You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hbase.apache.org by Ted Yu <yu...@gmail.com> on 2010/10/27 01:28:15 UTC

hbase monitoring through stargate

Stargate provides REST service through certain port.
Ops told me that they cannot open additional port from hbase cluster for
security reasons.

I want to hear opinions/approaches w.r.t. hbase monitoring in production
through stargate.

Thanks

Re: hbase monitoring through stargate

Posted by Ted Yu <yu...@gmail.com>.
Gary:
Thanks for your suggestion.
I have tested my patch which is outlined in:
https://issues.apache.org/jira/browse/HBASE-3161

I worked with mod_rewrite at my previous company which is a php shop. I will
pick it up if needed :-)

Cheers

On Wed, Oct 27, 2010 at 3:04 PM, Gary Helmling <gh...@gmail.com> wrote:

> One other option, since a read-only configuration isn't currently
> available,
> you could configure Apache HTTPD as a reverse proxy in front of the
> stargate
> server and use mod_rewrite to only allow get requests through.  Since I
> believe stargate follows the RESTful conventions for request methods, you
> can just allow GET requests.  Something like:
>
> # block non-get requests
> RewriteCond %{REQUEST_METHOD} !^GET$
> RewriteRule ^(.*) $1 [F]
>
> # allow everything else
> RewriteRule ^(.*) http://stargate.host.name/$1 [P,QSA]
>
> Not sure if that's exactly right, but it should return a 403 response code
> (forbidden) for any non-GET requests.  Get requests will continue on and
> get
> proxied through to "stargate.host.name".
>
> You could extend this to lock down specific paths for certain tables, etc.
> as well.
>
> --gh
>
>
> On Tue, Oct 26, 2010 at 7:03 PM, Ted Yu <yu...@gmail.com> wrote:
>
> > Alternatively, is there a way to configure Stargate to serve read
> requests
> > only ?
> >
> > On Tue, Oct 26, 2010 at 6:58 PM, Ted Yu <yu...@gmail.com> wrote:
> >
> > > Ops are wary of developers (inside firewall) performing operations
> > against
> > > 8080.
> > >
> > > If Stargate isn't a good choice, what other methods can I use to query
> > > selected rows from each region server ? Parsing HTML is not ideal
> either.
> > >
> > > Thanks
> > >
> > >
> > > On Tue, Oct 26, 2010 at 6:33 PM, Jonathan Gray <jg...@facebook.com>
> > wrote:
> > >
> > >> If monitoring is inside firewall, then why do you have to "open"
> ports?
> > >>  Requiring all monitoring to go through port 80 seems rather odd.
>  Your
> > ops
> > >> guys don't support ganglia, jmx, etc. on standard or custom ports?
> > >>
> > >> > -----Original Message-----
> > >> > From: Ted Yu [mailto:yuzhihong@gmail.com]
> > >> > Sent: Tuesday, October 26, 2010 4:45 PM
> > >> > To: dev@hbase.apache.org
> > >> > Subject: Re: hbase monitoring through stargate
> > >> >
> > >> > The monitoring is done inside firewall.
> > >> > They won't open any ports at all.
> > >> >
> > >> > Does anyone run Stargate in production ?
> > >> >
> > >> > On Tue, Oct 26, 2010 at 4:35 PM, Stack <st...@duboce.net> wrote:
> > >> >
> > >> > > You can change the port it runs on?  Or are ops saying they won't
> > >> > open
> > >> > > any ports at all for you?  Do you have to monitor from outside the
> > >> > > firewall?
> > >> > > St.Ack
> > >> > >
> > >> > > On Tue, Oct 26, 2010 at 4:28 PM, Ted Yu <yu...@gmail.com>
> > wrote:
> > >> > > > Stargate provides REST service through certain port.
> > >> > > > Ops told me that they cannot open additional port from hbase
> > >> > cluster for
> > >> > > > security reasons.
> > >> > > >
> > >> > > > I want to hear opinions/approaches w.r.t. hbase monitoring in
> > >> > production
> > >> > > > through stargate.
> > >> > > >
> > >> > > > Thanks
> > >> > > >
> > >> > >
> > >>
> > >
> > >
> >
>

Re: hbase monitoring through stargate

Posted by Gary Helmling <gh...@gmail.com>.
One other option, since a read-only configuration isn't currently available,
you could configure Apache HTTPD as a reverse proxy in front of the stargate
server and use mod_rewrite to only allow get requests through.  Since I
believe stargate follows the RESTful conventions for request methods, you
can just allow GET requests.  Something like:

# block non-get requests
RewriteCond %{REQUEST_METHOD} !^GET$
RewriteRule ^(.*) $1 [F]

# allow everything else
RewriteRule ^(.*) http://stargate.host.name/$1 [P,QSA]

Not sure if that's exactly right, but it should return a 403 response code
(forbidden) for any non-GET requests.  Get requests will continue on and get
proxied through to "stargate.host.name".

