Return-Path: X-Original-To: archive-asf-public-internal@cust-asf2.ponee.io Delivered-To: archive-asf-public-internal@cust-asf2.ponee.io Received: from cust-asf.ponee.io (cust-asf.ponee.io [163.172.22.183]) by cust-asf2.ponee.io (Postfix) with ESMTP id 3E849200B99 for ; Wed, 21 Sep 2016 03:32:24 +0200 (CEST) Received: by cust-asf.ponee.io (Postfix) id 3D12B160AC9; Wed, 21 Sep 2016 01:32:24 +0000 (UTC) Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by cust-asf.ponee.io (Postfix) with SMTP id 81ABF160AC5 for ; Wed, 21 Sep 2016 03:32:23 +0200 (CEST) Received: (qmail 82295 invoked by uid 500); 21 Sep 2016 01:32:22 -0000 Mailing-List: contact reviews-help@spark.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Delivered-To: mailing list reviews@spark.apache.org Received: (qmail 82284 invoked by uid 99); 21 Sep 2016 01:32:22 -0000 Received: from git1-us-west.apache.org (HELO git1-us-west.apache.org) (140.211.11.23) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 21 Sep 2016 01:32:22 +0000 Received: by git1-us-west.apache.org (ASF Mail Server at git1-us-west.apache.org, from userid 33) id 53234E05D9; Wed, 21 Sep 2016 01:32:22 +0000 (UTC) From: cjjnjust To: reviews@spark.apache.org Reply-To: reviews@spark.apache.org References: In-Reply-To: Subject: [GitHub] spark pull request #15172: [Spark-13331][network] Spark RPC encryption optim... Content-Type: text/plain Message-Id: <20160921013222.53234E05D9@git1-us-west.apache.org> Date: Wed, 21 Sep 2016 01:32:22 +0000 (UTC) archived-at: Wed, 21 Sep 2016 01:32:24 -0000 GitHub user cjjnjust reopened a pull request: https://github.com/apache/spark/pull/15172 [Spark-13331][network] Spark RPC encryption optimization ## What changes were proposed in this pull request? DIGEST-MD5 mechanism is used for SASL authentication and secure communication. DIGEST-MD5 mechanism supports 3DES, DES, and RC4 ciphers. However, 3DES, DES and RC4 are slow relatively. AES provide better performance and security by design and is a replacement for 3DES according to NIST. Apache Common Crypto is a cryptographic library optimized with AES-NI, this patch employ Apache Common Crypto as enc/dec backend for SASL authentication and secure channel to improve spark RPC. ## How was this patch tested? Unit tests and Integration test. You can merge this pull request into a Git repository by running: $ git pull https://github.com/cjjnjust/spark shuffle_rpc_encrypt Alternatively you can review and apply these changes as the patch at: https://github.com/apache/spark/pull/15172.patch To close this pull request, make a commit to your master/trunk branch with (at least) the following in the commit message: This closes #15172 ---- commit 78f4d7bcfb5830fa54b1380182f08a85fee97d92 Author: Junjie Chen Date: 2016-09-20T17:57:05Z [Spark-13331] Spark RPC encryption optimization DIGEST-MD5 mechanism is used for SASL authentication and secure communication. DIGEST-MD5 mechanism supports 3DES, DES, and RC4 ciphers. However, 3DES, DES and RC4 are slow relatively. AES provide better performance and security by design and is a replacement for 3DES according to NIST. Apache Common Crypto is a cryptographic library optimized with AES-NI, this patch employ Apache Common Crypto as enc/dec backend for SASL authentication and secure channel to improve spark RPC. ---- --- If your project is set up for it, you can reply to this email and have your reply appear on GitHub as well. If your project does not have this feature enabled and wishes so, or if the feature is enabled but not working, please contact infrastructure at infrastructure@apache.org or file a JIRA ticket with INFRA. --- --------------------------------------------------------------------- To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org For additional commands, e-mail: reviews-help@spark.apache.org