diff --git a/SECURITY b/SECURITY index c36801200e1bc7a7aa674a35c29e8687d4d5c9a3..c8598841f4072bee122d13b75b109953961f77a0 100644 --- a/SECURITY +++ b/SECURITY @@ -65,8 +65,8 @@ client will refuse to connect to servers which don't have the cluster-wide shared SSL certificate, and server will not allow clients which don't have the cluster-wide shared secret. -The DRBD traffic is not protected by anything, as the version of DRBD we -require (0.7) does not have any protections. It's therefore recommended -to implement host-level firewalling or to use a separate range of IP -addresses for the DRBD traffic (this is supported in Ganeti) which is -not routed outside the cluster. +The DRBD traffic is not protected by anything. DRBD does not support +traffic encryption. It's therefore recommended to implement host-level +firewalling or to use a separate range of IP addresses for the DRBD +traffic (this is supported in Ganeti) which is not routed outside the +cluster.