Mailing-List: contact dev-help@kafka.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@kafka.apache.org
MIME-Version: 1.0
In-Reply-To: <CAOJcB3_EAPs-51XJ2avDMX68O0Ri0dr9N9uFkRtNnbVmqwATHQ@mail.gmail.com>
References: <CAOJcB396HYZ0E-C94KQMihwL7wpBXmErx4z_8KnhekfFbhpcPw@mail.gmail.com>
 <CAFc58G8YakghAj+vs0S08WnJhMA2jUsKjLeZRaZpy0RyD-=MZg@mail.gmail.com> <CAOJcB3_EAPs-51XJ2avDMX68O0Ri0dr9N9uFkRtNnbVmqwATHQ@mail.gmail.com>
From: Rajini Sivaram <rajinisivaram@googlemail.com>
Date: Mon, 13 Jun 2016 13:01:05 +0100
Message-ID: <CAOJcB3-CC0+vC=n+zhpGDGwffxZQVzeEbFAf-BG5bh=6jjDGww@mail.gmail.com>
Subject: Re: [VOTE] KIP-55: Secure quotas for authenticated users
To: dev@kafka.apache.org
Content-Type: multipart/alternative; boundary=001a114fc680ac95c5053527a420
archived-at: Mon, 13 Jun 2016 12:01:17 -0000

--001a114fc680ac95c5053527a420
Content-Type: text/plain; charset=UTF-8

I have updated KIP-55 to reflect the changes from the discussions in the
voting thread (
https://www.mail-archive.com/dev@kafka.apache.org/msg51610.html).

Jun/Gwen,

Existing client-id quotas will be used as default client-id quotas for
users when no user quotas are configured - i.e., default user quota is
unlimited and no user-specific quota override is specified. This enables
user rate limits to be configured for ANONYMOUS if required in a cluster
that has both PLAINTEXT and SSL/SASL. By default, without any user rate
limits set, rate limits for client-ids will apply, retaining the current
client-id quota configuration for single-user clusters.

Zookeeper will have two paths /clients with client-id quotas that apply
only when user quota is unlimited similar to now. And /users which persists
user quotas for any user including ANONYMOUS.

Comments and feedback are appreciated.

Regards,

Rajini


On Wed, Jun 8, 2016 at 9:00 PM, Rajini Sivaram <rajinisivaram@googlemail.com
> wrote:

> Jun,
>
> Oops, sorry, I hadn't realized that the last note was on the discuss
> thread. Thank you for pointing it out. I have sent another note for voting.
>
>
> On Wed, Jun 8, 2016 at 4:30 PM, Jun Rao <jun@confluent.io> wrote:
>
>> Rajini,
>>
>> Perhaps it will be clearer if you start the voting in a new thread (with
>> VOTE in the subject).
>>
>> Thanks,
>>
>> Jun
>>
>> On Tue, Jun 7, 2016 at 1:55 PM, Rajini Sivaram <
>> rajinisivaram@googlemail.com
>> > wrote:
>>
>> > I would like to initiate the vote for KIP-55.
>> >
>> > The KIP details are here: KIP-55: Secure quotas for authenticated users
>> > <
>> >
>> https://cwiki.apache.org/confluence/display/KAFKA/KIP-55%3A+Secure+Quotas+for+Authenticated+Users
>> > >
>> > .
>> >
>> > The JIRA  KAFKA-3492  <https://issues.apache.org/jira/browse/KAFKA-3492
>> > >has
>> > a draft PR here: https://github.com/apache/kafka/pull/1256.
>> >
>> > Thank you...
>> >
>> >
>> > Regards,
>> >
>> > Rajini
>> >
>>
>
>
>
> --
> Regards,
>
> Rajini
>


-- 
Regards,

Rajini

--001a114fc680ac95c5053527a420--