[
https://issues.apache.org/jira/browse/FLINK-3931?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15552471#comment-15552471
]
ASF GitHub Bot commented on FLINK-3931:
---------------------------------------
Github user mxm commented on a diff in the pull request:
https://github.com/apache/flink/pull/2518#discussion_r82211083
--- Diff: docs/setup/config.md ---
@@ -211,6 +214,19 @@ The following parameters configure Flink's JobManager
and TaskManagers.
- `akka.throughput`: Number of messages that are processed in a batch
before returning the thread to the pool. Low values denote a fair scheduling
whereas high values can increase the performance at the cost of unfairness
(DEFAULT: **15**).
- `akka.log.lifecycle.events`: Turns on the Akka's remote logging of
events. Set this value to 'true' in case of debugging (DEFAULT: **false**).
- `akka.startup-timeout`: Timeout after which the startup of a remote
component is considered being failed (DEFAULT: **akka.ask.timeout**).
+- `akka.ssl.enabled`: Turns on SSL for Akka's remote communication. This
is applicable only when the global ssl flag security.ssl.enabled is set to true
(DEFAULT: **true**).
--- End diff --
Do we really need a switch for this? If we have `security.ssl.enabled` set
to `true`, then this should always be enabled.
> Implement Transport Encryption (SSL/TLS)
> ----------------------------------------
>
> Key: FLINK-3931
> URL: https://issues.apache.org/jira/browse/FLINK-3931
> Project: Flink
> Issue Type: New Feature
> Reporter: Eron Wright
> Assignee: Suresh Krishnappa
> Labels: security
> Original Estimate: 1,008h
> Remaining Estimate: 1,008h
>
> _This issue is part of a series of improvements detailed in the [Secure Data
> Access|https://docs.google.com/document/d/1-GQB6uVOyoaXGwtqwqLV8BHDxWiMO2WnVzBoJ8oPaAs/edit?usp=sharing]
> design doc._
> To assure privacy and data integrity between Flink components, enable TLS for
> all communication channels. As described in the design doc:
> - Accept a configured certificate or generate a certificate.
> - Enable Akka SSL
> - Implement Data Transfer SSL
> - Implement Blob Server SSL
> - Implement Web UI HTTPS
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
