Skip to content

[fix](arrowflight) Advertise TLS result endpoints - #67221

Open
Yukang-Lian wants to merge 1 commit into
apache:masterfrom
Yukang-Lian:codex/tls8-arrow-flight-endpoint
Open

[fix](arrowflight) Advertise TLS result endpoints#67221
Yukang-Lian wants to merge 1 commit into
apache:masterfrom
Yukang-Lian:codex/tls8-arrow-flight-endpoint

Conversation

@Yukang-Lian

@Yukang-Lian Yukang-Lian commented Aug 27, 2026

Copy link
Copy Markdown
Collaborator

What problem does this PR solve?

Issue Number: N/A

Related PR: None

Problem Summary: When unified TLS enables the Arrow Flight protocol, the Flight SQL server still advertises backend result endpoints with the grpc+tcp scheme. Clients follow that plaintext endpoint and fail to retrieve results from a TLS-enabled backend. Select the advertised grpc+tls scheme from the same enable_tls and tls_excluded_protocols settings that start the Arrow Flight TLS server.

Release note

Arrow Flight SQL now advertises TLS backend result endpoints when Arrow Flight TLS is enabled.

Check List (For Author)

  • Test: Unit Test: ./run-fe-ut.sh --run org.apache.doris.service.arrowflight.DorisFlightSqlProducerTest (5 passed)
  • Behavior changed: Yes. Backend result endpoints use grpc+tls when Arrow Flight TLS is active and remain grpc+tcp otherwise.
  • Does this need documentation: No

### What problem does this PR solve?

Issue Number: N/A

Related PR: selectdb/selectdb-core#10971

Problem Summary: When unified TLS enables the Arrow Flight protocol, the Flight SQL server still advertises backend result endpoints with the grpc+tcp scheme. Clients follow that plaintext endpoint and fail to retrieve results from a TLS-enabled backend. Select the advertised grpc+tls scheme from the same enable_tls and tls_excluded_protocols settings that start the Arrow Flight TLS server.

### Release note

Arrow Flight SQL now advertises TLS backend result endpoints when Arrow Flight TLS is enabled.

### Check List (For Author)

- Test: Unit Test: ./run-fe-ut.sh --run org.apache.doris.service.arrowflight.DorisFlightSqlProducerTest (5 passed)
- Behavior changed: Yes. Backend result endpoints use grpc+tls when Arrow Flight TLS is active and remain grpc+tcp otherwise.
- Does this need documentation: No
@hello-stephen

Copy link
Copy Markdown
Contributor

Thank you for your contribution to Apache Doris.
Don't know what should be done next? See How to process your PR.

Please clearly describe your PR:

  1. What problem was fixed (it's best to include specific error reporting information). How it was fixed.
  2. Which behaviors were modified. What was the previous behavior, what is it now, why was it modified, and what possible impacts might there be.
  3. What features were added. Why was this function added?
  4. Which code was refactored and why was this part of the code refactored?
  5. Which functions were optimized and what is the difference before and after the optimization?

@Yukang-Lian Yukang-Lian changed the title [fix](arrow-flight-sql) Advertise TLS result endpoints [fix](arrowflight) Advertise TLS result endpoints Aug 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants