consul如何限制注冊的ip


  假設當前服務器的ip是:192.168.56.130

允許 所有ip 注冊

  consul agent -server -ui -bootstrap-expect=1 -data-dir=/usr/local/consul -node=devmaster -advertise=192.168.56.130 -bind=0.0.0.0 -client=0.0.0.0

只允許 當前ip 注冊

  consul agent -server -ui -bootstrap-expect=1 -data-dir=/usr/local/consul -node=devmaster -advertise=192.168.56.130 -bind=192.168.56.130 -client=127.0.0.1

  此時,若別的ip的項目想要連接這個Consul,那么啟動就會報錯:
  com.ecwid.consul.transport.TransportException: org.apache.http.conn.HttpHostConnectException: Connect to 192.168.56.130:8500 [/192.168.56.130] failed: Connection refused: connect

需要注意:
       1、-bind要用完整ip地址,如果使用127.0.0.1,否則雖然consul能啟動,但是consul日志會不停地打印如下信息
    2018/12/17 15:56:14 [WARN] consul: error getting server health from "devmaster": context deadline exceeded
    2018/12/17 15:56:15 [WARN] consul: error getting server health from "devmaster": rpc error getting client: failed to get conn: dial tcp 127.0.0.1:0->192.168.56.130:8300: connect: connection refused
    2018/12/17 15:56:16 [WARN] consul: error getting server health from "devmaster": context deadline exceeded
    2018/12/17 15:56:17 [WARN] consul: error getting server health from "devmaster": rpc error getting client: failed to get conn: dial tcp 127.0.0.1:0->192.168.56.130:8300: connect: connection refused

       2、-client 需要用127.0.0.1,如果用完整的ip地址,consul都啟動不起來

       3、consul agent -dev 也是只允許當前ip注冊,但這個是本地開發時用的,正式服務器往往不用 

       4、這時項目中的配置文件也要相應的更改,使用127.0.0.1 ,而不是完整ip地址。否則,項目在服務器端也啟動不起來了,囧

spring:
  cloud:
    consul:
      host: 127.0.0.1
      port: 8500

 

原創文章,歡迎轉載,轉載請注明出處!


免責聲明!

本站轉載的文章為個人學習借鑒使用,本站對版權不負任何法律責任。如果侵犯了您的隱私權益,請聯系本站郵箱yoyou2525@163.com刪除。



 
粵ICP備18138465號   © 2018-2025 CODEPRJ.COM