You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "Ferenc Erdei (Jira)" <ji...@apache.org> on 2023/04/11 10:13:00 UTC
[jira] [Updated] (NIFI-11366) MiNiFi/C2 - Support access via LB / Proxy
[ https://issues.apache.org/jira/browse/NIFI-11366?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Ferenc Erdei updated NIFI-11366:
--------------------------------
Description:
While the Heartbeat and Acknowledge communication from the agents can be configured via reverse proxy / load balancer currently the agents are not aware of the host
For flow and asset download full urls are generated in the operation requests by the C2 server so the actual download happens via direct node access bypassing the proxy / LB.
For backwards compatibility we are not touching the existing configuration. We could introduce 3 new properties:
c2.rest.path.base=[http://c2host/c2-server/api|http://unsecure.cemcldr.link/]
c2.rest.path.heartbeat=/heartbeat
c2.rest.path.acknowledge=/acknowledge
If these are set then use them if not then fall back to the old properties and parse the host from there
h4.
was:
While the Heartbeat and Acknowledge communication from the agents can be configured via reverse proxy / load balancer currently the agents are not aware of the host
For flow and asset download full urls are generated in the operation requests by the C2 server so the actual download happens via direct node access bypassing the proxy / LB.
For backwards compatibility we are not touching the existing configuration. We could introduce 3 new properties:
c2.rest.api=[http://c2host/c2-server/api|http://unsecure.cemcldr.link/]
c2.rest.path.hb=/heartbeat
c2.rest.path.ack=//acknowledge
If these are set then use them if not then fall back to the old properties and parse the host from there
h4.
> MiNiFi/C2 - Support access via LB / Proxy
> -----------------------------------------
>
> Key: NIFI-11366
> URL: https://issues.apache.org/jira/browse/NIFI-11366
> Project: Apache NiFi
> Issue Type: New Feature
> Components: C2, MiNiFi
> Reporter: Ferenc Kis
> Assignee: Ferenc Kis
> Priority: Major
> Labels: minifi-java
> Time Spent: 2h 40m
> Remaining Estimate: 0h
>
> While the Heartbeat and Acknowledge communication from the agents can be configured via reverse proxy / load balancer currently the agents are not aware of the host
> For flow and asset download full urls are generated in the operation requests by the C2 server so the actual download happens via direct node access bypassing the proxy / LB.
> For backwards compatibility we are not touching the existing configuration. We could introduce 3 new properties:
> c2.rest.path.base=[http://c2host/c2-server/api|http://unsecure.cemcldr.link/]
> c2.rest.path.heartbeat=/heartbeat
> c2.rest.path.acknowledge=/acknowledge
> If these are set then use them if not then fall back to the old properties and parse the host from there
> h4.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)