[ https://issues.apache.org/jira/browse/HADOOP-11336?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Dian Fu reassigned HADOOP-11336: -------------------------------- Assignee: Dian Fu (was: Jerry Chen) > Native support of KMS High Availability and Scalability > ------------------------------------------------------- > > Key: HADOOP-11336 > URL: https://issues.apache.org/jira/browse/HADOOP-11336 > Project: Hadoop Common > Issue Type: Improvement > Components: kms > Affects Versions: trunk-win > Reporter: Jerry Chen > Assignee: Dian Fu > Labels: Security > Original Estimate: 672h > Remaining Estimate: 672h > > Currently, KMS supports multiple KMS instances behind a load balancer or VIP > for scalability and HA purposes. A lot of extra configurations and cares must > be taken to make them work properly as a single logical service. > Especially when Kerberos authentication is used, special care must be taken > on the service principles. (When KMS is used, strong authentication is very > important to key security) > It would be ideal to provide a native solution in KMS server and KMS client > to support KMS high availability and scalability. This would make the > deployment of HA and scalable KMS more straightforward as well as saving the > cost of a specific load balancer and maintenance. -- This message was sent by Atlassian JIRA (v6.3.4#6332)