就是Apache诺克斯网关可以与Cloudera的4.5兼容？ [英] Is Apache Knox Gateway compatible with Cloudera 4.5?

问题描述

我目前正在与一个Hadoop集群未来的项目。我需要找到有关群集的安全信息。

I'm currently working on a future project with an Hadoop cluster. I need to find informations about security of the cluster.

我找到了API阿帕奇诺克斯网关这似乎是我们所需要的。我们与Cloudera的4.5工作现在。在未来，我们将升级到了Cloudera 5。

I found the API Apache Knox Gateway which seems to be what we need. We work with Cloudera 4.5 for now. In the future, we will upgrade to Cloudera 5.

我的问题是，诺克斯似乎无法与Cloudera的4.5（<兼容href=\"http://www.cloudera.com/content/cloudera-content/cloudera-docs/CDH4/latest/CDH-Version-and-Packaging-Information/cdhvd_topic_3.html\" rel=\"nofollow\">http://www.cloudera.com/content/cloudera-content/cloudera-docs/CDH4/latest/CDH-Version-and-Packaging-Information/cdhvd_topic_3.html).

My problem is that Knox seems to not be compatible with Cloudera 4.5 (http://www.cloudera.com/content/cloudera-content/cloudera-docs/CDH4/latest/CDH-Version-and-Packaging-Information/cdhvd_topic_3.html).

WebHDFS                   2.4.0 
WebHCat/Templeton         0.13.0    0.12.0  
Ozzie                     4.0.0
HBase/Stargate            0.98.0
Hive (via WebHCat)        0.13.0
Hive (via JDBC)           0.13.0

（ HTTP ：//knox.apache.org/books/knox-0-4-0/knox-0-4-0.html#Quick+Start ）

据该网站，这是测试的唯一的版本。是否有人有这个API和4.5 Cloudera的经验？

According to the website, this is the only versions tested. Does anybody have an experience with this API and Cloudera 4.5 ?

如果它不能正常工作，有没有什么解决办法有一个集群的安全？

If it can't work, is there any solution to have a cluster secure ?

推荐答案

首先，阿帕奇诺克斯是一种以集群为REST API访问的周边提供安全保障。它不是为Hadoop集群中Kerberos安全的替代品时，这是真正必要的。它继续通过扩展REST API的的普及到企业补充启用群集以及在Kerberos。它还提供了一些额外的身份解决方案整合为最终用户的访问。

Firstly, Apache Knox is a way to provide security at the perimeter of your cluster for REST API access. It is not a replacement for kerberos security within the Hadoop cluster when that is truly warranted. It continues to complement the kerberos enabled cluster as well by extending the reach of REST APIs into the enterprise. It also provides some additional identity solution integrations for end user access.

如果你想要的是真正的Hadoop的安全性，那么你需要看Hadoop的Kerberos的部署选项。

If what you want is real Hadoop security then you need to look to the Hadoop kerberos deployment options.

现在，作为诺克斯/ CDH兼容性...

Now, as for knox/CDH compatibility...

服务组件的诺克斯0.4.0支持的版本不能很好地映射到CDH 4.5版本很遗憾。它看起来好像连0.3.0版本比4.5 CDH更新。

The supported versions of service components for Knox 0.4.0 do not map well to the CDH 4.5 release unfortunately. It looks as though even the 0.3.0 releases are newer than CDH 4.5.

CDH 5.0似乎更好排队尽管HBase的还有差距。从我所看到的这里 - 我只能假设是正确的。

CDH 5.0 seems to line up better though HBase is still lagging behind. from what I see here - I can only assume that is accurate.

我的建议是尝试Apache的诺克斯对CDH 5与任何困难，搞诺克斯社区 - 有可能是变通，我们可以提供帮助。根据您的需要REST - 可能有足够的对齐方式得到你所需要的。

My suggestion would be to try Apache Knox against CDH 5 and engage the knox community with any difficulties - there may be work arounds that we can help with. Depending on your REST needs - there may be enough alignment to get what you need.

这篇关于就是Apache诺克斯网关可以与Cloudera的4.5兼容？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！