Uploaded image for project: 'Hadoop Common'
  1. Hadoop Common
  2. HADOOP-15620 Über-jira: S3A phase VI: Hadoop 3.3 features
  3. HADOOP-16050

S3A SSL connections should use OpenSSL

    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 2.9.1
    • 3.3.0
    • fs/s3
    • None

    Description

      We have found that when running the S3AFileSystem, it picks GCM as the ssl cipher suite. Unfortunately this is well known to be slow on java 8: https://stackoverflow.com/questions/25992131/slow-aes-gcm-encryption-and-decryption-with-java-8u20.

       

      In practice we have seen that it can take well over 50% of our CPU time in spark workflows. We should add an option to set the list of cipher suites we would like to use.

      Attachments

        Issue Links

          breaks

          Bug - A problem which impairs or prevents the functions of the product. HADOOP-16321 ITestS3ASSL+TestOpenSSLSocketFactory failing with java.lang.UnsatisfiedLinkErrors

          • Major - Major loss of function.
          • Resolved
          causes

          Sub-task - The sub-task of the issue HADOOP-16347 MapReduce job tasks fails on S3A ssl3_get_server_certificate:certificate verify

          • Major - Major loss of function.
          • Resolved
          is related to

          Sub-task - The sub-task of the issue HADOOP-16346 Stabilize S3A OpenSSL support

          • Blocker - Blocks development and/or testing work, production could not run
          • Resolved

          Sub-task - The sub-task of the issue HADOOP-16405 Upgrade Wildfly Openssl version to 1.0.7.Final

          • Major - Major loss of function.
          • Resolved
          relates to

          Sub-task - The sub-task of the issue HADOOP-15669 ABFS: Improve HTTPS Performance

          • Major - Major loss of function.
          • Resolved

          Sub-task - The sub-task of the issue HADOOP-16371 Option to disable GCM for SSL connections when running on Java 8

          • Major - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. IMPALA-8577 Crash during OpenSSLSocket.read

          • Major - Major loss of function.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-15965 Upgrade to ADLS SDK which has major performance improvement for ingress/egress

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link GitHub Pull Request #784

          Activity

            People

              stakiar Sahil Takiar
              justin.uang Justin Uang
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: