Another best practice is to have a sandbox cluster separated from production.
On Thu, Jul 23, 2009 at 9:17 AM, Aaron Kimball <[email protected]> wrote: > The current best practice is to firewall off your cluster, configure a > SOCKS proxy/gateway, and only allow traffic to the cluster from the > gateway. Being able to SSH into the gateway provides authentication. > > See > http://www.cloudera.com/blog/2008/12/03/securing-a-hadoop-cluster-through-a-gateway/ > for a description of how we accomplished this. > >
