title: Securing MongoDB Transport in the cloud
body: <p>Are there any service providers offering hosted MongoDB with secure transport? I know that native TLS support for MongoDB isn't quite OOB yet, but I'm looking for a provider that can encrypt the transport using SSH, VPN or perhaps IPSEC?</p>
  
  <p>I know that the MongoDB connection password handshake itself is secure but I need to secure the data from prying eyes. I can of course encrypt fields directly in my app layer, but I can't do that for fields I'll want to search.</p>
  
  <p>From what I can tell, the only transport security we have relies on the VLAN/Switch routing. In other words, I should <em>assume</em> (according to providers like MongoHQ and MongoLab) that my packets are secure as long as I'm running in the same data centre provider, eg. Amazon. But what if I'm not. Unfortunately, for instance, it looks like there are no commercial providers running on Azure yet so it would mean building our our own cluster.</p>
  
  <p>Obviously, it probably makes sense to be close to my data in any case, but currently we need some flexibility in mixing and matching providers without compromising security. </p>
  
  <p>Even so, in the same hosting provider, is MAC address routing really the best transport security on offer?</p>