Securing ZooKeeper
Another important component to secure is ZooKeeper, as it is a very important component in the Hadoop cluster. The nodes contributing towards quorum should communicate over a secure channel and should be safeguarded against any clear text exchanges.
In this recipe, we will configure ZooKeeper to run in secure mode by enabling SSL. The ZooKeeper to be used for this secure connection must support Netty and we will enable Netty in the existing ZooKeeper setup previously in Chapter 11, Troubleshooting, Diagnostics, and Best Practices.
Getting ready
Make sure that the user has completed the ZooKeeper configuration recipe in Chapter 4, High Availability. We will be using the existing ZooKeeper cluster and adding the configuration for securing it. Also, the user must have completed the Configuring SSL in Hadoop recipe, as we will be using the existing keystore
file and truststore for this recipe.
How to do it...
- Connect to the
nn1.cluster1.com
Namenode and switch to userhadoop
. - We...