[
https://issues.apache.org/jira/browse/SOLR-17671?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Bruno Roustant updated SOLR-17671:
----------------------------------
Description:
Currently Replication and Backup copy files using a Directory created with the
configured DirectoryFactory. This Directory may be a FilterDirectory that adds
additional logic (e.g. encryption) that should not run when copying files (e.g.
do not decrypt).
The proposal is to add a new REPLICATE value in the DirectoryFactory.DirContext
that would be used by Replication and Backup to get the Directory to use. The
DirectoryFactory would unwrap the Directory in this case.
Example:
In the solr-sandbox encryption module, we would need a way to unwrap the
Directory used to copy files during index fetching. Otherwise the files are
decrypted by the EncryptionDirectory seamlessly during the files copy, ending
up with follower replicas having cleartext index.
was:
While it is possible to define the replication handler class in solr.xml, it is
not possible to extend CoreReplication logic to tune how index files are
copied, or filter/unwrap the Directory used to open the files inputs.
The proposal is to add a hook method "createCoreReplication" in
ReplicationHandler, and another "filterDirectory" in ReplicationAPIBase.
Example:
In the solr-sandbox encryption module, we would need a way to unwrap the
Directory used to copy files during index fetching. Otherwise the files are
decrypted by the EncryptionDirectory seamlessly during the files copy, ending
up with follower replicas having cleartext index.
Summary: Replication and Backup should use an unwrapped Directory when
copying files. (was: Add a hook in ReplicationHandler to allow extending
CoreReplication)
> Replication and Backup should use an unwrapped Directory when copying files.
> ----------------------------------------------------------------------------
>
> Key: SOLR-17671
> URL: https://issues.apache.org/jira/browse/SOLR-17671
> Project: Solr
> Issue Type: Improvement
> Reporter: Bruno Roustant
> Priority: Major
> Labels: pull-request-available
> Time Spent: 20m
> Remaining Estimate: 0h
>
> Currently Replication and Backup copy files using a Directory created with
> the configured DirectoryFactory. This Directory may be a FilterDirectory that
> adds additional logic (e.g. encryption) that should not run when copying
> files (e.g. do not decrypt).
> The proposal is to add a new REPLICATE value in the
> DirectoryFactory.DirContext that would be used by Replication and Backup to
> get the Directory to use. The DirectoryFactory would unwrap the Directory in
> this case.
> Example:
> In the solr-sandbox encryption module, we would need a way to unwrap the
> Directory used to copy files during index fetching. Otherwise the files are
> decrypted by the EncryptionDirectory seamlessly during the files copy, ending
> up with follower replicas having cleartext index.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org
