[HADOOP-2239] Security: Need to be able to encrypt Hadoop socket connections

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.17.0
• Release Note: This patch adds a new FileSystem, HftpsFileSystem, that allows access to HDFS data over HTTPS.
• Assignee: Christopher Douglas
• Reporter: Allen Wittenauer
• Created: 20/Nov/07 23:07
• Updated: 08/Jul/09 16:42
• Resolved: 19/Mar/08 01:44

Description

We need to be able to use hadoop over hostile networks, both internally and externally to the enterpise. While authentication prevents unauthorized access, encryption should be used to prevent such things as packet snooping across the wire. This means that hadoop client connections, distcp, etc, would use something such as SSL to protect the TCP/IP packets. Post-Kerberos, it would be useful to use something similar to NFS's krb5p option.

Issue Links

• is blocked by: HADOOP-2981 Follow Apache process for getting ready to put crypto code in to project