Skip to content

[aliyun_oss_endpoint] when the parameter points to the VPC internal network address, Ali Cloud ECS traffic will still go to the public network #154

@Spinestars

Description

@Spinestars

Hi.
我在阿里云的ecs服务器上部署了gitlab,并设置了如下参数:

gitlab_rails['backup_upload_connection'] = {
'provider' => 'aliyun',
'aliyun_accesskey_id' => '******',
'aliyun_accesskey_secret' => ''******',',
'aliyun_oss_bucket' => ''******',',
'aliyun_region_id' => 'cn-zhangjiakou',
'aliyun_oss_endpoint' => 'http://oss-cn-zhangjiakou-internal.aliyuncs.com'
}

于此同时,我在 linux 的 crontab 设置了计划任务,它每天00:00执行备份计划
docker exec -t gitlab gitlab-backup create
此时,此时我发现每天执行备份计划的时候,备份文件上传到 oss 的时候走的是公网流量,而不是 endpoint 指定的内网。
我的ECS服务器和OSS均位于cn-zhangjiakou


Hi.
I deployed GitLab on the ECS server of Ali Cloud and set the following parameters:

gitlab_rails['backup_upload_connection'] = {
'provider' => 'aliyun',
'aliyun_accesskey_id' => '******',
'aliyun_accesskey_secret' => ''******',',
'aliyun_oss_bucket' => ''******',',
'aliyun_region_id' => 'cn-zhangjiakou',
'aliyun_oss_endpoint' => 'http://oss-cn-zhangjiakou-internal.aliyuncs.com'
}

At the same time, I set up the scheduling task in the Linux crontab, which executes the backup plan at 00:00 every day
docker exec -t gitlab gitlab-backup create
At this point, I noticed that when I was doing a daily backup plan, I was uploading the backup files to OSS using public network traffic instead of the endpoint specified Intranet.
My ECS server and OSS are both located at cn-zhangjiakou

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions