[
https://issues.apache.org/jira/browse/HADOOP-10498?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13968805#comment-13968805
]
Daryn Sharp commented on HADOOP-10498:
--------------------------------------
I don't think these changes will conflict with Knox. What we found is:
# webhdfs doesn't support proxy superusers, ex. oozie, via a http proxy when
superuser privs are restricted to a specific set of hosts. The reason is the
NN sees the remote ip as that of the http proxy instead of the oozie server.
# the audit log for webhdfs via a http proxy always logs the proxy which is not
useful...
This trio of jiras enables optional configuration of proxy servers that will
allow the NN to "see" the actual remote client IP for the purposes of superuser
proxy checks and for audit logging. Essentially the http proxy becomes
invisible to the NN.
> Add support for proxy server
> ----------------------------
>
> Key: HADOOP-10498
> URL: https://issues.apache.org/jira/browse/HADOOP-10498
> Project: Hadoop Common
> Issue Type: New Feature
> Components: util
> Affects Versions: 2.0.0-alpha, 3.0.0
> Reporter: Daryn Sharp
> Assignee: Daryn Sharp
> Attachments: HADOOP-10498.patch
>
>
> HDFS-6218 & HDFS-6219 require support for configurable proxy servers.
--
This message was sent by Atlassian JIRA
(v6.2#6252)