Skip to content

Commit c7fe384

Browse files
committed
Clarity about encryption traffic
1 parent 1f6c470 commit c7fe384

File tree

1 file changed

+3
-17
lines changed

1 file changed

+3
-17
lines changed

articles/iot-operations/manage-mqtt-broker/howto-encrypt-internal-traffic.md

Lines changed: 3 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ ms.author: patricka
66
ms.topic: how-to
77
ms.service: azure-iot-operations
88
ms.subservice: azure-mqtt-broker
9-
ms.date: 11/04/2024
9+
ms.date: 11/12/2024
1010

1111
#CustomerIntent: As an operator, I want to configure MQTT broker so that I can encrypt internal communication and data.
1212
---
@@ -20,26 +20,12 @@ Ensuring the security of internal communications within your infrastructure is i
2020
> [!IMPORTANT]
2121
> This setting requires modifying the Broker resource and can only be configured at initial deployment time using the Azure CLI or Azure Portal. A new deployment is required if Broker configuration changes are needed. To learn more, see [Customize default Broker](./overview-broker.md#customize-default-broker).
2222
23-
The **encrypt internal traffic** feature is used to encrypt the internal traffic between the MQTT broker frontend and backend pods. It's enabled by default when you deploy Azure IoT Operations.
24-
25-
The benefits include:
26-
27-
- **Secure internal traffic**: All internal traffic between the frontend and backend pods is encrypted.
28-
29-
- **Secure data at rest**: All data at rest is encrypted.
30-
31-
- **Secure data in transit**: All data in transit is encrypted.
32-
33-
- **Secure data in memory**: All data in memory is encrypted.
34-
35-
- **Secure data in the message buffer**: All data in the message buffer is encrypted.
36-
37-
- **Secure data in the message buffer on disk**: All data in the [message buffer on disk](./howto-disk-backed-message-buffer.md) is encrypted.
23+
The **encrypt internal traffic** feature is used to encrypt the internal traffic in transit between the MQTT broker frontend and backend pods. It's enabled by default when you deploy Azure IoT Operations.
3824

3925
To disable encryption, modify the `advanced.encryptInternalTraffic` setting in the Broker resource. This can only be done using the `--broker-config-file` flag during the deployment of Azure IoT Operations with the `az iot ops create` command.
4026

4127
> [!CAUTION]
42-
> Disabling encryption can enhance the performance of the MQTT broker, which may be beneficial in high-throughput IoT deployments. However, to safeguard against security threats like man-in-the-middle attacks, we strongly recommended to keep this setting enabled. Only disable encryption in controlled, non-production environments for testing purposes.
28+
> Disabling encryption can improve MQTT broker performance. However, to protect against security threats like man-in-the-middle attacks, we strongly recommend keeping this setting enabled. Only disable encryption in controlled non-production environments for testing.
4329
4430
```json
4531
{

0 commit comments

Comments
 (0)