Help Center > > User Guide> FusionInsight Manager Operation Guide> Security Management> Security Hardening> Configuring an IP Address Whitelist for Modifications Allowed by HBase

Configuring an IP Address Whitelist for Modifications Allowed by HBase

Updated at: Mar 25, 2021 GMT+08:00

If the Replication function is enabled for HBase clusters, a protection mechanism for data modification is added on the standby HBase cluster to ensure data consistency between the active and standby clusters. Upon receiving an RPC request for data modification, the standby HBase cluster checks the permission of the user who sends the request (only HBase manage users have the modification permission). Then it checks the validity of the source IP address of the request. Only modification requests from IP addresses in the white list are accepted. The IP address white list is configured by the hbase.replication.allowedIPs item.

Page access: On FusionInsight Manager, choose Cluster > Name of the desired cluster > Services > component > Configurations. Click All Configurations. Enter the parameter name in the search box.

Table 1 Parameter description

Parameter

Description

Default Value

hbase.replication.allowedIPs

Allows replication request processing from configured IP addresses only. It supports comma separated regex patterns. Each pattern can be any of the following:

  • Regex Pattern

    eg: 10.18.40.* , 10.18.* , 10.18.40.11

  • Range Pattern (Range can be specified only in the last octet)

    eg: 10.18.40.[10 to 20]

If this item is empty (default value), the white list contains only the IP address of the RegionServer of the cluster, indicating that only modification requests from the RegionSever of the standby HBase cluster are accepted.

N/A

Did you find this page helpful?

Submit successfully!

Thank you for your feedback. Your feedback helps make our documentation better.

Failed to submit the feedback. Please try again later.

Which of the following issues have you encountered?







Please complete at least one feedback item.

Content most length 200 character

Content is empty.

OK Cancel