Using ZooKeeper for ACL Propagation in Near Real Time
- Version
- Download 9
- File Size 422.72 KB
- Download
Using ZooKeeper for ACL Propagation in Near Real Time
Nikhita Kataria
nikhitakataria@gmail.com
Abstract—Access Control Lists (ACLs) are a critical component for enforcing security as well as governance of data in a cloud environment. This necessitates the need for ensuring ACL changes can propagate quickly and reliably across infrastructure stack so that services can quickly act on any ACL change. In this paper we explore how ZooKeeper; a distributed coordination service can be leveraged to enable near real-time propagation of ACLs. We will present a high-level architecture, benchmarks with experimental setup and failure modes for ACL distribution using ZooKeeper. This paper will also discuss scalability, consistency and security models required for handling ACL changes in a robust fashion.
Keywords— ACLs, ZooKeeper, distributed systems, real-time security, infrastructure, configuration propagation, consistency, coordination services, RBAC, security auditing