forked from docs/doc-exports
Yang, Tong
2195db241c
Reviewed-by: Pruthi, Vineet <vineet.pruthi@t-systems.com> Reviewed-by: Rechenburg, Matthias <matthias.rechenburg@t-systems.com> Co-authored-by: Yang, Tong <yangtong2@huawei.com> Co-committed-by: Yang, Tong <yangtong2@huawei.com>
36 lines
4.0 KiB
HTML
36 lines
4.0 KiB
HTML
<a name="admin_guide_000278"></a><a name="admin_guide_000278"></a>
|
|
|
|
<h1 class="topictitle1">Configuring an IP Address Whitelist for Modification Allowed by HBase</h1>
|
|
<div id="body1530067732194"><p id="admin_guide_000278__p7852018131720">If the Replication function is enabled for HBase clusters, a protection mechanism for data modification is added on the standby HBase cluster to ensure data consistency between the active and standby clusters. Upon receiving an RPC request for data modification, the standby HBase cluster checks the permission of the user who sends the request (only HBase manage users have the modification permission). Then it checks the validity of the source IP address of the request. Only modification requests from IP addresses in the white list are accepted. The IP address white list is configured by the <strong id="admin_guide_000278__b103829101719">hbase.replication.allowedIPs</strong> item.</p>
|
|
<p id="admin_guide_000278__p573032885317">Log in to <span id="admin_guide_000278__text67509419010">MRS</span> Manager and choose <strong id="admin_guide_000278__b573974273115">Cluster</strong> > <strong id="admin_guide_000278__b843894723116">Services</strong> > <strong id="admin_guide_000278__b213795063115">HBase</strong>. Click <strong id="admin_guide_000278__b8559101773217">Configurations</strong> and enter the parameter name in the search box.</p>
|
|
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="admin_guide_000278__en-us_topic_0046736705_table62042342" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameter description</caption><thead align="left"><tr id="admin_guide_000278__en-us_topic_0046736705_row63757280"><th align="left" class="cellrowborder" valign="top" width="28.28%" id="mcps1.3.3.2.4.1.1"><p id="admin_guide_000278__en-us_topic_0046736705_p64066064"><strong id="admin_guide_000278__b241918481115">Parameter</strong></p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="56.57%" id="mcps1.3.3.2.4.1.2"><p id="admin_guide_000278__en-us_topic_0046736705_p63500359"><strong id="admin_guide_000278__b19221151115">Description</strong></p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="15.15%" id="mcps1.3.3.2.4.1.3"><p id="admin_guide_000278__en-us_topic_0046736705_p53754906"><strong id="admin_guide_000278__b1017165315114">Default Value</strong></p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="admin_guide_000278__row408194120658"><td class="cellrowborder" valign="top" width="28.28%" headers="mcps1.3.3.2.4.1.1 "><p id="admin_guide_000278__p3673747720658">hbase.replication.allowedIPs</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="56.57%" headers="mcps1.3.3.2.4.1.2 "><p id="admin_guide_000278__p44373286202629">Allows replication request processing from configured IP addresses only. It supports comma separated regex patterns. Each pattern can be any of the following:</p>
|
|
<ul id="admin_guide_000278__ul38669003202645"><li id="admin_guide_000278__li11604155554613">Regex pattern<p id="admin_guide_000278__p108725611462"><a name="admin_guide_000278__li11604155554613"></a><a name="li11604155554613"></a>Example: 10.18.40.*, 10.18.*, 10.18.40.11</p>
|
|
</li><li id="admin_guide_000278__li51311315478">Range pattern (Range can be specified only in the last octet)<p id="admin_guide_000278__p981694194710"><a name="admin_guide_000278__li51311315478"></a><a name="li51311315478"></a>Example: 10.18.40.[10-20]</p>
|
|
</li></ul>
|
|
<p id="admin_guide_000278__p6750859161715">If this item is empty (default value), the white list contains only the IP address of the RegionServer of the cluster, indicating that only modification requests from the RegionServer of the standby HBase cluster are accepted.</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="15.15%" headers="mcps1.3.3.2.4.1.3 "><p id="admin_guide_000278__p4665895820658">N/A</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="admin_guide_000271.html">Security Hardening</a></div>
|
|
</div>
|
|
</div>
|
|
|