{"id":9680,"date":"2021-09-09T00:00:41","date_gmt":"2021-09-09T07:00:41","guid":{"rendered":"https:\/\/www.couchbase.com\/blog\/?p=9680"},"modified":"2025-06-13T20:45:57","modified_gmt":"2025-06-14T03:45:57","slug":"at-rest-data-security-with-luks-encryption","status":"publish","type":"post","link":"https:\/\/www.couchbase.com\/blog\/es\/at-rest-data-security-with-luks-encryption\/","title":{"rendered":"Proteja sus datos en reposo con LUKS Disk Encryption en Couchbase"},"content":{"rendered":"<p><strong>Couchbase soporta ahora el cifrado de disco LUKS<\/strong> para proteger sus datos en reposo. \u00bfHasta qu\u00e9 punto es seguro LUKS?<\/p>\n<p>Couchbase 7.0 pone un gran \u00e9nfasis en la seguridad, estrenando soporte tanto para <a href=\"https:\/\/www.couchbase.com\/blog\/es\/introducing-rbac-security-for-collections\/?ref=blog\" target=\"_blank\" rel=\"noopener\">control de acceso basado en funciones (RBAC) para \u00e1mbitos y colecciones<\/a>y cifrado de datos en reposo mediante Linux Unified Key Setup (<a href=\"https:\/\/access.redhat.com\/documentation\/en-us\/red_hat_enterprise_linux\/7\/html\/security_guide\/sec-encryption#sec-Using_LUKS_Disk_Encryption\/?ref=hello-from-couchbase\" target=\"_blank\" rel=\"noopener\">LUKS<\/a>).<\/p>\n<p>El cifrado de discos es una parte vital de la estrategia de seguridad de datos de cualquier organizaci\u00f3n y del cumplimiento de PCI DSS, FIPS, FISMA, GDPR y otras normas reglamentarias.<\/p>\n<p>Entonces, \u00bfes seguro el cifrado LUKS? En este post vamos a empezar con una visi\u00f3n general de las opciones de seguridad para las tres etapas de los documentos en un cl\u00faster de Couchbase Server - datos en proceso, datos en tr\u00e1nsito y datos en reposo (ver la tabla de abajo) - a continuaci\u00f3n, profundizar en los detalles de la seguridad de los datos en reposo a trav\u00e9s de LUKS cifrado en disco.<\/p>\n<table>\n<caption><strong>Opciones de cifrado para 3 fases del documento<\/strong><\/caption>\n<tbody>\n<tr>\n<td><strong>Escenario<\/strong><\/td>\n<td><strong>Descripci\u00f3n<\/strong><\/td>\n<td><strong>Caso pr\u00e1ctico<\/strong><\/td>\n<td><strong>Opciones de cifrado en Couchbase<\/strong><\/td>\n<\/tr>\n<tr>\n<td>Datos en curso<\/td>\n<td>Datos activos, memoria del sistema<\/td>\n<td>Documentos en uso<\/td>\n<td>Cifrado a nivel de campo en la capa de aplicaci\u00f3n<\/td>\n<\/tr>\n<tr>\n<td>Datos en tr\u00e1nsito<\/td>\n<td>Datos que se mueven entre sistemas<\/td>\n<td>Replicaci\u00f3n, replicaci\u00f3n entre centros de datos (XDCR)<\/td>\n<td>Cifrado TLS, <a href=\"https:\/\/www.couchbase.com\/blog\/es\/x-509-certificate-based-authentication\/?ref=blog\" target=\"_blank\" rel=\"noopener\">Certificados X.509<\/a><\/td>\n<\/tr>\n<tr>\n<td>Datos en reposo<\/td>\n<td>Datos que no est\u00e1n en uso activo<\/td>\n<td>Cubos en el disco de una m\u00e1quina desconectada<\/td>\n<td>Varias opciones, incluido LUKS y compatibilidad con soluciones de terceros como <a href=\"https:\/\/cpl.thalesgroup.com\/encryption\/vormetric-data-security-platform\/?ref=hello-from-couchbase\" target=\"_blank\" rel=\"noopener\">Thales Vormetric<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>\u00bfPor qu\u00e9 utilizar el cifrado de datos en reposo?<\/h2>\n<p>El cifrado de datos en reposo protege los sistemas de almacenamiento bloqueados o desconectados e impide que los datos se lean sin la autoridad y el acceso adecuados. Los datos cifrados en reposo no permanecen protegidos mientras un dispositivo est\u00e1 en l\u00ednea, desbloqueado y operativo. Para ello, debes utilizar uno de los otros m\u00e9todos de cifrado mencionados en la tabla anterior.<\/p>\n<p>Los siguientes son escenarios comunes para el cifrado de datos en reposo:<\/p>\n<ul>\n<li style=\"list-style-type: none\">\n<ul>\n<li>Proteger la informaci\u00f3n confidencial o personalmente identificable contra cualquier posible violaci\u00f3n de los datos.