cassandra-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sylvain Lebresne (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (CASSANDRA-8751) C* should always listen to both ssl/non-ssl ports
Date Wed, 27 Jul 2016 07:53:20 GMT

    [ https://issues.apache.org/jira/browse/CASSANDRA-8751?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15395190#comment-15395190
] 

Sylvain Lebresne commented on CASSANDRA-8751:
---------------------------------------------

As [~timiblossom] hasn't given any update for a while, I'm not sure he's actively working
on this. And, for what it's worth, no one else is currently working on this to my knowledge.
This is an open-source project however and we welcome contributions.

But I should mention that the 2.1 is only getting critical fixes at this point and 2.2 only
bug fixes, so as this is an improvement, it will at best be committed to the 3.0 branch, if
not the 3.x tick-tock one.

> C* should always listen to both ssl/non-ssl ports
> -------------------------------------------------
>
>                 Key: CASSANDRA-8751
>                 URL: https://issues.apache.org/jira/browse/CASSANDRA-8751
>             Project: Cassandra
>          Issue Type: Improvement
>            Reporter: Minh Do
>            Assignee: Minh Do
>             Fix For: 3.x
>
>
> Since there is always one thread dedicated on server socket listener and it does not
use much resource, we should always have these two listeners up no matter what users set for
internode_encryption.
> The reason behind this is that we need to switch back and forth between different internode_encryption
modes and we need C* servers to keep running in transient state or during mode switching.
 Currently this is not possible.
> For example, we have a internode_encryption=dc cluster in a multi-region AWS environment
and want to set internode_encryption=all by rolling restart C* nodes.  However, the node with
internode_encryption=all does not open to listen to non-ssl port.  As a result, we have a
splitted brain cluster here.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message