[
https://issues.apache.org/jira/browse/HDFS-2246?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13102013#comment-13102013
]
Todd Lipcon commented on HDFS-2246:
-----------------------------------
It's not strictly technical, but I am -1 on principle on any patch that adds a
major feature to 0.20.x that isn't available in trunk. I agree that the
short-circuit idea is a good one (I was one of the original proponents of the
idea 2 years ago if you recall from HDFS-347).
Regarding this particular patch, I think it is technically troublesome since it
can only function by opening the trust domain of HDFS to include HBase (or any
other client that wants to use the feature). There are block tokens, but
they're essentially "advisory" as you can easily scan the HDFS data directories
once you have read access on the local FS. I'm willing to overlook this so long
as people are willing to review and eventually move to the actually secure
solution I proposed long ago (and implemented though long since stale!) in
HDFS-347. But even if this is an interim solution, we need a (interim or not)
solution for 0.23 as well.
> Shortcut a local client reads to a Datanodes files directly
> -----------------------------------------------------------
>
> Key: HDFS-2246
> URL: https://issues.apache.org/jira/browse/HDFS-2246
> Project: Hadoop HDFS
> Issue Type: Improvement
> Reporter: Sanjay Radia
> Attachments: 0001-HDFS-347.-Local-reads.patch,
> localReadShortcut20-security.2patch
>
>
--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira
