apt-cacher-ng를 사용하여 Elasticsearch, Kibana 및 Logstash용 패키지를 가져오려고 하는데 성공하지 못했습니다. 이 캐시 서버는 범용 프록시로 작동하지 않으므로 PassThroughPattern: .*나에게는 좋은 생각이 아닌 것 같습니다.
다시 쓰기 규칙을 실행해 보았습니다 /etc/apt-cacher-ng/acng.conf(http에서 https로 다시 쓰기 참고).
Remap-elastic: http://artifacts.elastic.co ; https://artifacts.elastic.co
클라이언트의 `/etc/apt/apt.conf.d/02proxy에 다음 줄이 있습니다.
Acquire::http::Proxy "http://192.168.140.18:3142";
내가 /etc/apt/sources.list.d/elastic-7.x.list가지고 있는
deb http://artifacts.elastic.co/packages/7.x/apt stable main
apt update클라이언트 측에서 결과를 실행할 때
Err:4 http://artifacts.elastic.co/packages/7.x/apt stable InRelease
Connection failed [IP: 192.168.140.18 3142]
Reading package lists... Done
Building dependency tree
Reading state information... Done
All packages are up to date.
W: Failed to fetch http://artifacts.elastic.co/packages/7.x/apt/dists/stable/InRelease Connection failed [IP: 192.168.140.18 3142]
W: Some index files failed to download. They have been ignored, or old ones used instead.
서버에서 디버깅 옵션이 7로 설정되고 상세도가 2로 설정된 상태에서 다음을 입력합니다./var/log/apt-cacher-ng/apt-cacher.err
Thu Jul 1 12:22:44 2021|Returning to last state, 6
Thu Jul 1 12:23:10 2021|fileitem::DoDelayedUnregAndCheck, nextRunTime now: 1625134998
Thu Jul 1 12:23:13 2021|Detected incoming connection from the TCP socket
Thu Jul 1 12:23:13 2021|Client name: 192.168.140.5
Thu Jul 1 12:23:13 2021|Decoded request URI: http://artifacts.elastic.co/packages/7.x/apt/dists/stable/InRelease
Thu Jul 1 12:23:13 2021|Processing new job, GET http://artifacts.elastic.co/packages/7.x/apt/dists/stable/InRelease HTTP/1.1
Thu Jul 1 12:23:15 2021|Outgoing connection for Connection timed outartifacts.elastic.co, Port: 443
Thu Jul 1 12:23:15 2021|Outgoing connection for Network is unreachableartifacts.elastic.co, Port: 443
Thu Jul 1 12:23:16 2021|tcpconnect::ExpireCache, nextRunTime now: 1625135005
Thu Jul 1 12:23:18 2021|fileitem::DoDelayedUnregAndCheck, nextRunTime now: 9223372036854775805
Thu Jul 1 12:23:25 2021|tcpconnect::ExpireCache, nextRunTime now: 9223372036854775805
Thu Jul 1 12:23:45 2021|Outgoing connection for Connection timed outartifacts.elastic.co, Port: 443
Thu Jul 1 12:23:45 2021|Outgoing connection for Network is unreachableartifacts.elastic.co, Port: 443
그래서 apt-cacher-ng 작성자가 선호하는 방법을 시도해 보았습니다. 이번에는 서버의 elastic.co에 대해 특정 /etc/apt/sources.list.d/elastic-7.x.list재작성을 하지 않고 클라이언트의 파일에 다시 작성했습니다.
deb http://192.168.140.18:3142/HTTPS///artifacts.elastic.co/packages/7.x/apt stable main
apt update클라이언트에서 결과 실행
Err:4 http://192.168.140.18:3142/HTTPS///artifacts.elastic.co/packages/7.x/apt stable InRelease
Connection failed [IP: 192.168.140.18 3142]
Reading package lists... Done
Building dependency tree
Reading state information... Done
All packages are up to date.
W: Failed to fetch http://192.168.140.18:3142/HTTPS///artifacts.elastic.co/packages/7.x/apt/dists/stable/InRelease Connection failed [IP: 192.168.140.18 3142]
W: Some index files failed to download. They have been ignored, or old ones used instead.
서버에서 /var/log/apt-cacher-ng/apt-cacher.err디버깅 옵션을 7로 설정하고 상세도를 2로 설정하면 다음과 같은 결과를 얻습니다.
Thu Jul 1 11:40:39 2021|Returning to last state, 6
Thu Jul 1 11:40:39 2021|Decoded request URI: /HTTPS///artifacts.elastic.co/packages/7.x/apt/dists/stable/InRelease
Thu Jul 1 11:40:39 2021|Processing new job, GET /HTTPS///artifacts.elastic.co/packages/7.x/apt/dists/stable/InRelease HTTP/1.1
Thu Jul 1 11:41:09 2021|Detected incoming connection from the TCP socket
Thu Jul 1 11:41:09 2021|Client name: 192.168.140.5
Thu Jul 1 11:41:09 2021|Decoded request URI: /HTTPS///artifacts.elastic.co/packages/7.x/apt/dists/stable/InRelease
Thu Jul 1 11:41:09 2021|Processing new job, GET /HTTPS///artifacts.elastic.co/packages/7.x/apt/dists/stable/InRelease HTTP/1.1
Thu Jul 1 11:41:10 2021|Outgoing connection for Connection timed outartifacts.elastic.co, Port: 443
Thu Jul 1 11:41:10 2021|Outgoing connection for Network is unreachableartifacts.elastic.co, Port: 443
Thu Jul 1 11:41:40 2021|Outgoing connection for Connection timed outartifacts.elastic.co, Port: 443
Thu Jul 1 11:41:40 2021|Outgoing connection for Network is unreachableartifacts.elastic.co, Port: 443
Debug 및 Verbosity 를 제외한 파일의 다른 모든 옵션은 기본값 acng.conf이며 debian과 같은 일반 리포지토리에서는 잘 작동하지만 elastic 또는 proxmox에서는 작동하지 않습니다.
모든 아이디어를 환영합니다.
답변1
이것은 나에게 너무 어리석은 일이다.
(시작했어야 하는) 명령줄을 통해 elastic.co 서버에서 InRelease 파일을 다운로드하려고 시도했지만 차단된 것으로 나타났습니다.
Proxmox 수준에서 방화벽 규칙을 살펴보면 포트 443이 허용되지 않음을 알 수 있습니다(기본 규칙은 차단됨). 포트 443에서 나가는 트래픽을 허용한 다음 시도한 첫 번째 버전이 제대로 작동했습니다.
DNS가 아니면 방화벽이겠죠?