RE: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-08-28 Thread Skrzypek, Jonathan
Hi, Could someone take a look at https://github.com/apache/kafka/pull/4485 and merge if ok ? Jonathan Skrzypek -Original Message- From: Skrzypek, Jonathan [Tech] Sent: 27 June 2018 17:52 To: dev Subject: RE: [VOTE] KIP-235 Add DNS alias support for secured connection Hi, I've

RE: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-06-27 Thread Skrzypek, Jonathan
Hi, I've modified the PR last week following comments on unit tests, could it be reviewed ? https://github.com/apache/kafka/pull/4485 Jonathan Skrzypek -Original Message- From: Ismael Juma [mailto:ism...@juma.me.uk] Sent: 23 May 2018 01:29 To: dev Subject: Re: [VOTE] KIP-235 Add DNS

RE: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-06-01 Thread Skrzypek, Jonathan
[mailto:ism...@juma.me.uk] Sent: 23 May 2018 01:29 To: dev Subject: Re: [VOTE] KIP-235 Add DNS alias support for secured connection Thanks for the KIP. I think this is a good and low risk change. It would be good to ensure that it works well with KIP-302 if we think that makes sense too. In any case, +1

Re: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-05-22 Thread Ismael Juma
Thanks for the KIP. I think this is a good and low risk change. It would be good to ensure that it works well with KIP-302 if we think that makes sense too. In any case, +1 (binding). Ismael On Fri, Mar 23, 2018 at 12:05 PM Skrzypek, Jonathan < jonathan.skrzy...@gs.com> wrote: > Hi, > > I would

RE: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-05-21 Thread Skrzypek, Jonathan
keen to see it make it the next release. Jonathan Skrzypek -Original Message- From: Skrzypek, Jonathan [Tech] Sent: 14 May 2018 13:48 To: dev Subject: RE: [VOTE] KIP-235 Add DNS alias support for secured connection Sure, I modified the KIP to add more details https://cwiki.apache.org

RE: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-05-14 Thread Skrzypek, Jonathan
: [VOTE] KIP-235 Add DNS alias support for secured connection Thanks for the KIP, Jonathan. It would be helpful to have more detail on how SSL authentication could be broken if the new behaviour is the default. I know this was discussed in the mailing list thread, but it's important to include

Re: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-05-14 Thread Ismael Juma
Thanks for the KIP, Jonathan. It would be helpful to have more detail on how SSL authentication could be broken if the new behaviour is the default. I know this was discussed in the mailing list thread, but it's important to include it in the KIP since it's the main reason why a new config is

RE: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-05-14 Thread Skrzypek, Jonathan
Up :) Anyone for a binding vote here ? Jonathan Skrzypek -Original Message- From: Rajini Sivaram [mailto:rajinisiva...@gmail.com] Sent: 10 May 2018 13:17 To: dev Subject: Re: [VOTE] KIP-235 Add DNS alias support for secured connection Thanks Jonathan. You have binding votes from me

Re: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-05-10 Thread Rajini Sivaram
Jonathan [Tech] > Sent: 01 May 2018 17:17 > To: dev > Subject: RE: [VOTE] KIP-235 Add DNS alias support for secured connection > > Oops, yes indeed that makes sense, got confused between SASL_SSL and SSL. > > Updated the KIP. > > > > Jonathan Skrzypek > > >

RE: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-05-10 Thread Skrzypek, Jonathan
: Skrzypek, Jonathan [Tech] Sent: 01 May 2018 17:17 To: dev Subject: RE: [VOTE] KIP-235 Add DNS alias support for secured connection Oops, yes indeed that makes sense, got confused between SASL_SSL and SSL. Updated the KIP. Jonathan Skrzypek -Original Message- From: Rajini Sivaram

RE: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-05-01 Thread Skrzypek, Jonathan
riginal Message- > From: Rajini Sivaram [mailto:rajinisiva...@gmail.com] > Sent: 29 April 2018 15:38 > To: dev > Subject: Re: [VOTE] KIP-235 Add DNS alias support for secured connection > > Hi Jonathan, > > Thanks for the KIP. > > +1 (binding) with a couple comm

Re: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-05-01 Thread Rajini Sivaram
l Message- > From: Rajini Sivaram [mailto:rajinisiva...@gmail.com] > Sent: 29 April 2018 15:38 > To: dev > Subject: Re: [VOTE] KIP-235 Add DNS alias support for secured connection > > Hi Jonathan, > > Thanks for the KIP. > > +1 (binding) with a couple comm

RE: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-04-30 Thread Skrzypek, Jonathan
the KIP with what I believe to be the case. Jonathan Skrzypek -Original Message- From: Rajini Sivaram [mailto:rajinisiva...@gmail.com] Sent: 29 April 2018 15:38 To: dev Subject: Re: [VOTE] KIP-235 Add DNS alias support for secured connection Hi Jonathan, Thanks for the KIP. +1

Re: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-04-29 Thread Rajini Sivaram
Hi Jonathan, Thanks for the KIP. +1 (binding) with a couple comments below to add more detail to the KIP. 1. Make it clearer when the new option `bootstrap.reverse.dns.lookup` should or shouldn't be used. Document security considerations as well as other system configurations that may

Re: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-04-26 Thread Stephane Maarek
+1 as a user BUT I am no security expert. I have experienced that issue while setting up a cluster and while I would have liked a feature like that (I opened a JIRA at the time), I always guessed that the reason was because of some security protection. Now from a setup point of view this helps a

Re: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-04-26 Thread Gwen Shapira
+1 (binding) This KIP is quite vital to running secured clusters in cloud/container environment. Would love to see more support from the community to this (or feedback...) Gwen On Mon, Apr 16, 2018 at 4:52 PM, Skrzypek, Jonathan < jonathan.skrzy...@gs.com> wrote: > Hi, > > Could anyone take a

RE: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-04-18 Thread Skrzypek, Jonathan
I have updated the KIP with more details, thanks. Jonathan Skrzypek -Original Message- From: Ted Yu [mailto:yuzhih...@gmail.com] Sent: 16 April 2018 16:02 To: dev@kafka.apache.org Subject: Re: [VOTE] KIP-235 Add DNS alias support for secured connection Looks good to me. BTW KAFKA

Re: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-04-16 Thread Ted Yu
Looks good to me. BTW KAFKA-6195 contains more technical details than the KIP. See if you can enrich the Motivation section with some of the details. Thanks On Fri, Mar 23, 2018 at 12:05 PM, Skrzypek, Jonathan < jonathan.skrzy...@gs.com> wrote: > Hi, > > I would like to start a vote for

RE: [VOTE] KIP-235 Add DNS alias support for secured connection

2018-04-16 Thread Skrzypek, Jonathan
Hi, Could anyone take a look ? Does the proposal sound reasonable ? Jonathan Skrzypek From: Skrzypek, Jonathan [Tech] Sent: 23 March 2018 19:05 To: dev@kafka.apache.org Subject: [VOTE] KIP-235 Add DNS alias support for secured connection Hi, I would like to start a vote for KIP-235