You could extend this to lock down specific paths for certain tables, etc.
as well.

--gh


On Tue, Oct 26, 2010 at 7:03 PM, Ted Yu <yu...@gmail.com> wrote:

> Alternatively, is there a way to configure Stargate to serve read requests
> only ?
>
> On Tue, Oct 26, 2010 at 6:58 PM, Ted Yu <yu...@gmail.com> wrote:
>
> > Ops are wary of developers (inside firewall) performing operations
> against
> > 8080.
> >
> > If Stargate isn't a good choice, what other methods can I use to query
> > selected rows from each region server ? Parsing HTML is not ideal either.
> >
> > Thanks
> >
> >
> > On Tue, Oct 26, 2010 at 6:33 PM, Jonathan Gray <jg...@facebook.com>
> wrote:
> >
> >> If monitoring is inside firewall, then why do you have to "open" ports?
> >>  Requiring all monitoring to go through port 80 seems rather odd.  Your
> ops
> >> guys don't support ganglia, jmx, etc. on standard or custom ports?
> >>
> >> > -----Original Message-----
> >> > From: Ted Yu [mailto:yuzhihong@gmail.com]
> >> > Sent: Tuesday, October 26, 2010 4:45 PM
> >> > To: dev@hbase.apache.org
> >> > Subject: Re: hbase monitoring through stargate
> >> >
> >> > The monitoring is done inside firewall.
> >> > They won't open any ports at all.
> >> >
> >> > Does anyone run Stargate in production ?
> >> >
> >> > On Tue, Oct 26, 2010 at 4:35 PM, Stack <st...@duboce.net> wrote:
> >> >
> >> > > You can change the port it runs on?  Or are ops saying they won't
> >> > open
> >> > > any ports at all for you?  Do you have to monitor from outside the
> >> > > firewall?
> >> > > St.Ack
> >> > >
> >> > > On Tue, Oct 26, 2010 at 4:28 PM, Ted Yu <yu...@gmail.com>
> wrote:
> >> > > > Stargate provides REST service through certain port.
> >> > > > Ops told me that they cannot open additional port from hbase
> >> > cluster for
> >> > > > security reasons.
> >> > > >
> >> > > > I want to hear opinions/approaches w.r.t. hbase monitoring in
> >> > production
> >> > > > through stargate.
> >> > > >
> >> > > > Thanks
> >> > > >
> >> > >
> >>
> >
> >
>

Re: hbase monitoring through stargate

Posted by Ted Yu <yu...@gmail.com>.
https://issues.apache.org/jira/browse/HBASE-3161 has been filed.

On Wed, Oct 27, 2010 at 12:09 PM, Andrew Purtell <ap...@apache.org>wrote:

> Oh ok that makes sense.
>
> You want a read only config option for REST? No problem, file a JIRA.
>
> I'm working on it already now to add automatic content transformation
> (base64 ->
> binary) for GETs for Jack Levin.
>
>     - Andy
>
>
>
> >
> >From: Ted Yu <yu...@gmail.com>
> >To: dev@hbase.apache.org
> >Sent: Wed, October 27, 2010 11:37:54 AM
> >Subject: Re: hbase monitoring through stargate
> >
> >I am trying to access actual data. The rationale is to detect region
> server
> >problem by querying certain rows.
> >
> >I am attaching jstack for region server which hung.
> >
> >Thanks
> >
> >
> >On Wed, Oct 27, 2010 at 10:07 AM, Jonathan Gray <jg...@facebook.com>
> wrote:
> >
> >I'm a little confused.  Are you trying to access actual data or are you
> trying
> >to get monitoring/metrics out?
> >>
> >>Or are you trying to have some kind of health-check heartbeat?
> >>
> >>
> >>> -----Original Message-----
> >>> From: Ted Yu [mailto:yuzhihong@gmail.com]
> >>
> >>> Sent: Tuesday, October 26, 2010 7:03 PM
> >>> To: dev@hbase.apache.org
> >>> Subject: Re: hbase monitoring through stargate
> >>>
> >>> Alternatively, is there a way to configure Stargate to serve read
> >>> requests
> >>> only ?
> >>>
> >>> On Tue, Oct 26, 2010 at 6:58 PM, Ted Yu <yu...@gmail.com> wrote:
> >>>
> >>> > Ops are wary of developers (inside firewall) performing operations
> >>> against
> >>> > 8080.
> >>> >
> >>> > If Stargate isn't a good choice, what other methods can I use to
> >>> query
> >>> > selected rows from each region server ? Parsing HTML is not ideal
> >>> either.
> >>> >
> >>> > Thanks
> >>> >
> >>> >
> >>> > On Tue, Oct 26, 2010 at 6:33 PM, Jonathan Gray <jg...@facebook.com>
> >>> wrote:
> >>> >
> >>> >> If monitoring is inside firewall, then why do you have to "open"
> >>> ports?
> >>> >>  Requiring all monitoring to go through port 80 seems rather odd.
> >>> Your ops
> >>> >> guys don't support ganglia, jmx, etc. on standard or custom ports?
> >>> >>
> >>> >> > -----Original Message-----
> >>> >> > From: Ted Yu [mailto:yuzhihong@gmail.com]
> >>> >> > Sent: Tuesday, October 26, 2010 4:45 PM
> >>> >> > To: dev@hbase.apache.org
> >>> >> > Subject: Re: hbase monitoring through stargate
> >>> >> >
> >>> >> > The monitoring is done inside firewall.
> >>> >> > They won't open any ports at all.
> >>> >> >
> >>> >> > Does anyone run Stargate in production ?
> >>> >> >
> >>> >> > On Tue, Oct 26, 2010 at 4:35 PM, Stack <st...@duboce.net> wrote:
> >>> >> >
> >>> >> > > You can change the port it runs on?  Or are ops saying they
> >>> won't
> >>> >> > open
> >>> >> > > any ports at all for you?  Do you have to monitor from outside
> >>> the
> >>> >> > > firewall?
> >>> >> > > St.Ack
> >>> >> > >
> >>> >> > > On Tue, Oct 26, 2010 at 4:28 PM, Ted Yu <yu...@gmail.com>
> >>> wrote:
> >>> >> > > > Stargate provides REST service through certain port.
> >>> >> > > > Ops told me that they cannot open additional port from hbase
> >>> >> > cluster for
> >>> >> > > > security reasons.
> >>> >> > > >
> >>> >> > > > I want to hear opinions/approaches w.r.t. hbase monitoring in
> >>> >> > production
> >>> >> > > > through stargate.
> >>> >> > > >
> >>> >> > > > Thanks
> >>> >> > > >
> >>> >> > >
> >>> >>
> >>> >
> >>> >
> >>
> >
>
>
>
>
>

Re: hbase monitoring through stargate

Posted by Andrew Purtell <ap...@apache.org>.
Oh ok that makes sense.

You want a read only config option for REST? No problem, file a JIRA.

I'm working on it already now to add automatic content transformation (base64 -> 
binary) for GETs for Jack Levin.

     - Andy



>
>From: Ted Yu <yu...@gmail.com>
>To: dev@hbase.apache.org
>Sent: Wed, October 27, 2010 11:37:54 AM
>Subject: Re: hbase monitoring through stargate
>
>I am trying to access actual data. The rationale is to detect region server 
>problem by querying certain rows.
>
>I am attaching jstack for region server which hung.
>
>Thanks
>
>
>On Wed, Oct 27, 2010 at 10:07 AM, Jonathan Gray <jg...@facebook.com> wrote:
>
>I'm a little confused.  Are you trying to access actual data or are you trying 
>to get monitoring/metrics out?
>>
>>Or are you trying to have some kind of health-check heartbeat?
>>
>>
>>> -----Original Message-----
>>> From: Ted Yu [mailto:yuzhihong@gmail.com]
>>
>>> Sent: Tuesday, October 26, 2010 7:03 PM
>>> To: dev@hbase.apache.org
>>> Subject: Re: hbase monitoring through stargate
>>>
>>> Alternatively, is there a way to configure Stargate to serve read
>>> requests
>>> only ?
>>>
>>> On Tue, Oct 26, 2010 at 6:58 PM, Ted Yu <yu...@gmail.com> wrote:
>>>
>>> > Ops are wary of developers (inside firewall) performing operations
>>> against
>>> > 8080.
>>> >
>>> > If Stargate isn't a good choice, what other methods can I use to
>>> query
>>> > selected rows from each region server ? Parsing HTML is not ideal
>>> either.
>>> >
>>> > Thanks
>>> >
>>> >
>>> > On Tue, Oct 26, 2010 at 6:33 PM, Jonathan Gray <jg...@facebook.com>
>>> wrote:
>>> >
>>> >> If monitoring is inside firewall, then why do you have to "open"
>>> ports?
>>> >>  Requiring all monitoring to go through port 80 seems rather odd.
>>> Your ops
>>> >> guys don't support ganglia, jmx, etc. on standard or custom ports?
>>> >>
>>> >> > -----Original Message-----
>>> >> > From: Ted Yu [mailto:yuzhihong@gmail.com]
>>> >> > Sent: Tuesday, October 26, 2010 4:45 PM
>>> >> > To: dev@hbase.apache.org
>>> >> > Subject: Re: hbase monitoring through stargate
>>> >> >
>>> >> > The monitoring is done inside firewall.
>>> >> > They won't open any ports at all.
>>> >> >
>>> >> > Does anyone run Stargate in production ?
>>> >> >
>>> >> > On Tue, Oct 26, 2010 at 4:35 PM, Stack <st...@duboce.net> wrote:
>>> >> >
>>> >> > > You can change the port it runs on?  Or are ops saying they
>>> won't
>>> >> > open
>>> >> > > any ports at all for you?  Do you have to monitor from outside
>>> the
>>> >> > > firewall?
>>> >> > > St.Ack
>>> >> > >
>>> >> > > On Tue, Oct 26, 2010 at 4:28 PM, Ted Yu <yu...@gmail.com>
>>> wrote:
>>> >> > > > Stargate provides REST service through certain port.
>>> >> > > > Ops told me that they cannot open additional port from hbase
>>> >> > cluster for
>>> >> > > > security reasons.
>>> >> > > >
>>> >> > > > I want to hear opinions/approaches w.r.t. hbase monitoring in
>>> >> > production
>>> >> > > > through stargate.
>>> >> > > >
>>> >> > > > Thanks
>>> >> > > >
>>> >> > >
>>> >>
>>> >
>>> >
>>
>

Re: hbase monitoring through stargate

Posted by Ted Yu <yu...@gmail.com>.
I am trying to access actual data. The rationale is to detect region server
problem by querying certain rows.

I am attaching jstack for region server which hung.

Thanks

On Wed, Oct 27, 2010 at 10:07 AM, Jonathan Gray <jg...@facebook.com> wrote:

