[英]EC2 Instance cannot connect to ECS Cluster
你好,我有空的 AWS ECS 集群,但我无法将实例放入其中。 我想使用 Launch 模板和 Autoscaling Group,但我无法分配创建的 EC2 实例。
问题显示在ecs-agent.log
level=error time=2020-10-17T23:23:37Z msg="Unable to register as a container instance with ECS: RequestError: send request failed\ncaused by: Post \"https://ecs.eu-central-1.amazonaws.com/\": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)" module=client.go
level=error time=2020-10-17T23:23:37Z msg="Error registering: RequestError: send request failed\ncaused by: Post \"https://ecs.eu-central-1.amazonaws.com/\": net/http: request canceled while waiting for connection (Client.Timeout exceeded while awaiting headers)" module=agent.go
笔记:
ami-0eff571a24849e852
debug
eu-central-1
10.10.100.0/24
子网 ( 10.10.100.14
) 和 VPN 子网是10.10.0.0/16
[ec2-user@ip-10-10-100-14 ecs]$ ping google.com
PING google.com (216.58.212.142) 56(84) bytes of data.
64 bytes from ams15s21-in-f14.1e100.net (216.58.212.142): icmp_seq=1 ttl=109 time=50.1 ms
64 bytes from ams15s21-in-f142.1e100.net (216.58.212.142): icmp_seq=2 ttl=109 time=40.1 ms
[ec2-user@ip-10-10-100-14 ecs]$ nslookup google.com
Server: 10.10.0.2
Address: 10.10.0.2#53
Non-authoritative answer:
Name: google.com
Address: 216.58.212.142
ECS_CLUSTER=debug
ECS_BACKEND_HOST=
AmazonEC2ContainerServiceforEC2Role
[ec2-user@ip-10-10-100-14 ecs]$ nslookup ecs.eu-central-1.amazonaws.com
Server: 10.10.0.2
Address: 10.10.0.2#53
Non-authoritative answer:
Name: ecs.eu-central-1.amazonaws.com
Address: 10.10.100.219
有没有人有什么建议?
我已经解决了这个问题。
该问题是由 VPC 终端节点引起的。 我将它们放在错误的子网和安全组中。
我已将它们移到公共子网(在 NAT Instance 旁边)并与 NAT Instance位于同一组中(允许来自我的 EC2 所在的 sg 的传入流量)。
根据文档:
https://docs.aws.amazon.com/AmazonECS/latest/developerguide/vpc-endpoints.html
附加到 VPC 终端节点的安全组必须允许来自 VPC 私有子网的端口 443 上的传入连接。
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.