[ 
https://issues.apache.org/jira/browse/SPARK-6229?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14372381#comment-14372381
 ] 

Marcelo Vanzin commented on SPARK-6229:
---------------------------------------

Just to illustrate:

{noformat}
$ git grep 'new SaslRpcHandler'
core/src/main/scala/org/apache/spark/deploy/worker/StandaloneWorkerShuffleService.scala:
    val handler = if (useSasl) new SaslRpcHandler(blockHandler
core/src/main/scala/org/apache/spark/network/netty/NettyBlockTransferService.scala:
        (new SaslRpcHandler(nettyRpcHandler, securityManager),
network/shuffle/src/test/java/org/apache/spark/network/sasl/SaslIntegrationSuite.java:
    SaslRpcHandler handler = new SaslRpcHandler(new TestRpcHandl
network/shuffle/src/test/java/org/apache/spark/network/shuffle/ExternalShuffleSecuritySuite.java:
    RpcHandler handler = new SaslRpcHandler(new Exter
network/yarn/src/main/java/org/apache/spark/network/yarn/YarnShuffleService.java:
      rpcHandler = new SaslRpcHandler(rpcHandler, secretManager);
{noformat}

Now imagine if there was a single result in that search, internally in the 
network library.

> Support SASL encryption in network/common module
> ------------------------------------------------
>
>                 Key: SPARK-6229
>                 URL: https://issues.apache.org/jira/browse/SPARK-6229
>             Project: Spark
>          Issue Type: Sub-task
>          Components: Spark Core
>            Reporter: Marcelo Vanzin
>
> After SASL support has been added to network/common, supporting encryption 
> should be rather simple. Encryption is supported for DIGEST-MD5 and GSSAPI. 
> Since the latter requires a valid kerberos login to work (and so doesn't 
> really work with executors), encryption would require the use of DIGEST-MD5.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to