> I'm a little confused.  Are you trying to access actual data or are you
> trying to get monitoring/metrics out?
>
> Or are you trying to have some kind of health-check heartbeat?
>
> > -----Original Message-----
> > From: Ted Yu [mailto:yuzhihong@gmail.com]
> > Sent: Tuesday, October 26, 2010 7:03 PM
> > To: dev@hbase.apache.org
> > Subject: Re: hbase monitoring through stargate
> >
> > Alternatively, is there a way to configure Stargate to serve read
> > requests
> > only ?
> >
> > On Tue, Oct 26, 2010 at 6:58 PM, Ted Yu <yu...@gmail.com> wrote:
> >
> > > Ops are wary of developers (inside firewall) performing operations
> > against
> > > 8080.
> > >
> > > If Stargate isn't a good choice, what other methods can I use to
> > query
> > > selected rows from each region server ? Parsing HTML is not ideal
> > either.
> > >
> > > Thanks
> > >
> > >
> > > On Tue, Oct 26, 2010 at 6:33 PM, Jonathan Gray <jg...@facebook.com>
> > wrote:
> > >
> > >> If monitoring is inside firewall, then why do you have to "open"
> > ports?
> > >>  Requiring all monitoring to go through port 80 seems rather odd.
> > Your ops
> > >> guys don't support ganglia, jmx, etc. on standard or custom ports?
> > >>
> > >> > -----Original Message-----
> > >> > From: Ted Yu [mailto:yuzhihong@gmail.com]
> > >> > Sent: Tuesday, October 26, 2010 4:45 PM
> > >> > To: dev@hbase.apache.org
> > >> > Subject: Re: hbase monitoring through stargate
> > >> >
> > >> > The monitoring is done inside firewall.
> > >> > They won't open any ports at all.
> > >> >
> > >> > Does anyone run Stargate in production ?
> > >> >
> > >> > On Tue, Oct 26, 2010 at 4:35 PM, Stack <st...@duboce.net> wrote:
> > >> >
> > >> > > You can change the port it runs on?  Or are ops saying they
> > won't
> > >> > open
> > >> > > any ports at all for you?  Do you have to monitor from outside
> > the
> > >> > > firewall?
> > >> > > St.Ack
> > >> > >
> > >> > > On Tue, Oct 26, 2010 at 4:28 PM, Ted Yu <yu...@gmail.com>
> > wrote:
> > >> > > > Stargate provides REST service through certain port.
> > >> > > > Ops told me that they cannot open additional port from hbase
> > >> > cluster for
> > >> > > > security reasons.
> > >> > > >
> > >> > > > I want to hear opinions/approaches w.r.t. hbase monitoring in
> > >> > production
> > >> > > > through stargate.
> > >> > > >
> > >> > > > Thanks
> > >> > > >
> > >> > >
> > >>
> > >
> > >
>

RE: hbase monitoring through stargate

Posted by Jonathan Gray <jg...@facebook.com>.
I'm a little confused.  Are you trying to access actual data or are you trying to get monitoring/metrics out?

Or are you trying to have some kind of health-check heartbeat?

> -----Original Message-----
> From: Ted Yu [mailto:yuzhihong@gmail.com]
> Sent: Tuesday, October 26, 2010 7:03 PM
> To: dev@hbase.apache.org
> Subject: Re: hbase monitoring through stargate
> 
> Alternatively, is there a way to configure Stargate to serve read
> requests
> only ?
> 
> On Tue, Oct 26, 2010 at 6:58 PM, Ted Yu <yu...@gmail.com> wrote:
> 
> > Ops are wary of developers (inside firewall) performing operations
> against
> > 8080.
> >
> > If Stargate isn't a good choice, what other methods can I use to
> query
> > selected rows from each region server ? Parsing HTML is not ideal
> either.
> >
> > Thanks
> >
> >
> > On Tue, Oct 26, 2010 at 6:33 PM, Jonathan Gray <jg...@facebook.com>
> wrote:
> >
> >> If monitoring is inside firewall, then why do you have to "open"
> ports?
> >>  Requiring all monitoring to go through port 80 seems rather odd.
> Your ops
> >> guys don't support ganglia, jmx, etc. on standard or custom ports?
> >>
> >> > -----Original Message-----
> >> > From: Ted Yu [mailto:yuzhihong@gmail.com]
> >> > Sent: Tuesday, October 26, 2010 4:45 PM
> >> > To: dev@hbase.apache.org
> >> > Subject: Re: hbase monitoring through stargate
> >> >
> >> > The monitoring is done inside firewall.
> >> > They won't open any ports at all.
> >> >
> >> > Does anyone run Stargate in production ?
> >> >
> >> > On Tue, Oct 26, 2010 at 4:35 PM, Stack <st...@duboce.net> wrote:
> >> >
> >> > > You can change the port it runs on?  Or are ops saying they
> won't
> >> > open
> >> > > any ports at all for you?  Do you have to monitor from outside
> the
> >> > > firewall?
> >> > > St.Ack
> >> > >
> >> > > On Tue, Oct 26, 2010 at 4:28 PM, Ted Yu <yu...@gmail.com>
> wrote:
> >> > > > Stargate provides REST service through certain port.
> >> > > > Ops told me that they cannot open additional port from hbase
> >> > cluster for
> >> > > > security reasons.
> >> > > >
> >> > > > I want to hear opinions/approaches w.r.t. hbase monitoring in
> >> > production
> >> > > > through stargate.
> >> > > >
> >> > > > Thanks
> >> > > >
> >> > >
> >>
> >
> >

Re: hbase monitoring through stargate

Posted by Ted Yu <yu...@gmail.com>.
Alternatively, is there a way to configure Stargate to serve read requests
only ?

On Tue, Oct 26, 2010 at 6:58 PM, Ted Yu <yu...@gmail.com> wrote:

> Ops are wary of developers (inside firewall) performing operations against
> 8080.
>
> If Stargate isn't a good choice, what other methods can I use to query
> selected rows from each region server ? Parsing HTML is not ideal either.
>
> Thanks
>
>
> On Tue, Oct 26, 2010 at 6:33 PM, Jonathan Gray <jg...@facebook.com> wrote:
>
>> If monitoring is inside firewall, then why do you have to "open" ports?
>>  Requiring all monitoring to go through port 80 seems rather odd.  Your ops
>> guys don't support ganglia, jmx, etc. on standard or custom ports?
>>
>> > -----Original Message-----
>> > From: Ted Yu [mailto:yuzhihong@gmail.com]
>> > Sent: Tuesday, October 26, 2010 4:45 PM
>> > To: dev@hbase.apache.org
>> > Subject: Re: hbase monitoring through stargate
>> >
>> > The monitoring is done inside firewall.
>> > They won't open any ports at all.
>> >
>> > Does anyone run Stargate in production ?
>> >
>> > On Tue, Oct 26, 2010 at 4:35 PM, Stack <st...@duboce.net> wrote:
>> >
>> > > You can change the port it runs on?  Or are ops saying they won't
>> > open
>> > > any ports at all for you?  Do you have to monitor from outside the
>> > > firewall?
>> > > St.Ack
>> > >
>> > > On Tue, Oct 26, 2010 at 4:28 PM, Ted Yu <yu...@gmail.com> wrote:
>> > > > Stargate provides REST service through certain port.
>> > > > Ops told me that they cannot open additional port from hbase
>> > cluster for
>> > > > security reasons.
>> > > >
>> > > > I want to hear opinions/approaches w.r.t. hbase monitoring in
>> > production
>> > > > through stargate.
>> > > >
>> > > > Thanks
>> > > >
>> > >
>>
>
>

Re: hbase monitoring through stargate

Posted by Ted Yu <yu...@gmail.com>.
Ops are wary of developers (inside firewall) performing operations against
8080.

If Stargate isn't a good choice, what other methods can I use to query
selected rows from each region server ? Parsing HTML is not ideal either.

Thanks

On Tue, Oct 26, 2010 at 6:33 PM, Jonathan Gray <jg...@facebook.com> wrote:

> If monitoring is inside firewall, then why do you have to "open" ports?
>  Requiring all monitoring to go through port 80 seems rather odd.  Your ops
> guys don't support ganglia, jmx, etc. on standard or custom ports?
>
> > -----Original Message-----
> > From: Ted Yu [mailto:yuzhihong@gmail.com]
> > Sent: Tuesday, October 26, 2010 4:45 PM
> > To: dev@hbase.apache.org
> > Subject: Re: hbase monitoring through stargate
> >
> > The monitoring is done inside firewall.
> > They won't open any ports at all.
> >
> > Does anyone run Stargate in production ?
> >
> > On Tue, Oct 26, 2010 at 4:35 PM, Stack <st...@duboce.net> wrote:
> >
> > > You can change the port it runs on?  Or are ops saying they won't
> > open
> > > any ports at all for you?  Do you have to monitor from outside the
> > > firewall?
> > > St.Ack
> > >
> > > On Tue, Oct 26, 2010 at 4:28 PM, Ted Yu <yu...@gmail.com> wrote:
> > > > Stargate provides REST service through certain port.
> > > > Ops told me that they cannot open additional port from hbase
> > cluster for
> > > > security reasons.
> > > >
> > > > I want to hear opinions/approaches w.r.t. hbase monitoring in
> > production
> > > > through stargate.
> > > >
> > > > Thanks
> > > >
> > >
>

RE: hbase monitoring through stargate

Posted by Andrew Purtell <ap...@apache.org>.
Stargate is not meant to be a monitoring tool, nor designed as such.

