You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hbase.apache.org by "Alex Araujo (JIRA)" <ji...@apache.org> on 2017/06/30 21:30:00 UTC

[jira] [Comment Edited] (HBASE-17721) Provide streaming APIs with SSL/TLS

    [ https://issues.apache.org/jira/browse/HBASE-17721?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16070752#comment-16070752 ] 

Alex Araujo edited comment on HBASE-17721 at 6/30/17 9:29 PM:
--------------------------------------------------------------

Looks promising. I spot checked the hbase-thirdparty poms and jsr305 is excluded there but not banned as with HBASE-16321. As long as it remains that way we shouldn't see the same issue. Will rebase and resume the grpc experiment soon.


was (Author: alexaraujo):
Looks promising. I spot checked the hbase-thirdparty poms and jsr305 is excluded there but not banned as with HBASE-17721. As long as it remains that way we shouldn't see the same issue. Will rebase and resume the grpc experiment soon.

> Provide streaming APIs with SSL/TLS
> -----------------------------------
>
>                 Key: HBASE-17721
>                 URL: https://issues.apache.org/jira/browse/HBASE-17721
>             Project: HBase
>          Issue Type: Umbrella
>          Components: rpc, security
>            Reporter: Alex Araujo
>            Assignee: Alex Araujo
>             Fix For: 2.0.0
>
>         Attachments: 0001-Initial-add-of-grpc.patch
>
>
> Umbrella to add optional client/server streaming capabilities to HBase.
> This would allow bandwidth to be used more efficiently for certain operations, and allow clients to use SSL/TLS for authentication and encryption.
> Desired client/server scaffolding:
> - HTTP/2 support
> - Protocol negotiation (blocking vs streaming, auth, encryption, etc.)
> - TLS/SSL support
> - Streaming RPC support
> Possibilities (and their tradeoffs):
> - gRPC: Some initial work and discussion on HBASE-13467 (Prototype using GRPC as IPC mechanism)
> -- Has most or all of the desired scaffolding
> -- Adds additional g* dependencies. Compat story for g* dependencies not always ideal
> - Custom HTTP/2 based client/server APIs
> -- More control over compat story
> -- Non-trivial to build scaffolding; might reinvent wheels along the way
> - Others?
> Related Jiras that might be rolled in as sub-tasks (or closed/replaced with new ones):
> HBASE-17708 (Expose config to set two-way auth over TLS in HttpServer and add a test)
> HBASE-8691 (High-Throughput Streaming Scan API)
> HBASE-14899 (Create custom Streaming ReplicationEndpoint)



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)