欢迎访问我的个人网站==》 jiashubing.cn

consul如何限制注册的ip

  假设当前服务器的ip是:192.168.56.130

允许 所有ip 注册

  consul agent -server -ui -bootstrap-expect=1 -data-dir=/usr/local/consul -node=devmaster -advertise=192.168.56.130 -bind=0.0.0.0 -client=0.0.0.0

只允许 当前ip 注册

  consul agent -server -ui -bootstrap-expect=1 -data-dir=/usr/local/consul -node=devmaster -advertise=192.168.56.130 -bind=192.168.56.130 -client=127.0.0.1

  此时,若别的ip的项目想要连接这个Consul,那么启动就会报错:
  com.ecwid.consul.transport.TransportException: org.apache.http.conn.HttpHostConnectException: Connect to 192.168.56.130:8500 [/192.168.56.130] failed: Connection refused: connect

需要注意:
       1、-bind要用完整ip地址,如果使用127.0.0.1,否则虽然consul能启动,但是consul日志会不停地打印如下信息
    2018/12/17 15:56:14 [WARN] consul: error getting server health from "devmaster": context deadline exceeded
    2018/12/17 15:56:15 [WARN] consul: error getting server health from "devmaster": rpc error getting client: failed to get conn: dial tcp 127.0.0.1:0->192.168.56.130:8300: connect: connection refused
    2018/12/17 15:56:16 [WARN] consul: error getting server health from "devmaster": context deadline exceeded
    2018/12/17 15:56:17 [WARN] consul: error getting server health from "devmaster": rpc error getting client: failed to get conn: dial tcp 127.0.0.1:0->192.168.56.130:8300: connect: connection refused

       2、-client 需要用127.0.0.1,如果用完整的ip地址,consul都启动不起来

       3、consul agent -dev 也是只允许当前ip注册,但这个是本地开发时用的,正式服务器往往不用 

       4、这时项目中的配置文件也要相应的更改,使用127.0.0.1 ,而不是完整ip地址。否则,项目在服务器端也启动不起来了,囧

spring:
  cloud:
    consul:
      host: 127.0.0.1
      port: 8500

 

原创文章,欢迎转载,转载请注明出处!

posted @ 2018-12-17 16:36  贾树丙  阅读(4831)  评论(0编辑  收藏  举报