   - Andy

--- On Tue, 10/26/10, Jonathan Gray <jg...@facebook.com> wrote:

> From: Jonathan Gray <jg...@facebook.com>
> Subject: RE: hbase monitoring through stargate
> To: "dev@hbase.apache.org" <de...@hbase.apache.org>
> Date: Tuesday, October 26, 2010, 6:33 PM
> If monitoring is inside firewall,
> then why do you have to "open" ports?  Requiring all
> monitoring to go through port 80 seems rather odd. 
> Your ops guys don't support ganglia, jmx, etc. on standard
> or custom ports?
> 
> > -----Original Message-----
> > From: Ted Yu [mailto:yuzhihong@gmail.com]
> > Sent: Tuesday, October 26, 2010 4:45 PM
> > To: dev@hbase.apache.org
> > Subject: Re: hbase monitoring through stargate
> > 
> > The monitoring is done inside firewall.
> > They won't open any ports at all.
> > 
> > Does anyone run Stargate in production ?
> > 
> > On Tue, Oct 26, 2010 at 4:35 PM, Stack <st...@duboce.net>
> wrote:
> > 
> > > You can change the port it runs on?  Or are
> ops saying they won't
> > open
> > > any ports at all for you?  Do you have to
> monitor from outside the
> > > firewall?
> > > St.Ack
> > >
> > > On Tue, Oct 26, 2010 at 4:28 PM, Ted Yu <yu...@gmail.com>
> wrote:
> > > > Stargate provides REST service through
> certain port.
> > > > Ops told me that they cannot open additional
> port from hbase
> > cluster for
> > > > security reasons.
> > > >
> > > > I want to hear opinions/approaches w.r.t.
> hbase monitoring in
> > production
> > > > through stargate.
> > > >
> > > > Thanks
> > > >
> > >
>

RE: hbase monitoring through stargate

Posted by Jonathan Gray <jg...@facebook.com>.
If monitoring is inside firewall, then why do you have to "open" ports?  Requiring all monitoring to go through port 80 seems rather odd.  Your ops guys don't support ganglia, jmx, etc. on standard or custom ports?

> -----Original Message-----
> From: Ted Yu [mailto:yuzhihong@gmail.com]
> Sent: Tuesday, October 26, 2010 4:45 PM
> To: dev@hbase.apache.org
> Subject: Re: hbase monitoring through stargate
> 
> The monitoring is done inside firewall.
> They won't open any ports at all.
> 
> Does anyone run Stargate in production ?
> 
> On Tue, Oct 26, 2010 at 4:35 PM, Stack <st...@duboce.net> wrote:
> 
> > You can change the port it runs on?  Or are ops saying they won't
> open
> > any ports at all for you?  Do you have to monitor from outside the
> > firewall?
> > St.Ack
> >
> > On Tue, Oct 26, 2010 at 4:28 PM, Ted Yu <yu...@gmail.com> wrote:
> > > Stargate provides REST service through certain port.
> > > Ops told me that they cannot open additional port from hbase
> cluster for
> > > security reasons.
> > >
> > > I want to hear opinions/approaches w.r.t. hbase monitoring in
> production
> > > through stargate.
> > >
> > > Thanks
> > >
> >

Re: hbase monitoring through stargate

Posted by Ted Yu <yu...@gmail.com>.
The monitoring is done inside firewall.
They won't open any ports at all.

Does anyone run Stargate in production ?

On Tue, Oct 26, 2010 at 4:35 PM, Stack <st...@duboce.net> wrote:

> You can change the port it runs on?  Or are ops saying they won't open
> any ports at all for you?  Do you have to monitor from outside the
> firewall?
> St.Ack
>
> On Tue, Oct 26, 2010 at 4:28 PM, Ted Yu <yu...@gmail.com> wrote:
> > Stargate provides REST service through certain port.
> > Ops told me that they cannot open additional port from hbase cluster for
> > security reasons.
> >
> > I want to hear opinions/approaches w.r.t. hbase monitoring in production
> > through stargate.
> >
> > Thanks
> >
>

Re: hbase monitoring through stargate

Posted by Stack <st...@duboce.net>.
You can change the port it runs on?  Or are ops saying they won't open
any ports at all for you?  Do you have to monitor from outside the
firewall?
St.Ack

On Tue, Oct 26, 2010 at 4:28 PM, Ted Yu <yu...@gmail.com> wrote:
> Stargate provides REST service through certain port.
> Ops told me that they cannot open additional port from hbase cluster for
> security reasons.
>
> I want to hear opinions/approaches w.r.t. hbase monitoring in production
> through stargate.
>
> Thanks
>