linkedin / linkedin/Burrow

zookeeper ssl support

Open
#304 6 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

enhancement
Dominant language
Go
Stars
4k
Forks
818
Avg merge
1h 14m
Merged PRs (30d)
1

Description

Hi,
We decided to use Zookeeper r3.5.3-beta with SSL support for our cluster.
I have been trying to configure the [zookeeper] section to use SSL support.
I have tried with client-profile="tlsclient" and with tls="tlsprofile"
but the authentication fails every time.
{"level":"info","ts":1512689840.9902906,"msg":"Authentication failed: read tcp ip:53550->ip2:2281: i/o timeout","type":"coordinator","name":"zookeeper"}
Is there a way of setting it up ?
Thanks,

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the zookeeper configuration section and the client-profile and tls settings named in the report. Reproduce the authentication timeout against ZooKeeper 3.5.3-beta, then trace the coordinator's authentication path to identify the required SSL configuration. Done means the documented configuration authenticates successfully without the reported timeout.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
distributed-systems, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.