Return-Path: Delivered-To: apmail-incubator-cassandra-user-archive@minotaur.apache.org Received: (qmail 660 invoked from network); 11 Nov 2009 22:56:19 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.3) by minotaur.apache.org with SMTP; 11 Nov 2009 22:56:19 -0000 Received: (qmail 73392 invoked by uid 500); 11 Nov 2009 22:56:19 -0000 Delivered-To: apmail-incubator-cassandra-user-archive@incubator.apache.org Received: (qmail 73376 invoked by uid 500); 11 Nov 2009 22:56:19 -0000 Mailing-List: contact cassandra-user-help@incubator.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: cassandra-user@incubator.apache.org Delivered-To: mailing list cassandra-user@incubator.apache.org Received: (qmail 73367 invoked by uid 99); 11 Nov 2009 22:56:19 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 11 Nov 2009 22:56:19 +0000 X-ASF-Spam-Status: No, hits=-2.0 required=5.0 tests=AWL,BAYES_00,FS_REPLICA X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of jbellis@gmail.com designates 209.85.218.210 as permitted sender) Received: from [209.85.218.210] (HELO mail-bw0-f210.google.com) (209.85.218.210) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 11 Nov 2009 22:56:17 +0000 Received: by bwz2 with SMTP id 2so2034550bwz.20 for ; Wed, 11 Nov 2009 14:55:55 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :from:date:message-id:subject:to:content-type; bh=VqvRNKGIhm8ne3WDzYHpiWDhNfx40pqkEh/ULYYsiXo=; b=FZwdJX6G0HRihFRHxFNyhu/+ZbuhpIxIGSo/1OtHr4hTJYLY2dtP2prw+J+pwvoOqY DDsRKvGcAdvXiAtJdsRa0JWSMG80/pg9WjMc9R27jVwk/ckck56Ky4f2+DVv2M3xxqgv FFYfF56dXa0Cl7cIz+2KsWcRnVMdR6UVKe7VM= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :content-type; b=WQNsYUH0EDMJ9snUD2BljVomh8SEENcx6h0zuVOByOVT1dPMkZH+le533PscpMIBTT e6llEGhU+Ag01gDbU8McIvh2JNWCp3YSPMVxbkor7VUg8CTdIWvEiHCzZ+T+2OmQpqXq CJ/TgAG53sPqFqlGeGnsySU4hZ42bizASD2I4= MIME-Version: 1.0 Received: by 10.216.90.65 with SMTP id d43mr646123wef.41.1257980155205; Wed, 11 Nov 2009 14:55:55 -0800 (PST) In-Reply-To: <13FB79D2-F083-46D0-BD2A-02F915144322@joestump.net> References: <87eio6p7pb.fsf@lifelogs.com> <87ljienhjx.fsf@lifelogs.com> <87hbt1nnur.fsf@lifelogs.com> <764B352CF55C514F816B4B14BD2450D803DBB97B@bcs-mail04.internal.cacheflow.com> <9c50e66d0911111429n1f23c01ct7a0d3afef3d0a6f6@mail.gmail.com> <13FB79D2-F083-46D0-BD2A-02F915144322@joestump.net> From: Jonathan Ellis Date: Wed, 11 Nov 2009 16:55:35 -0600 Message-ID: Subject: Re: bandwidth limiting Cassandra's replication and access control To: cassandra-user@incubator.apache.org Content-Type: text/plain; charset=ISO-8859-1 per-keyspace authentication will be basically zero overhead after you connect, and the default will be "allow everyone" just like now. On Wed, Nov 11, 2009 at 4:48 PM, Joe Stump wrote: > > On Nov 11, 2009, at 3:29 PM, Alexander Vushkan wrote: > >> ...but authentication support would be nice to have... > > I'll continue to object to this. If you're considering running Cassandra (or > MySQL or Reddis or Memcache or MemcacheDB or ...) on an open network Ur > Doin' It Wrong. This is what VPN's were created for. Nobody in their right > mind runs stuff like this, in production, exposed to the outside world. > > Cassandra was built for performance and adding this authentication stuff > will do nothing but be an unneeded performance hit for a use case that the > project shouldn't be fulfilling. > > --Joe > >