Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-16633

Optimize HBase RPC Encryption Performance

          Details

          • Type: Bug
          • Status: Resolved
          • Priority: Major
          • Resolution: Duplicate
          • Affects Version/s: None
          • Fix Version/s: None
          • Component/s: security
          • Labels:
            None

            Description

            Similar to HADOOP-10768, when HBase RPC encryption is enabled by setting hbase.rpc.protection to privacy, it does not use AES-NI acceleration by default.

            We have implemented a workaround for HBase to use accelerated encryption that can be shown to improve performance, see https://rayokota.wordpress.com/2016/09/13/adventures-in-hardening-hbase/. I will attach a patch of the changes for our workaround, which borrows heavily from the patch for HADOOP-10768, but I'll leave it to the HBase security experts as to what is the best approach.

              Attachments

                Issue Links

                is duplicated by

                Bug - A problem which impairs or prevents the functions of the product. HBASE-16632 Optimize HBase RPC Encryption Performance

                • Major - Major loss of function.
                • Resolved
                is related to

                Improvement - An improvement or enhancement to an existing feature or task. HBASE-16414 Improve performance for RPC encryption with Apache Common Crypto

                • Major - Major loss of function.
                • Resolved

                Improvement - An improvement or enhancement to an existing feature or task. HDFS-6606 Optimize HDFS Encrypted Transport performance

                • Major - Major loss of function.
                • Closed

                Improvement - An improvement or enhancement to an existing feature or task. HADOOP-10768 Optimize Hadoop RPC encryption performance

                • Major - Major loss of function.
                • Patch Available

                  Activity

                    People

                    • Assignee:
                      Unassigned
                      Reporter:
                      rayokota Robert Yokota
                    • Votes:
                      0 Vote for this issue
                      Watchers:
                      6 Start watching this issue

                      Dates

                      • Created:
                        Updated:
                        Resolved: