You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@ozone.apache.org by "Marton Elek (Jira)" <ji...@apache.org> on 2021/05/31 11:24:00 UTC
[jira] [Commented] (HDDS-5237) Turn on mTLS for streming client /
server
[ https://issues.apache.org/jira/browse/HDDS-5237?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17354387#comment-17354387 ]
Marton Elek commented on HDDS-5237:
-----------------------------------
Looks to be trickier than what I thought. The current implementation uses _DefaultFileRegion_ to stream the files directly to the network with zero-copy. Unfortunately it doesn't work with TLS as it's explained [here|https://github.com/netty/netty/issues/2075#issuecomment-31070670] and [here|https://github.com/reactor/reactor-netty/issues/102].
> Turn on mTLS for streming client / server
> -----------------------------------------
>
> Key: HDDS-5237
> URL: https://issues.apache.org/jira/browse/HDDS-5237
> Project: Apache Ozone
> Issue Type: Improvement
> Reporter: Marton Elek
> Assignee: Marton Elek
> Priority: Major
>
> HDDS-5142 will introduce a new streaming API for closed container replication / snapshot download and other data movement.
> For server2server communication we need to support mTLS. We should configure pure mTLS on the netty server
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@ozone.apache.org
For additional commands, e-mail: issues-help@ozone.apache.org