[ https://issues.apache.org/jira/browse/HBASE-16633?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15491706#comment-15491706 ]
Robert Yokota commented on HBASE-16633: --------------------------------------- I've attached a patch. Most of the code is from HADOOP-10768. The patch does not account for {{AsyncHBaseSaslRpcClientHandler}} > Optimize HBase RPC Encryption Performance > ----------------------------------------- > > Key: HBASE-16633 > URL: https://issues.apache.org/jira/browse/HBASE-16633 > Project: HBase > Issue Type: Bug > Components: security > Reporter: Robert Yokota > Attachments: HBASE-16633.master.001.patch > > > Similar to HADOOP-10768, when HBase RPC encryption is enabled by setting > {{hbase.rpc.protection}} to {{privacy}}, it does not use AES-NI acceleration > by default. > We have implemented a workaround for HBase to use accelerated encryption that > can be shown to improve performance, see > https://rayokota.wordpress.com/2016/09/13/adventures-in-hardening-hbase/. I > will attach a patch of the changes for our workaround, which borrows heavily > from the patch for HADOOP-10768, but I'll leave it to the HBase security > experts as to what is the best approach. -- This message was sent by Atlassian JIRA (v6.3.4#6332)