This is an automated email from the ASF dual-hosted git repository.
github-bot pushed a commit to branch asf-site
in repository https://gitbox.apache.org/repos/asf/ozone-site.git
The following commit(s) were added to refs/heads/asf-site by this push:
new 60181634 [auto] Generated docs from Apache Ozone master
b9d4e6585bb7dabc186590ae4dd782834e0b022a
60181634 is described below
commit 60181634c459af3bc5e76277533aa6d3440c0d5e
Author: Github Actions <[email protected]>
AuthorDate: Thu Jul 3 12:46:31 2025 +0000
[auto] Generated docs from Apache Ozone master
b9d4e6585bb7dabc186590ae4dd782834e0b022a
---
docs/edge/concept.html | 6 ++
docs/edge/concept/containers.html | 6 ++
docs/edge/concept/datanodes.html | 56 ++++++++++-
docs/edge/concept/index.xml | 2 +-
docs/edge/concept/networkports.html | 6 ++
docs/edge/concept/overview.html | 6 ++
docs/edge/concept/ozonemanager.html | 6 ++
docs/edge/concept/recon.html | 6 ++
docs/edge/concept/storagecontainermanager.html | 6 ++
docs/edge/design.html | 6 ++
docs/edge/design/configless.html | 6 ++
docs/edge/design/container-reconciliation.html | 6 ++
docs/edge/design/decommissioning.html | 6 ++
docs/edge/design/dn-merge-rocksdb.html | 6 ++
docs/edge/design/dn-min-space-configuration.html | 6 ++
docs/edge/design/dn-usedspace-calculation.html | 6 ++
docs/edge/design/ec.html | 6 ++
docs/edge/design/gdpr.html | 6 ++
docs/edge/design/httpfs.html | 6 ++
docs/edge/design/locks.html | 6 ++
docs/edge/design/multiraft.html | 6 ++
docs/edge/design/namespace-support.html | 6 ++
docs/edge/design/nfs.html | 6 ++
docs/edge/design/nonrolling-upgrade.html | 6 ++
docs/edge/design/ofs.html | 6 ++
docs/edge/design/omha.html | 6 ++
docs/edge/design/omprepare.html | 6 ++
.../design/overwrite-key-only-if-unchanged.html | 6 ++
docs/edge/design/ozone-enhancement-proposals.html | 6 ++
docs/edge/design/recon1.html | 6 ++
docs/edge/design/recon2.html | 6 ++
docs/edge/design/s3-performance.html | 6 ++
docs/edge/design/s3gateway.html | 6 ++
docs/edge/design/scmha.html | 6 ++
docs/edge/design/secure-s3.html | 6 ++
docs/edge/design/storage-class.html | 6 ++
docs/edge/design/symmetric-token-signatures.html | 6 ++
docs/edge/design/tde.html | 6 ++
docs/edge/design/token.html | 6 ++
docs/edge/design/topology.html | 6 ++
docs/edge/design/trash.html | 6 ++
docs/edge/design/typesafeconfig.html | 6 ++
docs/edge/design/upgrade-dev-primer.html | 6 ++
docs/edge/design/volume-management.html | 6 ++
docs/edge/en/sitemap.xml | 7 +-
docs/edge/feature.html | 6 ++
docs/edge/feature/decommission.html | 6 ++
docs/edge/feature/dn-merge-rocksdb.html | 6 ++
docs/edge/feature/erasurecoding.html | 6 ++
docs/edge/feature/faircallqueue.html | 6 ++
docs/edge/feature/nonrolling-upgrade.html | 6 ++
docs/edge/feature/observability.html | 6 ++
docs/edge/feature/om-ha.html | 6 ++
docs/edge/feature/prefixfso.html | 6 ++
docs/edge/feature/quota.html | 6 ++
docs/edge/feature/recon.html | 6 ++
docs/edge/feature/reconfigurability.html | 6 ++
.../feature/s3-multi-tenancy-access-control.html | 6 ++
docs/edge/feature/s3-multi-tenancy-setup.html | 6 ++
docs/edge/feature/s3-multi-tenancy.html | 6 ++
docs/edge/feature/s3-tenant-commands.html | 6 ++
docs/edge/feature/scm-ha.html | 6 ++
docs/edge/feature/snapshot.html | 6 ++
docs/edge/feature/streaming-write-pipeline.html | 6 ++
docs/edge/feature/topology.html | 6 ++
docs/edge/index.html | 6 ++
docs/edge/index.xml | 7 ++
docs/edge/integration.html | 6 ++
docs/edge/integration/distcp.html | 6 ++
docs/edge/integration/hive.html | 6 ++
docs/edge/integration/impala.html | 6 ++
docs/edge/interface.html | 6 ++
docs/edge/interface/cli.html | 6 ++
docs/edge/interface/csi.html | 6 ++
docs/edge/interface/cyberduckozones3.html | 6 ++
docs/edge/interface/httpfs.html | 6 ++
docs/edge/interface/javaapi.html | 6 ++
docs/edge/interface/native-cpp.html | 6 ++
docs/edge/interface/o3fs.html | 6 ++
docs/edge/interface/ofs.html | 6 ++
docs/edge/interface/python.html | 6 ++
docs/edge/interface/reconapi.html | 6 ++
docs/edge/interface/s3.html | 6 ++
docs/edge/recipe.html | 6 ++
docs/edge/recipe/boto3tutorial.html | 6 ++
docs/edge/recipe/botoclient.html | 6 ++
docs/edge/recipe/prometheus.html | 6 ++
docs/edge/recipe/pyarrowtutorial.html | 6 ++
docs/edge/recipe/pythonrequestsozonehttpfs.html | 6 ++
docs/edge/recipe/sparkozonefsk8s.html | 6 ++
docs/edge/security.html | 47 ++++++++-
docs/edge/security/gdpr.html | 6 ++
docs/edge/security/index.xml | 7 ++
.../protect-in-transit-traffic.html} | 107 +++++++++------------
docs/edge/security/secureozone.html | 6 ++
docs/edge/security/securingdatanodes.html | 6 ++
docs/edge/security/securingozonehttp.html | 6 ++
docs/edge/security/securings3.html | 6 ++
docs/edge/security/securingtde.html | 59 +++++++++++-
docs/edge/security/securityacls.html | 8 +-
docs/edge/security/securitywithranger.html | 6 ++
docs/edge/sitemap.xml | 2 +-
docs/edge/start.html | 6 ++
docs/edge/start/fromsource.html | 6 ++
docs/edge/start/kubernetes.html | 6 ++
docs/edge/start/minikube.html | 6 ++
docs/edge/start/onprem.html | 6 ++
docs/edge/start/runningviadocker.html | 6 ++
docs/edge/start/startfromdockerhub.html | 6 ++
docs/edge/tools.html | 6 ++
docs/edge/tools/admin.html | 6 ++
docs/edge/tools/auditparser.html | 6 ++
docs/edge/tools/containerlogparser.html | 6 ++
docs/edge/tools/debug.html | 6 ++
docs/edge/tools/genconf.html | 6 ++
docs/edge/tools/logsinozone.html | 6 ++
docs/edge/tools/testtools.html | 6 ++
117 files changed, 872 insertions(+), 72 deletions(-)
diff --git a/docs/edge/concept.html b/docs/edge/concept.html
index 89a8d3ab..5d84ee8b 100644
--- a/docs/edge/concept.html
+++ b/docs/edge/concept.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="./security/protect-in-transit-traffic.html">Protect In-Transit Traffic</a>
+
+ </li>
+
<li class="">
<a href="./security/securitywithranger.html">Apache
Ranger</a>
diff --git a/docs/edge/concept/containers.html
b/docs/edge/concept/containers.html
index 666f62c0..cdfcfc9e 100644
--- a/docs/edge/concept/containers.html
+++ b/docs/edge/concept/containers.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/concept/datanodes.html b/docs/edge/concept/datanodes.html
index 1e791faf..7c03b080 100644
--- a/docs/edge/concept/datanodes.html
+++ b/docs/edge/concept/datanodes.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
@@ -579,6 +585,54 @@ blocks that get reported. That is a 40x reduction in the
block reports.</p>
<p>This extra indirection helps tremendously with scaling Ozone. SCM has far
less block data to process and the namespace service (Ozone Manager) as a
different service are critical to scaling Ozone.</p>
+<h2 id="data-volume-management">Data Volume Management</h2>
+<h3 id="what-is-a-volume">What is a Volume?</h3>
+<p>In the context of an Ozone DataNode, a “volume” refers to a
physical disk or storage device managed by the DataNode. Each volume can store
many containers, which are the fundamental units of storage in Ozone. This is
different from the “volume” concept in Ozone Manager, which refers
to a namespace for organizing buckets and keys.</p>
+<p>The status of volumes, including used space, available space and whether or
not they are operational (healthy) or failed, can be looked up from DataNode
Web UI.</p>
+<h3 id="defining-volumes-with-hddsdatanodedir">Defining Volumes with
hdds.datanode.dir</h3>
+<p>The property <code>hdds.datanode.dir</code> defines the set of volumes
(disks) managed by a DataNode. You can specify one or more directories,
separated by commas. Each directory represents a volume.
+For example: <code>/data1/disk1,/data2/disk2</code>, which configures the
DataNode to manage two volumes.</p>
+<h3 id="volume-choosing-policy">Volume Choosing Policy</h3>
+<p>When a DataNode needs to select a volume to store new data, it uses a
volume choosing policy. The policy is controlled by the property
<code>hdds.datanode.volume.choosing.policy</code>. There are two main
policies:</p>
+<ul>
+<li>
+<p><strong>CapacityVolumeChoosingPolicy (default):</strong>
+This policy randomly selects two volumes with enough available space and
chooses the one with lower utilization (i.e., more free space). This approach
increases the likelihood that less-used disks are chosen, helping to balance
disk usage over time.</p>
+</li>
+<li>
+<p><strong>RoundRobinVolumeChoosingPolicy:</strong>
+This policy selects volumes in a round-robin order, cycling through all
available volumes. It does not consider the current utilization of each disk,
but ensures even distribution of new containers across all disks.</p>
+</li>
+</ul>
+<h3 id="volume-related-configuration-properties">Volume-Related Configuration
Properties</h3>
+<table>
+ <thead>
+ <tr>
+ <th>Property Name</th>
+ <th>Default Value</th>
+ <th>Description</th>
+ </tr>
+ </thead>
+ <tbody>
+ <tr>
+ <td>hdds.datanode.volume.choosing.policy</td>
+ <td>CapacityVolumeChoosingPolicy</td>
+ <td>The policy used to select a volume for new containers.</td>
+ </tr>
+ <tr>
+ <td>hdds.datanode.volume.min.free.space</td>
+ <td>20GB</td>
+ <td>Minimum free space required on a volume to be eligible for new
containers.</td>
+ </tr>
+ <tr>
+ <td>hdds.datanode.volume.min.free.space.percent</td>
+ <td>0.001</td>
+ <td>Minimum free space percentage required on a volume to be
eligible for new containers.</td>
+ </tr>
+ </tbody>
+</table>
+<h3 id="disk-balancer">Disk Balancer</h3>
+<p>Over time, operations like adding or replacing disks can cause uneven disk
usage. The Ozone community is developing a Disk Balancer (see <a
href="https://issues.apache.org/jira/browse/HDDS-5713";>HDDS-5713</a>) to
automatically balance disk usage across DataNode volumes. This feature is under
active development.</p>
<h2 id="notable-configurations">Notable configurations</h2>
<table>
<thead>
@@ -640,7 +694,7 @@ different service are critical to scaling Ozone.</p>
<footer class="footer">
<div class="container">
<span class="small text-muted">
- Version: 2.1.0-SNAPSHOT, Last Modified: December 18, 2024 <a
class="hide-child link primary-color"
href="https://github.com/apache/ozone/commit/7bcc943077097125e16d705ba1366139ba4c5871";>7bcc943077</a>
+ Version: 2.1.0-SNAPSHOT, Last Modified: July 3, 2025 <a
class="hide-child link primary-color"
href="https://github.com/apache/ozone/commit/5e72dd4e1efba98955300ff831311eb7fae6c0e9";>5e72dd4e1e</a>
</span>
</div>
</footer>
diff --git a/docs/edge/concept/index.xml b/docs/edge/concept/index.xml
index a4eebd23..06412a2b 100644
--- a/docs/edge/concept/index.xml
+++ b/docs/edge/concept/index.xml
@@ -6,7 +6,7 @@
<description>Recent content in Architecture on Ozone</description>
<generator>Hugo</generator>
<language>en</language>
- <lastBuildDate>Wed, 21 May 2025 20:13:44 +0300</lastBuildDate>
+ <lastBuildDate>Thu, 03 Jul 2025 03:05:33 -0700</lastBuildDate>
<atom:link href="/concept/index.xml" rel="self" type="application/rss+xml"
/>
<item>
<title>Overview</title>
diff --git a/docs/edge/concept/networkports.html
b/docs/edge/concept/networkports.html
index bb4ab233..a7d6d0eb 100644
--- a/docs/edge/concept/networkports.html
+++ b/docs/edge/concept/networkports.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/concept/overview.html b/docs/edge/concept/overview.html
index 47e46c6d..74aa5e70 100644
--- a/docs/edge/concept/overview.html
+++ b/docs/edge/concept/overview.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/concept/ozonemanager.html
b/docs/edge/concept/ozonemanager.html
index 4a609326..6c2d8844 100644
--- a/docs/edge/concept/ozonemanager.html
+++ b/docs/edge/concept/ozonemanager.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/concept/recon.html b/docs/edge/concept/recon.html
index a09ad404..2bab702d 100644
--- a/docs/edge/concept/recon.html
+++ b/docs/edge/concept/recon.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/concept/storagecontainermanager.html
b/docs/edge/concept/storagecontainermanager.html
index e862c147..2bbef731 100644
--- a/docs/edge/concept/storagecontainermanager.html
+++ b/docs/edge/concept/storagecontainermanager.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design.html b/docs/edge/design.html
index 96fd44ad..385d1f90 100644
--- a/docs/edge/design.html
+++ b/docs/edge/design.html
@@ -444,6 +444,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="./security/protect-in-transit-traffic.html">Protect In-Transit Traffic</a>
+
+ </li>
+
<li class="">
<a href="./security/securitywithranger.html">Apache
Ranger</a>
diff --git a/docs/edge/design/configless.html b/docs/edge/design/configless.html
index 9f00cc58..761ab90b 100644
--- a/docs/edge/design/configless.html
+++ b/docs/edge/design/configless.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/container-reconciliation.html
b/docs/edge/design/container-reconciliation.html
index 272907ef..19f313a1 100644
--- a/docs/edge/design/container-reconciliation.html
+++ b/docs/edge/design/container-reconciliation.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/decommissioning.html
b/docs/edge/design/decommissioning.html
index 2df9ae0f..f21debbe 100644
--- a/docs/edge/design/decommissioning.html
+++ b/docs/edge/design/decommissioning.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/dn-merge-rocksdb.html
b/docs/edge/design/dn-merge-rocksdb.html
index d270a353..e3c51ee2 100644
--- a/docs/edge/design/dn-merge-rocksdb.html
+++ b/docs/edge/design/dn-merge-rocksdb.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/dn-min-space-configuration.html
b/docs/edge/design/dn-min-space-configuration.html
index e3aee0cd..f9f28cfb 100644
--- a/docs/edge/design/dn-min-space-configuration.html
+++ b/docs/edge/design/dn-min-space-configuration.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/dn-usedspace-calculation.html
b/docs/edge/design/dn-usedspace-calculation.html
index d8b8b163..b90e0c48 100644
--- a/docs/edge/design/dn-usedspace-calculation.html
+++ b/docs/edge/design/dn-usedspace-calculation.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/ec.html b/docs/edge/design/ec.html
index f8ab3061..181102a9 100644
--- a/docs/edge/design/ec.html
+++ b/docs/edge/design/ec.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/gdpr.html b/docs/edge/design/gdpr.html
index 741cf76c..75dbf17d 100644
--- a/docs/edge/design/gdpr.html
+++ b/docs/edge/design/gdpr.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/httpfs.html b/docs/edge/design/httpfs.html
index c74fa260..98afdc32 100644
--- a/docs/edge/design/httpfs.html
+++ b/docs/edge/design/httpfs.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/locks.html b/docs/edge/design/locks.html
index 5128465e..947d4b21 100644
--- a/docs/edge/design/locks.html
+++ b/docs/edge/design/locks.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/multiraft.html b/docs/edge/design/multiraft.html
index 608d8d6d..995b45e2 100644
--- a/docs/edge/design/multiraft.html
+++ b/docs/edge/design/multiraft.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/namespace-support.html
b/docs/edge/design/namespace-support.html
index b5d25efa..56a81496 100644
--- a/docs/edge/design/namespace-support.html
+++ b/docs/edge/design/namespace-support.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/nfs.html b/docs/edge/design/nfs.html
index af25804b..95785619 100644
--- a/docs/edge/design/nfs.html
+++ b/docs/edge/design/nfs.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/nonrolling-upgrade.html
b/docs/edge/design/nonrolling-upgrade.html
index 3c23b17c..49f14385 100644
--- a/docs/edge/design/nonrolling-upgrade.html
+++ b/docs/edge/design/nonrolling-upgrade.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/ofs.html b/docs/edge/design/ofs.html
index f7880235..70f93b86 100644
--- a/docs/edge/design/ofs.html
+++ b/docs/edge/design/ofs.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/omha.html b/docs/edge/design/omha.html
index 39188b10..b9cf9aac 100644
--- a/docs/edge/design/omha.html
+++ b/docs/edge/design/omha.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/omprepare.html b/docs/edge/design/omprepare.html
index 24b5bc5f..984f950b 100644
--- a/docs/edge/design/omprepare.html
+++ b/docs/edge/design/omprepare.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/overwrite-key-only-if-unchanged.html
b/docs/edge/design/overwrite-key-only-if-unchanged.html
index ef1c394d..09ef8f86 100644
--- a/docs/edge/design/overwrite-key-only-if-unchanged.html
+++ b/docs/edge/design/overwrite-key-only-if-unchanged.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/ozone-enhancement-proposals.html
b/docs/edge/design/ozone-enhancement-proposals.html
index bc962c85..e6d7dcec 100644
--- a/docs/edge/design/ozone-enhancement-proposals.html
+++ b/docs/edge/design/ozone-enhancement-proposals.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/recon1.html b/docs/edge/design/recon1.html
index 6e309a2d..028aa04e 100644
--- a/docs/edge/design/recon1.html
+++ b/docs/edge/design/recon1.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/recon2.html b/docs/edge/design/recon2.html
index da135b41..4cda4b23 100644
--- a/docs/edge/design/recon2.html
+++ b/docs/edge/design/recon2.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/s3-performance.html
b/docs/edge/design/s3-performance.html
index 2b5c4e5a..f044fb00 100644
--- a/docs/edge/design/s3-performance.html
+++ b/docs/edge/design/s3-performance.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/s3gateway.html b/docs/edge/design/s3gateway.html
index eee6f842..99d74c73 100644
--- a/docs/edge/design/s3gateway.html
+++ b/docs/edge/design/s3gateway.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/scmha.html b/docs/edge/design/scmha.html
index faafb398..c710e51d 100644
--- a/docs/edge/design/scmha.html
+++ b/docs/edge/design/scmha.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/secure-s3.html b/docs/edge/design/secure-s3.html
index 844299fc..1c9af0a9 100644
--- a/docs/edge/design/secure-s3.html
+++ b/docs/edge/design/secure-s3.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/storage-class.html
b/docs/edge/design/storage-class.html
index e9d357ab..2cf4b6c8 100644
--- a/docs/edge/design/storage-class.html
+++ b/docs/edge/design/storage-class.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/symmetric-token-signatures.html
b/docs/edge/design/symmetric-token-signatures.html
index 128502f0..ba215d38 100644
--- a/docs/edge/design/symmetric-token-signatures.html
+++ b/docs/edge/design/symmetric-token-signatures.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/tde.html b/docs/edge/design/tde.html
index c30bc778..adc6875b 100644
--- a/docs/edge/design/tde.html
+++ b/docs/edge/design/tde.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/token.html b/docs/edge/design/token.html
index c8a450d5..f7f4fa1e 100644
--- a/docs/edge/design/token.html
+++ b/docs/edge/design/token.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/topology.html b/docs/edge/design/topology.html
index fe5bc922..960e4028 100644
--- a/docs/edge/design/topology.html
+++ b/docs/edge/design/topology.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/trash.html b/docs/edge/design/trash.html
index 959f9dda..bcc4e6cc 100644
--- a/docs/edge/design/trash.html
+++ b/docs/edge/design/trash.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/typesafeconfig.html
b/docs/edge/design/typesafeconfig.html
index 032e9d07..2f8d24e0 100644
--- a/docs/edge/design/typesafeconfig.html
+++ b/docs/edge/design/typesafeconfig.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/upgrade-dev-primer.html
b/docs/edge/design/upgrade-dev-primer.html
index d27ec7ce..dc9cd081 100644
--- a/docs/edge/design/upgrade-dev-primer.html
+++ b/docs/edge/design/upgrade-dev-primer.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/design/volume-management.html
b/docs/edge/design/volume-management.html
index a2ed8dc3..818c9580 100644
--- a/docs/edge/design/volume-management.html
+++ b/docs/edge/design/volume-management.html
@@ -442,6 +442,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/en/sitemap.xml b/docs/edge/en/sitemap.xml
index 3b9e0540..f5d0de68 100644
--- a/docs/edge/en/sitemap.xml
+++ b/docs/edge/en/sitemap.xml
@@ -126,7 +126,7 @@
<lastmod>2024-02-27T17:33:44+05:30</lastmod>
</url><url>
<loc>/security/securingtde.html</loc>
- <lastmod>2025-06-10T18:50:54-07:00</lastmod>
+ <lastmod>2025-07-02T11:15:53-07:00</lastmod>
<xhtml:link
rel="alternate"
hreflang="zh"
@@ -425,6 +425,9 @@
hreflang="en"
href="/interface/csi.html"
/>
+ </url><url>
+ <loc>/security/protect-in-transit-traffic.html</loc>
