Hi,

I have a question about the behavior of Ranger client.

We use Ranger on Trino. When our Ranger server behind a reverse proxy
was temporarily unavailable, the proxy was returning 503.

Based on the log, Rager client didn't seem to retry the request and
PolicyEngine worked without any policy if the very initial policy
retrieval (so there is no cache) fails until the next retrieval
succeeds.

I know RangerRESTClient has a retry mechanism
(https://issues.apache.org/jira/browse/RANGER-3565) but it works only
when ClientHandlerException occurs while Jersey's default client
handler doesn't seem to raise an exception even for 5xx errors.

Is this expected behavior? Or is there any workaround?

I think it's better to
- retry a request for server errors (5xx) to cover temporary server issues
- fail policy evaluation with initialization error if the policy has
never been successfully retrieved

--
Naoki Takezoe

Reply via email to