Knox Gateway proxying with DPS
With Knox setup and configured in your cluster, it is optional (but recommended) that you also configure Knox to be a proxy gateway for communication between your DP Instance and your cluster. You must configure Knox Gateway for proxying on the clusters you plan to use with DPS prior to starting the DPS installation process. During DPS installation, you will configure Knox Gateway for DPS.
Important | |
---|---|
Configuring Knox Gateway is required if your cluster is configured
with Kerberos or with wire encryption. This simplifies certificate management for DPS, as the
only security certificate that needs to be managed is for Knox. |
Refer to the following documentation on how to configure your cluster for Knox Gateway:
Resource | Documentation |
---|---|
Configure a reverse proxy with Knox | HDP Security Guide, Configuring the Knox Gateway |
Configure LDAP with Knox for proxy authentication | HDP Security Guide, Setting Up LDAP Authentication |