[ 
https://issues.apache.org/jira/browse/KNOX-2925?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

J.Andreina updated KNOX-2925:
-----------------------------
    Description: 
*ENV:*
knox 1.3
Knox , HDFS , Hbase , Impala is installed in HA 

*Steps :*
1. Create a topology_1 with HDFSUI,HBASEUI,IMPALAUI services 
2. Login to  knox homepage 
3. Expand topology_1
4. Access any one of the link for HDFS / Hbase/Impala instance via knox proxy

*Observation;*
the knox gateway url link for HDFS / Hbase/Impala will expose the underlying 
service address as part of the query param for example as follows. 

https://<knox_host>:8443/gateway/topology_1/hbase/webui/master?&host=<hbase_host1>&port=22002

*Suggestion :*
Since exposing the service address in knox gateway url is against proxying 
concept , we should have a mechanism to avoid exposing the service address to 
the end user. 

CC: [~smolnar], [~more] , [~pzampino] , [~amagyar],


  was:
*ENV:*
knox 1.3
Knox , HDFS , Hbase , Impala is installed in HA 

*Steps :*
1. Create a topology_1 with HDFSUI,HBASEUI,IMPALAUI services 
2. Login to  knox homepage 
3. Expand topology_1
4. Access any one of the link for HDFS / Hbase/Impala instance via knox proxy

*Observation;*
the knox gateway url link for HDFS / Hbase/Impala will expose the underlying 
service address as part of the query param for example as follows. 

https://<knox_host>:8443/gateway/topology_1/hbase/webui/master?&host=<hbase_host1>&port=22002

Suggestion :
Since exposing the service address in knox gateway url is against proxying 
concept , we should have a mechanism to avoid exposing the service address to 
the end user. 

CC: [~smolnar], [~more] , [~pzampino] , [~amagyar],



> The knox gateway urls for UI services which are in HA  should not be exposing 
> the service endpoint url as part of query param 
> ------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: KNOX-2925
>                 URL: https://issues.apache.org/jira/browse/KNOX-2925
>             Project: Apache Knox
>          Issue Type: Improvement
>          Components: Homepage
>    Affects Versions: 1.3.0
>            Reporter: J.Andreina
>            Priority: Major
>
> *ENV:*
> knox 1.3
> Knox , HDFS , Hbase , Impala is installed in HA 
> *Steps :*
> 1. Create a topology_1 with HDFSUI,HBASEUI,IMPALAUI services 
> 2. Login to  knox homepage 
> 3. Expand topology_1
> 4. Access any one of the link for HDFS / Hbase/Impala instance via knox proxy
> *Observation;*
> the knox gateway url link for HDFS / Hbase/Impala will expose the underlying 
> service address as part of the query param for example as follows. 
> https://<knox_host>:8443/gateway/topology_1/hbase/webui/master?&host=<hbase_host1>&port=22002
> *Suggestion :*
> Since exposing the service address in knox gateway url is against proxying 
> concept , we should have a mechanism to avoid exposing the service address to 
> the end user. 
> CC: [~smolnar], [~more] , [~pzampino] , [~amagyar],



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to