+ <lastmod>2025-07-03T03:29:45-07:00</lastmod>
</url><url>
<loc>/security/securitywithranger.html</loc>
<lastmod>2025-06-09T12:50:19-07:00</lastmod>
@@ -440,7 +443,7 @@
/>
</url><url>
<loc>/concept/datanodes.html</loc>
- <lastmod>2024-12-18T11:22:00-08:00</lastmod>
+ <lastmod>2025-07-03T03:05:33-07:00</lastmod>
<xhtml:link
rel="alternate"
hreflang="zh"
diff --git a/docs/edge/feature.html b/docs/edge/feature.html
index 79d62fb9..5e1cac32 100644
--- a/docs/edge/feature.html
+++ b/docs/edge/feature.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="./security/protect-in-transit-traffic.html">Protect In-Transit Traffic</a>
+
+ </li>
+
<li class="">
<a href="./security/securitywithranger.html">Apache
Ranger</a>
diff --git a/docs/edge/feature/decommission.html
b/docs/edge/feature/decommission.html
index d9c63c59..ef6bea6d 100644
--- a/docs/edge/feature/decommission.html
+++ b/docs/edge/feature/decommission.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/dn-merge-rocksdb.html
b/docs/edge/feature/dn-merge-rocksdb.html
index 4a2c44e1..2b3ccb68 100644
--- a/docs/edge/feature/dn-merge-rocksdb.html
+++ b/docs/edge/feature/dn-merge-rocksdb.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/erasurecoding.html
b/docs/edge/feature/erasurecoding.html
index adae2822..b56d8bc6 100644
--- a/docs/edge/feature/erasurecoding.html
+++ b/docs/edge/feature/erasurecoding.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/faircallqueue.html
b/docs/edge/feature/faircallqueue.html
index 7b94ad73..fc307757 100644
--- a/docs/edge/feature/faircallqueue.html
+++ b/docs/edge/feature/faircallqueue.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/nonrolling-upgrade.html
b/docs/edge/feature/nonrolling-upgrade.html
index b1de9618..245cb42a 100644
--- a/docs/edge/feature/nonrolling-upgrade.html
+++ b/docs/edge/feature/nonrolling-upgrade.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/observability.html
b/docs/edge/feature/observability.html
index 19f75bea..7437ac0c 100644
--- a/docs/edge/feature/observability.html
+++ b/docs/edge/feature/observability.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/om-ha.html b/docs/edge/feature/om-ha.html
index 37a0f846..27dbdbb2 100644
--- a/docs/edge/feature/om-ha.html
+++ b/docs/edge/feature/om-ha.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/prefixfso.html b/docs/edge/feature/prefixfso.html
index b9659b16..852aafb8 100644
--- a/docs/edge/feature/prefixfso.html
+++ b/docs/edge/feature/prefixfso.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/quota.html b/docs/edge/feature/quota.html
index 93eae4f2..1ef993c9 100644
--- a/docs/edge/feature/quota.html
+++ b/docs/edge/feature/quota.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/recon.html b/docs/edge/feature/recon.html
index cbcb16b4..4f7d1f3f 100644
--- a/docs/edge/feature/recon.html
+++ b/docs/edge/feature/recon.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/reconfigurability.html
b/docs/edge/feature/reconfigurability.html
index 8d1994ac..62ceb69e 100644
--- a/docs/edge/feature/reconfigurability.html
+++ b/docs/edge/feature/reconfigurability.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/s3-multi-tenancy-access-control.html
b/docs/edge/feature/s3-multi-tenancy-access-control.html
index a5a0aa72..590b77f5 100644
--- a/docs/edge/feature/s3-multi-tenancy-access-control.html
+++ b/docs/edge/feature/s3-multi-tenancy-access-control.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/s3-multi-tenancy-setup.html
b/docs/edge/feature/s3-multi-tenancy-setup.html
index 4fa306f9..4b710dc2 100644
--- a/docs/edge/feature/s3-multi-tenancy-setup.html
+++ b/docs/edge/feature/s3-multi-tenancy-setup.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/s3-multi-tenancy.html
b/docs/edge/feature/s3-multi-tenancy.html
index 55539649..43ba7808 100644
--- a/docs/edge/feature/s3-multi-tenancy.html
+++ b/docs/edge/feature/s3-multi-tenancy.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/s3-tenant-commands.html
b/docs/edge/feature/s3-tenant-commands.html
index eac5f237..c6a67906 100644
--- a/docs/edge/feature/s3-tenant-commands.html
+++ b/docs/edge/feature/s3-tenant-commands.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/scm-ha.html b/docs/edge/feature/scm-ha.html
index 2e064de8..4f7d9e6f 100644
--- a/docs/edge/feature/scm-ha.html
+++ b/docs/edge/feature/scm-ha.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/snapshot.html b/docs/edge/feature/snapshot.html
index d986b6e9..565ead42 100644
--- a/docs/edge/feature/snapshot.html
+++ b/docs/edge/feature/snapshot.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/streaming-write-pipeline.html
b/docs/edge/feature/streaming-write-pipeline.html
index 93e06fe8..aaf87c12 100644
--- a/docs/edge/feature/streaming-write-pipeline.html
+++ b/docs/edge/feature/streaming-write-pipeline.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/feature/topology.html b/docs/edge/feature/topology.html
index b12fa6b4..c2d67ad8 100644
--- a/docs/edge/feature/topology.html
+++ b/docs/edge/feature/topology.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/index.html b/docs/edge/index.html
index 3bd1bacd..9591ad23 100644
--- a/docs/edge/index.html
+++ b/docs/edge/index.html
@@ -446,6 +446,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="./security/protect-in-transit-traffic.html">Protect In-Transit Traffic</a>
+
+ </li>
+
<li class="">
<a href="./security/securitywithranger.html">Apache
Ranger</a>
diff --git a/docs/edge/index.xml b/docs/edge/index.xml
index 0b2843ef..55eaca5f 100644
--- a/docs/edge/index.xml
+++ b/docs/edge/index.xml
@@ -238,6 +238,13 @@
<guid>/interface/csi.html</guid>
<description>Ozone supports Container Storage Interface(CSI) protocol.
You can use Ozone by mounting an Ozone volume by Ozone CSI.</description>
</item>
+ <item>
+ <title>Protect In-Transit Traffic</title>
+ <link>/security/protect-in-transit-traffic.html</link>
+ <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
+ <guid>/security/protect-in-transit-traffic.html</guid>
+ <description><!---
 Licensed to the Apache Software Foundation
(ASF) under one or more
 contributor license agreements. See the NOTICE
file distributed with
 this work for additional information regarding
copyright ownership.
 The ASF licenses this file to You under the Apache
License, Version 2.0
 (the "License"); you may not use this file
except in compliance with
 the License. You may obtain a copy of the
License at

 [...]