<\/li>\n<li>Por defecto en dispositivos como los smartphones (a menudo denominado cifrado de disco completo).<\/li>\n<li>En entornos como la nube, donde varios usuarios acceden al mismo hardware subyacente<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<div class=\"wp-block-spacer\" style=\"height: 15px\" aria-hidden=\"true\"><\/div>\n<h2>Cifrado de disco LUKS<\/h2>\n<p>LUKS es una herramienta totalmente de c\u00f3digo abierto que constituye el est\u00e1ndar de facto para el cifrado de discos en entornos Linux.<\/p>\n<p>Est\u00e1 incluido en todos los sistemas operativos Linux certificados por Couchbase y es compatible con los respectivos proveedores de sistemas operativos. LUKS se sit\u00faa en la capa del n\u00facleo y cifra el almacenamiento a nivel de bloque de disco, lo que permite a los usuarios implementar de forma transparente cualquier sistema de archivos sobre este cifrado a nivel de bloque. LUKS puede cifrar particiones de almacenamiento, que pueden presentarse desde una \u00fanica unidad, matrices RAID multidisco, Logical Volume Manager (LVM) e incluso particiones respaldadas por archivos.<\/p>\n<h3>Para qu\u00e9 sirve el cifrado LUKS...<\/h3>\n<p>LUKS es flexible y ofrece diversos conjuntos de cifrado.<\/p>\n<p>Por defecto en un entorno Red Hat 8 Linux, LUKS utiliza una clave AES (Advanced Encryption Standard) de 512 bits altamente segura. Los vol\u00famenes LUKS encriptados contienen m\u00faltiples ranuras para claves, lo que permite a los usuarios a\u00f1adir claves de seguridad o frases de contrase\u00f1a, adem\u00e1s de utilizar funciones como la revocaci\u00f3n de claves y la protecci\u00f3n contra frases de contrase\u00f1a err\u00f3neas mediante Argon2.<\/p>\n<h3>...\u00bfy para qu\u00e9 no sirve?<\/h3>\n<p>LUKS no es una buena opci\u00f3n para instancias de Couchbase desplegadas en plataformas que no sean Linux, como MacOS y Windows. Tampoco es adecuado para clientes que no tengan un contrato de soporte activo con el proveedor del sistema operativo.<\/p>\n<p>Tecnolog\u00edas de cifrado est\u00e1ndar proporcionadas por el sistema operativo, como Microsoft Encrypted File System (EFS) o <a href=\"https:\/\/docs.couchbase.com\/server\/current\/manage\/manage-security\/manage-connections-and-disks.html?ref=blog#securing-on-disk-data\u200b\u200b\" target=\"_blank\" rel=\"noopener\">Socios externos de Couchbase para el cifrado en reposo<\/a> son una mejor opci\u00f3n si su organizaci\u00f3n no utiliza Linux o no tiene un contrato de asistencia con un proveedor de sistemas operativos.<\/p>\n<h2>Uso de LUKS Security para cifrar los datos de Couchbase en reposo<\/h2>\n<p>You have several ways to implement LUKS in a Linux environment \u2013 most commonly using `dm-crypt`(part of the kernel-level device mapper infrastructure) and the `cryptsetup` command-line utility to set up `dm-crypt` targets.<\/p>\n<p>En el ejemplo de c\u00f3digo que sigue, te mostrar\u00e9 un ejemplo de comandos que he usado en mi cluster de Ubuntu 16 Couchbase Server para montar un disco con LVM. Luego te mostrar\u00e9 c\u00f3mo desplegar un volumen l\u00f3gico encriptado LUKS y montarlo como directorio de datos para un nodo de Couchbase Server. Esto asegura que si tu Couchbase Server es violado, los datos confidenciales en tus Buckets de Couchbase no ser\u00e1n accesibles a usuarios no autorizados.<\/p>\n<p><em>Los pasos proporcionados aqu\u00ed son anteriores a la versi\u00f3n General Availability (GA) de Couchbase Server 7.0 y pueden cambiar en el momento del lanzamiento o con futuras actualizaciones. Siempre <a href=\"https:\/\/docs.couchbase.com\/server\/current\/manage\/manage-security\/manage-connections-and-disks.html?ref=blog#securing-on-disk-data\" target=\"_blank\" rel=\"noopener\">consulte la documentaci\u00f3n de Couchbase sobre seguridad para obtener la informaci\u00f3n m\u00e1s actualizada sobre el producto<\/a>.