You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cassandra.apache.org by Shailaja Koppu <s_...@apple.com> on 2023/06/15 15:49:39 UTC

[DISCUSS] CEP 33 - CIDR filtering authorizer

Adding [DISCUSS] to the subject. I request everyone here to please share your thoughts/comments on this CEP.

Thank you @Nate.


> On Jun 15, 2023, at 12:48 AM, Nate McCall <zz...@gmail.com> wrote:
> 
> Hi Shailaja,
> This looks super interesting. I particularly like the MONITOR switch. This is a huge pain-point for a lot of cluster migrations. 
> 
> Cheers,
> -Nate
> 
> On Thu, Jun 15, 2023 at 6:43 AM Shailaja Koppu <s_koppu@apple.com <ma...@apple.com>> wrote:
> Hi Team,
> 
> I have created CEP 33 - CIDR filtering authorizer https://cwiki.apache.org/confluence/display/CASSANDRA/CEP-33%3A+CIDR+filtering+authorizer <https://cwiki.apache.org/confluence/display/CASSANDRA/CEP-33:+CIDR+filtering+authorizer>.
> 
> Purpose of this feature is to add the ability to restrict users accesses based on the client’s IP (or region). We can map set of CIDRs to CIDR groups (aka, regions), and then enable or disable roles to access from certain CIDR groups. CEP page details why are we doing this and how. Please go through it, comment here on the discussion thread and vote. 
> 
> For your reference, code for this feature is at https://github.com/apache/cassandra/pull/2414 <https://github.com/apache/cassandra/pull/2414>. PR description contains an example usage.
> 
> 
> Thanks,
> Shailaja

[VOTE] CEP 33 - CIDR filtering authorizer

Posted by Shailaja Koppu <s_...@apple.com>.
Hi Team,

Starting voting for this CEP 33 -  https://cwiki.apache.org/confluence/display/CASSANDRA/CEP-33%3A+CIDR+filtering+authorizer <https://cwiki.apache.org/confluence/display/CASSANDRA/CEP-33:+CIDR+filtering+authorizer>. 
Please vote for this CEP, I will merge the PR after review if passes the voting process.

(Changed the email subject to VOTE).

Thanks,
Shailaja



> On Jun 22, 2023, at 5:37 PM, Shailaja Koppu <s_...@apple.com> wrote:
> 
> Hi Team,
> 
> If no one has comments/questions regarding this feature, I would like to start voting thread on Monday.
> 
> 
> Thanks,
> Shailaja
> 
> 
>> On Jun 15, 2023, at 4:49 PM, Shailaja Koppu <s_koppu@apple.com <ma...@apple.com>> wrote:
>> 
>> Adding [DISCUSS] to the subject. I request everyone here to please share your thoughts/comments on this CEP.
>> 
>> Thank you @Nate.
>> 
>> 
>>> On Jun 15, 2023, at 12:48 AM, Nate McCall <zznate.m@gmail.com <ma...@gmail.com>> wrote:
>>> 
>>> Hi Shailaja,
>>> This looks super interesting. I particularly like the MONITOR switch. This is a huge pain-point for a lot of cluster migrations. 
>>> 
>>> Cheers,
>>> -Nate
>>> 
>>> On Thu, Jun 15, 2023 at 6:43 AM Shailaja Koppu <s_koppu@apple.com <ma...@apple.com>> wrote:
>>> Hi Team,
>>> 
>>> I have created CEP 33 - CIDR filtering authorizer https://cwiki.apache.org/confluence/display/CASSANDRA/CEP-33%3A+CIDR+filtering+authorizer <https://cwiki.apache.org/confluence/display/CASSANDRA/CEP-33:+CIDR+filtering+authorizer>.
>>> 
>>> Purpose of this feature is to add the ability to restrict users accesses based on the client’s IP (or region). We can map set of CIDRs to CIDR groups (aka, regions), and then enable or disable roles to access from certain CIDR groups. CEP page details why are we doing this and how. Please go through it, comment here on the discussion thread and vote. 
>>> 
>>> For your reference, code for this feature is at https://github.com/apache/cassandra/pull/2414 <https://github.com/apache/cassandra/pull/2414>. PR description contains an example usage.
>>> 
>>> 
>>> Thanks,
>>> Shailaja
>> 
>

Re: [DISCUSS] CEP 33 - CIDR filtering authorizer

Posted by Shailaja Koppu <s_...@apple.com>.
Hi Team,

If no one has comments/questions regarding this feature, I would like to start voting thread on Monday.


Thanks,
Shailaja


> On Jun 15, 2023, at 4:49 PM, Shailaja Koppu <s_...@apple.com> wrote:
> 
> Adding [DISCUSS] to the subject. I request everyone here to please share your thoughts/comments on this CEP.
> 
> Thank you @Nate.
> 
> 
>> On Jun 15, 2023, at 12:48 AM, Nate McCall <zznate.m@gmail.com <ma...@gmail.com>> wrote:
>> 
>> Hi Shailaja,
>> This looks super interesting. I particularly like the MONITOR switch. This is a huge pain-point for a lot of cluster migrations. 
>> 
>> Cheers,
>> -Nate
>> 
>> On Thu, Jun 15, 2023 at 6:43 AM Shailaja Koppu <s_koppu@apple.com <ma...@apple.com>> wrote:
>> Hi Team,
>> 
>> I have created CEP 33 - CIDR filtering authorizer https://cwiki.apache.org/confluence/display/CASSANDRA/CEP-33%3A+CIDR+filtering+authorizer <https://cwiki.apache.org/confluence/display/CASSANDRA/CEP-33:+CIDR+filtering+authorizer>.
>> 
>> Purpose of this feature is to add the ability to restrict users accesses based on the client’s IP (or region). We can map set of CIDRs to CIDR groups (aka, regions), and then enable or disable roles to access from certain CIDR groups. CEP page details why are we doing this and how. Please go through it, comment here on the discussion thread and vote. 
>> 
>> For your reference, code for this feature is at https://github.com/apache/cassandra/pull/2414 <https://github.com/apache/cassandra/pull/2414>. PR description contains an example usage.
>> 
>> 
>> Thanks,
>> Shailaja
>