bruno-roustant opened a new pull request, #3185:
URL: https://github.com/apache/solr/pull/3185

   Currently Replication and Backup copy files using a Directory created with 
the configured DirectoryFactory. This Directory may be a FilterDirectory that 
adds additional logic (e.g. encryption) that should not run when copying files 
(e.g. do not decrypt).
   
   The proposal is to add a new REPLICATE value in the 
DirectoryFactory.DirContext that would be used by replication, and a new BACKUP 
for backup to get the Directory to use. The DirectoryFactory would unwrap the 
Directory in this case.
   One could expect that only one REPLICATE could be enough, but backup 
requires more inner checksum verifications that may need to differentiate the 
logic between the two (this is the case for encryption).
   
   Example:
   In the solr-sandbox encryption module, we would need a way to unwrap the 
Directory used to copy files during index fetching. Otherwise the files are 
decrypted by the EncryptionDirectory seamlessly during the files copy, ending 
up with follower replicas having cleartext index.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@solr.apache.org
For additional commands, e-mail: issues-h...@solr.apache.org

Reply via email to