Vitastor 3.1.0 released

2026-07-24

Finally, the security release!

New features:

  • Fully secure cluster setup support:
    • etcd transport encryption (TLS/mTLS)
    • OSD transport encryption (AES-GCM), header-only by default, thus very fast
    • End-to-end image data encryption (AES-XTS)
    • Optional external Vault AES-XTS key storage
    • Certificate-based authentication
    • Optional user privilege support with etcd- and OSD-based access control
    • xxhash3 transport checksums (data-only by default)
  • New on-disk checksum algorithm option: xxh3_32 - xxhash3 truncated to 32 bits
  • DNS name support for etcd and Vault URLs
  • HTTP API server mode: vitastor-cli serve
  • Mixing CAS and non-CAS writes within a single client instance is now allowed and works correctly
  • make-etcd can now initialize the whole cluster by copying configs and starting other nodes through ssh
  • Debian 10 (Buster) and CentOS 7 support is completed, packages won’t be updated anymore

Read detailed security feature documentation here: https://vitastor.io/docs/usage/security.html