<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Thu Feb 08 02:54:23 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[SERVER-524] Encryption of wire protocol with SSL</title>
                <link>https://jira.mongodb.org/browse/SERVER-524</link>
                <project id="10000" key="SERVER">Core Server</project>
                    <description>&lt;p&gt;Currently, the Mongo Wire protocol sends the data essentially in clear-text.  This has two implications for my user scenario.  First is that there&apos;s a lot of network traffic generated for queries.  When reports are run and many fields of data are retrieved, I get the same field name over and over.  Some compression here would speed up the delivery of the data.  The query itself is lightning fast, but the transaction is slowed down by the movement of the massive amount of data.&lt;/p&gt;

&lt;p&gt;Second, the clear-text has security implications.  Running SSL or some similar secure wire protocol could solve potentially both these issues.&lt;/p&gt;

&lt;p&gt;Thanks!&lt;/p&gt;

&lt;p&gt;&lt;b&gt;Edit&lt;/b&gt;: Need to support auto-negotiation, and optional (both ssl/non-ssl connections), preferred and forced modes.&lt;br/&gt;
&lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-524?focusedCommentId=101574#comment-101574&quot; class=&quot;external-link&quot; rel=&quot;nofollow&quot;&gt;https://jira.mongodb.org/browse/SERVER-524?focusedCommentId=101574#comment-101574&lt;/a&gt;&lt;/p&gt;</description>
                <environment></environment>
        <key id="11092">SERVER-524</key>
            <summary>Encryption of wire protocol with SSL</summary>
                <type id="2" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14711&amp;avatarType=issuetype">New Feature</type>
                                            <priority id="3" iconUrl="https://jira.mongodb.org/images/icons/priorities/major.svg">Major - P3</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="9">Done</resolution>
                                        <assignee username="andreas.nilsson">Andreas Nilsson</assignee>
                                    <reporter username="rvanderwall23">Robert Vanderwall</reporter>
                        <labels>
                    </labels>
                <created>Thu, 7 Jan 2010 16:40:55 +0000</created>
                <updated>Tue, 12 Jul 2016 00:28:31 +0000</updated>
                            <resolved>Thu, 29 Oct 2015 19:48:08 +0000</resolved>
                                                    <fixVersion>3.0.0</fixVersion>
                                    <component>Networking</component>
                    <component>Security</component>
                                        <votes>139</votes>
                                    <watches>108</watches>
                                                                                                                <comments>
                            <comment id="1074559" author="ramon.fernandez" created="Thu, 29 Oct 2015 19:47:57 +0000"  >&lt;p&gt;As of MongoDB version 3.0.0, community binaries for Windows and Linux platforms are compiled with SSL enabled and dynamically linked.&lt;/p&gt;

&lt;p&gt;Regards,&lt;br/&gt;
Ram&#243;n.&lt;/p&gt;</comment>
                            <comment id="604254" author="thijs" created="Sun, 1 Jun 2014 18:12:52 +0000"  >&lt;p&gt;Thanks Andy, that makes a lot sense. I guess we&apos;ll stick to our own compiled versions for the foreseeable future.&lt;/p&gt;</comment>
                            <comment id="602993" author="schwerin" created="Fri, 30 May 2014 21:00:13 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=thijs&quot; class=&quot;user-hover&quot; rel=&quot;thijs&quot;&gt;thijs&lt;/a&gt;, the remaining work on this ticket is really about binary distribution.  The 2.6 series source code &lt;a href=&quot;http://github.com/mongodb/mongo&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;in github&lt;/a&gt; supports SSL, but the openssl library version varies a lot by specific OS vendor and disto version.  That means that you need a version of the MongoDB binaries for nearly every supported distro, unlike the current community binaries which run pretty much anywhere.  When we&apos;ve worked out a distribution solution, we&apos;ll be ready to resolve this ticket.  Until then, on Linux you can try using your distribution&apos;s provided version of MongoDB, and on OS X you can try Brew as &lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=tyler.brock%40gmail.com&quot; class=&quot;user-hover&quot; rel=&quot;tyler.brock@gmail.com&quot;&gt;tyler.brock@gmail.com&lt;/a&gt; described above.  You may, of course, also compile the code yourself, passing the --ssl option to the build scripts.&lt;/p&gt;

