[HDFS-5910] Enhance DataTransferProtocol to allow per-connection choice of encryption/plain-text

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.2.0
• Fix Version/s: 2.4.0
• Component/s: security
• Target Version/s: 2.4.0
• Hadoop Flags: Reviewed
• Assignee: Benoy Antony
• Reporter: Benoy Antony
• Created: 07/Feb/14 20:49
• Updated: 04/Sep/14 01:15
• Resolved: 26/Mar/14 04:18

Description

It is possible to enable encryption of DataTransferProtocol.
In some use cases, it is required to encrypt data transfer with some clients , but communicate in plain text with some other clients and data nodes.

A sample use case will be that any data transfer inside a firewall can be in plain text whereas any data transfer from clients outside the firewall needs to be encrypted.

Issue Links

• is related to: HDFS-3637 Add support for encrypting the DataTransferProtocol
• is related to: HDFS-6201 Get EncryptionKey from NN only if data transfer encryption is required
• is related to: HADOOP-10221 Add a plugin to specify SaslProperties for RPC protocol based on connection properties