Description
For those who have multiple network zones, it is useful to prevent certain zones from downloading data from WebHDFS while still allowing uploads. This can enable functionality of HDFS as a dropbox for data - data goes in but can not be pulled back out. (Motivation further presented in StrangeLoop 2018 Of Data Dropboxes and Data Gloveboxes).
Ideally, one could limit the datanodes from returning data via an OPEN but still allow things such as GETFILECHECKSUM and CREATE.
Attachments
Attachments
Issue Links
- duplicates
-
HDFS-3807 hadoop.http.filter.initializers not applied to webhdfs urls
- Resolved
- is related to
-
HDFS-15320 StringIndexOutOfBoundsException in HostRestrictingAuthorizationFilter
- Resolved