Uploaded image for project: 'HBase'
  1. HBase
  2. HBASE-16633

Optimize HBase RPC Encryption Performance

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Duplicate
    • None
    • None
    • security
    • None

    Description

      Similar to HADOOP-10768, when HBase RPC encryption is enabled by setting hbase.rpc.protection to privacy, it does not use AES-NI acceleration by default.

      We have implemented a workaround for HBase to use accelerated encryption that can be shown to improve performance, see https://rayokota.wordpress.com/2016/09/13/adventures-in-hardening-hbase/. I will attach a patch of the changes for our workaround, which borrows heavily from the patch for HADOOP-10768, but I'll leave it to the HBase security experts as to what is the best approach.

      Attachments

        1. HBASE-16633.master.001.patch
          86 kB
          Robert Yokota

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. HBASE-16632 Optimize HBase RPC Encryption Performance

          • Major - Major loss of function.
          • Resolved
          is related to

          Improvement - An improvement or enhancement to an existing feature or task. HBASE-16414 Improve performance for RPC encryption with Apache Common Crypto

          • Major - Major loss of function.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. HDFS-6606 Optimize HDFS Encrypted Transport performance

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. HADOOP-10768 Optimize Hadoop RPC encryption performance

          • Major - Major loss of function.
          • Patch Available

          Activity

            People

              Unassigned Unassigned
              rayokota Robert Yokota
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: