{"id":2946,"date":"2021-08-18T20:02:17","date_gmt":"2021-08-18T11:02:17","guid":{"rendered":"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=2946"},"modified":"2021-08-21T20:46:34","modified_gmt":"2021-08-21T11:46:34","slug":"consul-cluster-%ea%b5%ac%ec%84%b1%ed%95%98%ea%b8%b0","status":"publish","type":"post","link":"https:\/\/www.skyer9.pe.kr\/wordpress\/?p=2946","title":{"rendered":"Consul Cluster \uad6c\uc131\ud558\uae30"},"content":{"rendered":"

Consul Cluster \uad6c\uc131\ud558\uae30<\/h1>\n

\ucc38\uace0<\/a><\/p>\n

\ucc38\uace0<\/a><\/p>\n

\ucc38\uace0<\/a><\/p>\n

\ucc38\uace0<\/a><\/p>\n

\ucc38\uace0<\/a><\/p>\n

\ubaa9\ud45c<\/h2>\n

Consul Cluster \ub97c \uad6c\uc131\ud569\ub2c8\ub2e4.<\/p>\n

Consul Server \ub294 \ub3c5\ub9bd\uc11c\ubc84\ub85c 3\ub300 \ub610\ub294 5\ub300\uac00 \uad8c\uc7a5\ub429\ub2c8\ub2e4.<\/p>\n

Consul Client \ub294 Nomad Server\/Client \uc5d0 \uc124\uce58\ub429\ub2c8\ub2e4.<\/p>\n

\"\"<\/a><\/p>\n

\ubcf4\uc548\uadf8\ub8f9 \uc0dd\uc131<\/h2>\n

allow-consul<\/code> \ubcf4\uc548\uadf8\ub8f9\uc744 \uc0dd\uc131\ud569\ub2c8\ub2e4.
\n\uaddc\uce59\uc740 \ucd94\uac00\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.<\/p>\n

protect-consul<\/code> \ubcf4\uc548\uadf8\ub8f9\uc744 \uc0dd\uc131\ud569\ub2c8\ub2e4.
\n\uc778\ubc14\uc6b4\ub4dc\uc5d0 \uc18c\uc2a4\uac00 allow-consul<\/code> \ubcf4\uc548\uadf8\ub8f9\uc778 \ud2b8\ub798\ud53d\uc744 \ubaa8\ub450 \ud5c8\uc6a9\ud574\uc90d\ub2c8\ub2e4.<\/p>\n

Consul Server \uc0dd\uc131<\/h2>\n

\uba54\ubaa8\ub9ac\ub294 512M \ub85c \ud569\ub2c8\ub2e4.<\/p>\n

\ubcf4\uc548\uadf8\ub8f9\uc740 allow-consul<\/code>, protect-consul<\/code>, \uadf8\ub9ac\uace0 \ub0b4\uc544\uc774\ud53c\uc5d0 \ub300\ud55c \ubaa8\ub4e0 \ud2b8\ub798\ud53d\uc744 \ud5c8\uc6a9\ud558\ub294 \ubcf4\uc548\uadf8\ub8f9\uc744 \ucd94\uac00\ud574 \uc90d\ub2c8\ub2e4.<\/p>\n

\ud0dc\uadf8\uc5d0 \ud0a4\ub294 ConsulServer<\/code>, \uac12\uc740 Y<\/code> \uc778 \ud0dc\uadf8\ub97c \ucd94\uac00\ud574 \uc90d\ub2c8\ub2e4.
\n\ud0a4\uc640 \uac12\uc5d0\ub294 \ub744\uc5b4\uc4f0\uae30\ub97c \ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4.<\/p>\n

docker \ub97c \uc124\uce58\ud569\ub2c8\ub2e4.<\/p>\n

sudo yum install docker -y\ndocker -v\nsudo service docker start\nsudo systemctl enable docker.service<\/code><\/pre>\n
Consul Server \ub97c \uc124\uce58\ud569\ub2c8\ub2e4.<\/p>\n
sudo docker run \\\n    -d \\\n    -p 8500:8500 \\\n    -p 8600:8600\/udp \\\n    -p 8300-8302:8300-8302 \\\n    -p 8301-8302:8301-8302\/udp \\\n    --name=consul-server-1 \\\n    --restart=always \\\n    consul agent -server -ui -node=consul-server-1 -bootstrap-expect=1 -client=0.0.0.0 -advertise=<\uc778\uc2a4\ud134\uc2a4 \ud504\ub77c\uc774\ube57 \uc544\uc774\ud53c><\/code><\/pre>\n
sudo docker exec consul-server-1 consul members\nNode             Address          Status  Type    Build   Protocol  DC   Segment\nconsul-server-1  172.17.0.2:8301  alive   server  1.10.1  2         dc1  <all><\/code><\/pre>\n
Consul Client \uc0dd\uc131<\/h2>\n
\uba54\ubaa8\ub9ac\ub294 512M \ub85c \ud569\ub2c8\ub2e4.<\/p>\n
\ubcf4\uc548\uadf8\ub8f9\uc740 allow-consul<\/code>, protect-consul<\/code>, \uadf8\ub9ac\uace0 \ub0b4\uc544\uc774\ud53c\uc5d0 \ub300\ud55c \ubaa8\ub4e0 \ud2b8\ub798\ud53d\uc744 \ud5c8\uc6a9\ud558\ub294 \ubcf4\uc548\uadf8\ub8f9\uc744 \ucd94\uac00\ud574 \uc90d\ub2c8\ub2e4.<\/p>\n
docker \ub97c \uc124\uce58\ud569\ub2c8\ub2e4.<\/p>\n
sudo yum install docker -y\ndocker -v\nsudo service docker start\nsudo systemctl enable docker.service<\/code><\/pre>\n
Consul Client \ub97c \uc124\uce58\ud569\ub2c8\ub2e4.<\/p>\n
sudo docker run \\\n    -p 8300-8302:8300-8302 \\\n    -p 8301-8302:8301-8302\/udp \\\n    --name=consul-client-1 \\\n    consul agent -node=consul-client-1 -advertise=<\ud074\ub77c\uc774\uc5b8\ud2b8 \uc778\uc2a4\ud134\uc2a4 \ud504\ub77c\uc774\ube57 \uc544\uc774\ud53c> -join=<\uc11c\ubc84 \uc778\uc2a4\ud134\uc2a4 \ud504\ub77c\uc774\ube57 \uc544\uc774\ud53c><\/code><\/pre>\n
2021-08-21T10:40:35.866Z [INFO]  agent.client.serf.lan: serf: EventMemberJoin: consul-server-1 172.31.49.46\n2021-08-21T10:40:35.866Z [INFO]  agent.client: adding server: server="consul-server-1 (Addr: tcp\/172.31.49.46:8300) (DC: dc1)"\n2021-08-21T10:40:35.867Z [INFO]  agent: (LAN) joined: number_of_nodes=1\n2021-08-21T10:40:35.867Z [INFO]  agent: Join completed. Initial agents synced with: agent_count=1\n2021-08-21T10:40:35.867Z [INFO]  agent: started state syncer\n2021-08-21T10:40:35.867Z [INFO]  agent: Consul agent running!\n2021-08-21T10:40:35.874Z [INFO]  agent: Synced node info<\/code><\/pre>\n
\uc815\uc0c1\uc801\uc73c\ub85c \uc811\uc18d\ub418\uc5c8\ub294\uc9c0 \uc11c\ubc84\uc5d0\uc11c \ud655\uc778\ud574 \ubd05\ub2c8\ub2e4.<\/p>\n
sudo docker exec consul-server-1 consul members\nNode             Address             Status  Type    Build   Protocol  DC   Segment\nconsul-server-1  172.31.49.46:8301   alive   server  1.10.1  2         dc1  <all>\nconsul-client-1  172.31.15.157:8301  alive   client  1.10.1  2         dc1  <default><\/code><\/pre>\n
\uc2e4\ud589\uc2dc\ucf30\ub358 \ud074\ub77c\uc774\uc5b8\ud2b8\ub97c \uc0ad\uc81c\ud558\uace0 deamon \ubaa8\ub4dc\ub85c \uc7ac\uc2e4\ud589 \ud569\ub2c8\ub2e4.<\/p>\n
sudo docker stop consul-client-1\nsudo docker rm consul-client-1\n\nsudo docker run \\\n    -d \\\n    -p 8300-8302:8300-8302 \\\n    -p 8301-8302:8301-8302\/udp \\\n    --name=consul-client-1 \\\n    --restart=always \\\n    consul agent -node=consul-client-1 -advertise=<\ud074\ub77c\uc774\uc5b8\ud2b8 \uc778\uc2a4\ud134\uc2a4 \ud504\ub77c\uc774\ube57 \uc544\uc774\ud53c> -join=<\uc11c\ubc84 \uc778\uc2a4\ud134\uc2a4 \ud504\ub77c\uc774\ube57 \uc544\uc774\ud53c><\/code><\/pre>\n
\uc11c\ubc84 \uc544\uc774\ud53c \uc5c6\uc774 \uc811\uc18d\ud558\uae30<\/h2>\n
\uc815\ucc45 \uc0dd\uc131<\/h3>\n
IAM > \uc561\uc138\uc2a4 \uad00\ub9ac > \uc815\ucc45<\/code> \uc5d0\uc11c \uc815\ucc45\uc0dd\uc131\uc744 \ud074\ub9ad\ud569\ub2c8\ub2e4.<\/p>\n
\uc815\ucc45\uc774\ub984\uc740 DescribeInstances \ub85c\ud558\uace0 \uc544\ub798\uc640 \uac19\uc774 json \ub370\uc774\ud0c0\ub97c \uc785\ub825\ud558\uace0 \uc800\uc7a5\ud569\ub2c8\ub2e4.<\/p>\n
{\n   "Version": "2012-10-17",\n   "Statement": [{\n      "Effect": "Allow",\n      "Action": [\n         "ec2:DescribeInstances"\n      ],\n      "Resource": "*"\n   }\n   ]\n}<\/code><\/pre>\n
\uc5ed\ud560 \uc0dd\uc131<\/h3>\n
IAM > \uc561\uc138\uc2a4 \uad00\ub9ac > \uc5ed\ud560<\/code> \uc5d0\uc11c \uc5ed\ud560\uc0dd\uc131\uc744 \ud074\ub9ad\ud569\ub2c8\ub2e4.<\/p>\n
\uc5ed\ud560\uc774\ub984\uc740 DescribeInstancesRole \uc73c\ub85c \ud558\uace0 DescribeInstances \uc120\ud0dd\ud558\uace0 \uc800\uc7a5\ud569\ub2c8\ub2e4.<\/p>\n
EC2 \uc778\uc2a4\ud134\uc2a4\uc5d0 Role \ucd94\uac00<\/h3>\n
\uc704\uc5d0\uc11c \uc0dd\uc131\ud55c \uc5ed\ud560\uc744 EC2 \uc778\uc2a4\ud134\uc2a4\uc5d0 \ucd94\uac00\ud574 \uc90d\ub2c8\ub2e4.<\/p>\n
\uae30\uc874 \ud074\ub77c\uc774\uc5b8\ud2b8\ub97c \uc0ad\uc81c\ud569\ub2c8\ub2e4.<\/p>\n
sudo docker stop consul-client-1\nsudo docker rm consul-client-1<\/code><\/pre>\n
\uc11c\ubc84\uc5d0\uc11c \ud655\uc778\ud574 \ubcf4\uba74 \uc0c1\ud0dc\uac00 left<\/code> \uc0c1\ud0dc\uc785\ub2c8\ub2e4.<\/p>\n
sudo docker exec consul-server-1 consul members\nNode             Address             Status  Type    Build   Protocol  DC   Segment\nconsul-server-1  172.31.49.46:8301   alive   server  1.10.1  2         dc1  <all>\nconsul-client-1  172.31.15.157:8301  left    client  1.10.1  2         dc1  <default><\/code><\/pre>\n
\ud074\ub77c\uc774\uc5b8\ud2b8\uc5d0\uc11c \uc544\ub798 \uba85\ub839\uc744 \uc2e4\ud589\ud569\ub2c8\ub2e4.<\/p>\n
sudo docker run \\\n    -d \\\n    -p 8300-8302:8300-8302 \\\n    -p 8301-8302:8301-8302\/udp \\\n    --name=consul-client-1 \\\n    --restart=always \\\n    consul agent -node=consul-client-1 -advertise=<\ud074\ub77c\uc774\uc5b8\ud2b8 \uc778\uc2a4\ud134\uc2a4 \ud504\ub77c\uc774\ube57 \uc544\uc774\ud53c> -retry-join "provider=aws tag_key=ConsulServer tag_value=Y region=ap-northeast-2"<\/code><\/pre>\n
\uc11c\ubc84\uc5d0\uc11c \ud655\uc778\ud574 \ubcf4\uba74 alive<\/code> \uc0c1\ud0dc\uc784\uc744 \ud655\uc778\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n
sudo docker exec consul-server-1 consul members\nNode             Address             Status  Type    Build   Protocol  DC   Segment\nconsul-server-1  172.31.49.46:8301   alive   server  1.10.1  2         dc1  <all>\nconsul-client-1  172.31.15.157:8301  alive   client  1.10.1  2         dc1  <default><\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"
Consul Cluster \uad6c\uc131\ud558\uae30 \ucc38\uace0 \ucc38\uace0 \ucc38\uace0 \ucc38\uace0 \ucc38\uace0 \ubaa9\ud45c Consul Cluster \ub97c \uad6c\uc131\ud569\ub2c8\ub2e4. Consul Server \ub294 \ub3c5\ub9bd\uc11c\ubc84\ub85c 3\ub300 \ub610\ub294 5\ub300\uac00 \uad8c\uc7a5\ub429\ub2c8\ub2e4. Consul Client \ub294 Nomad Server\/Client \uc5d0 \uc124\uce58\ub429\ub2c8\ub2e4. \ubcf4\uc548\uadf8\ub8f9 \uc0dd\uc131 allow-consul \ubcf4\uc548\uadf8\ub8f9\uc744 \uc0dd\uc131\ud569\ub2c8\ub2e4. \uaddc\uce59\uc740 \ucd94\uac00\ud558\uc9c0 \uc54a\uc2b5\ub2c8\ub2e4. protect-consul \ubcf4\uc548\uadf8\ub8f9\uc744 \uc0dd\uc131\ud569\ub2c8\ub2e4. \uc778\ubc14\uc6b4\ub4dc\uc5d0 \uc18c\uc2a4\uac00 allow-consul \ubcf4\uc548\uadf8\ub8f9\uc778 \ud2b8\ub798\ud53d\uc744 \ubaa8\ub450 \ud5c8\uc6a9\ud574\uc90d\ub2c8\ub2e4. Consul Server \uc0dd\uc131 \uba54\ubaa8\ub9ac\ub294 512M \ub85c \ud569\ub2c8\ub2e4. \ubcf4\uc548\uadf8\ub8f9\uc740 allow-consul,\u2026 Read More »<\/a><\/span><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[31],"tags":[],"class_list":["post-2946","post","type-post","status-publish","format-standard","hentry","category-nomad"],"_links":{"self":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/2946","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2946"}],"version-history":[{"count":20,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/2946\/revisions"}],"predecessor-version":[{"id":3030,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=\/wp\/v2\/posts\/2946\/revisions\/3030"}],"wp:attachment":[{"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2946"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2946"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.skyer9.pe.kr\/wordpress\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2946"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}