Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

How to choose between apache ranger and sentry

From the wiki provided by those 2 projects, I found it seems they did the similar job. But there must be some difference or it's no need for 2.

So what are the differences, and what is the practical advice to choose from one another.

thx a lot!

like image 505
kiwi Avatar asked Sep 05 '16 08:09

kiwi


People also ask

What is Apache Ranger used for?

Apache Ranger is a framework to enable, monitor, and manage comprehensive data security across the Hadoop platform. Apache Ranger has the following features: Centralized security administration to manage all security related tasks in a central UI or using REST APIs.

What is cloudera Ranger?

Apache Ranger delivers a comprehensive approach to security for a Hadoop cluster. It provides a centralized platform to define, administer and manage security policies consistently across Hadoop components.

What is Ranger RMS?

What is Ranger RMS? In a nutshell, Ranger RMS enables automatic translation of access policies from Hive to HDFS, reducing the operational burden of policy management.

What is Apache Ranger kms?

The Ranger Key Management Service (Ranger KMS) is a open source, scalable cryptographic key management service supporting HDFS "data at rest" encryption. Ranger KMS is based on the Hadoop KMS originally developed by the Apache community. The Hadoop KMS stores keys in a file-based Java keystore by default.


1 Answers

Great answers above.

Just quick update with Cloudera+Hortonworks merge last year. These companies have decided to standardize on Ranger. CDH5 and CDH6 will still use Sentry until CDH product line retires in ~2-3 years. Ranger will be used for Cloudera+Hortonworks' combined "Unity" platform / CDP product.

Cloudera were saying to us that Ranger is a more "mature" product. Since Unity hasn't released yet (as of May 2019), something may come up in the future, but that's the current direction. (Oct 2019 update: Unity is now known as CDP and is available for beta testing; will be available for cloud deployments soon, and in 2020 for on-prem customers)

If you're a former Cloudera customer / or CDH user, you would still have to use Apache Sentry. There is a significant overlap between Sentry and Ranger, but if you start fresh, definitely look at Ranger.

like image 195
Tagar Avatar answered Sep 19 '22 12:09

Tagar