我有一个配置为使用traefik作为反向代理的码头群。群中的一个容器正在运行NGINX服务器,但是当我导航到该特定端点时,我会遇到502 Bad Gateway
错误。Traefik的设置如下:
version: '3.5'
services:
traefik:
image: traefik:alpine
command: |-
--entryPoints="Name:http Address::80 Redirect.EntryPoint:https"
--entryPoints="Name:https Address::443 TLS"
--defaultentrypoints="http,https"
--accesslogsfile="/var/log/access.log"
--acme
--acme.acmelogging="true"
--acme.domains="${SERVER},${SANS1}"
--acme.email="${ACME_EMAIL}"
--acme.entrypoint="https"
--acme.httpchallenge
--acme.httpchallenge.entrypoint="http"
--acme.storage="/opt/traefik/acme.json"
--acme.onhostrule="true"
--docker
--docker.swarmmode
--docker.domain="${SERVER}"
--docker.network="frontend"
--docker.watch
--api
networks:
- frontend
ports:
- target: 80
published: 80
mode: host
- target: 443
published: 443
mode: host
- target: 8080
published: 8080
mode: host
volumes:
- traefik_acme:/opt/traefik
- traefik_logs:/var/log/access.log
- /var/run/docker.sock:/var/run/docker.sock:ro
deploy:
replicas: 1
placement:
constraints: [node.role == manager]
networks:
frontend:
name: "frontend"
driver: overlay
volumes:
traefik_acme:
traefik_logs:
此组合文件提供overlay
网络和Traefik服务。我的其余群体在以下组合文件中定义:
version: "3.5"
services:
test:
image: emilevauge/whoami
deploy:
labels:
traefik.enable: "true"
traefik.frontend.rule: "Host:${SERVER};PathPrefixStrip:/test"
traefik.port: 80
networks:
- frontend
octeditor:
image: ${DOCKER_OCTEDITOR_IMAGE_TAG}
deploy:
replicas: 1
labels:
traefik.enable: "true"
traefik.frontend.rule: "Host:${SERVER}"
traefik.port: 3000
networks:
- frontend
ports:
- "3000:80"
octserver:
image: ${DOCKER_OCTSERVER_IMAGE_TAG}
deploy:
replicas: 1
labels:
traefik.enable: "true"
traefik.frontend.rule: "Host:${SERVER};PathPrefixStrip:/api"
traefik.port: 4000
networks:
- frontend
ports:
- "4000:4000"
visualizer:
image: dockersamples/visualizer:stable
deploy:
placement:
constraints:
- 'node.role == manager'
labels:
traefik.enable: "true"
traefik.frontend.rule: "Host:${SERVER};PathPrefixStrip:/visualizer"
traefik.port: 8001
networks:
- frontend
ports:
- "8001:8080"
stop_grace_period: 1m30s
volumes:
- "/var/run/docker.sock:/var/run/docker.sock:ro"
networks:
frontend:
external: true
相关配置适用于octeditor
服务:
octeditor:
image: ${DOCKER_OCTEDITOR_IMAGE_TAG}
deploy:
replicas: 1
labels:
traefik.enable: "true"
traefik.frontend.rule: "Host:${SERVER}"
traefik.port: 3000
networks:
- frontend
ports:
- "3000:80"
我正在将端口80(默认情况下的nginx听(映射到端口3000,其中配置了Traefik
以找到此服务。这是运行nginx的服务的Dockerfile
:
FROM node:latest as builder
WORKDIR /usr/src/app
COPY package.json .
RUN npm install
COPY . .
RUN npm run build
FROM nginx
COPY --from=builder /usr/src/app/build /usr/share/nginx/html
我只是构建react app
,然后将构建文件夹复制到/usr/share/nginx/html
文件夹。我已经尝试构建和运行此Dockerfile作为独立容器,并且它可以工作,也检查了html
文件夹的内容,一切看起来都正确。除visualizer
服务外,其他服务还正确运行。只有此octedtior
服务和visualizer
服务才会给我502
错误。谁能建议解决方案,甚至可以检查发送到NGINX容器的流量?我尝试过docker ps servicename
,但我看不到该服务的任何错误。
编辑:
如果我将octeditor
的配置更改为:
octeditor:
image: ${DOCKER_OCTEDITOR_IMAGE_TAG}
deploy:
replicas: 1
labels:
traefik.enable: "true"
traefik.frontend.rule: "Host:${SERVER}"
traefik.port: 80
networks:
- frontend
ports:
- "80:80"
并删除以前在端口80
上收听的test
服务,它似乎有效。我不明白以前的配置出了什么问题吗?我以为我之前绘制了从端口3000到端口80的流量,而现在我从端口80到80映射,但是从容器的角度来看,什么都不应更改,对吗?
相关配置适用于OCTEDITOR服务:
octeditor: image: ${DOCKER_OCTEDITOR_IMAGE_TAG} deploy: replicas: 1 labels: traefik.enable: "true" traefik.frontend.rule: "Host:${SERVER}" traefik.port: 3000 networks: - frontend ports: - "3000:80"
我正在将端口80(默认情况下为nginx听(到端口3000 traefik配置为找到此服务的地方。
Traefik端口必须为80,而不是3000。端口映射将在80上从3000上的主机创建一个前方。但是,Traefik直接通过共享网络(frontend
(直接与容器进行交谈,您需要提供容器端口。
除非您需要在没有代理的情况下直接访问它们,否则无需发布通过Traefik或任何其他反向代理访问的服务的主机端口(在这些情况下是否需要反向代理(。换句话说,这可以在没有端口的情况下写:
octeditor:
image: ${DOCKER_OCTEDITOR_IMAGE_TAG}
deploy:
replicas: 1
labels:
traefik.enable: "true"
traefik.frontend.rule: "Host:${SERVER}"
traefik.port: 80
networks:
- frontend