In the modern data center, “sharing” is often seen as a risk. When you are handling sensitive information like human genome data, Personally Identifiable Information (PII), or proprietary AI training sets, the idea of hosting that data alongside “regular” office workloads or other customers feels like a security nightmare. Historically, the solution was simple but expensive: build a separate, air-gapped infrastructure silo for every high-security project.
Quobyte redefines this landscape with High-Security Tenants. Our architecture allows you to meet the most stringent compliance needs—including NIH and HIPAA standards—without the overhead of separate hardware silos.
What are High-Security Tenants?
High-security tenants are cryptographically and physically isolated environments that exist within a standard Quobyte cluster. While they share the overall system’s scalability and ease of management, they operate under a completely different set of security rules.
Think of it like a high-security vault inside a bank. Everyone uses the same front door and the same building services, but the vault has its own reinforced walls, its own specialized keys, and its own high-definition surveillance that the rest of the bank doesn’t require.
How They Work: Security from the Ground Up
Quobyte doesn’t just “tag” files as secure; it changes the way the system interacts with that data at every layer.
- X.509 Certificates vs. IP Filters: Traditional storage relies on IP filters—a weak method that assumes if a request comes from a certain “trusted” IP address, it’s legitimate. Quobyte replaces this with X.509 certificates. This means every machine and user must present a cryptographically signed certificate to communicate with the storage. It’s automatic, works with any Certificate Authority (CA), and allows admins to set custom restrictions (like preventing “root” users from seeing tenant data) that IP filters simply can’t match.
- Universal TLS Encryption: For high-security tenants, you can enforce mandatory TLS encryption for the entire communication stack. This isn’t just for the data itself; metadata and all RPC (Remote Procedure Call) traffic are fully encrypted, ensuring that no information about the file structure or system commands is leaked over the wire.
- End-to-End Encryption with Tenant-Managed Keys: Security is only real if you hold the keys. Quobyte supports end-to-end encryption where the tenant manages their own encryption keys. This ensures that even a “super-admin” of the overall storage cluster or the infrastructure provider cannot peek into the sensitive data within that specific vault.
- Hardware Isolation: Using the Quobyte Policy Engine, you can mandate physical hardware isolation. This ensures that a specific tenant’s data is only ever written to a dedicated set of physical drives or servers, providing the physical peace of mind required for public-private partnerships or highly regulated industries.
What are They Good For?
High-security tenants are the perfect solution for organizations that need to balance extreme privacy with operational efficiency:
- Life Sciences & Genomics: Managing human genome data requires compliance with NIH and other global standards. High-security tenants provide the “zero-trust” environment needed for sensitive research while allowing researchers to use the cluster’s massive parallel performance.
- AI & Machine Learning: In the age of AI, data is the new gold. High-security tenants protect proprietary training datasets and sensitive model weights from internal “data bleeding,” ensuring that different AI teams or external partners can share GPU resources without risking intellectual property.
- Public-Private Partnerships: When a university or research lab partners with a private corporation, they often need to share a cluster but keep the proprietary data strictly isolated and audit-ready.
- Medical & PII Data: For healthcare providers or financial institutions, these tenants ensure that HIPAA or GDPR-protected data stays encrypted at rest and in transit, with certificate-only access providing a clear audit trail.
By integrating these protections into the core architecture, Quobyte lets you stop building silos and start building a secure, unified data infrastructure.
