[HADOOP-18910] ABFS: Adding Support for MD5 Hash based integrity verification of the request content during transport

• Type: Sub-task
• Status: Resolved
• Priority: Major
• Resolution: Done
• Component/s: fs/azure
• Labels: pull-request-available
• Target Version/s: 3.3.6
• Assignee: Anuj Modi
• Reporter: Anuj Modi
• Created: 21/Sep/23 05:12
• Updated: 14/Nov/24 06:28
• Resolved: 26/Feb/24 10:39

Description

Azure Storage Supports Content-MD5 Request Headers in Both Read and Append APIs.
Read: [Path - Read - REST API (Azure Storage Services) | Microsoft Learn|https://learn.microsoft.com/en-us/rest/api/storageservices/datalakestoragegen2/path/read]
Append: [Path - Update - REST API (Azure Storage Services) | Microsoft Learn|https://learn.microsoft.com/en-us/rest/api/storageservices/datalakestoragegen2/path/update]

This change is to make client-side changes to support them. In Read request, we will send the appropriate header in response to which server will return the MD5 Hash of the data it sends back. On Client we will tally this with the MD5 hash computed from the data received.

In Append request, we will compute the MD5 Hash of the data that we are sending to the server and specify that in appropriate header. Server on finding that header will tally this with the MD5 hash it will compute on the data received. 

This whole Checksum Validation Support is guarded behind a config, Config is by default disabled because with the use of "https" integrity of data is preserved anyways. This is introduced as an additional data integrity check which will have a performance impact as well.

Users can decide if they want to enable this or not by setting the following config to "true" or "false" respectively. Config: "fs.azure.enable.checksum.validation"

Issue Links

• links to: GitHub Pull Request #6069