&lt;p&gt;If you happen to have a MongoDB subscription, you may be entitled to use the MongoDB Enterprise release for your platform.  Since these builds are already targeted at specific OS distributions, we build them with SSL support.&lt;/p&gt;</comment>
                            <comment id="602250" author="thijs" created="Fri, 30 May 2014 09:40:33 +0000"  >&lt;p&gt;This doesn&apos;t seem to be in the 2.7 development release yet, will it be part of the 2.7 series?&lt;/p&gt;</comment>
                            <comment id="512710" author="tyler@10gen.com" created="Mon, 10 Mar 2014 17:56:03 +0000"  >&lt;p&gt;Anyone on a Mac:&lt;/p&gt;

&lt;p/&gt;
&lt;div id=&quot;syntaxplugin&quot; class=&quot;syntaxplugin&quot; style=&quot;border: 1px dashed #bbb; border-radius: 5px !important; overflow: auto; max-height: 30em;&quot;&gt;
&lt;table cellspacing=&quot;0&quot; cellpadding=&quot;0&quot; border=&quot;0&quot; width=&quot;100%&quot; style=&quot;font-size: 1em; line-height: 1.4em !important; font-weight: normal; font-style: normal; color: black;&quot;&gt;
		&lt;tbody &gt;
				&lt;tr id=&quot;syntaxplugin_code_and_gutter&quot;&gt;
						&lt;td  style=&quot; line-height: 1.4em !important; padding: 0em; vertical-align: top;&quot;&gt;
					&lt;pre style=&quot;font-size: 1em; margin: 0 10px;  margin-top: 10px;   margin-bottom: 10px;  width: auto; padding: 0;&quot;&gt;&lt;span style=&quot;color: black; font-family: &apos;Consolas&apos;, &apos;Bitstream Vera Sans Mono&apos;, &apos;Courier New&apos;, Courier, monospace !important;&quot;&gt;brew install mongodb --with-openssl&lt;/span&gt;&lt;/pre&gt;
			&lt;/td&gt;
		&lt;/tr&gt;
			&lt;/tbody&gt;
&lt;/table&gt;
&lt;/div&gt;
&lt;p/&gt;</comment>
                            <comment id="512671" author="milkie" created="Mon, 10 Mar 2014 17:31:39 +0000"  >&lt;p&gt;Unfortunately, it&apos;s unlikely to be backported, as this is not a bug fix but a new feature, and the work to complete this will not be easily backportable.&lt;br/&gt;
In the meantime, SSL is available in 2.6 for those using the Enterprise version, certain vendor packages, or locally built versions.&lt;/p&gt;</comment>
                            <comment id="511985" author="ccjon" created="Sat, 8 Mar 2014 03:16:40 +0000"  >&lt;p&gt;The fix version is still the 2.7.x branch. Does your comment (Andy) mean that this might make it into a 2.6.x minor release?&lt;/p&gt;</comment>
                            <comment id="511778" author="schwerin" created="Fri, 7 Mar 2014 20:08:04 +0000"  >&lt;p&gt;&lt;a href=&quot;https://jira.mongodb.org/secure/ViewProfile.jspa?name=javacruft&quot; class=&quot;user-hover&quot; rel=&quot;javacruft&quot;&gt;javacruft&lt;/a&gt;, we checked on licensing and updated the copyright files to allow linking with openssl.  Further, as of 2.6, support for SSL is pretty complete, and it would be fine for distro packages to have SSL enabled.  This ticket remains open until we resolve some internal technical issues around distributing binaries, rather than around licensing or functionality in the code itself.&lt;/p&gt;</comment>
                            <comment id="452889" author="thijs" created="Thu, 7 Nov 2013 12:43:34 +0000"  >&lt;p&gt;It would be great if using SSL on Mongo connections was trivial to set up. Any progress on this?&lt;/p&gt;</comment>
                            <comment id="276960" author="javacruft" created="Wed, 27 Feb 2013 10:12:04 +0000"  >&lt;p&gt;Eliot - how are the licensing/export issues progressing?  I&apos;d really like to enable the SSL option in the Ubuntu packages for raring.&lt;/p&gt;</comment>
                            <comment id="104194" author="eliot" created="Wed, 28 Mar 2012 04:22:46 +0000"  >&lt;p&gt;The SSL code in mongo is quite tiny, as it forced all sockets to use ssl, and uses openssl.&lt;br/&gt;
If you compile yourself, you are dynamically linking to openssl, so you just need to keep your openssl library up to date.&lt;br/&gt;
If there are bugs/security issues in the mongo code, it would go through the normal security channels (the alerts page, etc...) and get backported, so the source changes would be in a source release.&lt;br/&gt;
10gen commercial support would cover running with ssl.&lt;/p&gt;

