NiFi System Administrator's Guide
System Requirements
How to install and start NiFi
Port Configuration
NiFi
Embedded ZooKeeper
Configuration Best Practices
Recommended Antivirus Exclusions
Security Configuration
TLS Generation Toolkit
User Authentication
Lightweight Directory Access Protocol (LDAP)
Kerberos
OpenId Connect
SAML
Apache Knox
Multi-Tenant Authorization
Authorizer Configuration
Authorizers.xml Setup
FileUserGroupProvider
LdapUserGroupProvider
ShellUserGroupProvider
Composite Implementations
FileAccessPolicyProvider
StandardManagedAuthorizer
FileAuthorizer
Initial Admin Identity (New NiFi Instance)
Legacy Authorized Users (NiFi Instance Upgrade)
Cluster Node Identities
Configuring Users & Access Policies
Creating Users and Groups
Access Policies
Viewing Policies on Users
Access Policy Configuration Examples
Encryption Configuration
Key Derivation Functions
NiFi Legacy KDF
OpenSSL PKCS#5 v1.5 EVP_BytesToKey
Bcrypt
Scrypt
PBKDF2
None
Argon2
Salt and IV Encoding
NiFi Legacy
OpenSSL PKCS#5 v1.5 EVP_BytesToKey
Bcrypt, Scrypt, PBKDF2, Argon2
Java Cryptography Extension (JCE) Limited Strength Jurisdiction Policies
Allow Insecure Cryptographic Modes
Encrypted Passwords in Flows
Encrypted Passwords in Configuration Files
NiFi Toolkit Administrative Tools
Clustering Configuration
Zero-Leader Clustering
Why Cluster?
Terminology
Communication within the Cluster
Managing Nodes
Disconnect Nodes
Offload Nodes
Delete Nodes
Decommission Nodes
NiFi CLI Node Commands
Flow Election
Basic Cluster Setup
Troubleshooting
State Management
Configuring State Providers
Embedded ZooKeeper Server
ZooKeeper Access Control
Securing ZooKeeper with Kerberos
Kerberizing Embedded ZooKeeper Server
Kerberizing NiFi's ZooKeeper Client
Troubleshooting Kerberos Configuration
Securing ZooKeeper with TLS
Embedded ZooKeeper with TLS
ZooKeeper Migrator
Bootstrap Properties
Notification Services
Email Notification Service
HTTP Notification Service
Proxy Configuration
Kerberos Service
Notes
Analytics Framework
System Properties
Upgrade Recommendations
Core Properties
State Management
H2 Settings
FlowFile Repository
Write Ahead FlowFile Repository
Encrypted Write Ahead FlowFile Repository Properties
Volatile FlowFile Repository
RocksDB FlowFile Repository
Swap Management
Content Repository
File System Content Repository Properties
Encrypted File System Content Repository Properties
Volatile Content Repository Properties
Provenance Repository
Write Ahead Provenance Repository Properties
Encrypted Write Ahead Provenance Repository Properties
Persistent Provenance Repository Properties
Volatile Provenance Repository Properties
Status History Repository
Site to Site Properties
Site to Site Routing Properties for Reverse Proxies
Site to Site protocol sequence
Reverse Proxy Configurations
Site to Site and Reverse Proxy Examples
Web Properties
Security Properties
Identity Mapping Properties
Cluster Common Properties
Cluster Node Properties
ZooKeeper Properties
Kerberos Properties
Analytics Properties
Referencing Custom Properties via nifi.properties
Upgrading NiFi
Preserve Custom Processors
Preserve Modified NARs
Clear Activity and Shutdown Existing NiFi
Install the new NiFi Version
Update the Configuration Files for Your New NiFi Installation
Migrating a Flow with Sensitive Properties
Start New NiFi
Processor Locations
Available Configuration Options
Installing Custom Processors
Autoloading Custom Processors