Encryption

Kudu allows you to use TLS to encrypt all communications among servers, and between clients and servers.

Configure TLS encryption on Kudu servers using the --rpc_encryption flag, which can be set to one of the following options:

required - Kudu will reject unencrypted connections.
optional - Kudu will attempt to use encryption, but will allow unencrypted connections.
disabled - Kudu will not use encryption.

By default, the flag is set to optional. To secure your cluster, set --rpc_encryption to required.