[
https://issues.apache.org/jira/browse/HDDS-5237?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17354387#comment-17354387
]
Marton Elek commented on HDDS-5237:
-----------------------------------
Looks to be trickier than what I thought. The current implementation uses
_DefaultFileRegion_ to stream the files directly to the network with zero-copy.
Unfortunately it doesn't work with TLS as it's explained
[here|https://github.com/netty/netty/issues/2075#issuecomment-31070670] and
[here|https://github.com/reactor/reactor-netty/issues/102].
> Turn on mTLS for streming client / server
> -----------------------------------------
>
> Key: HDDS-5237
> URL: https://issues.apache.org/jira/browse/HDDS-5237
> Project: Apache Ozone
> Issue Type: Improvement
> Reporter: Marton Elek
> Assignee: Marton Elek
> Priority: Major
>
> HDDS-5142 will introduce a new streaming API for closed container replication
> / snapshot download and other data movement.
> For server2server communication we need to support mTLS. We should configure
> pure mTLS on the netty server
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
