Apache Knox
Apache Knox is a REST API and application gateway for the Apache Hadoop ecosystem. It provides a single access point for all REST and HTTP interactions with Apache Hadoop clusters, with authentication, authorization, SSO, and audit capabilities. Governed by the Apache Software Foundation under Apache 2.0.
APIs
Apache Knox Admin REST API
The Knox Admin REST API provides endpoints for topology management, service descriptor management, provider configuration, and version information for administering the Knox gat...
Apache Knox Gateway API
The Knox gateway proxies and secures access to Hadoop ecosystem services including HDFS WebHDFS, Hive, HBase REST, YARN, Oozie, Ambari, and Ranger with authentication and author...
Capabilities
Apache Knox Gateway Management
Workflow capability for Hadoop administrators and security engineers to manage Knox gateway topologies, service descriptors, and provider configurations.
Run with NaftikoFeatures
Unified gateway for all Hadoop REST services eliminating direct cluster access.
Kerberos, LDAP, OAuth2, and JWT authentication support.
SAML2-based SSO and token-based federation across Hadoop services.
Fine-grained authorization via Apache Ranger integration.
SSL/TLS termination at the gateway for encrypted communication.
Automatic service discovery via Ambari and Cloudera Manager integration.
Dynamic topology configuration without gateway restarts.
Comprehensive audit logs for all gateway interactions.
Use Cases
Secure and centralize access to all Hadoop REST APIs through Knox.
Provide secure REST access to EMR, HDInsight, and Dataproc clusters.
Enable single sign-on across Ambari, Hue, Spark UI, and other Hadoop UIs.
Proxy WebHDFS, Hive JDBC/REST, HBase REST, and YARN REST through Knox.
Integrations
WebHDFS REST API proxied and secured through Knox.
Hive JDBC and REST API access via Knox gateway.
HBase REST API proxied through Knox with authentication.
Authorization policy enforcement via Ranger Knox plugin.
Ambari REST API proxied through Knox for cluster management.