Uploaded image for project: 'Flink'
  1. Flink
  2. FLINK-33368

Support for SNI in the Flink Client

    XMLWordPrintableJSON

Details

    • New Feature
    • Status: Closed
    • Major
    • Resolution: Duplicate
    • None
    • None
    • Command Line Client
    • None

    • Flink Cluster on OpenShift
      VIP requiring SNI 
      Flink client running on a VM
      Flink version 16.2
      Java 8

    • Important

    Description

      We have Flink  clusters running on OpenShift behind a VIP that requires SNI (Server Name Information). The Flink client fails to connect to the Job Manager REST API through the VIP due to lack of SNI support in the Client. The connection was using TLS 1.2.
      If required, I can provide Wireshark traces. The TLS 1.2 Client Hello package does not contain any SNI info.
      I have also searched the Flink source code for the netty SniHandler class and I could not find any use of that class. 
      I have not seen any SNI references here
      https://github.com/apache/flink/blob/master/flink-runtime/src/main/java/org/apache/flink/runtime/rest/RestClient.java

      Attachments

        Issue Links

          is duplicated by

          Improvement - An improvement or enhancement to an existing feature or task. FLINK-28520 RestClient doesn't use SNI TLS extension

          • Major - Major loss of function.
          • Open

          Activity

            People

              Unassigned Unassigned
              mihai.l.lalescu Mihai L Lalescu
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: