sequenceiq / hadoop-docker

Hadoop docker image
https://registry.hub.docker.com/u/sequenceiq/hadoop-docker/
Apache License 2.0
1.21k stars 560 forks source link

Change default value of dfs.encrypt.data.transfer.cipher.suites to AES? #84

Open ghost opened 5 years ago

ghost commented 5 years ago

The Hadoop official document recommends to set dfs.encrypt.data.transfer.cipher.suites to AES. "AES offers the greatest cryptographic strength and the best performance."
Setting it to AES/CTR/NoPadding activates AES encryption. By default, this is unspecified, so AES is not used.

I wonder if the default need to be changed for security and performance. Thanks.