[HADOOP-14640] Azure: Support affinity for service running on localhost and reuse SPNEGO hadoop.auth cookie for authorization, SASKey and delegation token generation

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.9.0
• Fix Version/s: 2.9.0, 3.0.0-beta1
• Component/s: fs/azure
• Labels: security
• Target Version/s: 2.9.0, 3.0.0-alpha1
• Assignee: Santhosh G Nayak
• Reporter: Santhosh G Nayak
• Created: 10/Jul/17 12:41
• Updated: 18/Jul/17 01:20
• Resolved: 18/Jul/17 01:20

Description

Currently, WasbRemoteCallHelper can be configured to talk to comma separated list of URLs for authorization, SASKey generation and delegation token generation.
To improve the performance, if service runs on the local machine, give it first preference over the other configured list of URLs.
Currently, WasbRemoteCallHelper generates hadoop.auth cookie for every request by talking to the remote service, before making actual rest requests.
The proposal is to reuse the hadoop.auth cookie for subsequent requests from same WasbRemoteCallHelper object until its expiry time.