+ </item>
<item>
<title>Apache Ranger</title>
<link>/security/securitywithranger.html</link>
diff --git a/docs/edge/integration.html b/docs/edge/integration.html
index 6998b65c..3365ff98 100644
--- a/docs/edge/integration.html
+++ b/docs/edge/integration.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="./security/protect-in-transit-traffic.html">Protect In-Transit Traffic</a>
+
+ </li>
+
<li class="">
<a href="./security/securitywithranger.html">Apache
Ranger</a>
diff --git a/docs/edge/integration/distcp.html
b/docs/edge/integration/distcp.html
index 60e4fc2e..97290630 100644
--- a/docs/edge/integration/distcp.html
+++ b/docs/edge/integration/distcp.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/integration/hive.html b/docs/edge/integration/hive.html
index 90c237d2..bee352de 100644
--- a/docs/edge/integration/hive.html
+++ b/docs/edge/integration/hive.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/integration/impala.html
b/docs/edge/integration/impala.html
index 74656331..80056e60 100644
--- a/docs/edge/integration/impala.html
+++ b/docs/edge/integration/impala.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/interface.html b/docs/edge/interface.html
index 5c6176e3..a74e25e8 100644
--- a/docs/edge/interface.html
+++ b/docs/edge/interface.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="./security/protect-in-transit-traffic.html">Protect In-Transit Traffic</a>
+
+ </li>
+
<li class="">
<a href="./security/securitywithranger.html">Apache
Ranger</a>
diff --git a/docs/edge/interface/cli.html b/docs/edge/interface/cli.html
index 5e1b2474..2e8b88a7 100644
--- a/docs/edge/interface/cli.html
+++ b/docs/edge/interface/cli.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/interface/csi.html b/docs/edge/interface/csi.html
index 4b2bb5f4..02a6b94c 100644
--- a/docs/edge/interface/csi.html
+++ b/docs/edge/interface/csi.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/interface/cyberduckozones3.html
b/docs/edge/interface/cyberduckozones3.html
index 2ad133a1..8d785816 100644
--- a/docs/edge/interface/cyberduckozones3.html
+++ b/docs/edge/interface/cyberduckozones3.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/interface/httpfs.html b/docs/edge/interface/httpfs.html
index 9814e817..c4700cef 100644
--- a/docs/edge/interface/httpfs.html
+++ b/docs/edge/interface/httpfs.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/interface/javaapi.html b/docs/edge/interface/javaapi.html
index 8abcf7c9..64e819da 100644
--- a/docs/edge/interface/javaapi.html
+++ b/docs/edge/interface/javaapi.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/interface/native-cpp.html
b/docs/edge/interface/native-cpp.html
index 3f87e7cc..8cae484e 100644
--- a/docs/edge/interface/native-cpp.html
+++ b/docs/edge/interface/native-cpp.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/interface/o3fs.html b/docs/edge/interface/o3fs.html
index 94b3d389..cbbf7d24 100644
--- a/docs/edge/interface/o3fs.html
+++ b/docs/edge/interface/o3fs.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/interface/ofs.html b/docs/edge/interface/ofs.html
index c441057f..49545b6f 100644
--- a/docs/edge/interface/ofs.html
+++ b/docs/edge/interface/ofs.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/interface/python.html b/docs/edge/interface/python.html
index 3c556ad9..d0fc77d3 100644
--- a/docs/edge/interface/python.html
+++ b/docs/edge/interface/python.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/interface/reconapi.html
b/docs/edge/interface/reconapi.html
index fcd2c3ba..c7124b44 100644
--- a/docs/edge/interface/reconapi.html
+++ b/docs/edge/interface/reconapi.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/interface/s3.html b/docs/edge/interface/s3.html
index 5804d24f..474d4fa3 100644
--- a/docs/edge/interface/s3.html
+++ b/docs/edge/interface/s3.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/recipe.html b/docs/edge/recipe.html
index 947f07b3..3031cfec 100644
--- a/docs/edge/recipe.html
+++ b/docs/edge/recipe.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="./security/protect-in-transit-traffic.html">Protect In-Transit Traffic</a>
+
+ </li>
+
<li class="">
<a href="./security/securitywithranger.html">Apache
Ranger</a>
diff --git a/docs/edge/recipe/boto3tutorial.html
b/docs/edge/recipe/boto3tutorial.html
index 2f568359..5850c470 100644
--- a/docs/edge/recipe/boto3tutorial.html
+++ b/docs/edge/recipe/boto3tutorial.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/recipe/botoclient.html b/docs/edge/recipe/botoclient.html
index 63c20756..101305b4 100644
--- a/docs/edge/recipe/botoclient.html
+++ b/docs/edge/recipe/botoclient.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/recipe/prometheus.html b/docs/edge/recipe/prometheus.html
index 4060b34d..25c77a5f 100644
--- a/docs/edge/recipe/prometheus.html
+++ b/docs/edge/recipe/prometheus.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/recipe/pyarrowtutorial.html
b/docs/edge/recipe/pyarrowtutorial.html
index b5a87384..b7ce24c4 100644
--- a/docs/edge/recipe/pyarrowtutorial.html
+++ b/docs/edge/recipe/pyarrowtutorial.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/recipe/pythonrequestsozonehttpfs.html
b/docs/edge/recipe/pythonrequestsozonehttpfs.html
index 67eaf0a4..fba85a05 100644
--- a/docs/edge/recipe/pythonrequestsozonehttpfs.html
+++ b/docs/edge/recipe/pythonrequestsozonehttpfs.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/recipe/sparkozonefsk8s.html
b/docs/edge/recipe/sparkozonefsk8s.html
index 53849a82..8c61d238 100644
--- a/docs/edge/recipe/sparkozonefsk8s.html
+++ b/docs/edge/recipe/sparkozonefsk8s.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/security.html b/docs/edge/security.html
index 0fb162ed..108b4dca 100644
--- a/docs/edge/security.html
+++ b/docs/edge/security.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="./security/protect-in-transit-traffic.html">Protect In-Transit Traffic</a>
+
+ </li>
+
<li class="">
<a href="./security/securitywithranger.html">Apache
Ranger</a>
@@ -721,6 +727,45 @@ depth, please take a look at <a
href="https://issues.apache.org/jira/secure/atta
+ <div class="col-sm-6">
+ <div class="card">
+ <div class="card-body">
+ <h2 class="card-title">
+
+ Protect In-Transit Traffic
+ </h2>
+ <p class="card-text"><!---
+ Licensed to the Apache Software Foundation (ASF) under one or more
+ contributor license agreements. See the NOTICE file distributed with
+ this work for additional information regarding copyright ownership.
+ The ASF licenses this file to You under the Apache License, Version 2.0
+ (the "License"); you may not use this file except in compliance with
+ the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
+-->
+<p>This document describes how to protect data in transit within Apache Ozone,
both between the cluster and clients, and internally within the cluster.</p></p>
+ <a
href="./security/protect-in-transit-traffic.html"
+ class=" btn btn-primary btn-lg">Protect
In-Transit Traffic</a>
+ </div>
+ </div>
+ </div>
+
+
+ </div>
+
+
+
+
+
+ <div class="row">
+
<div class="col-sm-6">
<div class="card">
<div class="card-body">
@@ -739,8 +784,6 @@ depth, please take a look at <a
href="https://issues.apache.org/jira/secure/atta
</div>
- </div>
-
</div>
diff --git a/docs/edge/security/gdpr.html b/docs/edge/security/gdpr.html
index 56264ae4..175aad16 100644
--- a/docs/edge/security/gdpr.html
+++ b/docs/edge/security/gdpr.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/security/index.xml b/docs/edge/security/index.xml
index f71d5bc2..12e5404f 100644
--- a/docs/edge/security/index.xml
+++ b/docs/edge/security/index.xml
@@ -56,6 +56,13 @@
<guid>/security/securityacls.html</guid>
<description>Native Ozone Authorizer provides Access Control List (ACL)
support for Ozone without Ranger integration.</description>
</item>
+ <item>
+ <title>Protect In-Transit Traffic</title>
+ <link>/security/protect-in-transit-traffic.html</link>
+ <pubDate>Mon, 01 Jan 0001 00:00:00 +0000</pubDate>
+ <guid>/security/protect-in-transit-traffic.html</guid>
+ <description><!---
 Licensed to the Apache Software Foundation
(ASF) under one or more
 contributor license agreements. See the NOTICE
file distributed with
 this work for additional information regarding
copyright ownership.
