Chapter 2. New Features and Enhancements

The Hot Rod protocol has been enhanced in Red Hat JBoss Data Grid 6.3 to support user authentication via Simple Authentication and Security Layer (SASL) framework. With this feature, you can require a user who executes a remote application to authenticate before attempting an operation on a secured cache.

In Library mode, user authentication is delegated to the container in which the application is running.

Red Hat JBoss Data Grid 6.3 features role-based access control for operations on designated secured caches. This enables you to assign roles to the users who access your application, and further, specify a mapping of roles to permissions for cache and cache-manager operations. For such secured caches, authenticated users can only perform those operations for which their role is authorized.

Role-based access control is available in both Library and Remote Client-Server modes.

JBoss Data Grid 6.3 provides the ability to require new nodes or merging partitions to authenticate before joining a cluster. Only authenticated nodes that are authorized to join the cluster are permitted to join. This protects your data by not allowing unauthorized servers to store your data. This feature is available in both Library and Remote Client-Server modes.

JBoss Data Grid 6.3 increases data security through support for encryption of communication between the nodes comprising the cluster, using user-specified cryptography algorithm as supported by the JCA (Java Cryptography Architecture). This feature is available in both Library and Remote Client-Server modes.