<\/em><\/p>\n<p>Siga los siguientes pasos en un nodo de Couchbase Server antes de a\u00f1adirlo a un cluster y cargar datos en los Buckets. <strong>Nota: Estos pasos borrar\u00e1n todo lo que se encuentre actualmente en el disco de destino, as\u00ed que tenga cuidado y aseg\u00farese de que est\u00e1 escribiendo en el dispositivo correcto.<\/strong><\/p>\n<p><strong>1.<\/strong> Install the `lvm` and `cryptsetup` utility.<\/p>\n<pre class=\"\">sudo apt-get install lvm2 cryptsetup\r\n<\/pre>\n<div class=\"wp-block-spacer\" style=\"height: 15px\" aria-hidden=\"true\"><\/div>\n<p><strong>2.<\/strong> Configure the drive (`\/dev\/sdb`) and create a new primary partition to use LVM.<\/p>\n<pre class=\"\">$ sudo fdisk \/dev\/sdb\r\n\r\nComando (m para ayuda): n\r\nTipo de partici\u00f3n\r\np primaria (0 primaria, 0 extendida, 4 libres)\r\ne extendida (contenedor para particiones l\u00f3gicas)\r\nSeleccionar (por defecto p): p\r\nN\u00famero de partici\u00f3n (1-4, por defecto 1): 1\r\nPrimer sector (2048-2097151, por defecto 2048):\r\n\u00daltimo sector, +sectores o +tama\u00f1o{K,M,G,T,P} (2048-2097151, por defecto 2097151):\r\n\r\nCreada una nueva partici\u00f3n 1 de tipo 'Linux' y de tama\u00f1o 1023 MiB.\r\n\r\nComando (m para ayuda): t\r\nPartici\u00f3n 1 seleccionada\r\n\r\nTipo de partici\u00f3n (teclee L para listar todos los tipos): 8e\r\nCambiado el tipo de partici\u00f3n 'Linux' a 'Linux LVM'.\r\n\r\nComando (m para ayuda): p\r\nDisco \/dev\/sdb: 1 GiB, 1073741824 bytes, 2097152 sectores\r\nUnidades: sectores de 1 * 512 = 512 bytes\r\nTama\u00f1o del sector (l\u00f3gico\/f\u00edsico): 512 bytes \/ 512 bytes\r\nTama\u00f1o de E\/S (m\u00ednimo\/\u00f3ptimo): 512 bytes \/ 512 bytes\r\nTipo de etiqueta de disco: dos\r\nIdentificador de disco: 0x980c1049\r\n\r\nDispositivo Arranque Inicio Fin Sectores Tama\u00f1o Id Tipo\r\n\/dev\/sdb1 2048 2097151 2095104 1023M 8e Linux LVM\r\n\r\nComando (m para ayuda): w\r\nLa tabla de particiones ha sido alterada.\r\nLlamando a ioctl() para releer la tabla de particiones.\r\nSincronizando discos.\r\n<\/pre>\n<div class=\"wp-block-spacer\" style=\"height: 15px\" aria-hidden=\"true\"><\/div>\n<p><strong>3.<\/strong> Configure LVM to use `\/dev\/sdb1` as a physical volume.<\/p>\n<pre class=\"\">$ sudo pvcreate \/dev\/sdb1\r\nPhysical volume \"\/dev\/sdb1\" successfully created\r\n<\/pre>\n<div class=\"wp-block-spacer\" style=\"height: 15px\" aria-hidden=\"true\"><\/div>\n<p><strong>4.<\/strong> Create a volume group in which the physical volume will reside. We will name this `couchbase`.<\/p>\n<pre class=\"\">$ sudo vgcreate couchbase \/dev\/sdb1\r\nVolume group \"couchbase\" successfully created\r\n<\/pre>\n<div class=\"wp-block-spacer\" style=\"height: 15px\" aria-hidden=\"true\"><\/div>\n<p><strong>5.<\/strong> Create a 500MB logical volume named `cbdata` in the `couchbase` volume group.<\/p>\n<pre class=\"\">$ sudo lvcreate -L 500M -n cbdata \/dev\/couchbase\r\nLogical volume \"cbdata\" created.\r\n<\/pre>\n<div class=\"wp-block-spacer\" style=\"height: 15px\" aria-hidden=\"true\"><\/div>\n<p><strong>6.<\/strong> Use the `cryptsetup` utility to encrypt the `cbdata` logical volume.<\/p>\n<pre class=\"\">$ sudo cryptsetup --verbose --verify-passphrase luksFormat \/dev\/couchbase\/cbdata\r\n\r\nADVERTENCIA\r\n========\r\nEsto sobrescribir\u00e1 los datos en \/dev\/couchbase\/cbdata irrevocablemente.\r\n\r\n\u00bfEst\u00e1 usted seguro? (Escriba s\u00ed en may\u00fasculas): SI\r\nIntroduzca la contrase\u00f1a:\r\nVerificar frase de contrase\u00f1a:\r\nComando ejecutado.\r\n<\/pre>\n<div class=\"wp-block-spacer\" style=\"height: 15px\" aria-hidden=\"true\"><\/div>\n<p><strong>7.<\/strong> Unlock the encrypted `cbdata` logical volume and make this accessible as a device named `cbdata-luks`.<\/p>\n<pre class=\"\">$ sudo cryptsetup luksAbrir \/dev\/couchbase\/cbdata cbdata-luks\r\nIntroduzca la frase de contrase\u00f1a para \/dev\/couchbase\/cbdata:\r\n<\/pre>\n<div class=\"wp-block-spacer\" style=\"height: 15px\" aria-hidden=\"true\"><\/div>\n<p><strong>8.<\/strong> Write a filesystem on top of the `cbdata-luks` device.