[SPARK-5682] Add encrypted shuffle in spark

• Type: New Feature
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.1.0
• Component/s: Shuffle, Spark Core
• Assignee: Ferdinand Xu
• Reporter: liyunzhang
• Created: 09/Feb/15 07:49
• Updated: 17/May/20 18:30
• Resolved: 30/Aug/16 16:17

Description

Encrypted shuffle is enabled in hadoop 2.6 which make the process of shuffle data safer. This feature is necessary in spark. AES is a specification for the encryption of electronic data. There are 5 common modes in AES. CTR is one of the modes. We use two codec JceAesCtrCryptoCodec and OpensslAesCtrCryptoCodec to enable spark encrypted shuffle which is also used in hadoop encrypted shuffle. JceAesCtrypoCodec uses encrypted algorithms jdk provides while OpensslAesCtrCryptoCodec uses encrypted algorithms openssl provides.
Because ugi credential info is used in the process of encrypted shuffle, we first enable encrypted shuffle on spark-on-yarn framework.

Issue Links

• is duplicated by: SPARK-6460 Implement OpensslAesCtrCryptoCodec to enable encrypted shuffle algorithms which openssl provides
• is duplicated by: SPARK-10771 Implement the shuffle encryption with AES-CTR crypto using JCE key provider.
• is duplicated by: SPARK-12333 Support shuffle spill encryption in Spark
• is related to: SPARK-12278 Move the shuffle related test case from Yarn module to Core module
• relates to: SPARK-12333 Support shuffle spill encryption in Spark
• links to: [Github] Pull Request #4491 (kellyzly)
• links to: [Github] Pull Request #5307 (kellyzly)
• links to: [Github] Pull Request #8880 (winningsix)