[RELEASE] ScyllaDB Enterprise 2023.1.2

Release Notes
, ,
1

The ScyllaDB team announces ScyllaDB Enterprise 2023.1.2, a bug-fix production-ready ScyllaDB Enterprise patch release for ScyllaDB Enterprise 2023.1 LTS Release.

This patch release enables cluster-level configuration for Encryption at Rest, a new configuration to control streaming bandwidth, and multiple minor bug fixes.

You are encouraged to upgrade to it in coordination with the ScyllaDB Support team.

Related Links

Transparent Data Encryption

Scylla Enterprise has supported Encryption at Rest (EaR) for a long time. So far, one can store the keys for EaR locally, in an encrypted table, or an external KMIP server.

Release 2023.1.1 added the ability to use Amazon KMS keys.

Release 2023.1.2 adds Transparent Data Encryption (TDE), a way to define Encryption at Rest parameters per cluster, not only per table.

This allows the system administrator to enforce encryption of all tables using the same master key, for example, from KMS, without specifying the encryption parameter per table.

For example, with the following in scylla.yaml, all tables will be encrypted using encryption parameters of my-kms1

user_info_encryption:
  enabled: true
  key_provider: KmsKeyProviderFactory,
  kms_host: my_kms1

See more examples and info here.

Streaming: Add stream_plan_ranges_fraction

This option allows user to change the number of ranges to stream in

batch per stream plan. Currently, each stream plan streams 10% of the total ranges.

The default value is the same as before: 10% of total ranges. #14191

Bug fixes

The following issues are fixed in this release (with an open-source reference, if available):

  • Nodetool: nodetool stop RESHAPE stops individual task, but doesn’t abort the whole operation #15058
  • Stability: INSERT JSON without a JSON value crashes Scylla #14709, #14705
  • Stability: When removing a service level, the node might stop applying workload prioritization changes, like CREATE/DROP/ALTER SERVICE_LEVEL, until it restarts. #15198
  • Stability: when tables are dropped during a running repair, a repair_tracker run failed: data_dictionary::no_such_column_family #13045
  • Stability: Scylla should skip mode validation of snapshot files #12010
  • Init: scylla_raid_setup: --online-discard option always enables ‘discard’ #14963
  • Stability: Some gossiper apis may return stale information from non-zero shards, for example REST API gossiper/endpoint/down/ falsely reports a node down #15088, #12261
  • Stability: gossiper/endpoint/down/ falsely reports a node down #12261
  • UX: Warning message does not includes enough details: capped tombstone local_deletion_time warning does not indicate the respective sstable #15015
  • UX: Handle TLS version of broken pipe same as “normal”, making the error message less scary. #14625
  • Log: Compaction throughput is incorrectly based on the amount of data written #14533