The web application proxy server
Web application proxy server is introduced in YARN to reduce the possibility of web-based attacks through YARN. By default, it is run as part of ResourceManager but could be configured by the administrator by setting up the following property in yarn-site.xml
.
In YARN, Application Master is responsible for providing a web UI and provides link information to ResourceManager. This causes services communication vulnerable to certain common attacks. The web application proxy mitigates the risk by warning users who do not own the given application that they are connecting to an untrusted site.