Configuring HSTS for HDFS Web UIs

Configuring the HTTP Strict Transport Security (HSTS) for HDFS ensures that a web browser does not load the service information using HTTP. Additionally, all attempts to load the information using HTTP will automatically be converted to HTTPS.

  1. Go to the HDFS service.
  2. Click Configuration.
  3. Set the HSTS credentials in Cluster-wide Advanced Configuration Snippet (Safety Valve) for core-site.xml.
    <property>
    <name>hadoop.http.header.Strict-Transport-Security</name>
    <value>max-age=63072000;includeSubDomains;preload</value>
    </property>
  4. Restart the HDFS service.