Ranger (I) preliminary perception

List of articles

• • 
    
• ​ ​ Introduce ​​
• ​ ​ Architecture and principle ​​
• ​ ​ install ​​
  • 
    

Introduce

Log in and copy

       

        Apache Ranger is a framework to enable, monitor and manage comprehensive data security across the Hadoop platform.
        

        
The vision with Ranger is to provide comprehensive security across the Apache Hadoop ecosystem. With the advent of Apache YARN, the Hadoop platform can now support a true data lake architecture. Enterprises can potentially run multiple workloads, in a multi tenant environment. Data security within Hadoop needs to evolve to support multiple use cases for data access, while also providing a framework for central administration of security policies and monitoring of user access.
       
       

        
1.
        
2.
        
3.
       

translation

Log in and copy

       

        Apache Ranger It's a Hadoop Monitor on the platform , Enable service , And the security framework of all-round data security access management .
        
Ranger The vision is to Apache Hadoop Provide comprehensive security management in the ecosystem . With the expansion of enterprise business , Enterprises may run multiple work tasks in a multi-user environment , This requires that Hadoop The data security within needs to be expanded to support multiple different requirements for data access at the same time , At the same time, it also needs to provide a centralized management of security policies , Framework for configuring and monitoring user access 
       
       

        
1.
        
2.
       

Official website :https://ranger.apache.org/

It has the following functions

(1) Centralized security management , Can be in the center UI Or use REST API Manage all safety related tasks .
(2) Use Hadoop Components / Tools perform specific operations and / Or fine authorization of operation , And manage through central management tools
(3) Across all Hadoop Component standardization authorization method .
(4) Enhanced support for different authorization methods - Role-based access control , Property based access control, etc .
(5) stay Hadoop User access and management operations are centrally audited in all components of （ Safety related ）.

Known support

Apache Hadoop
Apache Hive
Apache HBase
Apache Storm
Apache Knox
Apache Solr
Apache Kafka
YARN
NIFI

Architecture and principle

Ranger Is based on web End , By management policy , The audit log and report are composed of three parts .

Users in the administrator role can use RangerAdmin Provided web Interface or REST APIS To customize security policies . These strategies will be Ranger Provide lightweight for different Hadoop Plug-ins of components in the system to execute . The plug-in will be in Hadoop After the core processes of the different components are started , Start the corresponding plug-in process for security management

install

Ranger2,0 The above requirements

Hadoop by 3.x above ,Hive by 3.x Above version ,JDK by 1.8 Above version