From user-return-11998-archive-asf-public=cust-asf.ponee.io@zookeeper.apache.org Sun Jul 28 11:54:12 2019 Return-Path: X-Original-To: archive-asf-public@cust-asf.ponee.io Delivered-To: archive-asf-public@cust-asf.ponee.io Received: from mail.apache.org (hermes.apache.org [207.244.88.153]) by mx-eu-01.ponee.io (Postfix) with SMTP id 940AA180671 for ; Sun, 28 Jul 2019 13:54:12 +0200 (CEST) Received: (qmail 568 invoked by uid 500); 28 Jul 2019 11:54:10 -0000 Mailing-List: contact user-help@zookeeper.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: user@zookeeper.apache.org Delivered-To: mailing list user@zookeeper.apache.org Received: (qmail 543 invoked by uid 99); 28 Jul 2019 11:54:07 -0000 Received: from pnap-us-west-generic-nat.apache.org (HELO spamd3-us-west.apache.org) (209.188.14.142) by apache.org (qpsmtpd/0.29) with ESMTP; Sun, 28 Jul 2019 11:54:07 +0000 Received: from localhost (localhost [127.0.0.1]) by spamd3-us-west.apache.org (ASF Mail Server at spamd3-us-west.apache.org) with ESMTP id 5203018057E for ; Sun, 28 Jul 2019 11:54:06 +0000 (UTC) X-Virus-Scanned: Debian amavisd-new at spamd3-us-west.apache.org X-Spam-Flag: NO X-Spam-Score: 1.8 X-Spam-Level: * X-Spam-Status: No, score=1.8 tagged_above=-999 required=6.31 tests=[DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, HTML_MESSAGE=2, RCVD_IN_DNSWL_NONE=-0.0001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001] autolearn=disabled Authentication-Results: spamd3-us-west.apache.org (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com Received: from mx1-he-de.apache.org ([10.40.0.8]) by localhost (spamd3-us-west.apache.org [10.40.0.10]) (amavisd-new, port 10024) with ESMTP id RvKnk9wLhG5i for ; Sun, 28 Jul 2019 11:54:04 +0000 (UTC) Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2a00:1450:4864:20::230; helo=mail-lj1-x230.google.com; envelope-from=eolivelli@gmail.com; receiver= Received: from mail-lj1-x230.google.com (mail-lj1-x230.google.com [IPv6:2a00:1450:4864:20::230]) by mx1-he-de.apache.org (ASF Mail Server at mx1-he-de.apache.org) with ESMTPS id 8B8D27DC04 for ; Sun, 28 Jul 2019 11:54:03 +0000 (UTC) Received: by mail-lj1-x230.google.com with SMTP id d24so55717819ljg.8 for ; Sun, 28 Jul 2019 04:54:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=Xe+eKdDbyBX8AZK15ieaJEhMnGfkoPMkhQa2WmybyFk=; b=vCMwEPpB0BrmjVkHjuXVR7n1s3UFlZLRg+D0hOhqSk0x/gWIXZBIu9HvC61TMeviZ1 PmY/zvVgzA9bWYXJF+va1YzCAhR03oW8A1pXs5n9WmUKrK2pK1HggH5bPmCc+S5ec549 ZawZ1PGisaENSiNDmjtZEP3BR+vVBJMFFEz1tP0bW8IJA6aZx08W1nfRNSDbT9sVQjV8 2vON0G9ie0dcinXg+RNj5xzwfmatTdGQCw2WXy0d1VfvnXYj+VBvjlEvKv+j5VMFzFVk U2ueW/ZeEhn2eBEn+h0MaGLC4bY6HD9X+URRbtc5hoYXCWmC5LbTJZP19XFh8uuj8kZt E4Iw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to; bh=Xe+eKdDbyBX8AZK15ieaJEhMnGfkoPMkhQa2WmybyFk=; b=saxkdEZgUbHyIBJUzzu/ti+/iumMGBtveWMERxkuk8c3gbALrnp79odefJ+fsqq3yO kvFnUezY8G0hG6OaCMKX1wLmmrljq8rlmRzJHrANA7zImb6Mx1YPSTRMY2Tf6EXGWbqP nmIqjRrK2ycjMsXgeMFPj79UmkicsmEosDc8UPtOGzyYrBk1/+9s1D+DQdgBOMM63Q9K 9xbwYfWVnWRmDtfYFxksgbmy3fKEYJVZ8kd8z6u/avmSRt7EIdK1O9NZsaKpEV+eJM19 b/C/+KdI7wIayDF5srUTvyWQO1ltpaliewMDaoh/b0lrCc8mVNYaBYEaHbz02YqDV+Cv vvbQ== X-Gm-Message-State: APjAAAWy1KrbOil5cRJcnHnfwHrBlD1nkAYs8oE2yghKGmvUJrqj7dPI QXdB6KgE0ltdo8oS90Yqlc1otG19SOfY3yDbFrlKVg== X-Google-Smtp-Source: APXvYqwL6ChIhhB2eihRkEmJDKOyopHaXDmeyzd2uQWY/vUI12nxCzmkN2kSCpkGLg8Ngu4KNhKoT+FxalBrt2aHX9c= X-Received: by 2002:a2e:898b:: with SMTP id c11mr56429191lji.241.1564314842594; Sun, 28 Jul 2019 04:54:02 -0700 (PDT) MIME-Version: 1.0 References: <7B8DCFB3-EA62-486C-952A-1B223ECB0703@cominvent.com> In-Reply-To: <7B8DCFB3-EA62-486C-952A-1B223ECB0703@cominvent.com> From: Enrico Olivelli Date: Sun, 28 Jul 2019 13:53:52 +0200 Message-ID: Subject: Re: Default for secureClientPort and adminServer To: user@zookeeper.apache.org Content-Type: multipart/alternative; boundary="00000000000082822d058ebc6efc" --00000000000082822d058ebc6efc Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Jan Il dom 28 lug 2019, 13:27 Jan H=C3=B8ydahl ha scrit= to: > Hi > > The default reserved port number for Zookeeper is 2181. So when installin= g > ZK using package managers that's typically what you'll get. > Now with Netty and SSL you want clients to connect to secureClientPort. I= n > the Confluence page examples are given with port 2281. But is there some > best practice or recommendation on which port to use? Specifically: > > - Is 2281 a recommended default? > - Or is it better to use 2181 for secureClientPort and disable old > clientPort? > I am not sure if there is a right answer to this question. But on 3.6.0 we will have 'port unification' that is that we have only one client that works both with and without SSL, the same for the client and the same for the admin server. Enrico > Likewise the new AdminServer defaults to 8080 (same a plain Jetty). Would > it not be beneficial to have a well known port, say 2191 that clients/app= s > could use as default, and assume that if you apt-get install zookeeper or > run it via docker, that would be the port AdminServer listens to? > > I'm asking because I believe in well-defined conventions. I'm a Solr > committer and we need to document to users how to configure Zookeeper wit= h > SSL, and choose defaults in our clients talking to Zookeeper, including > AdminServer. Ideally I hope the ZK project actively recommends ports for > clientPort, secureClientPort and AdminServer in the 21xx range and let th= at > tricle down to downstream package managers and installer makers. Seeing > 8080 in a firewall setup tells you nothing, but seeing 2191 would > immediately ring a bell. > > -- > Jan H=C3=B8ydahl, search solution architect > Cominvent AS - www.cominvent.com > > --00000000000082822d058ebc6efc--