[ 
https://issues.apache.org/jira/browse/KAFKA-9320?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17120985#comment-17120985
 ] 

Nikolay Izhikov commented on KAFKA-9320:
----------------------------------------

replication_test after last edits.
{noformat}
====================================================================================================
SESSION REPORT (ALL TESTS)
ducktape version: 0.7.7
session_id:       2020-06-01--004
run time:         62 minutes 44.597 seconds
tests run:        31
passed:           31
failed:           0
ignored:          0
====================================================================================================
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.failure_mode=hard_bounce.client_sasl_mechanism=SCRAM-SHA-256.security_protocol=SASL_SSL.broker_type=leader.interbroker_sasl_mechanism=SCRAM-SHA-512
status:     PASS
run time:   3 minutes 52.192 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=PLAINTEXT.failure_mode=clean_bounce.broker_type=controller
status:     PASS
run time:   2 minutes 15.889 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=PLAINTEXT.failure_mode=clean_bounce.broker_type=leader
status:     PASS
run time:   2 minutes 11.561 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=PLAINTEXT.failure_mode=clean_bounce.broker_type=leader.enable_idempotence=True
status:     PASS
run time:   2 minutes 10.796 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=PLAINTEXT.failure_mode=clean_shutdown.broker_type=controller
status:     PASS
run time:   1 minute 9.627 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=PLAINTEXT.failure_mode=clean_shutdown.broker_type=leader
status:     PASS
run time:   1 minute 2.357 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=PLAINTEXT.failure_mode=clean_shutdown.broker_type=leader.enable_idempotence=True
status:     PASS
run time:   1 minute 2.639 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=PLAINTEXT.failure_mode=hard_bounce.broker_type=controller
status:     PASS
run time:   2 minutes 21.234 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=PLAINTEXT.failure_mode=hard_bounce.broker_type=leader
status:     PASS
run time:   2 minutes 28.602 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=PLAINTEXT.failure_mode=hard_bounce.broker_type=leader.enable_idempotence=True
status:     PASS
run time:   2 minutes 24.656 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=PLAINTEXT.failure_mode=hard_shutdown.broker_type=controller
status:     PASS
run time:   1 minute 16.623 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=PLAINTEXT.failure_mode=hard_shutdown.broker_type=leader
status:     PASS
run time:   1 minute 12.983 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=PLAINTEXT.failure_mode=hard_shutdown.broker_type=leader.enable_idempotence=True
status:     PASS
run time:   1 minute 9.099 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=SASL_SSL.client_sasl_mechanism=PLAIN.failure_mode=hard_bounce.broker_type=leader.interbroker_sasl_mechanism=GSSAPI
status:     PASS
run time:   3 minutes 7.177 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=SASL_SSL.client_sasl_mechanism=PLAIN.failure_mode=hard_bounce.broker_type=leader.interbroker_sasl_mechanism=PLAIN
status:     PASS
run time:   3 minutes 10.262 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=SASL_SSL.failure_mode=clean_bounce.broker_type=controller
status:     PASS
run time:   2 minutes 57.467 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=SASL_SSL.failure_mode=clean_bounce.broker_type=leader
status:     PASS
run time:   2 minutes 48.815 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=SASL_SSL.failure_mode=clean_shutdown.broker_type=controller
status:     PASS
run time:   1 minute 34.970 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=SASL_SSL.failure_mode=clean_shutdown.broker_type=leader
status:     PASS
run time:   1 minute 14.040 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=SASL_SSL.failure_mode=hard_bounce.broker_type=controller
status:     PASS
run time:   3 minutes 23.274 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=SASL_SSL.failure_mode=hard_bounce.broker_type=leader
status:     PASS
run time:   3 minutes 5.554 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=SASL_SSL.failure_mode=hard_shutdown.broker_type=controller
status:     PASS
run time:   1 minute 38.441 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.security_protocol=SASL_SSL.failure_mode=hard_shutdown.broker_type=leader
status:     PASS
run time:   1 minute 18.875 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.tls_version=TLSv1.2.security_protocol=PLAINTEXT.broker_type=leader.failure_mode=clean_bounce.compression_type=gzip
status:     PASS
run time:   2 minutes 8.523 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.tls_version=TLSv1.2.security_protocol=PLAINTEXT.broker_type=leader.failure_mode=clean_shutdown.compression_type=gzip
status:     PASS
run time:   1 minute 9.231 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.tls_version=TLSv1.2.security_protocol=PLAINTEXT.broker_type=leader.failure_mode=hard_bounce.compression_type=gzip
status:     PASS
run time:   2 minutes 26.909 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.tls_version=TLSv1.2.security_protocol=PLAINTEXT.broker_type=leader.failure_mode=hard_shutdown.compression_type=gzip
status:     PASS
run time:   1 minute 16.480 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.tls_version=TLSv1.3.security_protocol=PLAINTEXT.broker_type=leader.failure_mode=clean_bounce.compression_type=gzip
status:     PASS
run time:   2 minutes 5.383 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.tls_version=TLSv1.3.security_protocol=PLAINTEXT.broker_type=leader.failure_mode=clean_shutdown.compression_type=gzip
status:     PASS
run time:   1 minute 6.718 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.tls_version=TLSv1.3.security_protocol=PLAINTEXT.broker_type=leader.failure_mode=hard_bounce.compression_type=gzip
status:     PASS
run time:   2 minutes 19.232 seconds
----------------------------------------------------------------------------------------------------
test_id:    
kafkatest.tests.core.replication_test.ReplicationTest.test_replication_with_broker_failure.tls_version=TLSv1.3.security_protocol=PLAINTEXT.broker_type=leader.failure_mode=hard_shutdown.compression_type=gzip
status:     PASS
run time:   1 minute 13.884 seconds
----------------------------------------------------------------------------------------------------
{noformat}

> Enable TLSv1.3 by default and disable some of the older protocols
> -----------------------------------------------------------------
>
>                 Key: KAFKA-9320
>                 URL: https://issues.apache.org/jira/browse/KAFKA-9320
>             Project: Kafka
>          Issue Type: New Feature
>          Components: security
>            Reporter: Rajini Sivaram
>            Priority: Major
>              Labels: needs-kip
>         Attachments: report.txt
>
>
> KAFKA-7251 added support for TLSv1.3. We should include this in the list of 
> protocols that are enabled by default. We should also disable some of the 
> older protocols that are not secure. This change requires a KIP.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to