<\/p>\n<pre class=\"\">$ sudo mkfs.ext4 \/dev\/mapper\/cbdata-luks\r\nmke2fs 1.42.13 (17-mayo-2015)\r\nCreando sistema de archivos con 509952 bloques de 1k y 127512 inodos.\r\nUUID del sistema de archivos: a26d318b-afdd-45ca-857a-063899183ffd\r\nCopias de seguridad de superbloques almacenadas en bloques\r\n8193, 24577, 40961, 57345, 73729, 204801, 221185, 401409\r\n\r\nAsignaci\u00f3n de tablas de grupo: realizado\r\nEscritura de tablas de inodos: realizada\r\nCreaci\u00f3n del diario (8192 bloques): realizado\r\nEscritura de superbloques e informaci\u00f3n contable del sistema de archivos: realizado\r\n<\/pre>\n<div class=\"wp-block-spacer\" style=\"height: 15px\" aria-hidden=\"true\"><\/div>\n<p><strong>9.<\/strong> Create a directory at `\/couchbase-data` to mount the filesystem, which will be used for the Couchbase data directory, then mount the filesystem.<\/p>\n<pre class=\"\">$ sudo mkdir \/couchbase-data\r\n$ sudo mount \/dev\/mapper\/cbdata-luks \/couchbase-data\r\n<\/pre>\n<div class=\"wp-block-spacer\" style=\"height: 15px\" aria-hidden=\"true\"><\/div>\n<p><strong>10.<\/strong> Now we have a LUKS encrypted storage device mounted at `\/couchbase-data`, which we use as the target for the Couchbase Server data directory. Verify this with the `mount` and `cryptsetup` commands like so:<\/p>\n<pre class=\"\">$ mount\r\n\u2026\r\n\/dev\/mapper\/cbdata-luks on \/couchbase-data type ext4 (rw,relatime,data=ordered)\r\n<\/pre>\n<pre class=\"\">$ sudo cryptsetup status \/dev\/mapper\/cbdata-luks\r\n\/dev\/mapper\/cbdata-luks est\u00e1 activo y en uso.\r\ntipo: LUKS1\r\ncifrado: aes-xts-plain64\r\ntama\u00f1o de clave: 256 bits\r\ndispositivo: \/dev\/mapper\/couchbase-cbdata\r\ndesplazamiento: 4096 sectores\r\ntama\u00f1o: 1019904 sectores\r\nmodo: lectura\/escritura\r\n<\/pre>\n<div class=\"wp-block-spacer\" style=\"height: 15px\" aria-hidden=\"true\"><\/div>\n<h2>M\u00e1s informaci\u00f3n sobre Couchbase 7.0<\/h2>\n<p>\u00bfListo para profundizar en Couchbase 7.0 y todas sus caracter\u00edsticas? Echa un vistazo a estos recursos:<\/p>\n<p><strong>Documentaci\u00f3n<\/strong><\/p>\n<p><a href=\"https:\/\/docs.couchbase.com\/server\/7.0\/introduction\/whats-new.html?ref=blog\" target=\"_blank\" rel=\"noopener\">Novedades de la versi\u00f3n 7.0<\/a><\/p>\n<p><a href=\"https:\/\/docs.couchbase.com\/server\/7.0\/release-notes\/relnotes.html?ref=blog\" target=\"_blank\" rel=\"noopener\">Notas de la versi\u00f3n de Couchbase 7.0<\/a><\/p>\n<p><strong>Entradas de blog relacionadas<\/strong><\/p>\n<p><a href=\"https:\/\/www.couchbase.com\/blog\/es\/scopes-and-collections-for-modern-multi-tenant-applications-couchbase-7-0\/?ref=blog\" target=\"_blank\" rel=\"noopener\">C\u00f3mo los \u00e1mbitos y las colecciones simplifican el despliegue de aplicaciones multiusuario en Couchbase<\/a><\/p>\n<p><a href=\"https:\/\/www.couchbase.com\/blog\/es\/couchbase-transactions-with-n1ql\/?ref=blog\" target=\"_blank\" rel=\"noopener\">El lenguaje de consulta N1QL ya admite transacciones ACID distribuidas<\/a><\/p>\n<p><strong>Descargas y asistencia<\/strong><\/p>\n<p>La asistencia al cliente de Enterprise Edition est\u00e1 disponible a trav\u00e9s de sus canales de asistencia habituales. <a href=\"https:\/\/www.couchbase.com\/blog\/es\/forums\/?ref=blog\" target=\"_blank\" rel=\"noopener\">El soporte de la comunidad est\u00e1 disponible a trav\u00e9s de los foros de Couchbase<\/a><\/p>\n<div class=\"wp-block-spacer\" style=\"height: 30px\" aria-hidden=\"true\"><\/div>\n<div style=\"text-align: center\"><strong>Pruebe usted mismo la seguridad de Couchbase<br \/><a href=\"https:\/\/www.couchbase.com\/blog\/es\/downloads\/?ref=blog\" target=\"_blank\" rel=\"noopener\">Prueba Couchbase 7<\/a><\/strong><\/div>\n<div class=\"wp-block-spacer\" style=\"height: 15px\" aria-hidden=\"true\"><\/div>\n<p>&nbsp;<\/p>","protected":false},"excerpt":{"rendered":"<p>Couchbase now supports LUKS disk encryption to secure your data at rest. How secure is LUKS? Couchbase 7.0 puts a big focus on security, debuting support for both role-based access control (RBAC) for Scopes and Collections, and encryption of at-rest [&hellip;]<\/p>","protected":false},"author":1864,"featured_media":11899,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[1815,1816,9415,9336,1813,9375],"tags":[1733,1685,9262],"ppma_author":[8928],"class_list":["post-9680","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-best-practices-and-tutorials","category-couchbase-server","category-xdcr","category-scopes-and-collections","category-security","category-upgrades","tag-compliance","tag-red-hat","tag-tls-encryption"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v26.0) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>How Secure is LUKS? Encryption + Security at Couchbase<\/title>\n<meta name=\"description\" content=\"Get an overview of security options in a Couchbase Server cluster and delve into the specifics of data-at-rest security via LUKS on-disk encryption.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.couchbase.com\/blog\/es\/at-rest-data-security-with-luks-encryption\/\" \/>\n<meta property=\"og:locale\" content=\"es_MX\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Secure Your Data at Rest with LUKS Disk Encryption in Couchbase\" \/>\n<meta property=\"og:description\" content=\"Get an overview of security options in a Couchbase Server cluster and delve into the specifics of data-at-rest security via LUKS on-disk encryption.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.couchbase.com\/blog\/es\/at-rest-data-security-with-luks-encryption\/\" \/>\n<meta property=\"og:site_name\" content=\"The Couchbase Blog\" \/>\n<meta property=\"article:published_time\" content=\"2021-09-09T07:00:41+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-14T03:45:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2020\/12\/luks-disk-encryption-data-at-rest-couchbase-server-7-0-social.jpeg\" \/>\n\t<meta property=\"og:image:width\" content=\"800\" \/>\n\t<meta property=\"og:image:height\" content=\"418\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Ian McCloy, Director Product Management\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2020\/12\/luks-disk-encryption-data-at-rest-couchbase-server-7-0-social.jpeg\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ian McCloy, Director Product Management\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutos\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"TechArticle\",\"@id\":\"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/\"},\"author\":{\"name\":\"Ian McCloy, Director Product Management, Couchbase\",\"@id\":\"https:\/\/www.couchbase.com\/blog\/#\/schema\/person\/7e8c834bce5128ad6cd764cd1c4cea19\"},\"headline\":\"Secure Your Data at Rest with LUKS Disk Encryption in Couchbase\",\"datePublished\":\"2021-09-09T07:00:41+00:00\",\"dateModified\":\"2025-06-14T03:45:57+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/\"},\"wordCount\":992,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.couchbase.com\/blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2020\/12\/luks-disk-encryption-data-at-rest-couchbase-server-7-0.jpeg\",\"keywords\":[\"compliance\",\"Red Hat\",\"TLS encryption\"],\"articleSection\":[\"Best Practices and Tutorials\",\"Couchbase Server\",\"Cross Data Center Replication (XDCR)\",\"Scopes and Collections\",\"Security\",\"Upgrades\"],\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/\",\"url\":\"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/\",\"name\":\"How Secure is LUKS? Encryption + Security at Couchbase\",\"isPartOf\":{\"@id\":\"https:\/\/www.couchbase.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2020\/12\/luks-disk-encryption-data-at-rest-couchbase-server-7-0.jpeg\",\"datePublished\":\"2021-09-09T07:00:41+00:00\",\"dateModified\":\"2025-06-14T03:45:57+00:00\",\"description\":\"Get an overview of security options in a Couchbase Server cluster and delve into the specifics of data-at-rest security via LUKS on-disk encryption.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#primaryimage\",\"url\":\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2020\/12\/luks-disk-encryption-data-at-rest-couchbase-server-7-0.jpeg\",\"contentUrl\":\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2020\/12\/luks-disk-encryption-data-at-rest-couchbase-server-7-0.jpeg\",\"width\":1200,\"height\":628,\"caption\":\"Learn about LUKS disk encryption for securing data at rest, now available in Couchbase Server 7.0\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.couchbase.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Secure Your Data at Rest with LUKS Disk Encryption in Couchbase\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.couchbase.com\/blog\/#website\",\"url\":\"https:\/\/www.couchbase.com\/blog\/\",\"name\":\"The Couchbase Blog\",\"description\":\"Couchbase, the NoSQL Database\",\"publisher\":{\"@id\":\"https:\/\/www.couchbase.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.couchbase.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.couchbase.com\/blog\/#organization\",\"name\":\"The Couchbase Blog\",\"url\":\"https:\/\/www.couchbase.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\/\/www.couchbase.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2023\/04\/admin-logo.png\",\"contentUrl\":\"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2023\/04\/admin-logo.png\",\"width\":218,\"height\":34,\"caption\":\"The Couchbase Blog\"},\"image\":{\"@id\":\"https:\/\/www.couchbase.com\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.couchbase.com\/blog\/#\/schema\/person\/7e8c834bce5128ad6cd764cd1c4cea19\",\"name\":\"Ian McCloy, Director Product Management, Couchbase\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\/\/www.couchbase.com\/blog\/#\/schema\/person\/image\/97dd714a3242521ce9dcea0d96550c5f\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/41f65bee70b5e03e46ae996303a13060d366d405ecb235ff5493d4f1ac3a6f3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/41f65bee70b5e03e46ae996303a13060d366d405ecb235ff5493d4f1ac3a6f3d?s=96&d=mm&r=g\",\"caption\":\"Ian McCloy, Director Product Management, Couchbase\"},\"description\":\"Ian McCloy is the Director of the Platform and Security Product Management Group for Couchbase and lives in the United Kingdom. His dedicated team is responsible for the Reliability, Availability, Serviceability and Security architecture of Couchbase Server and the SaaS Database, Capella. This team also own cloud-native platforms like the Couchbase Kubernetes Autonomous Operator. Ian has a vast range of experience as a Software Engineer, Technical Support Engineer, Quality Assurance Engineer and Systems Administrator. Ian has led global technical teams for the majority of his 20 year professional career and holds several patents in the areas of information security, virtualisation and hardware design. https:\/\/www.linkedin.com\/in\/ianmccloy\/\",\"sameAs\":[\"https:\/\/www.linkedin.com\/in\/ianmccloy\/\"],\"url\":\"https:\/\/www.couchbase.com\/blog\/es\/author\/ian-mccloycouchbase-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"How Secure is LUKS? Encryption + Security at Couchbase","description":"Obtenga una visi\u00f3n general de las opciones de seguridad en un cl\u00faster de Couchbase Server y profundice en los detalles de la seguridad de los datos en reposo mediante el cifrado en disco LUKS.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.couchbase.com\/blog\/es\/at-rest-data-security-with-luks-encryption\/","og_locale":"es_MX","og_type":"article","og_title":"Secure Your Data at Rest with LUKS Disk Encryption in Couchbase","og_description":"Get an overview of security options in a Couchbase Server cluster and delve into the specifics of data-at-rest security via LUKS on-disk encryption.","og_url":"https:\/\/www.couchbase.com\/blog\/es\/at-rest-data-security-with-luks-encryption\/","og_site_name":"The Couchbase Blog","article_published_time":"2021-09-09T07:00:41+00:00","article_modified_time":"2025-06-14T03:45:57+00:00","og_image":[{"width":800,"height":418,"url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2020\/12\/luks-disk-encryption-data-at-rest-couchbase-server-7-0-social.jpeg","type":"image\/jpeg"}],"author":"Ian McCloy, Director Product Management","twitter_card":"summary_large_image","twitter_image":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2020\/12\/luks-disk-encryption-data-at-rest-couchbase-server-7-0-social.jpeg","twitter_misc":{"Written by":"Ian McCloy, Director Product Management","Est. reading time":"6 minutos"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"TechArticle","@id":"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#article","isPartOf":{"@id":"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/"},"author":{"name":"Ian McCloy, Director Product Management, Couchbase","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/person\/7e8c834bce5128ad6cd764cd1c4cea19"},"headline":"Secure Your Data at Rest with LUKS Disk Encryption in Couchbase","datePublished":"2021-09-09T07:00:41+00:00","dateModified":"2025-06-14T03:45:57+00:00","mainEntityOfPage":{"@id":"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/"},"wordCount":992,"commentCount":0,"publisher":{"@id":"https:\/\/www.couchbase.com\/blog\/#organization"},"image":{"@id":"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#primaryimage"},"thumbnailUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2020\/12\/luks-disk-encryption-data-at-rest-couchbase-server-7-0.jpeg","keywords":["compliance","Red Hat","TLS encryption"],"articleSection":["Best Practices and Tutorials","Couchbase Server","Cross Data Center Replication (XDCR)","Scopes and Collections","Security","Upgrades"],"inLanguage":"es","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/","url":"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/","name":"How Secure is LUKS? Encryption + Security at Couchbase","isPartOf":{"@id":"https:\/\/www.couchbase.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#primaryimage"},"image":{"@id":"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#primaryimage"},"thumbnailUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2020\/12\/luks-disk-encryption-data-at-rest-couchbase-server-7-0.jpeg","datePublished":"2021-09-09T07:00:41+00:00","dateModified":"2025-06-14T03:45:57+00:00","description":"Obtenga una visi\u00f3n general de las opciones de seguridad en un cl\u00faster de Couchbase Server y profundice en los detalles de la seguridad de los datos en reposo mediante el cifrado en disco LUKS.","breadcrumb":{"@id":"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#primaryimage","url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2020\/12\/luks-disk-encryption-data-at-rest-couchbase-server-7-0.jpeg","contentUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/sites\/1\/2020\/12\/luks-disk-encryption-data-at-rest-couchbase-server-7-0.jpeg","width":1200,"height":628,"caption":"Learn about LUKS disk encryption for securing data at rest, now available in Couchbase Server 7.0"},{"@type":"BreadcrumbList","@id":"https:\/\/www.couchbase.com\/blog\/at-rest-data-security-with-luks-encryption\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.couchbase.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Secure Your Data at Rest with LUKS Disk Encryption in Couchbase"}]},{"@type":"WebSite","@id":"https:\/\/www.couchbase.com\/blog\/#website","url":"https:\/\/www.couchbase.com\/blog\/","name":"El blog de Couchbase","description":"Couchbase, la base de datos NoSQL","publisher":{"@id":"https:\/\/www.couchbase.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.couchbase.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/www.couchbase.com\/blog\/#organization","name":"El blog de Couchbase","url":"https:\/\/www.couchbase.