[ 
https://issues.apache.org/jira/browse/HADOOP-2239?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12569033#action_12569033
 ] 

Allen Wittenauer commented on HADOOP-2239:
------------------------------------------

While we really need secure distcp Right Now(tm), it would be good if in the 
future we could encrypt dfs put/get.  I'm not so concerned about connectivity 
between grid nodes (at least right now).

I suspect this JIRA needs to get broken down into multiple subtasks.

> Security:  Need to be able to encrypt Hadoop socket connections
> ---------------------------------------------------------------
>
>                 Key: HADOOP-2239
>                 URL: https://issues.apache.org/jira/browse/HADOOP-2239
>             Project: Hadoop Core
>          Issue Type: Bug
>          Components: dfs
>            Reporter: Allen Wittenauer
>
> We need to be able to use hadoop over hostile networks, both internally and 
> externally to the enterpise.  While authentication prevents unauthorized 
> access, encryption should be used to prevent such things as packet snooping 
> across the wire.  This means that hadoop client connections, distcp, etc, 
> would use something such as SSL to protect the TCP/IP packets.  
> Post-Kerberos, it would be useful to use something similar to NFS's krb5p 
> option.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to