Selectively encrypting commit log entries

A system comprising:

• one or more computers and one or more storage devices storing instructions that are operable, when executed by the one or more computers, to cause the one or more computers to perform operations comprising:
• determining that a commit log for a particular server in the distributed database system is to be updated based on a data operation performed on a tablet managed by the particular server, the tablet including at least a portion of the data from a table in the distributed database system, and wherein the data from the table is stored in both encrypted tablets and unencrypted tablets;
• in response to determining that the commit log for the particular server in the distributed database system is to be updated based on the data operation performed on the tablet managed by the particular server, determining that the tablet managed by the particular server is an encrypted tablet instead of an unencrypted tablet;
• in response to determining that the tablet is an encrypted tablet instead of an unencrypted tablet, generating an encrypted log entry representing the data operation performed on the tablet, the encrypted log entry including an encrypted payload including information representing the data operation and an unencrypted header including information about the encrypted log entry;
• updating the commit log to include the encrypted log entry;
• determining that the commit log for the particular server is to be updated based on a second data operation performed on a second tablet managed by the particular server;
• in response to determining that the commit log for the particular server is to be updated based on the second data operation performed on the second tablet managed by the particular server, determining that the second tablet managed by the particular server is an unencrypted tablet instead of an encrypted tablet;
• in response to determining that the second tablet is an unencrypted tablet instead of an unencrypted tablet, generating an unencrypted log entry representing the second data operation, the unencrypted log entry including an unencrypted payload including information representing the second data operation and an unencrypted header including information about the unencrypted log entry;
• and
• updating the commit log to include both the encrypted log entry and the unencrypted log entry.

A non-transitory computer-readable medium storing software comprising instructions executable by one or more computers which, upon such execution, cause the one or more computers to perform operations comprising:

• determining that a commit log for a particular server in the distributed database system is to be updated based on a data operation performed on a tablet managed by the particular server, the tablet including at least a portion of the data from a table in the distributed database system, and wherein the data from the table is stored in both encrypted tablets and unencrypted tablets;
• in response to determining that the commit log for the particular server in the distributed database system is to be updated based on the data operation performed on the tablet managed by the particular server, determining that the tablet managed by the particular server is an encrypted tablet instead of an unencrypted tablet;
• in response to determining that the tablet is an encrypted tablet instead of an unencrypted tablet, generating an encrypted log entry representing the data operation performed on the tablet, the encrypted log entry including an encrypted payload including information representing the data operation and an unencrypted header including information about the encrypted log entry;
• updating the commit log to include the encrypted log entry;
• determining that the commit log for the particular server is to be updated based on a second data operation performed on a second tablet managed by the particular server;
• in response to determining that the commit log for the particular server is to be updated based on the second data operation performed on the second tablet managed by the particular server, determining that the second tablet managed by the particular server is an unencrypted tablet instead of an encrypted tablet;
• in response to determining that the second tablet is an unencrypted tablet instead of an unencrypted tablet, generating an unencrypted log entry representing the second data operation, the unencrypted log entry including an unencrypted payload including information representing the second data operation and an unencrypted header including information about the unencrypted log entry;
• and
• updating the commit log to include both the encrypted log entry and the unencrypted log entry.