Andrew, Not exactly.
Within HBase, if you have access, you can do anything to any resource. I don't believe there's a concept of permissions. (Unless you can use the HDFS permissions inside HBase...) So one idea was to isolate the hbase instance within the cloud. Since people talk about isolating hbase to different nodes than hadoop datanodes, this kind of makes sense. I'm not a big fan of HOD with respect to virtualized clouds. And to be clear I mean taking a physical box and splitting it in to virtualized servers. Running HOD on a large cloud of 100+ physical servers may have some value in a corporate cloud that is a shared resource. I'm sure there are folks at Sun, Dell, and IBM who would disagree with me, but when I take a 8 core Intel box, and then split it in to two virtual 3 core boxes, I wonder if there is going to be better performance than if I left it as a single 8 core box and ran more m/r jobs? I realize that we have two issues for discussion. One is getting around the lack of security and permissions within HBase, the other is virtualization. Both are interesting areas for discussion. Thx -Mike > Date: Thu, 29 Apr 2010 18:09:35 -0700 > From: apurt...@apache.org > Subject: Re: Theoretical question... > To: hbase-user@hadoop.apache.org > > > From: Michael Segel > > > Imagine you have a cloud of 100 hadoop nodes. > > In theory you could create multiple instances of HBase on > > the cloud. > > Obviously I don't think you could have multiple region > > servers running on the same node. > > The use case I was thinking about if you have a centralized > > hadoop cloud and you wanted to have multiple developer > > groups sharing the cloud as a resource rather than building > > their own clouds. > > This is somewhat like HOD > (http://hadoop.apache.org/common/docs/current/hod_user_guide.html). Have you > looked at that? > > > The reason for the multiple hbase instances is that you > > don't have a way of setting up multiple instances like > > different Informix or Oracle databases/schemas on the same > > infrastructure. > > Right. > > Well there is a simple (and under development, lightly tested as yet, etc.) > multiuser mode in Stargate that gives multiple users each the illusion of a > private HBase instance while sharing a common HBase cluster underneath. This > is something I'll continue to work on as I have time. > > Also my employer is sponsoring development of HBASE-1697, and integration of > HBase into the secure version of Hadoop (http://bit.ly/75011o) that Yahoo is > working on. For example HBase would offer RBAC and might also use HDFS block > tokens in a manner that allows you to reason about user isolation down > through the whole stack. > > salesforce.com is a multitenant service built on a shared database > infrastructure. They've talked about their rationale for building their SaaS > service this way. It's worth it to Google a bit to find it and read. > Partitioning cloud resources increases management complexity and reduces the > benefit of the cloud -- the efficiencies of scale. It's technically possible > to partition cloud resources but economically inefficient and suboptimal to > do so. > > - Andy > > > > > _________________________________________________________________ Hotmail is redefining busy with tools for the New Busy. Get more from your inbox. http://www.windowslive.com/campaign/thenewbusy?ocid=PID28326::T:WLMTAGL:ON:WL:en-US:WM_HMP:042010_2