 The ASF licenses this file to You under the Apache
License, Version 2.0
 (the "License"); you may not use this file
except in compliance with
 the License. You may obtain a copy of the
License at

 [...]
+ </item>
<item>
<title>Apache Ranger</title>
<link>/security/securitywithranger.html</link>
diff --git a/docs/edge/start/runningviadocker.html
b/docs/edge/security/protect-in-transit-traffic.html
similarity index 80%
copy from docs/edge/start/runningviadocker.html
copy to docs/edge/security/protect-in-transit-traffic.html
index 23cd0f0a..6a0ad968 100644
--- a/docs/edge/start/runningviadocker.html
+++ b/docs/edge/security/protect-in-transit-traffic.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="active">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
@@ -498,8 +504,8 @@ s=d.getElementsByTagName('script')[0];
<nav aria-label="breadcrumb">
<ol class="breadcrumb">
<li class="breadcrumb-item"><a
href="../index.html">Home</a></li>
- <li class="breadcrumb-item" aria-current="page"><a
href="../start.html">Getting Started</a></li>
- <li class="breadcrumb-item active"
aria-current="page">Pseudo-cluster</li>
+ <li class="breadcrumb-item" aria-current="page"><a
href="../security.html">Security</a></li>
+ <li class="breadcrumb-item active"
aria-current="page">Protect In-Transit Traffic</li>
</ol>
</nav>
@@ -509,76 +515,51 @@ s=d.getElementsByTagName('script')[0];
-
-
- <a href="../zh/start/runningviadocker.html"><span class="label
label-success">中文</span></a>
-
-
</div>
<div class="col-md-9">
- <h1>Pseudo-cluster</h1>
+ <h1>Protect In-Transit Traffic</h1>
<!---
- Licensed to the Apache Software Foundation (ASF) under one or more
- contributor license agreements. See the NOTICE file distributed with
- this work for additional information regarding copyright ownership.
- The ASF licenses this file to You under the Apache License, Version 2.0
- (the "License"); you may not use this file except in compliance with
- the License. You may obtain a copy of the License at
-
- http://www.apache.org/licenses/LICENSE-2.0
-
- Unless required by applicable law or agreed to in writing, software
- distributed under the License is distributed on an "AS IS" BASIS,
- WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
- See the License for the specific language governing permissions and
- limitations under the License.
+ Licensed to the Apache Software Foundation (ASF) under one or more
+ contributor license agreements. See the NOTICE file distributed with
+ this work for additional information regarding copyright ownership.
+ The ASF licenses this file to You under the Apache License, Version 2.0
+ (the "License"); you may not use this file except in compliance with
+ the License. You may obtain a copy of the License at
+
+ http://www.apache.org/licenses/LICENSE-2.0
+
+ Unless required by applicable law or agreed to in writing, software
+ distributed under the License is distributed on an "AS IS" BASIS,
+ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ See the License for the specific language governing permissions and
+ limitations under the License.
-->
-
-<div class="panel panel-default">
- <div class="panel-heading">Requirements</div>
- <div class="panel-body">
- <ul>
-<li><a href="https://docs.docker.com/engine/install/";>Docker Engine</a> latest
stable version</li>
-<li><a href="https://docs.docker.com/compose/install/";>Docker Compose</a> at
least v2.30</li>
-</ul>
-
- </div>
-</div>
-
-<ul>
-<li>
-<p>Download the Ozone binary tarball and untar it.</p>
-</li>
-<li>
-<p>Go to the directory where the docker compose files exist and tell
-<code>docker-compose</code> to start Ozone in the background. This will start
a small
-ozone instance on your machine.</p>
-</li>
-</ul>
-<div class="highlight"><pre tabindex="0"
style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code
class="language-bash" data-lang="bash"><span style="display:flex;"><span>cd
compose/ozone/
-</span></span><span style="display:flex;"><span>
-</span></span><span style="display:flex;"><span>docker-compose up
-d</span></span></code></pre></div>
-<p>To verify that ozone is working as expected, let us log into a data node and
-run <em>freon</em>, the load generator for Ozone. The <code>exec datanode
bash</code> command
-will open a bash shell on the datanode.</p>
-<p>The <code>ozone freon</code> command is executed within the datanode
container. You can quit freon via CTRL-C any time. The
-<code>rk</code> profile instructs freon to generate random keys.</p>
-<div class="highlight"><pre tabindex="0"
style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code
class="language-bash" data-lang="bash"><span
style="display:flex;"><span>docker-compose exec datanode bash
-</span></span><span style="display:flex;"><span>ozone freon
rk</span></span></code></pre></div>
-<p>You can check out the <strong>OzoneManager UI</strong> at
http://localhost:9874/ to see the
-activity generated by freon.
-While you are there, please don’t forget to check out the ozone
configuration explorer.</p>
-<p><em><strong>Congratulations, You have just run your first ozone
cluster.</strong></em></p>
-<p>To shutdown the cluster, please run
-<div class="highlight"><pre tabindex="0"
style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code
class="language-bash" data-lang="bash"><span
style="display:flex;"><span>docker-compose
down</span></span></code></pre></div></p>
-<p><strong>You can refer to the link <a
href="https://github.com/apache/ozone/blob/master/hadoop-ozone/dist/src/main/compose/ozone/README.md";>README</a>
for configuring <code>monitoring</code> and <code>profiling</code>
add-ons</strong></p>
+<p>This document describes how to protect data in transit within Apache Ozone,
both between the cluster and clients, and internally within the cluster.</p>
+<h2 id="hadoop-rpc-encryption">Hadoop RPC Encryption</h2>
+<p>Ozone traffic, whether between the cluster and client, or internal inside
the cluster, may be transferred via Hadoop RPC (e.g. client to Ozone Manager).
