ACL配置多个白名单

apache / rocketmq

Apache RocketMQ is a cloud native messaging and streaming platform, making it simple to build event-driven applications.

https://rocketmq.apache.org/

Apache License 2.0

21.24k stars 11.69k forks source link

ACL配置多个白名单 #8529

Open wolf27w opened 3 months ago

wolf27w commented 3 months ago

Search before creation

[X] I had searched in the issues and found no similar issues.

Documentation Related

根据文档https://rocketmq.apache.org/zh/docs/bestPractice/03access/中提示，在whiteRemoteAddress中添加白名单时，多个网段使用";"分割，但是我使用whiteRemoteAddress: "192.168.6.;10.244..*"作为参数时，我的dashboard访问不了，我dashboard的网段就是10.244网段的。如果我使用一个网段就正常

Are you willing to submit PR?

[X] Yes I am willing to submit a PR!

leizhiyuan commented 3 months ago

配置成

192.168.6.;10.244..* 看看？

wolf27w commented 3 months ago

不行的，

wolf27w commented 3 months ago

后来发现我配置多个是可以的 `accounts:

accessKey: admin secretKey: "demo123" whiteRemoteAddress: "10.244.." admin: true defaultTopicPerm: PUB|SUB defaultGroupPerm: SUB
accessKey: admin secretKey: "demo123" whiteRemoteAddress: "10.96.." admin: true defaultTopicPerm: PUB|SUB defaultGroupPerm: SUB`

leizhiyuan commented 3 months ago

看了一下，这里的文档应该是不对的。RemoteAddressStrategyTest 实际上这种直接逗号分隔的，只支持精确匹配。

单个的菜支持模糊匹配。具体可看 RemoteAddressStrategyFactory

wolf27w commented 3 months ago

但是我使用逗号分隔也是不行的，启动不起来，无法做到限制