&lt;p&gt;Overall - we do hope to get the licensing/export issues worked out in the not too distant future, but obviously need to be careful.&lt;/p&gt;</comment>
                            <comment id="104168" author="levi.corcoran" created="Tue, 27 Mar 2012 23:24:39 +0000"  >&lt;p&gt;Eliot - I understand the licensing/export complications; but I&apos;m wondering if you could clarify the nature of the current &apos;compile it yourself&apos; option.  This is a critical blocking issue for usage of Mongo in some security-sensitive areas (dealing with PCI, HIPPA, or other compliance requirements).&lt;/p&gt;

&lt;ul&gt;
	&lt;li&gt;Has the SSL code been fully tested and gone through appropriate security reviews?&lt;/li&gt;
	&lt;li&gt;Is this a &apos;supported&apos; configuration - if we get commercial support from 10gen, and/or need to report bugs with SSL usage?&lt;/li&gt;
	&lt;li&gt;Are you monitoring for any security vulnerabilities and generally &apos;maintaining&apos; the SSL code?&lt;/li&gt;
	&lt;li&gt;Is there any mechanism for notifications on changes to the SSL code in the event of a known vulnerability?  Should we expect to see known issues/fixes appear on &lt;a href=&quot;http://www.mongodb.org/display/DOCS/Alerts&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;http://www.mongodb.org/display/DOCS/Alerts&lt;/a&gt; - or would those simply be commits to the Mongo codebase we&apos;d need to monitor for (since they wouldn&apos;t ever be part of an actual packaged &apos;release&apos;)?&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;Any insight you could provide would be greatly appreciated!&lt;/p&gt;</comment>
                            <comment id="101574" author="scotthernandez" created="Thu, 22 Mar 2012 19:56:03 +0000"  >&lt;p&gt;We need to support both encrypted and non-encrypted at the same via some auto-negotiation and/or alternative ports for SSL/NON-SSL.&lt;/p&gt;

&lt;p&gt;Currently it is all on, or off and provides no way to transition a live system without taking everything down to migrate from one level to another.&lt;/p&gt;

&lt;p&gt;In addition adding a force flag which can be set after the migration is needed to lock a current system in to one of the two modes to enforce that behavior.&lt;/p&gt;

&lt;p&gt;It would be preferable for negotiation to prefer SSL, but fall-back so that clients can do the same. This would allow inter-connects (replication, internal sharded connections) to be secured without users having to also.&lt;/p&gt;</comment>
                            <comment id="86645" author="eliot" created="Wed, 8 Feb 2012 20:15:08 +0000"  >&lt;p&gt;The code for ssl is basically done - the problems are figuring out packaging/licensing/export issues.&lt;/p&gt;</comment>
                            <comment id="86500" author="zakharov" created="Wed, 8 Feb 2012 15:05:20 +0000"  >&lt;p&gt;Is there any update on this you could give us? Can we still hope for 2.2 or has it been postponed?&lt;/p&gt;</comment>
                            <comment id="66226" author="eliot" created="Fri, 11 Nov 2011 16:05:34 +0000"  >&lt;p&gt;We&apos;re hoping 2.2&lt;br/&gt;
The problems are around licensing and linking issues, not technical though, so a bit hard to be 100% sure of.&lt;/p&gt;

&lt;p&gt;Compiling in yourself is definitely an option though (scons --ssl) &lt;/p&gt;</comment>
                            <comment id="66195" author="flavien" created="Fri, 11 Nov 2011 14:33:16 +0000"  >&lt;p&gt;So, is there an ETA for having SSL officially supported?&lt;/p&gt;</comment>
                            <comment id="50088" author="laradji" created="Tue, 23 Aug 2011 09:34:21 +0000"  >&lt;p&gt;Ssl is needed for data transfert between replicat set , if you use replicat set on multiple datacenter your data will go all over the net in clear unless you have a complex installation of vpn router.&lt;/p&gt;