To encrypt client-OM (Ozone Manager) communication, configure
<code>hadoop.rpc.protection</code> to <code>privacy</code> in your
<code>core-site.xml</code>. This ensures that all data exchanged over Hadoop
RPC is encrypted.</p>
+<div class="highlight"><pre tabindex="0"
style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code
class="language-xml" data-lang="xml"><span style="display:flex;"><span><span
style="color:#f92672"><property></span>
+</span></span><span style="display:flex;"><span> <span
style="color:#f92672"><name></span>hadoop.rpc.protection<span
style="color:#f92672"></name></span>
+</span></span><span style="display:flex;"><span> <span
style="color:#f92672"><value></span>privacy<span
style="color:#f92672"></value></span>
+</span></span><span style="display:flex;"><span><span
style="color:#f92672"></property></span>
+</span></span></code></pre></div><h3
id="ozoneomtransportclass">ozone.om.transport.class</h3>
+<p>While the default is
<code>org.apache.hadoop.ozone.om.protocolPB.Hadoop3OmTransportFactory</code>,
it is possible to specify a gRPC based transport using the
<code>ozone.om.transport.class</code> configuration property:
<code>org.apache.hadoop.ozone.om.protocolPB.GrpcOmTransportFactory</code>. In
this case, the Hadoop RPC configuration is not applicable.</p>
+<h2 id="grpc-tls-encryption">gRPC TLS Encryption</h2>
+<p>Ozone traffic may also be transferred via gRPC (e.g., Ratis write pipeline
or client reading blocks from DataNode). To enable TLS for gRPC traffic, set
<code>hdds.grpc.tls.enabled</code> to <code>true</code>. This encrypts
communication between Ozone services that use gRPC.</p>
+<div class="highlight"><pre tabindex="0"
style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code
class="language-xml" data-lang="xml"><span style="display:flex;"><span><span
style="color:#f92672"><property></span>
+</span></span><span style="display:flex;"><span> <span
style="color:#f92672"><name></span>hdds.grpc.tls.enabled<span
style="color:#f92672"></name></span>
+</span></span><span style="display:flex;"><span> <span
style="color:#f92672"><value></span>true<span
style="color:#f92672"></value></span>
+</span></span><span style="display:flex;"><span><span
style="color:#f92672"></property></span>
+</span></span></code></pre></div><h2 id="ozone-http-web-console">Ozone HTTP
Web Console</h2>
+<p>For information on securing the Ozone HTTP web console, please refer to the
<a href="../security/securingozonehttp.html">Securing HTTP</a>
documentation.</p>
+<h2 id="further-reading">Further Reading</h2>
+<p>For details on the specific network ports used by Ozone roles and the types
of transport between them, refer to the <a
href="../concept/networkports.html">Network Ports</a> documentation.</p>
- <a class="btn btn-success btn-lg"
href="../start/fromsource.html">Next >></a>
+ <a class="btn btn-success btn-lg"
href="../security/securitywithranger.html">Next >></a>
</div>
@@ -594,7 +575,7 @@ While you are there, please don’t forget to check out
the ozone configurat
<footer class="footer">
<div class="container">
<span class="small text-muted">
- Version: 2.1.0-SNAPSHOT, Last Modified: May 10, 2025 <a
class="hide-child link primary-color"
href="https://github.com/apache/ozone/commit/034b4973fcbb08643b1b104e3140d9cacf802fe0";>034b4973fc</a>
+ Version: 2.1.0-SNAPSHOT, Last Modified: July 3, 2025 <a
class="hide-child link primary-color"
href="https://github.com/apache/ozone/commit/b9d4e6585bb7dabc186590ae4dd782834e0b022a";>b9d4e6585b</a>
</span>
</div>
</footer>
diff --git a/docs/edge/security/secureozone.html
b/docs/edge/security/secureozone.html
index 8233ef44..26f77003 100644
--- a/docs/edge/security/secureozone.html
+++ b/docs/edge/security/secureozone.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/security/securingdatanodes.html
b/docs/edge/security/securingdatanodes.html
index 3a23a96a..921d0a33 100644
--- a/docs/edge/security/securingdatanodes.html
+++ b/docs/edge/security/securingdatanodes.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/security/securingozonehttp.html
b/docs/edge/security/securingozonehttp.html
index c96b320b..be84d742 100644
--- a/docs/edge/security/securingozonehttp.html
+++ b/docs/edge/security/securingozonehttp.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/security/securings3.html
b/docs/edge/security/securings3.html
index c43eeb7f..66298cb8 100644
--- a/docs/edge/security/securings3.html
+++ b/docs/edge/security/securings3.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/security/securingtde.html
b/docs/edge/security/securingtde.html
index 347a7e81..838ee999 100644
--- a/docs/edge/security/securingtde.html
+++ b/docs/edge/security/securingtde.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
@@ -576,6 +582,56 @@ Ranger KMS supports both 128 and 256 bits. Hadoop KMS is
also commonly used with
</span></span></code></pre></div><p>For example:</p>
<div class="highlight"><pre tabindex="0"
style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code
class="language-shell" data-lang="shell"><span style="display:flex;"><span>
ozone sh bucket create --key enckey /vol1/encrypted_bucket
</span></span></code></pre></div><p>Now, all data written to
<code>/vol1/encrypted_bucket</code> will be encrypted at rest. As long as the
client is configured correctly to use the key, such encryption is completely
transparent to the end users.</p>
+<h3 id="performance-optimization-for-tde">Performance Optimization for TDE</h3>
+<p>Since Ozone leverages Hadoop’s encryption library, performance
optimization strategies similar to HDFS encryption apply:</p>
+
+<div class="panel panel-default">
+ <div class="panel-heading">Requirements</div>
+ <div class="panel-body">
+ <strong>Hardware Acceleration: Architecture Support</strong>
+The OpenSSL-based hardware acceleration discussed below is currently only
supported on x86 architectures. ARM64 architectures are not supported at this
time.
+ </div>
+</div>
+
+<ol>
+<li><strong>Enable AES-NI Hardware Acceleration:</strong></li>
+</ol>
+<ul>
+<li>Install OpenSSL development libraries: On most Linux distributions,
install <code>openssl-devel</code> (or <code>libssl-dev</code> on
Debian/Ubuntu) to provide <code>libcrypto.so</code>, which is utilized by the
Hadoop native library for hardware-accelerated encryption.</li>
+<li>Use servers with CPUs that support the AES-NI instruction set and RDRAND
instruction (most modern Intel and AMD CPUs do)</li>
+</ul>
+<ol start="2">
+<li>
+<p><strong>Install and Configure Native Libraries:</strong></p>
+<ul>
+<li>Ensure that the native <code>libhadoop.so</code> library is properly
installed</li>
+</ul>
+<div class="highlight"><pre tabindex="0"
style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code
class="language-shell" data-lang="shell"><span
style="display:flex;"><span>ozone debug checknative
+</span></span></code></pre></div><ul>
+<li>The output should show “true” for the hadoop library</li>
+<li>To troubleshoot native library loading issues on Ozone Datanode and
applications, configure their log level to DEBUG. The log messages below are
examples, and actual paths may vary. The following log message indicates that
the libhadoop native library fails to load:</li>
+</ul>
+<pre tabindex="0"><code>25/06/14 01:25:21 DEBUG util.NativeCodeLoader: Trying
to load the custom-built native-hadoop library...
+25/06/14 01:25:21 DEBUG util.NativeCodeLoader: Failed to load native-hadoop
with error: java.lang.UnsatisfiedLinkError: no hadoop in java.library.path
+25/06/14 01:25:21 DEBUG util.NativeCodeLoader:
java.library.path=/opt/hadoop/lib/native:/usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib
+25/06/14 01:25:21 WARN util.NativeCodeLoader: Unable to load native-hadoop
library for your platform... using builtin-java classes where applicable
+</code></pre><ul>
+<li>And the following log message indicates OpenSSL library fails to load:</li>
+</ul>
+<pre tabindex="0"><code>25/06/14 01:18:53 DEBUG crypto.OpensslCipher: Failed
to load OpenSSL Cipher.
+java.lang.UnsatisfiedLinkError: Cannot load libcrypto.so (libcrypto.so: cannot
open shared object file: No such file or directory)!
