特使监听器 2 个端口 + 2 个集群

Question

我尝试在配置中设置 2 个监听器，使用不同的端口和集群进行重定向

    static_resources:
  listeners:
  - name: listener_back_end
    address:
      socket_address: { address: 0.0.0.0, port_value: 9090 }
    filter_chains:
    - filters:
      - name: envoy.tcp_proxy
        config:
          stat_prefix: ingress_tcp
          cluster: back_end
      tls_context:
        common_tls_context:
          tls_certificates:
            - certificate_chain:
                filename: "/ProxyServerConfig/SSL/certificate.crt"
              private_key:
                filename: "/ProxyServerConfig/SSL/private.key"
  clusters:
  - name: back_end
    connect_timeout: 0.2s
    type: STATIC
    lb_policy: ROUND_ROBIN
    hosts: [{ socket_address: { address: 192.168.1.4, port_value: 1990 
}}]
  - name: listener_front_end
    address:
      socket_address: { address: 0.0.0.0, port_value: 443 }
    filter_chains:
    - filters:
      - name: envoy.tcp_proxy
        config:
          stat_prefix: ingress_tcp
          cluster: front_end
      tls_context:
        common_tls_context:
          tls_certificates:
            - certificate_chain:
                filename: "/ProxyServerConfig/SSL/certificate.crt"
              private_key:
                filename: "/ProxyServerConfig/SSL/private.key"
  clusters:
  - name: front_end
    connect_timeout: 0.2s
    type: STATIC
    lb_policy: ROUND_ROBIN
    hosts: [{ socket_address: { address: 192.168.1.5, port_value: 8081 
}}]

特使已启动，但是当我尝试在浏览器中打开任何此端口时，我得到：ERR_CONNECTION_CLOSED。 每个配置单独工作...

任何人都可以帮忙吗？ 谢谢！

Answer 1

尝试将侦听器移出集群配置。 将您的听众移动到一起，并将您的集群移动到一起。

   static_resources:
  listeners:
  - name: listener_back_end
    address:
      socket_address: { address: 0.0.0.0, port_value: 9090 }
    filter_chains:
    - filters:
      - name: envoy.tcp_proxy
        config:
          stat_prefix: ingress_tcp
          cluster: back_end
      tls_context:
        common_tls_context:
          tls_certificates:
            - certificate_chain:
                filename: "/ProxyServerConfig/SSL/certificate.crt"
              private_key:
                filename: "/ProxyServerConfig/SSL/private.key"
  - name: listener_front_end
    address:
      socket_address: { address: 0.0.0.0, port_value: 443 }
    filter_chains:
    - filters:
      - name: envoy.tcp_proxy
        config:
          stat_prefix: ingress_tcp
          cluster: front_end
      tls_context:
        common_tls_context:
          tls_certificates:
            - certificate_chain:
                filename: "/ProxyServerConfig/SSL/certificate.crt"
              private_key:
                filename: "/ProxyServerConfig/SSL/private.key"
  clusters:
  - name: back_end
    connect_timeout: 0.2s
    type: STATIC
    lb_policy: ROUND_ROBIN
    hosts: [{ socket_address: { address: 192.168.1.4, port_value: 1990 
  - name: front_end
    connect_timeout: 0.2s
    type: STATIC
    lb_policy: ROUND_ROBIN
    hosts: [{ socket_address: { address: 192.168.1.5, port_value: 8081 
}}]