七：Web Application Proxy

yarn自带了web接口，默认是和RM一起的(8088端口)。但是为了减少从web接口受到的攻击，可以把Web接口单独放在别的机器上。

设置下web代理就行了

Configurations

Configuration Property	Description
yarn.web-proxy.address	The address for the web proxy as HOST:PORT, if this is not given then the proxy will run as part of the RM.
yarn.web-proxy.keytab	Keytab for WebAppProxy, if the proxy is not running as part of the RM.
yarn.web-proxy.principal	The kerberos principal for the proxy, if the proxy is not running as part of the RM.

Running Web Application Proxy

Standalone Web application proxy server can be launched with the following command.

$ yarn proxyserver

Or users can start the stand alone Web Application Proxy server as a daemon, with the following command

$ $HADOOP_YARN_HOME/sbin/yarn-daemon.sh start proxyserver

来源： http://hadoop.apache.org/docs/current/hadoop-yarn/hadoop-yarn-site/WebApplicationProxy.html

来自为知笔记(Wiz)