特使监听器 2 个端口 + 2 个集群答案

【问题标题】：envoy listener 2 ports + 2 clusters特使监听器 2 个端口 + 2 个集群
【发布时间】：2020-09-29 09:09:12
【问题描述】：

我尝试在配置中设置 2 个监听器，使用不同的端口和集群进行重定向

    static_resources:
  listeners:
  - name: listener_back_end
    address:
      socket_address: { address: 0.0.0.0, port_value: 9090 }
    filter_chains:
    - filters:
      - name: envoy.tcp_proxy
        config:
          stat_prefix: ingress_tcp
          cluster: back_end
      tls_context:
        common_tls_context:
          tls_certificates:
            - certificate_chain:
                filename: "/ProxyServerConfig/SSL/certificate.crt"
              private_key:
                filename: "/ProxyServerConfig/SSL/private.key"
  clusters:
  - name: back_end
    connect_timeout: 0.2s
    type: STATIC
    lb_policy: ROUND_ROBIN
    hosts: [{ socket_address: { address: 192.168.1.4, port_value: 1990 
}}]
  - name: listener_front_end
    address:
      socket_address: { address: 0.0.0.0, port_value: 443 }
    filter_chains:
    - filters:
      - name: envoy.tcp_proxy
        config:
          stat_prefix: ingress_tcp
          cluster: front_end
      tls_context:
        common_tls_context:
          tls_certificates:
            - certificate_chain:
                filename: "/ProxyServerConfig/SSL/certificate.crt"
              private_key:
                filename: "/ProxyServerConfig/SSL/private.key"
  clusters:
  - name: front_end
    connect_timeout: 0.2s
    type: STATIC
    lb_policy: ROUND_ROBIN
    hosts: [{ socket_address: { address: 192.168.1.5, port_value: 8081 
}}]

envoy 已启动，但是当我尝试在浏览器中打开此端口时，我得到：ERR_CONNECTION_CLOSED。每个配置单独工作...

有人可以帮忙吗？谢谢！

【问题讨论】：

标签： proxy envoyproxy

【解决方案1】：

尝试将侦听器移出集群配置。将您的听众和集群一起移动。

   static_resources:
  listeners:
  - name: listener_back_end
    address:
      socket_address: { address: 0.0.0.0, port_value: 9090 }
    filter_chains:
    - filters:
      - name: envoy.tcp_proxy
        config:
          stat_prefix: ingress_tcp
          cluster: back_end
      tls_context:
        common_tls_context:
          tls_certificates:
            - certificate_chain:
                filename: "/ProxyServerConfig/SSL/certificate.crt"
              private_key:
                filename: "/ProxyServerConfig/SSL/private.key"
  - name: listener_front_end
    address:
      socket_address: { address: 0.0.0.0, port_value: 443 }
    filter_chains:
    - filters:
      - name: envoy.tcp_proxy
        config:
          stat_prefix: ingress_tcp
          cluster: front_end
      tls_context:
        common_tls_context:
          tls_certificates:
            - certificate_chain:
                filename: "/ProxyServerConfig/SSL/certificate.crt"
              private_key:
                filename: "/ProxyServerConfig/SSL/private.key"
  clusters:
  - name: back_end
    connect_timeout: 0.2s
    type: STATIC
    lb_policy: ROUND_ROBIN
    hosts: [{ socket_address: { address: 192.168.1.4, port_value: 1990 
  - name: front_end
    connect_timeout: 0.2s
    type: STATIC
    lb_policy: ROUND_ROBIN
    hosts: [{ socket_address: { address: 192.168.1.5, port_value: 8081 
}}]

【讨论】：