[
https://issues.apache.org/jira/browse/HBASE-6193?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13292382#comment-13292382
]
Andrew Purtell commented on HBASE-6193:
---------------------------------------
bq. REST api gateway may be difficult to secure the system. The proxy approach
requires two security implementations for outward facing security and internal
security implementation. Where the embedded rest api server in region server
would ensure only one security implementation is required.
The counter argument is you should never let untrusted access onto the cluster
directly. This is why I dislike HTTPFS and prefer instead the design of Hoop.
The gateway provides an effective security perimeter. Because it is RESTful,
security can be layered on top of the HTTP transactions as the system
integrator desires via the many options for doing so developed over the years
for web servers.
bq. In addition, rest proxy increases the latency for HBase response time by
one hop.
The counter argument is REST endpoints built into the RegionServers add the
overheads of HTTP processing. And we have to build this new thing into the
master that issues HTTP redirects?
bq. If the rest gateway is busy serving scan query and become none responsive
An advantage of the gateway approach is you can scale it independent of the
RegionServer tier. So if it's slow, add more workers. Use a proxy that supports
sticky sessions to preserve scanner semantics.
> REST Api for HBase administrative tasks
> ---------------------------------------
>
> Key: HBASE-6193
> URL: https://issues.apache.org/jira/browse/HBASE-6193
> Project: HBase
> Issue Type: New Feature
> Reporter: Eric Yang
>
> For enabling HBASE-4368, it may be useful to have embedded REST API server
> for each region server, and HBase Master can either aggregate or
> proxy/redirect REST API base on administrative task functions.
> The popular admin task that can take advantage of this setup are:
> - Trigger table compaction
> - Show process list
> - Health check
> - Show black listed servers
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators:
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira
