[
https://issues.apache.org/jira/browse/HBASE-16414?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15595501#comment-15595501
]
Hudson commented on HBASE-16414:
--------------------------------
SUCCESS: Integrated in Jenkins build HBase-Trunk_matrix #1827 (See
[https://builds.apache.org/job/HBase-Trunk_matrix/1827/])
HBASE-16414 Improve performance for RPC encryption with Apache Common
(ramkrishna: rev 0ae211eb399e5524196d89af8eac1941c8b61b60)
* (add)
hbase-client/src/main/java/org/apache/hadoop/hbase/ipc/UnsupportedCryptoException.java
* (edit)
hbase-client/src/main/java/org/apache/hadoop/hbase/security/EncryptionUtil.java
* (edit)
hbase-client/src/main/java/org/apache/hadoop/hbase/ipc/RpcConnection.java
* (edit) hbase-protocol-shaded/src/main/protobuf/RPC.proto
* (edit)
hbase-client/src/main/java/org/apache/hadoop/hbase/ipc/NettyRpcConnection.java
* (add)
hbase-common/src/main/java/org/apache/hadoop/hbase/io/crypto/aes/CryptoAES.java
* (edit) hbase-server/src/main/java/org/apache/hadoop/hbase/ipc/RpcServer.java
* (add)
hbase-client/src/main/java/org/apache/hadoop/hbase/security/CryptoAESWrapHandler.java
* (edit)
hbase-client/src/main/java/org/apache/hadoop/hbase/security/HBaseSaslRpcClient.java
* (edit)
hbase-client/src/main/java/org/apache/hadoop/hbase/ipc/BlockingRpcConnection.java
* (add)
hbase-client/src/main/java/org/apache/hadoop/hbase/security/NettyHBaseRpcConnectionHeaderHandler.java
* (edit)
hbase-client/src/test/java/org/apache/hadoop/hbase/security/TestHBaseSaslRpcClient.java
* (edit) hbase-common/pom.xml
* (edit)
hbase-protocol-shaded/src/main/java/org/apache/hadoop/hbase/shaded/protobuf/generated/RPCProtos.java
* (add)
hbase-client/src/main/java/org/apache/hadoop/hbase/security/CryptoAESUnwrapHandler.java
* (edit)
hbase-client/src/main/java/org/apache/hadoop/hbase/security/NettyHBaseSaslRpcClient.java
* (edit)
hbase-client/src/main/java/org/apache/hadoop/hbase/security/NettyHBaseSaslRpcClientHandler.java
* (edit) pom.xml
* (edit)
hbase-server/src/test/java/org/apache/hadoop/hbase/security/TestSecureIPC.java
> Improve performance for RPC encryption with Apache Common Crypto
> ----------------------------------------------------------------
>
> Key: HBASE-16414
> URL: https://issues.apache.org/jira/browse/HBASE-16414
> Project: HBase
> Issue Type: Improvement
> Components: IPC/RPC
> Affects Versions: 2.0.0
> Reporter: Colin Ma
> Assignee: Colin Ma
> Fix For: 2.0.0
>
> Attachments: HBASE-16414.001.patch, HBASE-16414.002.patch,
> HBASE-16414.003.patch, HBASE-16414.004.patch, HBASE-16414.005.patch,
> HBASE-16414.006.patch, HBASE-16414.007.patch, HBASE-16414.008.patch,
> HBASE-16414.009.patch, HbaseRpcEncryptionWithCrypoto.docx
>
>
> Hbase RPC encryption is enabled by setting “hbase.rpc.protection” to
> "privacy". With the token authentication, it utilized DIGEST-MD5 mechanisms
> for secure authentication and data protection. For DIGEST-MD5, it uses DES,
> 3DES or RC4 to do encryption and it is very slow, especially for Scan. This
> will become the bottleneck of the RPC throughput.
> Apache Commons Crypto is a cryptographic library optimized with AES-NI. It
> provides Java API for both cipher level and Java stream level. Developers can
> use it to implement high performance AES encryption/decryption with the
> minimum code and effort. Compare with the current implementation of
> org.apache.hadoop.hbase.io.crypto.aes.AES, Crypto supports both JCE Cipher
> and OpenSSL Cipher which is better performance than JCE Cipher. User can
> configure the cipher type and the default is JCE Cipher.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
