mirror of
https://github.com/apache/impala.git
synced 2025-12-19 18:12:08 -05:00
5cca1aa9e5
Main changes:
- added flag external_interface to override hostname for
beeswax/hs2/hs2-http port to allow testing ipv6 on these
interfaces without forcing ipv6 on internal communication
- compile Squeasel with USE_IPV6 to allow ipv6 on webui (webui
interface can be configured with existing flag webserver_interface)
- fixed the handling of [<ipv6addr>].<port> style addresses in
impala-shell (e.g. [::1]:21050) and test framework
- improved handling of custom clusters in test framework to
allow webui/ImpalaTestSuite's clients to work with non
standard settings (also fixes these clients with SSL)
Using ipv4 vs ipv6 vs dual stack can be configured by setting
the interface to bind to with flag webserver_interface and
external_interface. The Thrift server behind hs2/hs2-http/beeswax
only accepts a single host name and uses the first address
returned by getaddrinfo() that it can successfully bind to. This
means that unless an ipv6 address is used (like ::1) the behavior
will depend on the order of addresses returned by getaddrinfo():
63b7a263fc/lib/cpp/src/thrift/transport/TServerSocket.cpp (L481)
For dual stack the only way currently is to bind to "::",
as the Thrift server can only listen a single socket.
Testing:
- added custom cluster tests for ipv6 only/dual interface
with and without SSL
- manually tested in dual stack environment with client on a
different host
- among clients impala-shell and impyla are tested, but not
JDBC/ODBC
- no tests yet on truly ipv6 only environment, as internal
communication (e.g. krpc) is not ready for ipv6
To test manually the dev cluster can be started with ipv6 support:
dual mode:
bin/start-impala-cluster.py --impalad_args="--external_interface=:: --webserver_interface=::" --catalogd_args="--webserver_interface=::" --state_store_args="--webserver_interface=::"
ipv6 only:
bin/start-impala-cluster.py --impalad_args="--external_interface=::1 --webserver_interface=::1" --catalogd_args="--webserver_interface=::1" --state_store_args="--webserver_interface=::1"
Change-Id: I51ac66c568cc9bb06f4a3915db07a53c100109b6
Reviewed-on: http://gerrit.cloudera.org:8080/22527
Reviewed-by: Impala Public Jenkins <impala-public-jenkins@cloudera.com>
Tested-by: Impala Public Jenkins <impala-public-jenkins@cloudera.com>
81 lines
2.9 KiB
Python
81 lines
2.9 KiB
Python
# Licensed to the Apache Software Foundation (ASF) under one
|
|
# or more contributor license agreements. See the NOTICE file
|
|
# distributed with this work for additional information
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
# to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance
|
|
# with the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing,
|
|
# software distributed under the License is distributed on an
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
# KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
# Tools for identifying network characteristics.
|
|
|
|
from __future__ import absolute_import, division, print_function
|
|
import socket
|
|
import ssl
|
|
|
|
from tests.common.environ import IS_REDHAT_DERIVATIVE
|
|
|
|
# Retrieves the host external IP rather than localhost/127.0.0.1 so we have an IP that
|
|
# Impala will consider distinct from storage backends to force remote scheduling.
|
|
def get_external_ip():
|
|
s = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
|
|
s.settimeout(0)
|
|
# This address is used to get the networking stack to identify a return IP address.
|
|
# Timeout=0 means it doesn't need to resolve.
|
|
s.connect(('10.254.254.254', 1))
|
|
return s.getsockname()[0]
|
|
|
|
|
|
def split_host_port(host_port):
|
|
"""Checks if the host name also contains a port and separates the two.
|
|
Returns either (host, None) or (host, port). Detects if host is an ipv6 address
|
|
like "[::]" and removes the brackets from it.
|
|
"""
|
|
is_ipv6_address = host_port[0] == "["
|
|
if is_ipv6_address:
|
|
parts = host_port[1:].split("]")
|
|
if len(parts) == 1 or not parts[1]:
|
|
return (parts[0], None)
|
|
return (parts[0], int(parts[1][1:]))
|
|
else:
|
|
parts = host_port.split(":")
|
|
if len(parts) == 1:
|
|
return (parts[0], None)
|
|
return (parts[0], int(parts[1]))
|
|
|
|
|
|
def to_host_port(host, port):
|
|
is_ipv6_address = ":" in host
|
|
fmt = "[{0}]:{1}" if is_ipv6_address else "{0}:{1}"
|
|
return fmt.format(host, port)
|
|
|
|
|
|
CERT_TO_CA_MAP = {
|
|
"wildcard-cert.pem": "wildcardCA.pem",
|
|
"wildcard-san-cert.pem": "wildcardCA.pem"
|
|
}
|
|
|
|
REQUIRED_MIN_OPENSSL_VERSION = 0x10001000
|
|
# Python supports TLSv1.2 from 2.7.9 officially but on Red Hat/CentOS Python2.7.5
|
|
# with newer python-libs (eg python-libs-2.7.5-77) supports TLSv1.2 already
|
|
if IS_REDHAT_DERIVATIVE:
|
|
REQUIRED_MIN_PYTHON_VERSION_FOR_TLSV12 = (2, 7, 5)
|
|
else:
|
|
REQUIRED_MIN_PYTHON_VERSION_FOR_TLSV12 = (2, 7, 9)
|
|
_openssl_version_number = getattr(ssl, "OPENSSL_VERSION_NUMBER", None)
|
|
if _openssl_version_number is None:
|
|
SKIP_SSL_MSG = "Legacy OpenSSL module detected"
|
|
elif _openssl_version_number < REQUIRED_MIN_OPENSSL_VERSION:
|
|
SKIP_SSL_MSG = "Only have OpenSSL version %X, but test requires %X" % (
|
|
ssl.OPENSSL_VERSION_NUMBER, REQUIRED_MIN_OPENSSL_VERSION)
|
|
else:
|
|
SKIP_SSL_MSG = None
|