Open akamalov opened 6 years ago
It looks like there is a bug with Burrow when Kafka is configured with SASL_PLAINTEXT: https://github.com/linkedin/Burrow/issues/333#issuecomment-378793491
Is this project dead ?
+1
@akamalov, why do you have handshake-first explicitly set to false in your config? Unless you are using a proxy (which is not currently supported in Burrow), this will break your SASL connection. For now, explicitly set it to "true" (as there's a problem with the default config right now, per #333).
I tested both ways, with 'false' and then set to 'true'. Current setting:
handshake-first=true
Just FYI, setting handshake-first=true
fixed the problem for me.
setting handshake-first=true
does NOT work for me
burrow.toml:
[general]
pidfile="/var/lock/burrow/burrow.pid"
stdout-logfile="burrow.out"
[zookeeper]
servers=[
"my.zookeeper:2181"
]
timeout=6
root-path="/burrow"
[client-profile.myclient]
kafka-version="2.0.0"
client-id="burrow-myclient"
tls="mytlsprofile"
sasl="mysaslprofile"
[tls.mytlsprofile]
certfile="whatever.crt"
keyfile="whatever.key"
cafile="whatever/ca-bundle.crt"
noverify=false
[sasl.mysaslprofile]
username="burrow"
password="****"
handshake-first=true
[httpserver.tlslistener]
address=":8443"
timeout=300
tls="mytlsprofile"
[cluster.myclustername]
class-name="kafka"
servers=[
"kafkabroker:9093"
]
client-profile="myclient"
topic-refresh=120
offset-refresh=30
[consumer.myconsumers]
class-name="kafka"
cluster="myclustername"
servers=[
"kafkabroker:9093"
]
client-profile="myclient"
offsets-topic="__consumer_offsets"
start-latest=true
group-whitelist=".*"
burrow-stdout.log:
{"level":"info","ts":1553733907.134768,"msg":"Started Burrow"}
{"level":"info","ts":1553733907.1348245,"msg":"configuring","type":"coordinator","name":"zookeeper"}
{"level":"info","ts":1553733907.1350582,"msg":"configuring","type":"coordinator","name":"storage"}
{"level":"info","ts":1553733907.1350753,"msg":"configuring","type":"module","coordinator":"storage","class":"inmemory","name":"default"}
{"level":"info","ts":1553733907.1351273,"msg":"configuring","type":"coordinator","name":"evaluator"}
{"level":"info","ts":1553733907.135139,"msg":"configuring","type":"module","coordinator":"evaluator","class":"caching","name":"default"}
{"level":"info","ts":1553733907.1351595,"msg":"configuring","type":"coordinator","name":"httpserver"}
{"level":"info","ts":1553733907.143542,"msg":"configuring","type":"coordinator","name":"notifier"}
{"level":"info","ts":1553733907.143559,"msg":"configuring","type":"coordinator","name":"cluster"}
{"level":"info","ts":1553733907.143576,"msg":"configuring","type":"module","coordinator":"cluster","class":"kafka","name":"myclustername"}
{"level":"info","ts":1553733907.1542895,"msg":"configuring","type":"coordinator","name":"consumer"}
{"level":"info","ts":1553733907.1543238,"msg":"configuring","type":"module","coordinator":"consumer","class":"kafka","name":"myconsumers"}
{"level":"info","ts":1553733907.165999,"msg":"starting","type":"coordinator","name":"zookeeper"}
{"level":"info","ts":1553733907.1682487,"msg":"Connected to 10.172.58.162:2181","type":"coordinator","name":"zookeeper"}
{"level":"info","ts":1553733907.1699815,"msg":"Authenticated: id=101824693704917831, timeout=6000","type":"coordinator","name":"zookeeper"}
{"level":"info","ts":1553733907.1699991,"msg":"Re-submitting `0` credentials after reconnect","type":"coordinator","name":"zookeeper"}
{"level":"info","ts":1553733907.1723924,"msg":"starting","type":"coordinator","name":"storage"}
{"level":"info","ts":1553733907.1724021,"msg":"starting","type":"module","coordinator":"storage","class":"inmemory","name":"default"}
{"level":"info","ts":1553733907.172434,"msg":"starting","type":"coordinator","name":"evaluator"}
{"level":"info","ts":1553733907.1724522,"msg":"starting","type":"module","coordinator":"evaluator","class":"caching","name":"default"}
{"level":"info","ts":1553733907.1724596,"msg":"starting","type":"coordinator","name":"httpserver"}
{"level":"info","ts":1553733907.1725779,"msg":"started listener","type":"coordinator","name":"httpserver","listener":"[::]:8080"}
{"level":"info","ts":1553733907.1725914,"msg":"starting","type":"coordinator","name":"notifier"}
{"level":"info","ts":1553733907.1726022,"msg":"starting","type":"coordinator","name":"cluster"}
{"level":"info","ts":1553733907.1726058,"msg":"starting","type":"module","coordinator":"cluster","class":"kafka","name":"myclustername"}
{"level":"info","ts":1553733907.2764928,"msg":"starting evaluations","type":"coordinator","name":"notifier"}
{"level":"error","ts":1553733908.0209036,"msg":"failed to start client","type":"module","coordinator":"cluster","class":"kafka","name":"myclustername","error":"kafka: client has run out of available brokers to talk to (Is your cluster reachable?)"}
{"level":"info","ts":1553733908.0209348,"msg":"stopping","type":"coordinator","name":"notifier"}
{"level":"info","ts":1553733908.0209424,"msg":"shutdown","type":"coordinator","name":"httpserver"}
{"level":"info","ts":1553733908.020983,"msg":"stopping","type":"coordinator","name":"evaluator"}
{"level":"info","ts":1553733908.020989,"msg":"stopping","type":"module","coordinator":"evaluator","class":"caching","name":"default"}
{"level":"info","ts":1553733908.0209956,"msg":"stopping","type":"coordinator","name":"storage"}
{"level":"info","ts":1553733908.0210028,"msg":"stopping","type":"module","coordinator":"storage","class":"inmemory","name":"default"}
{"level":"info","ts":1553733908.021035,"msg":"stopping","type":"coordinator","name":"zookeeper"}
{"level":"info","ts":1553733908.0232832,"msg":"Recv loop terminated: err=EOF","type":"coordinator","name":"zookeeper"}
{"level":"info","ts":1553733908.023301,"msg":"Send loop terminated: err=<nil>","type":"coordinator","name":"zookeeper"}
Using confluent kafka 2.0.0 with SASL-SSL authentication on port 9093.
I checked the following to see if I could bridge a connection to the host/port
Ncat: Version 7.50 ( https://nmap.org/ncat )
Ncat: Connected to 34.210.208.13:9093.
Ncat: 0 bytes sent, 0 bytes received in 0.01 seconds.
which worked fine. I also compared the sasl user/password on both the broker and the burrow config, and they checked out.
Environment:
Problem:
Container-built Burrow cannot connect to Kafka nodes
Steps to reproduce:
Clone repository
git clone https://github.com/linkedin/Burrow
Reconfigure configuration file:
burrow.toml
################################################################
Build container:
Deploy container with a volume map where configuration directory is mapped to a container, as well as log directory:
################################################################
burrow.log output:
It can't seem to be able to reach kafka nodes.
Any ideas ? Your help is very much appreciated. Thank you.
################################################################