JHSUYU opened a new pull request, #8698:
URL: https://github.com/apache/hadoop/pull/8698
JIRA: HDFS-17967
## Summary
This is a follow-up of HDFS-17897 and HDFS-17899.
The following data-transfer connection paths still do not handle
InvalidEncryptionKeyException:
- DataXceiver.writeBlock() — mirror pipeline connection
- DataXceiver.replaceBlock() — proxy copy connection
- StripedBlockWriter — erasure coding target connection
With data-transfer encryption enabled, block-key rotation or transient RPC
failures delaying key propagation can leave DataNodes temporarily out of sync.
The SASL handshake
then fails with InvalidEncryptionKeyException.
Fix: Close the failed socket, clear the cached encryption key, and retry
once. Retrying is safe because the exception occurs before the downstream
writeBlock or copyBlock request is sent. A second failure is propagated.
## Test
-
TestDataXceiverEncryptionKey#testWriteBlockRetriesInvalidEncryptionKeyToMirror
-
TestDataXceiverEncryptionKey#testReplaceBlockRetriesInvalidEncryptionKeyToProxy
- TestStripedBlockWriterEncryptionKey#testClearEncryptionKeyOnRetry
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
