You are viewing a plain text version of this content. The canonical link for it is here.
Posted to hdfs-commits@hadoop.apache.org by ka...@apache.org on 2014/08/06 18:57:22 UTC
svn commit: r1616283 - in
/hadoop/common/branches/branch-2.5/hadoop-hdfs-project/hadoop-hdfs:
CHANGES.txt src/site/apt/HdfsNfsGateway.apt.vm
Author: kasha
Date: Wed Aug 6 16:57:21 2014
New Revision: 1616283
URL: http://svn.apache.org/r1616283
Log:
Reverting r1614132 (HDFS-6717) from branch-2.5, as it is partial
Modified:
hadoop/common/branches/branch-2.5/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt
hadoop/common/branches/branch-2.5/hadoop-hdfs-project/hadoop-hdfs/src/site/apt/HdfsNfsGateway.apt.vm
Modified: hadoop/common/branches/branch-2.5/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt
URL: http://svn.apache.org/viewvc/hadoop/common/branches/branch-2.5/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt?rev=1616283&r1=1616282&r2=1616283&view=diff
==============================================================================
--- hadoop/common/branches/branch-2.5/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt (original)
+++ hadoop/common/branches/branch-2.5/hadoop-hdfs-project/hadoop-hdfs/CHANGES.txt Wed Aug 6 16:57:21 2014
@@ -560,9 +560,6 @@ Release 2.5.0 - UNRELEASED
HDFS-6723. New NN webUI no longer displays decommissioned state for dead node.
(Ming Ma via wheat9)
- HDFS-6717. JIRA HDFS-5804 breaks default nfs-gateway behavior for unsecured config
- (brandonli)
-
HDFS-6793. Missing changes in HftpFileSystem when Reintroduce
dfs.http.port / dfs.https.port in branch-2. (Juan Yu via wang).
Modified: hadoop/common/branches/branch-2.5/hadoop-hdfs-project/hadoop-hdfs/src/site/apt/HdfsNfsGateway.apt.vm
URL: http://svn.apache.org/viewvc/hadoop/common/branches/branch-2.5/hadoop-hdfs-project/hadoop-hdfs/src/site/apt/HdfsNfsGateway.apt.vm?rev=1616283&r1=1616282&r2=1616283&view=diff
==============================================================================
--- hadoop/common/branches/branch-2.5/hadoop-hdfs-project/hadoop-hdfs/src/site/apt/HdfsNfsGateway.apt.vm (original)
+++ hadoop/common/branches/branch-2.5/hadoop-hdfs-project/hadoop-hdfs/src/site/apt/HdfsNfsGateway.apt.vm Wed Aug 6 16:57:21 2014
@@ -44,13 +44,10 @@ HDFS NFS Gateway
* {Configuration}
- The NFS-gateway uses proxy user to proxy all the users accessing the NFS mounts.
- In non-secure mode, the user running the gateway is the proxy user, while in secure mode the
- user in Kerberos keytab is the proxy user. Suppose the proxy user is 'nfsserver'
- and users belonging to the groups 'nfs-users1'
- and 'nfs-users2' use the NFS mounts, then in core-site.xml of the NameNode, the following
- two properities must be set and only NameNode needs restart after the configuration change
- (NOTE: replace the string 'nfsserver' with the proxy user name in your cluster):
+ The user running the NFS-gateway must be able to proxy all the users using the NFS mounts.
+ For instance, if user 'nfsserver' is running the gateway, and users belonging to the groups 'nfs-users1'
+ and 'nfs-users2' use the NFS mounts, then in core-site.xml of the namenode, the following must be set
+ (NOTE: replace 'nfsserver' with the user name starting the gateway in your cluster):
----
<property>
@@ -75,9 +72,7 @@ HDFS NFS Gateway
----
The above are the only required configuration for the NFS gateway in non-secure mode. For Kerberized
- hadoop clusters, the following configurations need to be added to hdfs-site.xml for the gateway (NOTE: replace
- string "nfsserver" with the proxy user name and ensure the user contained in the keytab is
- also the same proxy user):
+ hadoop clusters, the following configurations need to be added to hdfs-site.xml:
----
<property>
@@ -92,8 +87,6 @@ HDFS NFS Gateway
<value>nfsserver/_HOST@YOUR-REALM.COM</value>
</property>
----
-
- The rest of the NFS gateway configurations are optional for both secure and non-secure mode.
The AIX NFS client has a {{{https://issues.apache.org/jira/browse/HDFS-6549}few known issues}}
that prevent it from working correctly by default with the HDFS NFS
@@ -115,7 +108,7 @@ HDFS NFS Gateway
have been committed.
It's strongly recommended for the users to update a few configuration properties based on their use
- cases. All the following configuration properties can be added or updated in hdfs-site.xml.
+ cases. All the related configuration properties can be added or updated in hdfs-site.xml.
* If the client mounts the export with access time update allowed, make sure the following
property is not disabled in the configuration file. Only NameNode needs to restart after
@@ -152,6 +145,36 @@ HDFS NFS Gateway
</property>
----
+ * For optimal performance, it is recommended that rtmax be updated to
+ 1MB. However, note that this 1MB is a per client allocation, and not
+ from a shared memory pool, and therefore a larger value may adversely
+ affect small reads, consuming a lot of memory. The maximum value of
+ this property is 1MB.
+
+----
+<property>
+ <name>nfs.rtmax</name>
+ <value>1048576</value>
+ <description>This is the maximum size in bytes of a READ request
+ supported by the NFS gateway. If you change this, make sure you
+ also update the nfs mount's rsize(add rsize= # of bytes to the
+ mount directive).
+ </description>
+</property>
+----
+
+----
+<property>
+ <name>nfs.wtmax</name>
+ <value>65536</value>
+ <description>This is the maximum size in bytes of a WRITE request
+ supported by the NFS gateway. If you change this, make sure you
+ also update the nfs mount's wsize(add wsize= # of bytes to the
+ mount directive).
+ </description>
+</property>
+----
+
* By default, the export can be mounted by any client. To better control the access,
users can update the following property. The value string contains machine name and
access privilege, separated by whitespace
@@ -215,10 +238,8 @@ HDFS NFS Gateway
[[3]] Start mountd and nfsd.
- No root privileges are required for this command. In non-secure mode, the NFS gateway
- should be started by the proxy user mentioned at the beginning of this user guide.
- While in secure mode, any user can start NFS gateway
- as long as the user has read access to the Kerberos keytab defined in "nfs.keytab.file".
+ No root privileges are required for this command. However, ensure that the user starting
+ the Hadoop cluster and the user starting the NFS gateway are same.
-------------------------
hadoop nfs3
@@ -318,10 +339,7 @@ HDFS NFS Gateway
-------------------------------------------------------------------
Then the users can access HDFS as part of the local file system except that,
- hard link and random write are not supported yet. To optimize the performance
- of large file I/O, one can increase the NFS transfer size(rsize and wsize) during mount.
- By default, NFS gateway supports 1MB as the maximum transfer size. For larger data
- transfer size, one needs to update "nfs.rtmax" and "nfs.rtmax" in hdfs-site.xml.
+ hard link and random write are not supported yet.
* {Allow mounts from unprivileged clients}