[
https://issues.apache.org/jira/browse/FLINK-8289?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16297187#comment-16297187
]
Eron Wright edited comment on FLINK-8289 at 12/19/17 6:21 PM:
---------------------------------------------------------------
I'll use the terms 'advertised' versus 'bind' address to discuss this issue.
Do you agree that the goal here is to return the advertised address? The
Flink docs are unclear on which configuration setting is applicable.
Two complications:
1. *Yarn Proxy / Mesos Admin Router.* In both environments, web traffic is
expected to be proxied, so the advertised address should be the proxy address.
2. *SSL*. To enable SSL on the web endpoints, two things are needed:
a. Advertise a name-based (not IP-based) address.
b. Construct the advertised address with 'https' scheme.
See the proposed SSL spec for more information on point (2).
[FLIP - Service Authorization
(SSL)|https://docs.google.com/document/d/13IRPb2GdL842rIzMgEn0ibOQHNku6W8aMf1p7gCPJjg/edit?usp=sharing]
was (Author: eronwright):
I'll use the terms 'advertised' versus 'bind' address to discuss this issue.
Do you agree that the goal here is to return the advertised address? The
Flink docs are unclear on which configuration setting is applicable.
Two complications:
1. *Yarn Proxy / Mesos Admin Router.* In both environments, web traffic is
expected to be proxied, so the advertised address should be the proxy address.
2. *SSL*. To enable SSL on the web endpoints, two things are needed:
a. Advertise a name-based (not IP-based) address.
b. Construct the advertised address with 'https' scheme.
> The RestServerEndpoint should return the address with real ip when
> getRestAdddress
> ----------------------------------------------------------------------------------
>
> Key: FLINK-8289
> URL: https://issues.apache.org/jira/browse/FLINK-8289
> Project: Flink
> Issue Type: Bug
> Affects Versions: 1.5.0
> Reporter: shuai.xu
> Labels: flip-6
>
> Now when RestServerEndpoint.getRestAddress, it will return an address same
> with the value of config rest.address, the default it 127.0.0.1:9067, but
> this address can not be accessed from another machine. And the ip for
> Dispatcher and JobMaster are usually dynamically, so user will configure it
> to 0.0.0.0, and the getRestAddress will return 0.0.0.0:9067, this address
> will be registered to YARN or Mesos, but this address can not be accessed
> from another machine also. So it need to return the real ip:port for user to
> access the web monitor anywhere.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
