Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[neon-cluster-manager] unix sockets? #8

Closed
3 tasks
jefflill opened this issue May 29, 2017 · 1 comment
Closed
3 tasks

[neon-cluster-manager] unix sockets? #8

jefflill opened this issue May 29, 2017 · 1 comment
Assignees

Comments

@jefflill
Copy link
Collaborator

The neon-cluster-manager is currently deployed as local containers on the manager nodes attached to the host network. I'd much rather have this be deployed as a Docker service.

The essential constrains are:

  • neon-cluster-manager requires access to the Docker socket
  • The Docker socket cannot be exposed outside of the machine without security risks or having to implement complex mutual TLS authentication
  • This means that neon-cluster-manager can access Docker via its Unix socket (mounted into the service) or a TCP socket on 127.0.0.1
  • .NET Core does not appear to support Unix sockets out-of-the-box
  • Docker services cannot be deployed on the host network

The task here is to investigate whether further into .NET Core and Unix sockets:

  • Perhaps a URL like http://unix:/var/aspnet/HelloMVC/kestrel.sock would work. This seems like somewhat of a standard in the Linux world.
  • Investigate .NET Core/Standard 2.0
  • Port/implement an HTTP Handler that works over Unix sockets
@jefflill jefflill added this to the NeonCluster RTW milestone May 29, 2017
@jefflill jefflill self-assigned this May 29, 2017
@jefflill
Copy link
Collaborator Author

jefflill commented Jun 6, 2017

I found some code at https://github.com/Microsoft/Docker.DotNet that implements Unix domain sockets as well as Windows named pipes. I'm going to migrate the domain socket code for now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant