You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@kafka.apache.org by "Skrzypek, Jonathan" <Jo...@gs.com> on 2018/03/09 18:02:18 UTC
RE: [DISCUSS]KIP-235 DNS alias and secured connections
Hi,
There has been further discussion on the ticket and it seems having an additional option to trigger the DNS lookup behaviour would be the best approach.
https://issues.apache.org/jira/browse/KAFKA-6195
Updated the KIP https://cwiki.apache.org/confluence/display/KAFKA/KIP-235%3A+Add+DNS+alias+support+for+secured+connection
Would value your opinions.
Jonathan Skrzypek
-----Original Message-----
From: Skrzypek, Jonathan [Tech]
Sent: 22 February 2018 16:21
To: 'dev@kafka.apache.org'
Subject: RE: [DISCUSS]KIP-235 DNS alias and secured connections
Hi,
Could anyone take a look at the pull request, so that if ok I can start a VOTE thread ?
Regards,
Jonathan Skrzypek
-----Original Message-----
From: Skrzypek, Jonathan [Tech]
Sent: 09 February 2018 13:57
To: 'dev@kafka.apache.org'
Subject: RE: [DISCUSS]KIP-235 DNS alias and secured connections
Hi,
I have raised a PR https://github.com/apache/kafka/pull/4485 with suggested code changes.
There are however reported failures, don't understand what's the issue since tests are passing.
Any ideas ?
Jonathan Skrzypek
-----Original Message-----
From: Skrzypek, Jonathan [Tech]
Sent: 29 January 2018 16:51
To: dev@kafka.apache.org
Subject: RE: [DISCUSS]KIP-235 DNS alias and secured connections
Hi,
Yes I believe this might address what you're seeing as well.
Jonathan Skrzypek
Middleware Engineering
Messaging Engineering
Goldman Sachs International
-----Original Message-----
From: Stephane Maarek [mailto:stephane@simplemachines.com.au]
Sent: 06 December 2017 10:43
To: dev@kafka.apache.org
Subject: RE: [DISCUSS]KIP-235 DNS alias and secured connections
Hi Jonathan
I think this will be very useful. I reported something similar here :
https://urldefense.proofpoint.com/v2/url?u=https-3A__issues.apache.org_jira_browse_KAFKA-2D4781&d=DwIFaQ&c=7563p3e2zaQw0AB1wrFVgyagb2IE5rTZOYPxLxfZlX4&r=nNmJlu1rR_QFAPdxGlafmDu9_r6eaCbPOM0NM1EHo-E&m=3R1dVnw5Ttyz1YbVIMSRNMz2gjWsQmbTNXl63kwXvKo&s=MywacMwh18eVH_NvLY6Ffhc3CKMh43Tai3WMUf9PsjM&e=
Please confirm your kip will address it ?
Stéphane
On 6 Dec. 2017 8:20 pm, "Skrzypek, Jonathan" <Jo...@gs.com>
wrote:
> True, amended the KIP, thanks.
>
> Jonathan Skrzypek
> Middleware Engineering
> Messaging Engineering
> Goldman Sachs International
>
>
> -----Original Message-----
> From: Tom Bentley [mailto:t.j.bentley@gmail.com]
> Sent: 05 December 2017 18:19
> To: dev@kafka.apache.org
> Subject: Re: [DISCUSS]KIP-235 DNS alias and secured connections
>
> Hi Jonathan,
>
> It might be worth mentioning in the KIP that this is necessary only
> for
> *Kerberos* on SASL, and not other SASL mechanisms. Reading the JIRA it
> makes sensem, but I was confused up until that point.
>
> Cheers,
>
> Tom
>
> On 5 December 2017 at 17:53, Skrzypek, Jonathan
> <Jo...@gs.com>
> wrote:
>
> > Hi,
> >
> > I would like to discuss a KIP I've submitted :
> > https://urldefense.proofpoint.com/v2/url?u=https-3A__cwiki.apache.or
> > g_
> > confluence_display_KAFKA_KIP-2D&d=DwIBaQ&c=7563p3e2zaQw0AB1wrFVgyagb
> > 2I
> > E5rTZOYPxLxfZlX4&r=nNmJlu1rR_QFAPdxGlafmDu9_r6eaCbPOM0NM1EHo-E&m=GWK
> > XA
> > ILbqxFU2j7LtoOx9MZ00uy_jJcGWWIG92CyAuc&s=fv5WAkOgLhVOmF4vhEzq_39CWnE
> > o0 q0AJbqhAuDFDT0&e=
> > 235%3A+Add+DNS+alias+support+for+secured+connection
> >
> > Feedback and suggestions welcome !
> >
> > Regards,
> > Jonathan Skrzypek
> > Middleware Engineering
> > Messaging Engineering
> > Goldman Sachs International
> > Christchurch Court - 10-15 Newgate Street London EC1A 7HD
> > Tel: +442070512977
> >
> >
>
Re: [DISCUSS]KIP-235 DNS alias and secured connections
Posted by Rajini Sivaram <ra...@gmail.com>.
Hi Jonathan,
Thanks for the updates. Looks good to me. You could start voting if there
are no other concerns.
Regards,
Rajini
On Fri, Mar 9, 2018 at 6:02 PM, Skrzypek, Jonathan <Jonathan.Skrzypek@gs.com
> wrote:
> Hi,
>
> There has been further discussion on the ticket and it seems having an
> additional option to trigger the DNS lookup behaviour would be the best
> approach.
>
> https://issues.apache.org/jira/browse/KAFKA-6195
>
> Updated the KIP https://cwiki.apache.org/confluence/display/KAFKA/KIP-
> 235%3A+Add+DNS+alias+support+for+secured+connection
>
> Would value your opinions.
>
> Jonathan Skrzypek
>
>
> -----Original Message-----
> From: Skrzypek, Jonathan [Tech]
> Sent: 22 February 2018 16:21
> To: 'dev@kafka.apache.org'
> Subject: RE: [DISCUSS]KIP-235 DNS alias and secured connections
>
> Hi,
>
> Could anyone take a look at the pull request, so that if ok I can start a
> VOTE thread ?
>
> Regards,
>
> Jonathan Skrzypek
>
> -----Original Message-----
> From: Skrzypek, Jonathan [Tech]
> Sent: 09 February 2018 13:57
> To: 'dev@kafka.apache.org'
> Subject: RE: [DISCUSS]KIP-235 DNS alias and secured connections
>
> Hi,
>
> I have raised a PR https://github.com/apache/kafka/pull/4485 with
> suggested code changes.
> There are however reported failures, don't understand what's the issue
> since tests are passing.
> Any ideas ?
>
>
> Jonathan Skrzypek
>
> -----Original Message-----
> From: Skrzypek, Jonathan [Tech]
> Sent: 29 January 2018 16:51
> To: dev@kafka.apache.org
> Subject: RE: [DISCUSS]KIP-235 DNS alias and secured connections
>
> Hi,
>
> Yes I believe this might address what you're seeing as well.
>
> Jonathan Skrzypek
> Middleware Engineering
> Messaging Engineering
> Goldman Sachs International
>
> -----Original Message-----
> From: Stephane Maarek [mailto:stephane@simplemachines.com.au]
> Sent: 06 December 2017 10:43
> To: dev@kafka.apache.org
> Subject: RE: [DISCUSS]KIP-235 DNS alias and secured connections
>
> Hi Jonathan
>
> I think this will be very useful. I reported something similar here :
> https://urldefense.proofpoint.com/v2/url?u=https-3A__issues.
> apache.org_jira_browse_KAFKA-2D4781&d=DwIFaQ&c=
> 7563p3e2zaQw0AB1wrFVgyagb2IE5rTZOYPxLxfZlX4&r=nNmJlu1rR_QFAPdxGlafmDu9_
> r6eaCbPOM0NM1EHo-E&m=3R1dVnw5Ttyz1YbVIMSRNMz2gjWsQm
> bTNXl63kwXvKo&s=MywacMwh18eVH_NvLY6Ffhc3CKMh43Tai3WMUf9PsjM&e=
>
> Please confirm your kip will address it ?
>
> Stéphane
>
> On 6 Dec. 2017 8:20 pm, "Skrzypek, Jonathan" <Jo...@gs.com>
> wrote:
>
> > True, amended the KIP, thanks.
> >
> > Jonathan Skrzypek
> > Middleware Engineering
> > Messaging Engineering
> > Goldman Sachs International
> >
> >
> > -----Original Message-----
> > From: Tom Bentley [mailto:t.j.bentley@gmail.com]
> > Sent: 05 December 2017 18:19
> > To: dev@kafka.apache.org
> > Subject: Re: [DISCUSS]KIP-235 DNS alias and secured connections
> >
> > Hi Jonathan,
> >
> > It might be worth mentioning in the KIP that this is necessary only
> > for
> > *Kerberos* on SASL, and not other SASL mechanisms. Reading the JIRA it
> > makes sensem, but I was confused up until that point.
> >
> > Cheers,
> >
> > Tom
> >
> > On 5 December 2017 at 17:53, Skrzypek, Jonathan
> > <Jo...@gs.com>
> > wrote:
> >
> > > Hi,
> > >
> > > I would like to discuss a KIP I've submitted :
> > > https://urldefense.proofpoint.com/v2/url?u=https-3A__cwiki.apache.or
> > > g_
> > > confluence_display_KAFKA_KIP-2D&d=DwIBaQ&c=7563p3e2zaQw0AB1wrFVgyagb
> > > 2I
> > > E5rTZOYPxLxfZlX4&r=nNmJlu1rR_QFAPdxGlafmDu9_r6eaCbPOM0NM1EHo-E&m=GWK
> > > XA
> > > ILbqxFU2j7LtoOx9MZ00uy_jJcGWWIG92CyAuc&s=fv5WAkOgLhVOmF4vhEzq_39CWnE
> > > o0 q0AJbqhAuDFDT0&e=
> > > 235%3A+Add+DNS+alias+support+for+secured+connection
> > >
> > > Feedback and suggestions welcome !
> > >
> > > Regards,
> > > Jonathan Skrzypek
> > > Middleware Engineering
> > > Messaging Engineering
> > > Goldman Sachs International
> > > Christchurch Court - 10-15 Newgate Street London EC1A 7HD
> > > Tel: +442070512977
> > >
> > >
> >
>