Repository navigation
fix(compose): publish syslog and flow listeners through port keys - #400
Merged
Merged
Conversation
A Docker install could not take syslog or flow from outside the Compose network because the receiver published only 8080 and 9090. Six port keys publish syslog over UDP, TCP and TLS, and NetFlow, IPFIX and sFlow over UDP. They use the same make fragment as the Beats and HEC keys. Each port stays unpublished until its key is set. The configuration doc lists the receiver settings that enable the listeners. It also states that rootless Docker cannot bind a host port under 1024.
When syslog is enabled, its UDP and plain TCP listeners always bind. The receiver refuses syslog without accept_unauthenticated, even when only the TLS port is published. The architecture page's receiver row now lists syslog and flow among the listeners a port key publishes.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
A Docker install could not take syslog or flow from outside the Compose network because the receiver published only 8080 and 9090.
Six port keys publish syslog over UDP, TCP and TLS, and NetFlow, IPFIX and sFlow over UDP. They use the same make fragment as the Beats and HEC keys. Each port stays unpublished until its key is set.
The configuration doc lists the receiver settings that enable the listeners. It also states that rootless Docker cannot bind a host port under 1024.