YARN REST API protection

A distributed computing system comprising:

• a server that provides a resource manager of the distributed computing system;
• and
• a reverse proxy in a Hadoop cluster of computers, the reverse proxy comprising
• a processor, and
• a non-transitory computer-readable medium coupled to the processor and having instructions stored thereon, which when executed by the processor, cause the processor to perform operations comprising:
• intercepting a request to access the resource manager;
• determining, based on authentication configuration information, whether a call included in the request needs to be authenticated, wherein the authentication configuration information includes a list of methods that need to be authenticated and determining whether the call needs to be authenticated comprises determining whether the call includes one or more particular methods that are included in the list of methods of the authentication configuration information, and
• in response to determining that the call needs to be authenticated:
• requesting an authentication of the call using an authentication mechanism specified in the authentication configuration information, and
• upon successful authentication of the call, forwarding the request the server that provides the resource manager,
• wherein the server that provides the resource manager is different from the one processors of the reverse proxy.

A non-transitory computer-readable medium having instructions stored thereon, which when executed by a processor, cause the processor to perform operations comprising:

• intercepting, by a reverse proxy in a Hadoop cluster of computers in a distributed computing system, a request to access a resource manager of the distributed computing system;
• determining, by the reverse proxy based on authentication configuration information, whether a call included in the request needs to be authenticated, wherein the authentication configuration information includes a list of methods that need to be authenticated and determining whether the call needs to be authenticated comprises determining whether the call includes one or more particular methods that are included in the list of methods of the authentication configuration information;
• and
• in response to determining that the call needs to be authenticated:
• authenticating the call using an authentication mechanism specified in the authentication configuration information, and
• upon successful authentication of the call, forwarding the request from the reverse proxy to a server that provides the resource manager,
• wherein the reverse proxy includes one or more computer processors, and
• wherein the server that provides the resource manager is different from the one or more computer processors of the reverse proxy.