[Summer 2021] Add a plugin SPI for configuration encryption and decryption for Nacos 2.0

[KomachiSion]

Background

In Nacos community, many users concerned about the security issues of some sensitive information in the configuration.

Like #492, #4025, #4707, #5367 and many closed issues.

So Nacos community want to design a set of API for encryption and inject into the workflow of publish and query configuration. And provide one kind of easy implementation like AES encryption.

Through the encryption plugin, users can use the simple implementation provided by the community to preliminarily carry out the problem of sensitive configuration desensitization. At the same time, they can also implement their own encryption plug-in to meet the high requirements for desensitization.

Target

Add a plugin SPI for configuring encryption and decryption, and add a simple implementation of encryption and decryption.

Difficulty

Medium

Mentor

@TsingLiang
qingliang.ql@alibaba-inc.com

Output Requirements

• Add a set of easy to expand SPI interface for configuration encryption and decryption.
• Use the appropriate design pattern to inject this SPI into the workflow of configuration center.
• Choose one of common encryption algorithm and use this algorithm to implement a configuration encryption and decryption plugin.

Technical Requirements

• Familiar with Java programming language.
• Familiar with Java class loading mechanism.
• Familiar with Java SPI loading mechanism.
• Understand common design patterns.
• Understand common data encryption and decryption algorithms.

---

背景

在Nacos社区中，许多用户关注配置中某些敏感信息的安全性问题。

像#492，#4025，#4707，#5367 和许多已关闭的Issue。

因此，Nacos社区希望设计一套用于加密的API，并将其注入到发布和查询配置的工作流程中。 并提供一种简单的实现，如AES加密。

通过加密插件，用户可以使用社区提供的简单实现来初步解决敏感配置脱敏问题。 同时，他们还可以实现自己的加密插件，以满足对脱敏的高要求。

目标

为Nacos添加配置加解密的插件SPI，并新增一类简单的加解密实现。

难度

中等

导师

@TsingLiang
qingliang.ql@alibaba-inc.com

产出要求

• 添加一套易于扩展的配置加解密SPI接口。
• 使用合适的设计模式在配置中心流程中使用加解密SPI接口。
• 选择一个常见的加密算法，并使用该算法实现一个配置加解密插件。

能力要求

• 熟悉Java开发语言
• 熟悉Java 类加载机制
• 熟悉Java SPI加载机制
• 了解常用设计模式
• 了解常用数据加解密算法