:
AWS provides secure and private connectivity between EC2 instances. In addition, we automatically encrypt in-transit traffic between supported instances in the same VPC or in peered VPCs, using AEAD algorithms with 256-bit encryption. This encryption feature uses the offload capabilities of the underlying hardware, and there is no impact on network performance. The supported instances are: C5n, G4, I3en, M5dn, M5n, P3dn, R5dn, and R5n.
(https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/data-protection.html )
Hope this helps!