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2023\/04\/admin-logo.png","contentUrl":"https:\/\/www.couchbase.com\/blog\/wp-content\/uploads\/2023\/04\/admin-logo.png","width":218,"height":34,"caption":"The Couchbase Blog"},"image":{"@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/person\/7e8c834bce5128ad6cd764cd1c4cea19","name":"Ian McCloy, Director de Gesti\u00f3n de Productos, Couchbase","image":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/www.couchbase.com\/blog\/#\/schema\/person\/image\/97dd714a3242521ce9dcea0d96550c5f","url":"https:\/\/secure.gravatar.com\/avatar\/41f65bee70b5e03e46ae996303a13060d366d405ecb235ff5493d4f1ac3a6f3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/41f65bee70b5e03e46ae996303a13060d366d405ecb235ff5493d4f1ac3a6f3d?s=96&d=mm&r=g","caption":"Ian McCloy, Director Product Management, Couchbase"},"description":"Ian McCloy es el Director del Grupo de Gesti\u00f3n de Productos de Plataforma y Seguridad de Couchbase y vive en el Reino Unido. Su equipo dedicado es responsable de la arquitectura de Fiabilidad, Disponibilidad, Capacidad de Servicio y Seguridad de Couchbase Server y la Base de Datos SaaS, Capella. Este equipo tambi\u00e9n es propietario de plataformas nativas de la nube como el Operador Aut\u00f3nomo Couchbase Kubernetes. Ian tiene una amplia experiencia como Ingeniero de Software, Ingeniero de Soporte T\u00e9cnico, Ingeniero de Garant\u00eda de Calidad y Administrador de Sistemas. Ian ha dirigido equipos t\u00e9cnicos globales durante la mayor parte de sus 20 a\u00f1os de carrera profesional y es titular de varias patentes en las \u00e1reas de seguridad de la informaci\u00f3n, virtualizaci\u00f3n y dise\u00f1o de hardware. https:\/\/www.linkedin.com\/in\/ianmccloy\/","sameAs":["https:\/\/www.linkedin.com\/in\/ianmccloy\/"],"url":"https:\/\/www.couchbase.com\/blog\/es\/author\/ian-mccloycouchbase-com\/"}]}},"authors":[{"term_id":8928,"user_id":1864,"is_guest":0,"slug":"ian-mccloycouchbase-com","display_name":"Ian McCloy, Director Product Management","avatar_url":"https:\/\/secure.gravatar.com\/avatar\/41f65bee70b5e03e46ae996303a13060d366d405ecb235ff5493d4f1ac3a6f3d?s=96&d=mm&r=g","author_category":"","last_name":"McCloy, Director Product Management","first_name":"Ian","job_title":"","user_url":"","description":"Ian McCloy es el Director del Grupo de Gesti\u00f3n de Productos de Plataforma y Seguridad de Couchbase y vive en el Reino Unido.  Su equipo dedicado es responsable de la arquitectura de Fiabilidad, Disponibilidad, Capacidad de Servicio y Seguridad de Couchbase Server y la Base de Datos SaaS, Capella.  Este equipo tambi\u00e9n es propietario de plataformas nativas de la nube como el Operador Aut\u00f3nomo Couchbase Kubernetes.  Ian tiene una amplia experiencia como Ingeniero de Software, Ingeniero de Soporte T\u00e9cnico, Ingeniero de Control de Calidad y Administrador de Sistemas. Ian ha dirigido equipos t\u00e9cnicos globales durante la mayor parte de sus 20 a\u00f1os de carrera profesional y es titular de varias patentes en las \u00e1reas de seguridad de la informaci\u00f3n, virtualizaci\u00f3n y dise\u00f1o de hardware. https:\/\/www.linkedin.com\/in\/ianmccloy\/"}],"_links":{"self":[{"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/posts\/9680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/users\/1864"}],"replies":[{"embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/comments?post=9680"}],"version-history":[{"count":0,"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/posts\/9680\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/media\/11899"}],"wp:attachment":[{"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/media?parent=9680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/categories?post=9680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/tags?post=9680"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.couchbase.com\/blog\/es\/wp-json\/wp\/v2\/ppma_author?post=9680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}