Skip to content
This repository was archived by the owner on Jan 11, 2023. It is now read-only.

port 80, 8080 and 443 are HTTP ports#2

Closed
SorraTheOrc wants to merge 3 commits intoAzure:masterfrom
SorraTheOrc:ports
Closed

port 80, 8080 and 443 are HTTP ports#2
SorraTheOrc wants to merge 3 commits intoAzure:masterfrom
SorraTheOrc:ports

Conversation

@SorraTheOrc
Copy link
Contributor

Ports 80, 8080 and 443 are open by default in ACS clusters. These ports are traditionally used for HTTP communications, but our template creates probes on TCP. This works, but results in a very long response time (6-12 seconds). switching to the http protocol resolves this.

@JackQuincy
Copy link
Contributor

This is a breaking change for clients. It requires them to have the root path open to http and returning 200 OK to the load balancer probe. This symptom "This works, but results in a very long response time (6-12 seconds)" seems unrelated to this change. Other people have very performant services that use tcp probes. This seems like a bug with the use case that caused the 6-12 second response times, not a need to use http.

@SorraTheOrc
Copy link
Contributor Author

OK. I'll close this for now and try to figure out why it's happening. Will reopen if I see the same symptoms with a different use case.

tanmaykm referenced this pull request in tanmaykm/acs-engine May 26, 2017
Add Accelerator feature gate only for k8s > 1.6
jessfraz pushed a commit to jessfraz/acs-engine that referenced this pull request Oct 26, 2017
Azure#2)

* Enable Firewall on Node, Add Windows Firewall rules for required ports

* Added comments for firewall rules

* Allow all traffic; lockdown kubectl Node ports to Master only

* Remove & and single quote in comment section

resource group deployment parser does not like these chars in the comment section
jessfraz pushed a commit to jessfraz/acs-engine that referenced this pull request Feb 14, 2018
commit 203efbf
Author: Jiangtian Li <JiangtianLi@users.noreply.github.com>
Date:   Fri Jan 19 09:07:14 2018 -0800

    Extend windows os drive size when customized OSDiskSizeGB is used (Azure#2097)

commit 88ec2fb
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Thu Jan 11 13:49:44 2018 -0800

    Update the kube-dns addon

commit 217ad8d
Merge: 530bedb d8856c8
Author: Wenjun Wu <wenjun.wu@live.com>
Date:   Mon Jan 8 16:22:56 2018 -0800

    Merge remote-tracking branch 'origin/migration' into migration

commit d8856c8
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Fri Jan 5 15:39:28 2018 -0800

    Remove the Allow SSH and RDP Rules from NSG

commit 530bedb
Merge: f3389a6 5070934
Author: Wenjun Wu <wenjun.wu@live.com>
Date:   Fri Jan 5 15:38:54 2018 -0800

    Merge tag 'v0.9.4' into migration

commit f3389a6
Author: Wenjun Wu <wenjun.wu@live.com>
Date:   Fri Dec 15 11:11:13 2017 -0800

    remove agent customscript and service file (Azure#13)

    * remove agent specific custom script and service file.

    * remove cloud provider from windows start ps1

commit c2eda57
Merge: 8ef4f2b 004145c
Author: Wenjun Wu <wenjun.wu@live.com>
Date:   Tue Dec 12 18:05:13 2017 -0800

    Merge commit '004145cba163' into migration

commit 004145c
Author: Wenjun Wu <wenjun.wu@live.com>
Date:   Tue Dec 12 18:03:36 2017 -0800

    fix merge error: azure storage classes yaml

commit 8ef4f2b
Merge: adbc1cf bd006fc
Author: Wenjun Wu <wenjun.wu@live.com>
Date:   Mon Nov 27 18:24:06 2017 -0800

    Merge tag 'v0.9.3' into migration

commit adbc1cf
Merge: f8da501 7957245
Author: Wenjun Wu <wenjun.wu@live.com>
Date:   Wed Oct 25 14:36:24 2017 -0700

    Merge tag 'v0.8.0' into migration

commit f8da501
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Fri Sep 1 16:38:00 2017 -0700

    Disable Windows Update

commit ac83868
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Fri Sep 1 16:37:36 2017 -0700

    Use kubelet v1.6.6.1 for Windows agent

commit 5424f14
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Fri Sep 1 16:36:47 2017 -0700

    Set master AvailabilitySet FaultDomainCount and UpdateDomainCount to 1

commit 5b1fbb0
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Tue Aug 15 12:23:41 2017 -0700

    Enable StorageAccount Encryption and Enforce HTTPS

commit 12fd01d
Author: Harry He <zhedahht@hotmail.com>
Date:   Fri Jul 7 10:16:03 2017 -0700

    Remove Resource Requests from kube-proxy (Azure#5)

    Previously kube-proxy requested 100m CPU. It prevented containers requesting 1 CPU from being deployed onto nodes with 1 CPU, because there is only 900m CPU left.

    This change remove resource requests from kube-proxy.

commit 5241639
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Fri Jul 7 14:23:32 2017 -0700

    Set the default CloudProvider backoff values

commit 549a4c2
Merge: 0506730 8a47cbd
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Fri Jul 7 16:14:12 2017 -0700

    Merge with v0.3.0

commit 0506730
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Fri Jul 7 13:01:18 2017 -0700

    Disable Automatic Windows Update

commit 8eb8afe
Merge: 639e36a fb09cdf
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Fri Jul 7 12:07:03 2017 -0700

    Merge from upstream release v0.2.0

commit 639e36a
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Mon Jul 3 11:05:10 2017 -0700

    Remove azure.json from Windows Agent

commit c9d0704
Merge: bae0a8b 579e8b8
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Mon Jun 19 10:13:37 2017 -0700

    Merge tag 'v0.1.2' into migration

commit bae0a8b
Author: Raghu Shantha [MSFT] <raghus@microsoft.com>
Date:   Thu Jun 15 11:36:03 2017 -0700

    Enable Firewall on Node, Add Windows Firewall rules for required ports (Azure#2)

    * Enable Firewall on Node, Add Windows Firewall rules for required ports

    * Added comments for firewall rules

    * Allow all traffic; lockdown kubectl Node ports to Master only

    * Remove & and single quote in comment section

    resource group deployment parser does not like these chars in the comment section

commit af24ad6
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Tue Jun 6 18:20:40 2017 -0700

    Enable RBAC on APIServer

commit e648d3d
Merge: 380bc58 cc95f47
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Wed May 24 11:01:11 2017 -0700

    Merge branch 'master' into migration

commit 380bc58
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Mon May 15 11:39:43 2017 -0700

    Fix: add the size map for F1

commit e64b446
Merge: 87c56c3 253dd41
Author: Wenjun Wu <wenjun.wu@live.com>
Date:   Sun May 14 15:47:20 2017 -0700

    Merge branch 'master' into migration

commit 87c56c3
Author: Robbie Zhang <junjiez@microsoft.com>
Date:   Fri Apr 14 12:55:21 2017 -0700

    Private Commit for Azure Console Shell

    Remove SPN secrets from agent node
    Remove the Kube Dashboard and Heapster Addons
    Add agentpool label on the agent nodes
    Use static IP address for system and agentpool1
tariq1890 added a commit to tariq1890/acs-engine that referenced this pull request Jul 15, 2018
tariq1890 added a commit to tariq1890/acs-engine that referenced this pull request Jul 15, 2018
jackfrancis pushed a commit that referenced this pull request Jul 17, 2018
kkmsft pushed a commit to kkmsft/acs-engine that referenced this pull request Jul 20, 2018
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants