Database TLS/SSL Guides

Encrypt connections to your databases in transit. These guides cover TLS configuration, certificate-based client authentication, and mutual TLS (mTLS) for every major database.

Cassandra

Distributed wide-column NoSQL database.

CockroachDB

Distributed SQL database built for scale.

Elasticsearch

Distributed search and analytics engine.

MariaDB

Community-developed MySQL fork.

Memcached

High-performance distributed memory cache.

MongoDB

Document-oriented NoSQL database.

MySQL

Popular open-source relational database.

Oracle

Enterprise relational database management system.

PostgreSQL

Advanced open-source relational database.

Redis

In-memory data store and cache.

About These Guides

Database connections are frequently left unencrypted even when TLS is configured at the web server layer. Credentials, queries, and result sets traversing an unencrypted connection are vulnerable to interception, particularly in cloud environments where traffic crosses shared network fabric.

These guides walk through enabling TLS on the server side, configuring client certificate authentication (mTLS), and verifying that connections are actually encrypted — not just optionally allowed — using the require ssl or equivalent mechanism for each database engine.