Hello Team,
We have been using Apache Storm for building data pipelines in
our company.
We have some sensitive data and we would like to know if storm
provides TLS support in the communication channels with in storm cluster
(Nimbus -> Supervisor, Supervisor -> Supervisor).
I went over the Apache Storm documentation and found
http://storm.apache.org/releases/1.2.3/SECURITY.html.
Documentation suggests to use IPSec for any data encryption. It
doesn’t provide how to configure SSL at socket layer communications.
Only option what we see as of now is to change the storm code to
use SSL enabled thrift classes and also use SSL enabled jetty. If anybody from
[email protected]<mailto:[email protected]> can answer how complicated
changing storm code can be for this. It will be very helpful ☺
We understand these changes add on to major maintenance cycles on
our side. So before doing any change, we would like to check if there is any
way we can add TLS support for our storm cluster through some configuration or
any other means.
Harish Kumar K V
Senior Software Engineer, Search
M: +1 (408) 313 5574
[cid:[email protected]]