GitHub user cjjnjust opened a pull request:
https://github.com/apache/spark/pull/15172
[Spark-13331][network] Spark RPC encryption optimization
## What changes were proposed in this pull request?
DIGEST-MD5 mechanism is used for SASL authentication and secure
communication. DIGEST-MD5 mechanism supports 3DES, DES, and RC4 ciphers.
However, 3DES, DES and RC4 are slow relatively.
AES provide better performance and security by design and is a replacement
for 3DES according to NIST. Apache Common Crypto is a cryptographic library
optimized with AES-NI, this patch employ Apache Common Crypto as enc/dec
backend for SASL authentication and secure channel to improve spark RPC.
## How was this patch tested?
Unit tests and Integration test.
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/cjjnjust/spark shuffle_rpc_encrypt
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/spark/pull/15172.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #15172
----
commit 78f4d7bcfb5830fa54b1380182f08a85fee97d92
Author: Junjie Chen <junjie.j.c...@intel.com>
Date: 2016-09-20T17:57:05Z
[Spark-13331] Spark RPC encryption optimization
DIGEST-MD5 mechanism is used for SASL authentication and secure
communication. DIGEST-MD5 mechanism supports 3DES, DES, and RC4 ciphers.
However, 3DES, DES and RC4 are slow relatively.
AES provide better performance and security by design and is a replacement
for 3DES according to NIST. Apache Common Crypto is a cryptographic library
optimized with AES-NI, this patch employ Apache Common Crypto as enc/dec
backend for SASL authentication and secure channel to improve spark RPC.
----
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at infrastruct...@apache.org or file a JIRA ticket
with INFRA.
---
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscr...@spark.apache.org
For additional commands, e-mail: reviews-h...@spark.apache.org
