You are viewing a plain text version of this content. The canonical link for it is here.
Posted to common-issues@hadoop.apache.org by "Robert Joseph Evans (Created) (JIRA)" <ji...@apache.org> on 2012/03/29 22:06:22 UTC
[jira] [Created] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Allow RPC to limit ephemeral port range.
----------------------------------------
Key: HADOOP-8227
URL: https://issues.apache.org/jira/browse/HADOOP-8227
Project: Hadoop Common
Issue Type: Improvement
Affects Versions: 0.23.2
Reporter: Robert Joseph Evans
Assignee: Robert Joseph Evans
Priority: Blocker
This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Robert Joseph Evans (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Joseph Evans updated HADOOP-8227:
----------------------------------------
Attachment: HADOOP-8227-trunk.txt
Updated patch to address review comments. Corresponding comments can be seen in the 0.23 version at
https://issues.apache.org/jira/secure/attachment/12521960/MR-4079-full-branch-0.23.txt
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Robert Joseph Evans (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Joseph Evans updated HADOOP-8227:
----------------------------------------
Status: Open (was: Patch Available)
Canceling patch to address Tom's Comments.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13255632#comment-13255632 ]
Hudson commented on HADOOP-8227:
--------------------------------
Integrated in Hadoop-Hdfs-trunk-Commit #2159 (See [https://builds.apache.org/job/Hadoop-Hdfs-trunk-Commit/2159/])
HADOOP-8227. Allow RPC to limit ephemeral port range. (bobby) (Revision 1327127)
Result = SUCCESS
bobby : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1327127
Files :
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/conf/Configuration.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/ProtobufRpcEngine.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/RPC.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/RpcEngine.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/Server.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/WritableRpcEngine.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/conf/TestConfiguration.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/ipc/TestRPC.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/ipc/TestServer.java
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Fix For: 2.0.0, 3.0.0
>
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Hadoop QA (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13254764#comment-13254764 ]
Hadoop QA commented on HADOOP-8227:
-----------------------------------
+1 overall. Here are the results of testing the latest attachment
http://issues.apache.org/jira/secure/attachment/12522785/HADOOP-8227-trunk.txt
against trunk revision .
+1 @author. The patch does not contain any @author tags.
+1 tests included. The patch appears to include 3 new or modified test files.
+1 javadoc. The javadoc tool did not generate any warning messages.
+1 javac. The applied patch does not increase the total number of javac compiler warnings.
+1 eclipse:eclipse. The patch built with eclipse:eclipse.
+1 findbugs. The patch does not introduce any new Findbugs (version 1.3.9) warnings.
+1 release audit. The applied patch does not increase the total number of release audit warnings.
+1 core tests. The patch passed unit tests in .
+1 contrib tests. The patch passed contrib unit tests.
Test results: https://builds.apache.org/job/PreCommit-HADOOP-Build/854//testReport/
Console output: https://builds.apache.org/job/PreCommit-HADOOP-Build/854//console
This message is automatically generated.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Hadoop QA (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13242433#comment-13242433 ]
Hadoop QA commented on HADOOP-8227:
-----------------------------------
-1 overall. Here are the results of testing the latest attachment
http://issues.apache.org/jira/secure/attachment/12520610/HADOOP-8227-trunk.txt
against trunk revision .
+1 @author. The patch does not contain any @author tags.
+1 tests included. The patch appears to include 5 new or modified tests.
+1 javadoc. The javadoc tool did not generate any warning messages.
+1 javac. The applied patch does not increase the total number of javac compiler warnings.
+1 eclipse:eclipse. The patch built with eclipse:eclipse.
+1 findbugs. The patch does not introduce any new Findbugs (version 1.3.9) warnings.
+1 release audit. The applied patch does not increase the total number of release audit warnings.
-1 core tests. The patch failed these unit tests:
org.apache.hadoop.fs.viewfs.TestViewFsTrash
+1 contrib tests. The patch passed contrib unit tests.
Test results: https://builds.apache.org/job/PreCommit-HADOOP-Build/802//testReport/
Console output: https://builds.apache.org/job/PreCommit-HADOOP-Build/802//console
This message is automatically generated.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Robert Joseph Evans (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Joseph Evans updated HADOOP-8227:
----------------------------------------
Status: Patch Available (was: Open)
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Hadoop QA (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13249878#comment-13249878 ]
Hadoop QA commented on HADOOP-8227:
-----------------------------------
+1 overall. Here are the results of testing the latest attachment
http://issues.apache.org/jira/secure/attachment/12521962/HADOOP-8227-trunk.txt
against trunk revision .
+1 @author. The patch does not contain any @author tags.
+1 tests included. The patch appears to include 2 new or modified test files.
+1 javadoc. The javadoc tool did not generate any warning messages.
+1 javac. The applied patch does not increase the total number of javac compiler warnings.
+1 eclipse:eclipse. The patch built with eclipse:eclipse.
+1 findbugs. The patch does not introduce any new Findbugs (version 1.3.9) warnings.
+1 release audit. The applied patch does not increase the total number of release audit warnings.
+1 core tests. The patch passed unit tests in .
+1 contrib tests. The patch passed contrib unit tests.
Test results: https://builds.apache.org/job/PreCommit-HADOOP-Build/841//testReport/
Console output: https://builds.apache.org/job/PreCommit-HADOOP-Build/841//console
This message is automatically generated.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13255636#comment-13255636 ]
Hudson commented on HADOOP-8227:
--------------------------------
Integrated in Hadoop-Common-trunk-Commit #2086 (See [https://builds.apache.org/job/Hadoop-Common-trunk-Commit/2086/])
HADOOP-8227. Allow RPC to limit ephemeral port range. (bobby) (Revision 1327127)
Result = SUCCESS
bobby : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1327127
Files :
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/conf/Configuration.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/ProtobufRpcEngine.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/RPC.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/RpcEngine.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/Server.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/WritableRpcEngine.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/conf/TestConfiguration.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/ipc/TestRPC.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/ipc/TestServer.java
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Fix For: 2.0.0, 3.0.0
>
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Robert Joseph Evans (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13247468#comment-13247468 ]
Robert Joseph Evans commented on HADOOP-8227:
---------------------------------------------
Yes, that is the exact issue. As part of this change I modified the RpcEngine interface. In trunk and branch-2 all implementations of RpcEngine are in common, but in 0.23 ProtoOverHadoopRpcEngine is in MapReduce so the fix has to be split. I think it is simpler to get the code changes approved and into trunk/branch-2 first and then put in the branch-23 patch at once, instead of splitting them up.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Thomas Graves (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13254754#comment-13254754 ]
Thomas Graves commented on HADOOP-8227:
---------------------------------------
+1 lgtm
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Robert Joseph Evans (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13242468#comment-13242468 ]
Robert Joseph Evans commented on HADOOP-8227:
---------------------------------------------
{quote}
-1 core tests. The patch failed these unit tests:
org.apache.hadoop.fs.viewfs.TestViewFsTrash
{quote}
TestViewFsTrash is known to fail intermittently (HADOOP-8110).
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Suresh Srinivas (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13247345#comment-13247345 ]
Suresh Srinivas commented on HADOOP-8227:
-----------------------------------------
bq. Unfortunately for 0.23 the RPC engine code is split among the projects so the patches for MAPREDUCE-4079 and HADOOP-8227 need to go in at the same time
What is the RPC engine code split issue here. Does MAPREDUCE-3955 address this?
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Robert Joseph Evans (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Joseph Evans updated HADOOP-8227:
----------------------------------------
Status: Patch Available (was: Open)
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Robert Joseph Evans (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Joseph Evans updated HADOOP-8227:
----------------------------------------
Status: Patch Available (was: Open)
The current patch is not compatible with the 0.23 line. I am working on a patch for that as well, but I would like feedback on this before going too far down that route.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Robert Joseph Evans (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13242483#comment-13242483 ]
Robert Joseph Evans commented on HADOOP-8227:
---------------------------------------------
Unfortunately for 0.23 the RPC engine code is split among the projects so the patches for MAPREDUCE-4079 and HADOOP-8227 need to go in at the same time. I have attached the full patch for branch-0.23 at https://issues.apache.org/jira/secure/attachment/12520617/MR-4079-full-branch-0.23.txt for both of these JIRAs. Once both JIRAs are approved for trunk and branch-2.0, I can put the full patch into branch-0.23.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Robert Joseph Evans (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Joseph Evans updated HADOOP-8227:
----------------------------------------
Resolution: Fixed
Fix Version/s: 0.23.3
Status: Resolved (was: Patch Available)
Tom just checked the full patch into branch-0.23 as well so resolving this.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Fix For: 0.23.3, 2.0.0, 3.0.0
>
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Suresh Srinivas (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13249044#comment-13249044 ]
Suresh Srinivas commented on HADOOP-8227:
-----------------------------------------
Other minor comment - follow coding conventions - space after if, before "{" etc.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Aaron T. Myers (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13241926#comment-13241926 ]
Aaron T. Myers commented on HADOOP-8227:
----------------------------------------
Hey Bobby, can you elaborate on how this issue is for "security reasons" ? Thanks a lot.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13256517#comment-13256517 ]
Hudson commented on HADOOP-8227:
--------------------------------
Integrated in Hadoop-Hdfs-trunk #1018 (See [https://builds.apache.org/job/Hadoop-Hdfs-trunk/1018/])
HADOOP-8227. Allow RPC to limit ephemeral port range. (bobby) (Revision 1327127)
Result = FAILURE
bobby : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1327127
Files :
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/conf/Configuration.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/ProtobufRpcEngine.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/RPC.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/RpcEngine.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/Server.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/WritableRpcEngine.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/conf/TestConfiguration.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/ipc/TestRPC.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/ipc/TestServer.java
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Fix For: 2.0.0, 3.0.0
>
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Robert Joseph Evans (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Joseph Evans updated HADOOP-8227:
----------------------------------------
Status: Open (was: Patch Available)
Canceling patch to address Suresh's comments so far.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Robert Joseph Evans (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Joseph Evans updated HADOOP-8227:
----------------------------------------
Attachment: HADOOP-8227-trunk.txt
This is the first go at the patch. I am not super familiar with all of the IPC code, so I am very open to suggestions about how to make this better.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Robert Joseph Evans (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Joseph Evans updated HADOOP-8227:
----------------------------------------
Attachment: HADOOP-8227-trunk.txt
This patch addresses Tom's comments.
combined branch-0.23 patch is at https://issues.apache.org/jira/secure/attachment/12522783/MR-4079-full-branch-0.23.txt
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13255672#comment-13255672 ]
Hudson commented on HADOOP-8227:
--------------------------------
Integrated in Hadoop-Mapreduce-trunk-Commit #2100 (See [https://builds.apache.org/job/Hadoop-Mapreduce-trunk-Commit/2100/])
HADOOP-8227. Allow RPC to limit ephemeral port range. (bobby) (Revision 1327127)
Result = ABORTED
bobby : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1327127
Files :
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/conf/Configuration.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/ProtobufRpcEngine.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/RPC.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/RpcEngine.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/Server.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/WritableRpcEngine.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/conf/TestConfiguration.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/ipc/TestRPC.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/ipc/TestServer.java
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Fix For: 2.0.0, 3.0.0
>
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Thomas Graves (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13254722#comment-13254722 ]
Thomas Graves commented on HADOOP-8227:
---------------------------------------
Mostly looks good. Couple minor things:
you misspelled queue in javadocs in RpcEngine.java for getServer. (+ * @param queueSizePerHandler the size of the queu per hander thread)
Can you also indent the second line of the description of portRangeConfig
It would also be nice to have a test for the RangeNumberIterator, to make sure it hits entire range and doesn't miss the edge cases.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Updated] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Robert Joseph Evans (Updated) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Robert Joseph Evans updated HADOOP-8227:
----------------------------------------
Fix Version/s: 3.0.0
2.0.0
I have merged this into trunk and branch-2. I am leaving the patch open until I get a +1 on MAPREDUCE-4079 at which point I hope to also put it into branch-0.23, and then I will resolve both JIRAs.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Fix For: 2.0.0, 3.0.0
>
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Hudson (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13256585#comment-13256585 ]
Hudson commented on HADOOP-8227:
--------------------------------
Integrated in Hadoop-Mapreduce-trunk #1053 (See [https://builds.apache.org/job/Hadoop-Mapreduce-trunk/1053/])
HADOOP-8227. Allow RPC to limit ephemeral port range. (bobby) (Revision 1327127)
Result = SUCCESS
bobby : http://svn.apache.org/viewcvs.cgi/?root=Apache-SVN&view=rev&rev=1327127
Files :
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/CHANGES.txt
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/conf/Configuration.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/ProtobufRpcEngine.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/RPC.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/RpcEngine.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/Server.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/main/java/org/apache/hadoop/ipc/WritableRpcEngine.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/conf/TestConfiguration.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/ipc/TestRPC.java
* /hadoop/common/trunk/hadoop-common-project/hadoop-common/src/test/java/org/apache/hadoop/ipc/TestServer.java
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Fix For: 2.0.0, 3.0.0
>
> Attachments: HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt, HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Robert Joseph Evans (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13242412#comment-13242412 ]
Robert Joseph Evans commented on HADOOP-8227:
---------------------------------------------
Yes "security reasons" is very vague. It more accurately is because a very zealous security minded individual that I work with does not want to open up all of the ACLs for all of the ports between every compute node in the cluster and all possible clients :). They would much rather limit the set of ports, and I tend to agree with them. Limiting the ports also has the added benefit of being able to monitor that traffic and know with a greater degree of certainty that this given connection is an RPC connection to an AM.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
[jira] [Commented] (HADOOP-8227) Allow RPC to limit ephemeral port
range.
Posted by "Suresh Srinivas (Commented) (JIRA)" <ji...@apache.org>.
[ https://issues.apache.org/jira/browse/HADOOP-8227?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13249036#comment-13249036 ]
Suresh Srinivas commented on HADOOP-8227:
-----------------------------------------
Still going through the patch. Early comments:
# Please add the Apache License header to TestServer.java
# Add brief description to the test on what it is testing. Otherwise tests at a later point in time become hard to maintain.
Will continue the patch review.
> Allow RPC to limit ephemeral port range.
> ----------------------------------------
>
> Key: HADOOP-8227
> URL: https://issues.apache.org/jira/browse/HADOOP-8227
> Project: Hadoop Common
> Issue Type: Improvement
> Affects Versions: 0.23.2
> Reporter: Robert Joseph Evans
> Assignee: Robert Joseph Evans
> Priority: Blocker
> Attachments: HADOOP-8227-trunk.txt
>
>
> This is a sub task of MAPREDUCE-4079. For security reasons we would like to limit the range of ports that are used when some RPC servers select a port.
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira