[HDFS-6218] Audit log should use true client IP for proxied webhdfs operations

• Type: Sub-task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0-alpha, 3.0.0-alpha1
• Fix Version/s: 2.5.0
• Component/s: namenode, webhdfs
• Target Version/s: 2.5.0
• Hadoop Flags: Reviewed
• Assignee: Daryn Sharp
• Reporter: Daryn Sharp
• Created: 09/Apr/14 15:34
• Updated: 12/May/16 18:17
• Resolved: 28/Apr/14 14:02

Description

When using a http proxy, it's not very useful for the audit log to contain the proxy's IP address. Similar to proxy superusers, the NN should allow configuration of trusted proxy servers and use the X-Forwarded-For header when logging the client request.

Issue Links

• is related to: HDFS-6269 NameNode Audit Log should differentiate between webHDFS open and HDFS open.
• requires: HADOOP-10498 Add support for proxy server