</comment>
                            <comment id="46333" author="eliot" created="Thu, 4 Aug 2011 12:28:39 +0000"  >&lt;p&gt;@flavien - no.  features are never backported.&lt;/p&gt;</comment>
                            <comment id="46319" author="flavien" created="Thu, 4 Aug 2011 11:09:07 +0000"  >&lt;p&gt;This is good news. Does it mesn SSL will be supported in 1.8.4?&lt;/p&gt;</comment>
                            <comment id="45517" author="eliot" created="Mon, 1 Aug 2011 05:16:49 +0000"  >&lt;p&gt;Just an update.&lt;/p&gt;

&lt;p&gt;There is rudimentary support for SSL coded currently - but not linked in.&lt;br/&gt;
You can build with scons --ssl&lt;br/&gt;
The API, command line options are all fully subject to change.&lt;br/&gt;
There are currently no docs, and won&apos;t be till the config options are more defined.&lt;/p&gt;</comment>
                            <comment id="45420" author="julien1486" created="Sat, 30 Jul 2011 14:56:49 +0000"  >&lt;p&gt;Waiting for ssl encryption before using MongoDB. Need to store confidential data and cannot afford my password to be sniffed.&lt;/p&gt;</comment>
                            <comment id="44448" author="flavien" created="Tue, 26 Jul 2011 09:21:25 +0000"  >&lt;p&gt;Regarding encryption, I think this is very important to have that in mongodb. If you want to use a mongodb cloud provider (like Mongo HQ), you have to connect to the server through the internet, and there is a high risk of the traffic being sniffed. Adding an SSL option is almost a prerequisite to make those MongoDB clould providers relevant.&lt;/p&gt;</comment>
                            <comment id="30217" author="eliot" created="Fri, 29 Apr 2011 00:10:30 +0000"  >&lt;p&gt;new ticket for compression&lt;/p&gt;</comment>
                            <comment id="30216" author="eliot" created="Fri, 29 Apr 2011 00:10:12 +0000"  >&lt;p&gt;These were originally the same&lt;/p&gt;</comment>
                            <comment id="29259" author="nanodeath" created="Tue, 19 Apr 2011 05:06:50 +0000"  >&lt;p&gt;If gzip uses too much CPU (plausible), perhaps Google&apos;s Snappy would be a better fit?  &lt;a href=&quot;http://code.google.com/p/snappy/&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;http://code.google.com/p/snappy/&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="27269" author="dblock" created="Wed, 30 Mar 2011 12:30:32 +0000"  >&lt;p&gt;Please consider that in the future there will be other protocols than tcp/ip (named pipes, shared memory, air pigeon) and that ssl is a layer on top of this. In addition, for SSL it&apos;s important to be able to swap libraries and both know and adjust the encryption levels used for SSL and for other places in MongoDB where encryption happens. This is because a) FIPS compliance is required in the US for both encryption generally and secure communication specifically in all common criteria/gov contracts b) export laws will force the use of different openssl versions in various countries. &lt;/p&gt;</comment>
                            <comment id="27268" author="zaxim" created="Wed, 30 Mar 2011 12:14:19 +0000"  >&lt;p&gt;I&apos;m currently looking at the mongoDB arch, and trying to determine an elegant way of using openSSL APIs to handle ALL communication between client, server, mongos, mongoconf, shards, and replicas. The biggest problem with this is, is that it&apos;s going to require some digging and working Mongo&apos;s guts.&lt;/p&gt;</comment>
                            <comment id="27266" author="matrix64" created="Wed, 30 Mar 2011 09:45:07 +0000"  >&lt;p&gt;@John Crenshaw&lt;br/&gt;
In your position I would use IPsec for transparent encryption between hosts.&lt;/p&gt;</comment>
                            <comment id="27265" author="bugslayer" created="Wed, 30 Mar 2011 09:36:09 +0000"  >&lt;p&gt;I thought that the SSL issue could be worked around using stunnel, but it appears that this may not actually be practical (requiring each node to maintain a separate active local port for every other node that it may connect with). The problem is not the DB&amp;lt;-&amp;gt;application exchange, but rather, the communication between mongos, mongoconf, shards, and replicas. If you keep everything in one data center you could secure it at the physical level, but if you locate your servers in multiple locations this won&apos;t work. Unencrypted replication between geographically separate datacenters would be reckless. Since &quot;what if your datacenter burns down&quot; was used extensively as an argument in favor of replication over journaling in the past, this seems to be a pretty serious oversight.&lt;/p&gt;

