Plenty of Jobs Are Found After Yarn Is Started

Issue

After Yarn starts in an MRS cluster (MRS 2.x or earlier), plenty of jobs occupying resources are found.

Symptom

After the customer creates an MRS cluster and starts Yarn, plenty of jobs occupying resources are found.

Cause Analysis

• It is suspected that there are hacker attacks.
• Set the Any protocol in the inbound direction of the SG to the 0.0.0.0/0.

Procedure

1. Log in to the MRS management console. On the Active Clusters page, click the cluster name. The cluster details page is displayed.
2. Click Manage next to Cluster Manager. The Access MRS Manager page is displayed.
3. Click Manage Security Group Rule to check the security group rule configuration.

4. Check whether the source address of the Any protocol in the inbound direction is 0.0.0.0/0.
5. If it is 0.0.0.0/0, change the remote end of the Any protocol in the inbound direction to a specified IP address. If it is not 0.0.0.0/0, there is no need to change the value.
6. After the value is changed successfully, restart the cluster VM.

Summary and Suggestions

Disable the Any protocol in the inbound direction, or specify the remote end of the Any protocol in the inbound direction as the specified IP address.

Related Information

For details, see MapReduce Service User Guide > Security > Security Configuration Suggestions for Clusters with Kerberos Authentication Disabled.