+at org.apache.hadoop.crypto.OpensslCipher.initIDs(Native Method)
+at org.apache.hadoop.crypto.OpensslCipher.<clinit>(OpensslCipher.java:89)
+at
org.apache.hadoop.crypto.OpensslAesCtrCryptoCodec.<init>(OpensslAesCtrCryptoCodec.java:50)
+</code></pre></li>
+<li>
+<p><strong>Validate Hardware Acceleration:</strong></p>
+<ul>
+<li>To verify if AES-NI is being utilized, check OpenSSL acceleration:</li>
+</ul>
+<div class="highlight"><pre tabindex="0"
style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4;"><code
class="language-shell" data-lang="shell"><span
style="display:flex;"><span>openssl speed -evp aes-256-ctr
+</span></span></code></pre></div></li>
+</ol>
<h3 id="using-transparent-data-encryption-from-s3g">Using Transparent Data
Encryption from S3G</h3>
<p>Ozone’s S3 Gateway (S3G) allows you to access encrypted buckets. However,
it’s important to note that <strong>Ozone does not support S3-SSE
(Server-Side Encryption) or S3-CSE (Client-Side Encryption) in the way AWS S3
does.</strong> That said, Ozone S3 buckets can be encrypted using Ranger KMS or
Hadoop KMS to provide a guarantee similar to S3-SSE with client-supplied keys
(SSE-C).</p>
<p>When creating an encrypted bucket that will be accessed via S3G:</p>
@@ -658,6 +714,7 @@ See <a href="../feature/prefixfso.html">Prefix based File
System Optimization</a
<ul>
<li>For more background on Transparent Data Encryption concepts, you can refer
to the <a
href="https://hadoop.apache.org/docs/current/hadoop-project-dist/hadoop-hdfs/TransparentEncryption.html";>Transparent
Encryption in HDFS documentation</a>.</li>
<li>For detailed information on Hadoop KMS, see the <a
href="https://hadoop.apache.org/docs/r3.4.1/hadoop-kms/index.html";>Hadoop KMS
documentation</a>.</li>
+<li>For OpenSSL crypto performance tuning, refer to <a
href="https://software.intel.com/content/www/us/en/develop/articles/intel-advanced-encryption-standard-aes-instructions-set.html";>Intel’s
AES-NI optimization guide</a>.</li>
</ul>
@@ -678,7 +735,7 @@ See <a href="../feature/prefixfso.html">Prefix based File
System Optimization</a
<footer class="footer">
<div class="container">
<span class="small text-muted">
- Version: 2.1.0-SNAPSHOT, Last Modified: June 10, 2025 <a
class="hide-child link primary-color"
href="https://github.com/apache/ozone/commit/516bc9659b2d4d2567c7570e43d0eb012b666f5a";>516bc9659b</a>
+ Version: 2.1.0-SNAPSHOT, Last Modified: July 2, 2025 <a
class="hide-child link primary-color"
href="https://github.com/apache/ozone/commit/f2ddbf6a474e0e0f2f16e4f79053ec5e985733c8";>f2ddbf6a47</a>
</span>
</div>
</footer>
diff --git a/docs/edge/security/securityacls.html
b/docs/edge/security/securityacls.html
index 6efc3452..5034cdcc 100644
--- a/docs/edge/security/securityacls.html
+++ b/docs/edge/security/securityacls.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
@@ -688,7 +694,7 @@ Following are the supported ACL actions.
- <a class="btn btn-success btn-lg"
href="../security/securitywithranger.html">Next >></a>
+ <a class="btn btn-success btn-lg"
href="../security/protect-in-transit-traffic.html">Next >></a>
</div>
diff --git a/docs/edge/security/securitywithranger.html
b/docs/edge/security/securitywithranger.html
index 75c5f240..89780799 100644
--- a/docs/edge/security/securitywithranger.html
+++ b/docs/edge/security/securitywithranger.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="active">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/sitemap.xml b/docs/edge/sitemap.xml
index 952f1f75..4b41b345 100644
--- a/docs/edge/sitemap.xml
+++ b/docs/edge/sitemap.xml
@@ -4,7 +4,7 @@
<sitemap>
<loc>/en/sitemap.xml</loc>
- <lastmod>2025-07-01T20:04:50-07:00</lastmod>
+ <lastmod>2025-07-03T03:29:45-07:00</lastmod>
</sitemap>
diff --git a/docs/edge/start.html b/docs/edge/start.html
index 2180a269..44078c15 100644
--- a/docs/edge/start.html
+++ b/docs/edge/start.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="./security/protect-in-transit-traffic.html">Protect In-Transit Traffic</a>
+
+ </li>
+
<li class="">
<a href="./security/securitywithranger.html">Apache
Ranger</a>
diff --git a/docs/edge/start/fromsource.html b/docs/edge/start/fromsource.html
index 3ce8ad76..1472bede 100644
--- a/docs/edge/start/fromsource.html
+++ b/docs/edge/start/fromsource.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/start/kubernetes.html b/docs/edge/start/kubernetes.html
index b0704b3f..0a66c848 100644
--- a/docs/edge/start/kubernetes.html
+++ b/docs/edge/start/kubernetes.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/start/minikube.html b/docs/edge/start/minikube.html
index 20b42b09..b5b49d0f 100644
--- a/docs/edge/start/minikube.html
+++ b/docs/edge/start/minikube.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/start/onprem.html b/docs/edge/start/onprem.html
index a1abfdfa..4b44f2d7 100644
--- a/docs/edge/start/onprem.html
+++ b/docs/edge/start/onprem.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/start/runningviadocker.html
b/docs/edge/start/runningviadocker.html
index 23cd0f0a..41f7433e 100644
--- a/docs/edge/start/runningviadocker.html
+++ b/docs/edge/start/runningviadocker.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/start/startfromdockerhub.html
b/docs/edge/start/startfromdockerhub.html
index e22e6424..1cef4047 100644
--- a/docs/edge/start/startfromdockerhub.html
+++ b/docs/edge/start/startfromdockerhub.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/tools.html b/docs/edge/tools.html
index 6a6b33ad..7c04e78f 100644
--- a/docs/edge/tools.html
+++ b/docs/edge/tools.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="./security/protect-in-transit-traffic.html">Protect In-Transit Traffic</a>
+
+ </li>
+
<li class="">
<a href="./security/securitywithranger.html">Apache
Ranger</a>
diff --git a/docs/edge/tools/admin.html b/docs/edge/tools/admin.html
index 933cb15a..0a635afa 100644
--- a/docs/edge/tools/admin.html
+++ b/docs/edge/tools/admin.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/tools/auditparser.html b/docs/edge/tools/auditparser.html
index c1a6eef7..72fe1631 100644
--- a/docs/edge/tools/auditparser.html
+++ b/docs/edge/tools/auditparser.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/tools/containerlogparser.html
b/docs/edge/tools/containerlogparser.html
index 04b3723a..5f4b4429 100644
--- a/docs/edge/tools/containerlogparser.html
+++ b/docs/edge/tools/containerlogparser.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/tools/debug.html b/docs/edge/tools/debug.html
index 7c35b9d5..f8bbf2b0 100644
--- a/docs/edge/tools/debug.html
+++ b/docs/edge/tools/debug.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/tools/genconf.html b/docs/edge/tools/genconf.html
index 546003fc..738bb5d2 100644
--- a/docs/edge/tools/genconf.html
+++ b/docs/edge/tools/genconf.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/tools/logsinozone.html b/docs/edge/tools/logsinozone.html
index 893f9fdd..c6b6fc9d 100644
--- a/docs/edge/tools/logsinozone.html
+++ b/docs/edge/tools/logsinozone.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
diff --git a/docs/edge/tools/testtools.html b/docs/edge/tools/testtools.html
index 2176c3cf..e523424d 100644
--- a/docs/edge/tools/testtools.html
+++ b/docs/edge/tools/testtools.html
@@ -445,6 +445,12 @@ s=d.getElementsByTagName('script')[0];
</li>
+ <li class="">
+
+ <a
href="../security/protect-in-transit-traffic.html">Protect In-Transit
Traffic</a>
+
+ </li>
+
<li class="">
<a
href="../security/securitywithranger.html">Apache Ranger</a>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
