Shulou(Shulou.com)06/02 Report--

This article focuses on "how to set access to CDP UI". Friends who are interested may wish to have a look at it. The method introduced in this paper is simple, fast and practical. Let's let the editor take you to learn how to set access to CDP UI.

In public cloud or private and public network environment, Cloudera's platform product CDH/CDP/HDP needs to access a lot of Web UI, but the system network may only support SSH access (port 22). To access Cloudera Manager (port 7180) or other services, you can use the following two ways:

Set up the SOCKS (socket Security Protocol) agent on the client computer. Cloudera recommends that you use this option.

After the CDP/CDP is deployed to the public cloud, add the inbound rule to the network security group in the public cloud instance.

Configure SOCKS proxy

The SOCKS5 protocol is implemented as a client and server process, which can traverse the IP network firewall. After configuring the SOCKS proxy, the browser uses the public cloud network (through the proxy server) to resolve the DNS lookup and allows you to connect to the service using an internal FQDN or private IP address.

Using this method, you can accomplish the following tasks:

Set up a single SSH tunnel to one of the hosts on the network and create a SOCKS proxy on the host.

Change the browser configuration to perform all lookups through the SOCKS proxy host.

Network prerequisites

Before using the SOCKS proxy to connect to the cluster, verify the following prerequisites:

You must be able to access the host you want to proxy from the public Internet or from the network to which you want to connect.

The host you are proxying must be on the same network as the Cloudera service you are connecting to. For example, if you are using a Cloudera CDP/EDH product, connect to the Cloudera Manager host through a tunnel.

Start the SOCKS agent

Linux

To start the SOCKS agent through SSH, run the following command:

Ssh-I your-key-file.pem-CND 1080the_username_you_specified@publicIP_of_VM

The command uses the following parameters:

-I your-key-file.pem specifies the path from SSH to the private key required by the Cloudera CDP/EDH server. If the SSH password is used, it is omitted.

C sets compression.

It is forbidden to execute any orders after N is established.

D sets the SOCKS proxy on the port.

1080 is used to set the port of the SOCKS proxy locally.

Windows

Follow the instructions on the Microsoft website.

Configure the Google Chrome browser to use proxies

By default, Chrome browsers use system-wide proxy settings by profile. To start Chrome without these settings, open Chrome from the command line and specify the following:

SOCKS proxy port. The port must be the same as the port used to start the agent.

Configuration file. The following example creates a new configuration file.

Use one of the following commands to create a configuration file and start a new instance of Chrome that does not conflict with any currently running Chrome instance.

Linux/usr/bin/google-chrome\-user-data-dir= "$HOME/chrome-with-proxy"\-proxy-server= "socks5://localhost:1080" Mac OS X

"/ Applications/Google Chrome.app/Contents/MacOS/Google Chrome"\-user-data-dir= "$HOME/chrome-with-proxy"\-proxy-server= "socks5://localhost:1080" Microsoft Windows

"C:\ Program Files (x86)\ Google\ Chrome\ Application\ chrome.exe" ^-- user-data-dir= "% USERPROFILE%\ chrome-with-proxy" ^-- proxy-server= "socks5://localhost:1080"

In this Chrome session, you can use a private IP address or internal FQDN to connect to any host that Cloudera EDH can access.

My client is Mac OS X, and after executing the agent above, I will start a new Chrome instance.

So that Cloudera Manager and other Web UI can be accessed through the intranet.

You can also jump directly through the web UI jump in CM.

Network Security Group

Warning: this method is not recommended for any purpose other than a proof of concept. If the data is not carefully locked, hackers and malicious entities will be able to access the data.

On portal.azure.com, locate the Network Security Group and add inbound rules for various services. You may have to create these rules for the service. For more information about the ports used by Cloudera Manager,CDP components, managed services, and third-party components, see the Cloudera documentation.

At this point, I believe you have a deeper understanding of "how to set access to CDP UI". You might as well do it in practice. Here is the website, more related content can enter the relevant channels to inquire, follow us, continue to learn!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.