检测到您已登录华为云国际站账号,为了您更好的体验,建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Encrypting Data Transmission Between the Controller and Agent Log in to the active management node as user omm.
Authentication Requests for calling an API can be authenticated using either of the following methods: AK/SK-based authentication: Requests are authenticated by encrypting the request body using an AK/SK pair. Token-based authentication: Requests are authenticated using a token.
Security Hardening MRS Cluster Security Hardening Policies Configuring Hadoop Data Encryption During Transmission Configuring Kafka Data Encryption During Transmission Configuring Spark Data Encryption During Transmission Configuring ZooKeeper Data Encryption During Transmission Encrypting
SSL Encryption Function Used by a Client Prerequisites Before enabling the SSL function on the client, ensure that the SSL service function on the server has been enabled (ssl.mode.enable of the server has been set to true). The SSL function requires APIs. For details, see Safety
- Cryptographic Algorithm Algorithm used for encrypting and decrypting passwords in the cluster system. International: general cryptographic algorithm Chinese: SM series cryptographic algorithms are compatible with general cryptographic algorithms.
SSL Encryption Function Used by a Client Prerequisites Before enabling the SSL function on the client, ensure that the SSL function on the server has been enabled (ssl.mode.enable on the server has been set to true). The SSL function requires APIs. For details, see Safety Instructions
Using the Encryption Tool of the Flume Client You can use the encryption tool provided by the Flume client to encrypt some parameter values in the configuration file. Install the Flume client. Log in to the Flume client node and go to the client installation directory, for example
to add the following configurations to the hive-site.xml file on the Spark client: <property> <name>hive.enforce.bucketing</name> <value>false</value> </property> <property> <name>hive.enforce.sorting</name> <value>false</value> </property> Spark does not support the feature of encrypting
Using the Encryption Tool of the Flume Client You can use the encryption tool provided by the Flume client to encrypt some parameter values in the configuration file. Install the Flume client. Log in to the Flume client node and go to the client installation directory, for example
Configuring Flink Authentication and Encryption Security Authentication Flink supports the following authentication modes: Kerberos authentication: It is used between the Flink Yarn client and Yarn ResourceManager, JobManager and ZooKeeper, JobManager and HDFS, TaskManager and HDFS
The current Kerberos server supports only the aes256-cts-hmac-sha1-96:normal and aes128-cts-hmac-sha1-96:normal encryption types for encrypting cross-domain users, and the encryption types cannot be changed.
Keys used for encrypting system disks are provided by Key Management Service (KMS) in Data Encryption Workshop (DEW). You do not need to build and maintain the key management infrastructure.
Configuring Flink Authentication and Encryption Security Authentication Flink supports the following authentication modes: Kerberos authentication: It is used between the Flink Yarn client and Yarn ResourceManager, JobManager and ZooKeeper, JobManager and HDFS, TaskManager and HDFS
HFile and WAL Encryption HFile and Write ahead log (WAL) in HBase are not encrypted by default. To encrypt them, perform the operations provided in this topic. Setting the HFile and WAL encryption mode to SMS4 or AES has a great impact on the system and will cause data loss in case
to add the following configurations to the hive-site.xml file on the Spark2x client: <property> <name>hive.enforce.bucketing</name> <value>false</value> </property> <property> <name>hive.enforce.sorting</name> <value>false</value> </property> Spark does not support the feature of encrypting
Configuring the Hive Column Encryption Scenario Hive supports encryption of one or multiple columns in a table. When creating a Hive table, you can specify the column to be encrypted and encryption algorithm. Insert statement can be used to encrypt data in a column. Hive supports
Configuring the Hive Column Encryption Scenario Hive supports encryption of one or multiple columns in a table. When creating a Hive table, you can specify the column to be encrypted and encryption algorithm. When data is inserted into the table using the insert statement, the related
Updating Encryption Keys of an MRS Cluster When you install a cluster, the system generates an encryption key automatically to protect the security information stored in the cluster, such as database user passwords and key file access passwords. If you need to change the encryption
Configuring Hive Data Storage and Encryption Using HDFS Colocation to Store Hive Tables Configuring Cold-Hot Separation for Hive Partition Metadata Hive Supporting ZSTD Compression Formats Configuring the Hive Column Encryption Parent topic: Using Hive
Configuring Hive Data Storage and Encryption Using HDFS Colocation to Store Hive Tables Configuring Cold-Hot Separation for Hive Partition Metadata Creating a Hive Table in ZSTD Compression Format Using the ZSTD_JNI Compression Algorithm to Compress Hive ORC Tables Configuring the