[jira] [Commented] (FLINK-5029) Implement KvState SSL

["ASF GitHub Bot (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/FLINK-5029?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16602170#comment-16602170 ] 

ASF GitHub Bot commented on FLINK-5029:
---------------------------------------

StephanEwen commented on issue #6626: [FLINK-5029] [QueryableState] SSL Support
URL: https://github.com/apache/flink/pull/6626#issuecomment-418114906
 
 
   Thanks for this big contribution! I have a few questions of the overall approach:
   
     - How does this work with repeated queries/lookups? Is each query a new connection, with a new SSL handshake? Or is this more like a "streamed RPC", like grpc?
   
     - Can we avoid moving the SSLUtils etc to `flink-core`? With possible support for OpenSSL bindings, this would be nice to keep this complexity out of the core project. Otherwise, we would need a `flink-runtime` dependency in the `queryable-state-client`, so reverse the dependencies. Would that be feasible?
   
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


> Implement KvState SSL
> ---------------------
>
>                 Key: FLINK-5029
>                 URL: https://issues.apache.org/jira/browse/FLINK-5029
>             Project: Flink
>          Issue Type: Sub-task
>          Components: Security
>            Reporter: Eron Wright 
>            Assignee: Eron Wright 
>            Priority: Major
>              Labels: pull-request-available
>
> The KVState endpoint is new to 1.2 and should support SSL as the others do.
> Note that, with FLINK-4898, the SSL support code is decoupled from the NettyClient/NettyServer, so can be used by the KvState code by simply installing the `SSLProtocolHandler`.



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)