[
https://issues.apache.org/jira/browse/IMPALA-10550?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17297770#comment-17297770
]
ASF subversion and git services commented on IMPALA-10550:
----------------------------------------------------------
Commit ca17e307ab3abb2c95c27b3ba749adf6bf16efc7 in impala's branch
refs/heads/master from John Sherman
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=ca17e30 ]
IMPALA-10550: Add External Frontend service port
- If external_fe_port flag is >0, spins up a new HS2 compatible
service port
- Added enable_external_fe_support option to start-impala-cluster.py
- which when detected will start impala clusters with
external_fe_port on 21150-21152
- Modify impalad_coordinator Dockerfile to expose external frontend
port at 21150
- The intent of this commit is to separate external frontend
connections from normal hs2 connections
- This allows different security policy to be applied to
each type of connection. The external_fe_port should be considered
a privileged service and should only be exposed to an external
frontend that does user authentication and does authorization
checks on generated plans
Change-Id: I991b5b05e12e37d8739e18ed1086bbb0228acc40
Reviewed-by: Aman Sinha <[email protected]>
Reviewed-on: http://gerrit.cloudera.org:8080/17125
Reviewed-by: Impala Public Jenkins <[email protected]>
Tested-by: Impala Public Jenkins <[email protected]>
> Add External Frontend service port
> ----------------------------------
>
> Key: IMPALA-10550
> URL: https://issues.apache.org/jira/browse/IMPALA-10550
> Project: IMPALA
> Issue Type: Sub-task
> Reporter: John Sherman
> Assignee: John Sherman
> Priority: Major
>
> As part of external frontend support - we want to expose the additional
> thrift calls on a separate port for security purposes. Users may want to
> expose the normal hs2 service(s) to users while exposing the external
> frontend thrift calls to only an external frontend.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
