Securing Druid overview
It is important to place the Druid endpoints behind a firewall and configure authentication.
You can configure Druid nodes to integrate a Kerberos-secured Hadoop cluster. Such an integration provides authentication between Druid and other HDP Services. You can enable the authentication with Ambari 2.5.0 and later, which lets you secure the HTTP endpoints by including a SPNEGO-based Druid extension.
After enabling authentication in this way, you can connect Druid Web UIs to the core Hadoop cluster while maintaining Kerberos protection. The main Web UIs to use with HDP are the Coordinator Console and the Overlord Console.