&lt;p&gt;If anyone else has found a good workaround for this problem, I&apos;d love to know what it was.&lt;/p&gt;</comment>
                            <comment id="25590" author="jzcfk9" created="Wed, 9 Mar 2011 11:54:54 +0000"  >&lt;p&gt;I don&apos;t see this issue in the roadmap.  What&apos;s the expected date for work to begin on SSL support?  I also would second the motion for mutual SSL authentication support.  As already commented above, SSL is a must in the federal space.  Without SSL support, MongoDB will remain unused.&lt;/p&gt;</comment>
                            <comment id="24738" author="uweschaefer" created="Sat, 26 Feb 2011 12:02:08 +0000"  >&lt;p&gt;+1 for optional compression on the wire.&lt;/p&gt;</comment>
                            <comment id="22360" author="dblock" created="Fri, 14 Jan 2011 18:40:16 +0000"  >&lt;p&gt;I would split this issue into encryption and compression. For encryption, consider sticking as close as possible to SSL, it&apos;s a known entity. A related issue &lt;a href=&quot;https://jira.mongodb.org/browse/SERVER-2360&quot; title=&quot;Add a stronger password authentication scheme (replace md5 with sha?)&quot; class=&quot;issue-link&quot; data-issue-key=&quot;SERVER-2360&quot;&gt;&lt;del&gt;SERVER-2360&lt;/del&gt;&lt;/a&gt; is with authentication and certificate-based auth w/ SSL  would be great.&lt;/p&gt;</comment>
                            <comment id="21093" author="zippy1981" created="Mon, 6 Dec 2010 14:12:02 +0000"  >&lt;p&gt;It seems there is a new game in town when it comes to ssl libraries: &lt;a href=&quot;http://axtls.sourceforge.net/&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;http://axtls.sourceforge.net/&lt;/a&gt; Supposed to be nicer to work with than openssl. Never programmed against either just reporting what I&apos;ve been told.&lt;/p&gt;</comment>
                            <comment id="19926" author="carrotsalad" created="Mon, 1 Nov 2010 21:49:24 +0000"  >&lt;p&gt;Regarding compression: gzip can be CPU-intense.  One alternative I&apos;ve read about recently is LZF compression, a variation of Lempel-Ziv compression, optimized for  super fast compression and un-crompression.&lt;/p&gt;

&lt;p&gt;The main implementation is written in portable C:  &lt;a href=&quot;http://oldhome.schmorp.de/marc/liblzf.html&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;http://oldhome.schmorp.de/marc/liblzf.html&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;There&apos;s been a recent Java port of that library here: &lt;a href=&quot;http://github.com/ning/compress&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;http://github.com/ning/compress&lt;/a&gt;&lt;br/&gt;
And a discussion of the features here: &lt;a href=&quot;http://www.cowtowncoder.com/blog/archives/2010/10/entry_432.html&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;http://www.cowtowncoder.com/blog/archives/2010/10/entry_432.html&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;This doesn&apos;t solve the encryption feature obviously, but maybe encryption should be broken out into a separate issue?&lt;/p&gt;</comment>
                            <comment id="19258" author="zippy1981" created="Sat, 16 Oct 2010 18:41:31 +0000"  >&lt;p&gt;I&apos;d like an SSL ecrrypted port. It should be differtet from the standard port. You should be able to turn the two ports on and off. Using SSL also means you could offset encryption to a hardware SSL accellerator.&lt;/p&gt;
</comment>
                            <comment id="16043" author="nadavwr" created="Thu, 22 Jul 2010 14:30:40 +0000"  >&lt;p&gt;Regarding compression: transport level data de-duplication can fit the bill nicely. &lt;br/&gt;
There&apos;s a nice paper outlining the technique as applied to html+http &lt;span class=&quot;error&quot;&gt;&amp;#91;1&amp;#93;&lt;/span&gt;. I expect bson won&apos;t be all that different. &lt;br/&gt;
The common approach is to sample Rabin fingerprints from the data stream and find points of similarity to previous chunks, and then grow the points of similarity to the largest chunks that match. &lt;br/&gt;
Chunks can be communicated plainly &amp;#8211; nothing &quot;funny&quot; has to happen on the bit-level. This has more in common with rle than with gzip, but can be far more general-purpose than rle. &lt;/p&gt;


&lt;p&gt;While I&apos;m at it, a few words on storage de-duplication: &lt;/p&gt;

&lt;p&gt;Data de-duplication introduces a level of indirection, but other than that the data is still laid out the same; OTOH, the main disadvantage of gzip is that your data becomes opaque if you go beyond compressing values. &lt;/p&gt;

&lt;p&gt;Caching a limited number of commonly duplicated chunks of data in RAM, and using copy-on-write once they change, can be applicable to slow changing, low cardinality data &amp;#8211; but as opposed to the highly effective rle compression schemes used in relational column-oriented databases, data de-duplication works very well on semi-structured data. &lt;/p&gt;

&lt;p&gt;This can be implemented using specially annotated DBRefs, which for all intents and purposes will be resolved transparently by MongoDB for both querying and indexing. If the referenced documents are all cached, there should be no performance problem. Kind of like &quot;hard references&quot; that will be transparent to the user, as opposed to the &quot;soft references&quot; MongoDB has today. &lt;/p&gt;

&lt;p&gt;&lt;span class=&quot;error&quot;&gt;&amp;#91;1&amp;#93;&lt;/span&gt; &lt;a href=&quot;http://www.cs.washington.edu/homes/franzi/pdf/net_project.pdf&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;http://www.cs.washington.edu/homes/franzi/pdf/net_project.pdf&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="14501" author="crsmp" created="Sat, 29 May 2010 14:12:50 +0000"  >&lt;p&gt;My vote is for encryption of all Mongodb traffic.  This is a major requirement in many federal spaces and should the 10gen owners think that&apos;s a possible business case, this feature and others would be a step in the right direction.&lt;/p&gt;</comment>
                            <comment id="14203" author="chx" created="Wed, 12 May 2010 12:28:11 +0000"  >&lt;p&gt;I have offered &lt;a href=&quot;http://jira.mongodb.org/browse/SERVER-863&quot; class=&quot;external-link&quot; rel=&quot;nofollow&quot;&gt;http://jira.mongodb.org/browse/SERVER-863&lt;/a&gt; as one way to save space on disk / wire / memory.&lt;/p&gt;</comment>
                            <comment id="14114" author="continuation" created="Fri, 7 May 2010 14:28:44 +0000"  >&lt;p&gt;While compressing data before sending it is good, I think it&apos;s better to compress the data before storing it. That way data size could be minimized to fit into RAM or SSD (SSDs are still expensive and limited in capacity &amp;#8211; A 64GB X25-E costs $800).&lt;/p&gt;</comment>
                            <comment id="13400" author="eliot" created="Fri, 2 Apr 2010 15:37:04 +0000"  >&lt;p&gt;trying to keep 1.5/1.6 very focused on sharding + replica sets.&lt;br/&gt;
will try to get it out asap so we can go back to features like these&lt;/p&gt;</comment>
                            <comment id="11903" author="eliot" created="Fri, 22 Jan 2010 00:57:36 +0000"  >&lt;p&gt;If you have a moment - could you try compressing a single one of those 2200 objects?&lt;br/&gt;
Curious what the compression rate is for you - as on that size object i&apos;ve generally seen fairly poor performance&lt;/p&gt;</comment>
                            <comment id="11901" author="rgiar" created="Thu, 21 Jan 2010 21:32:21 +0000"  >&lt;p&gt;I find this very important for large data requests. Particularly given that most documents have repeated schema (and often large key names), the compression factor should be large. Anecdotally, I have a collection of 2200 documents that is 3.6mb uncompressed and 364k compressed with basic gzip.&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10011">
                    <name>Depends</name>
                                            <outwardlinks description="depends on">
                                        <issuelink>
            <issuekey id="11198">SERVER-572</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="73237">SERVER-9482</issuekey>
        </issuelink>
                            </outwardlinks>
                                                                <inwardlinks description="is depended on by">
                                        <issuelink>
            <issuekey id="25112">SERVER-4319</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10010">
                    <name>Duplicate</name>
                                                                <inwardlinks description="is duplicated by">
                                        <issuelink>
            <issuekey id="63003">SERVER-8291</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="30128">SERVER-4904</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                            <outwardlinks description="related to">
                                        <issuelink>
            <issuekey id="16468">SERVER-3018</issuekey>
        </issuelink>
            <issuelink>
            <issuekey id="51791">SERVER-7202</issuekey>
        </issuelink>
                            </outwardlinks>
                                                                <inwardlinks description="is related to">
                                                        </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                <customfield id="customfield_10050" key="com.atlassian.jira.toolkit:comments">
                        <customfieldname># Replies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>43.0</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10055" key="com.atlassian.jira.ext.charting:firstresponsedate">
                        <customfieldname>Date of 1st Reply</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>Thu, 21 Jan 2010 21:32:21 +0000</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10052" key="com.atlassian.jira.toolkit:dayslastcommented">
                        <customfieldname>Days since reply</customfieldname>
                        <customfieldvalues>
                                        8 years, 15 weeks, 6 days ago
    
                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_18254" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Dependencies</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue><![CDATA[<s><a href='https://jira.mongodb.org/browse/SERVER-572'>SERVER-572</a></s>, <s><a href='https://jira.mongodb.org/browse/SERVER-9482'>SERVER-9482</a></s>]]></customfieldvalue>


                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10057" key="com.atlassian.jira.toolkit:lastusercommented">
                        <customfieldname>Last comment by Customer</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>true</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10056" key="com.atlassian.jira.toolkit:lastupdaterorcommenter">
                        <customfieldname>Last commenter</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>ramon.fernandez@mongodb.com</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_11151" key="com.atlassian.jira.toolkit:LastCommentDate">
                        <customfieldname>Last public comment date</customfieldname>
                        <customfieldvalues>
                            8 years, 15 weeks, 6 days ago
                        </customfieldvalues>
                    </customfield>
                                                                                                                        <customfield id="customfield_10000" key="com.atlassian.jira.plugin.system.customfieldtypes:radiobuttons">
                        <customfieldname>Old_Backport</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10000"><![CDATA[No]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_10051" key="com.atlassian.jira.toolkit:participants">
                        <customfieldname>Participants</customfieldname>
                        <customfieldvalues>
                                        <customfieldvalue>andreas.nilsson</customfieldvalue>
            <customfieldvalue>continuation</customfieldvalue>
            <customfieldvalue>schwerin@mongodb.com</customfieldvalue>
            <customfieldvalue>jzcfk9</customfieldvalue>
            <customfieldvalue>crsmp</customfieldvalue>
            <customfieldvalue>dblock</customfieldvalue>
            <customfieldvalue>carrotsalad</customfieldvalue>
            <customfieldvalue>eliot</customfieldvalue>
            <customfieldvalue>milkie@mongodb.com</customfieldvalue>
            <customfieldvalue>flavien</customfieldvalue>
            <customfieldvalue>javacruft</customfieldvalue>
            <customfieldvalue>zakharov</customfieldvalue>
            <customfieldvalue>bugslayer</customfieldvalue>
            <customfieldvalue>ccjon</customfieldvalue>
            <customfieldvalue>julien1486</customfieldvalue>
            <customfieldvalue>zippy1981</customfieldvalue>
            <customfieldvalue>chx</customfieldvalue>
            <customfieldvalue>laradji</customfieldvalue>
            <customfieldvalue>levi.corcoran</customfieldvalue>
            <customfieldvalue>matrix64</customfieldvalue>
            <customfieldvalue>nanodeath</customfieldvalue>
            <customfieldvalue>nadavwr</customfieldvalue>
            <customfieldvalue>ramon.fernandez@mongodb.com</customfieldvalue>
            <customfieldvalue>rvanderwall23</customfieldvalue>
            <customfieldvalue>rgiar</customfieldvalue>
            <customfieldvalue>scotthernandez</customfieldvalue>
            <customfieldvalue>thijs</customfieldvalue>
            <customfieldvalue>tyler@10gen.com</customfieldvalue>
            <customfieldvalue>uweschaefer</customfieldvalue>
            <customfieldvalue>zaxim</customfieldvalue>
    
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                        <customfield id="customfield_14254" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Product Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hrpt7b:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|hrfoen:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>3870</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_23361" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Requested By</customfieldname>
                        <customfieldvalues>
                                

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_10053" key="com.atlassian.jira.ext.charting:timeinstatus">
                        <customfieldname>Time In Status</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_22870" key="com.onresolve.jira.groovy.groovyrunner:scripted-field">
                        <customfieldname>Triagers</customfieldname>
                        <customfieldvalues>
                                

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_14350" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>serverRank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hrl63j:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                    </customfields>
    </item>
</channel>
</rss>