yarn自带了web接口，默认是和RM一起的(8088端口)。但是为了减少从web接口受到的攻击，可以把Web接口单独放在别的机器上。
设置下web代理就行了
Configurations
| Configuration Property | Description |
|---|---|
| yarn.web-proxy.address | The address for the web proxy as HOST:PORT, if this is not given then the proxy will run as part of the RM. |
| yarn.web-proxy.keytab | Keytab for WebAppProxy, if the proxy is not running as part of the RM. |
| yarn.web-proxy.principal | The kerberos principal for the proxy, if the proxy is not running as part of the RM. |
Running Web Application Proxy
Standalone Web application proxy server can be launched with the following command.
$ yarn proxyserver
Or users can start the stand alone Web Application Proxy server as a daemon, with the following command
$ $HADOOP_YARN_HOME/sbin/yarn-daemon.sh start proxyserver