[HDFS-5290] Port Encryption Support in DataTransfer protocol to Hadoop 1

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Won't Do
• Affects Version/s: 1.2.1
• Fix Version/s: 1.3.0
• Component/s: security
• Assignee: Benoy Antony
• Reporter: Benoy Antony
• Created: 02/Oct/13 22:14
• Updated: 16/Oct/17 19:45
• Resolved: 16/Oct/17 19:45

Description

Currently all HDFS RPCs performed by NNs/DNs/clients can be optionally encrypted. However, actual data read or written between DNs and clients (or DNs to DNs) is sent in the clear. When processing sensitive data on a shared cluster, confidentiality of the data read/written from/to HDFS may be desired.

This change is already done in Hadoop 2 and trunk.
The task is to port this change to Hadoop 1.

Issue Links

• is depended upon by: HADOOP-10057 Add ability in Hadoop servers (Namenode, JobTracker, Datanode ) to support multiple QOP (Authentication , Privacy) simultaneously
• relates to: HDFS-3637 Add support for encrypting the DataTransferProtocol