Date
1 - 2 of 2
I: R: Re: Log connections from security groups - bosh lite
|
CF Runtime
We had similar problems on Bosh Lite. Because of the way containers are
made, this feature won't work on a Bosh Lite environment. Zak & Joseph CF Runtime Team On Sun, Jun 14, 2015 at 11:25 PM, Michael Grifalconi < michael.grifalconi(a)studenti.unimi.it> wrote: Hello all, |
|
|
|
Michael Grifalconi <michael.grifalconi@...>
Hello all,
toggle quoted message
Show quoted text
as I had no response, and I wasn't able to progress, I'm bumping this email from last week Thank you! Best regards, Michael -------- Messaggio originale -------- Da: "Michael Grifalconi" <michael.grifalconi(a)studenti.unimi.it> Data: 08/giu/15 9:31:55 m. Oggetto: R: Re: [cf-dev] Log connections from security groups - bosh lite A: Discussions about Cloud Foundry projects and the system overall. <cf-dev(a)lists.cloudfoundry.org> Hello, I post some more info: Kernel logging is enabled because inside the DEA, i can see: cat /etc/rsyslog.conf [...] $IncludeConfig /etc/rsyslog.d/*.conf cat /etc/rsyslog.d/enable-kernel-logging.conf $ModLoad imklog after pushing an app, I see on the DEA the correct rules: -A warden-i-18nvgifiemi -p tcp -m tcp --dport 80 -g warden-i-18nvgifiemi-log -A warden-i-18nvgifiemi-log -p tcp -m conntrack --ctstate INVALID,NEW,UNTRACKED -j LOG --log-prefix "warden-i-18nvgifiemi " but on /var/log/messages I only get: Jun 8 07:03:26 localhost kernel: [ 3256.433021] IPv6: ADDRCONF(NETDEV_CHANGE): w-18nvgifiemg-0: link becomes ready the php application pushed: xx(a)boshClient:~/myPhpApp$ cat index.php <html> <head> <title>PHP Test</title> </head> <body> <?php echo '<p>Hello PHP from the server at:</p>'; echo $_SERVER['SERVER_ADDR']; echo '<p>hi from hostname:</p>'; $curl = curl_init(); curl_setopt($curl, CURLOPT_URL, 'http://xxxxxxx'); $result = curl_exec($curl); echo gethostname(); ?> </body> </html> When I browse this application page, I see the page from the webserver on xxxx called from curl, but I don't get ant log. bosh stemcells +---------------------------------------------+---------+--------------------------------------+ | Name | Version | CID | +---------------------------------------------+---------+--------------------------------------+ | bosh-warden-boshlite-ubuntu-trusty-go_agent | 2776* | c5ac6590-13ec-4ba2-6fa9-e78cf553c4e6 | +---------------------------------------------+---------+--------------------------------------+ -------------------------------------------------------------------- xx(a)boshClient:~$ cf security-groups Getting security groups as admin OK Name Organization Space #0 public_networks #1 dns #2 logging myOrg myDevSpace xx(a)boshClient:~$ cf security-group logging Getting info for security group logging as admin OK Name logging Rules [ { "destination": "0.0.0.0/0", "log": true, "ports": "80", "protocol": "tcp" } ] Organization Space #0 myOrg myDevSpace tried with protocol: all and :tcp and the port where my local apache server on LAN is listening. Any suggestion is appreciated! Regards, Michael Il 06/06/15 09:25, Dieu Cao <dcao(a)pivotal.io> ha scritto:
|
|
|