You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@apisix.apache.org by GitBox <gi...@apache.org> on 2021/05/14 09:32:40 UTC
[GitHub] [apisix] Marco-Zheng opened a new issue #4254: request help: introspection address somehow changed..
Marco-Zheng opened a new issue #4254:
URL: https://github.com/apache/apisix/issues/4254
### Issue description
I configure the discovery as below
the k8s analysis address is 172.20.253.6
but when i sent a request to my server , somehow it show that introspection address is 172.20.7.236
i checked my introspection endpoint from auth server the ip is also 172.20.253.6 , the question is why the ip has changed..
* apisix version (cmd: `apisix version`): 2.4
* OS (cmd: `uname -a`):
* OpenResty / Nginx version (cmd: `nginx -V` or `openresty -V`):
* etcd version, if have (cmd: run `curl http://127.0.0.1:9090/v1/server_info` to get the info from server-info API):
* apisix-dashboard version, if have:
* luarocks version, if the issue is about installation (cmd: `luarocks --version`):
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] Firstsawyou commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
Firstsawyou commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-841828257
@gxthrj Please take a look.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] Firstsawyou edited a comment on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
Firstsawyou edited a comment on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-841828257
@gxthrj @tokers Please take a look.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] Marco-Zheng commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
Marco-Zheng commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-841940890
> @Marco-Zheng By saying "I configure the discovery as below", what did you mean exactly?
@tokers @gxthrj Sorry, let me update the discovery info, i configure the discovery like this
the address is http://xxxxxxx.medcloud-dev1.svc.cluster.local:18080/oauth/discovery
then i check http://xxxxxxx.medcloud-dev1.svc.cluster.local's `cluster ip` in k8s is `172.20.253.6`
/oauth/discovery is one of api in auth-server, auth server will expose the api of introspection which can do token introspection, and i check the ip of introspection api is `172.20.253.6`, that's a correct address
But when i sent a request to my server, i print the introspection address, somehow it show that introspection address is `172.20.7.236` which is different with correct ip `172.20.253.6`, so i don't know how it works.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tokers commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
tokers commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-842756271
> > @Marco-Zheng By saying "I configure the discovery as below", what did you mean exactly?
>
> @tokers @gxthrj Sorry, let me update the discovery info, i configure the discovery like this
> 
> the address is http://xxxxxxx.medcloud-dev1.svc.cluster.local:18080/oauth/discovery
> then i check http://xxxxxxx.medcloud-dev1.svc.cluster.local's `cluster ip` in k8s is `172.20.253.6`
>
> /oauth/discovery is one of api in auth-server, auth server will expose the api of introspection which can do token introspection, and i check the ip of introspection api is `172.20.253.6`, that's a correct address
> 
>
> But when i sent a request to my server, i print the introspection address, somehow it show that introspection address is `172.20.7.236` which is different with correct ip `172.20.253.6`, so i don't know how it works.
> 
Still, be confusing.
1. `172.20.7.243` is the node IP, did you mean k8s worker node or the APISIX upstream node?
2. You said "But when I sent a request to my server", what is "my server"? Is the auth server or your backend?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tokers commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
tokers commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-841913134
@Marco-Zheng By saying "I configure the discovery as below", what did you mean exactly?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] Marco-Zheng commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
Marco-Zheng commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-841940890
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tokers commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
tokers commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-841974955
@Marco-Zheng Have you ever checked the DNS resolvers used by APISIX container?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] Marco-Zheng commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
Marco-Zheng commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-843737318
@tokers The cluster ip is 172.20.253.6, this problem seem to be resolved after restart the apisix, thanks for your kindly help
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tokers commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
tokers commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-841913134
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] Firstsawyou edited a comment on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
Firstsawyou edited a comment on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-841828257
@gxthrj @tokers Please take a look.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] Marco-Zheng commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
Marco-Zheng commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-842232952
> 172.20.7.243
@gxthrj yes，`172.20.253.6` is cluster ip, `172.20.7.243` is node ip, but `172.20.7.236` is a strange ip address..
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] Marco-Zheng commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
Marco-Zheng commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-842773919
> > > @Marco-Zheng By saying "I configure the discovery as below", what did you mean exactly?
> >
> >
> > @tokers @gxthrj Sorry, let me update the discovery info, i configure the discovery like this
> > 
> > the address is http://xxxxxxx.medcloud-dev1.svc.cluster.local:18080/oauth/discovery
> > then i check http://xxxxxxx.medcloud-dev1.svc.cluster.local's `cluster ip` in k8s is `172.20.253.6`
> > /oauth/discovery is one of api in auth-server, auth server will expose the api of introspection which can do token introspection, and i check the ip of introspection api is `172.20.253.6`, that's a correct address
> > 
> > But when i sent a request to my server, i print the introspection address, somehow it show that introspection address is `172.20.7.236` which is different with correct ip `172.20.253.6`, so i don't know how it works.
> > 
>
> Still, be confusing.
>
> 1. `172.20.7.243` is the node IP, did you mean k8s worker node or the APISIX upstream node?
> 2. You said "But when I sent a request to my server", what is "my server"? Is the auth server or your backend?
@tokers
1、`172.20.7.243`is nodeIp for auth-server not APISIX upstream node
2、`my server` is auth-server, I sent a request to my server because i'm no sure if the introspection address which was exposed is correct address, the facts proved that the address was correct, but i don't know why apisix send introspection request to an unknown address `172.20.7.236`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] gxthrj commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
gxthrj commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-842198496
I think the IP 172.20.7.243 is one of the IP of `dev01` pods. Is it right?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] tokers commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
tokers commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-843682238
@Marco-Zheng From the naming convention of auth-server, I believe it runs inside Kubernetes cluster, so I don't know why you use term`node ip` to describe it. What is the ClusterIP for the auth-server service?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] Marco-Zheng commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
Marco-Zheng commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-842234593
> @Marco-Zheng Have you ever checked the DNS resolvers used by APISIX container?
Yeap, i didn't find any problem with DNS resolvers.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] gxthrj commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
gxthrj commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-841830185
Actually, I don’t understand your question very well. There are three IPs（172.20.7.236，172.20.7.243， 172.20.253.6） in pics. Which ip do you think is wrong?
Anyway, Please show the clusterIP for service dev01 with the command like `kubectl get svc dev01 -n xxx`.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] Marco-Zheng closed issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
Marco-Zheng closed issue #4254:
URL: https://github.com/apache/apisix/issues/4254
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] Firstsawyou commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
Firstsawyou commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-841828257
@gxthrj Please take a look.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [apisix] gxthrj commented on issue #4254: request help: introspection address somehow changed..
Posted by GitBox <gi...@apache.org>.
gxthrj commented on issue #4254:
URL: https://github.com/apache/apisix/issues/4254#issuecomment-841830185
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org