Altinity / Altinity/clickhouse-operator

Internet Facing NLB not working returning empty response.

Open
#1,716 13 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Go
Stars
2.6k
Forks
574
Avg merge
8d 6h
Merged PRs (30d)
6

Description

Hi Team,

I am using Altinity Operator to install Clickhouse on EKS. I am using internet facing NLB to expose the cluster.

When I run curl -v -k https://{host_name}.elb.us-west-2.amazonaws.com:8443, the host is getting resolved, but I receive empty response.

> User-Agent: curl/8.7.1
> Accept: */*
> 
* Request completely sent off
* TLSv1.2 (IN), TLS alert, close notify (256):
* Empty reply from server
* Closing connection
* TLSv1.2 (OUT), TLS alert, close notify (256):
curl: (52) Empty reply from server

These are the setting I am currently using:

<clickhouse>
    <http_port remove="1"></http_port>
    <https_port>8443</https_port>
    <interserver_http_port remove="1"></interserver_http_port>
    <interserver_https_port>9010</interserver_https_port>
    <mysql_port remove="1"></mysql_port>
    <postgresql_port remove="1"></postgresql_port>
    <prometheus>
        <asynchronous_metrics>true</asynchronous_metrics>
        <endpoint>/metrics</endpoint>
        <errors>true</errors>
        <events>true</events>
        <metrics>true</metrics>
        <port>9363</port>
        <status_info>true</status_info>
    </prometheus>
    <tcp_port remove="1"></tcp_port>
    <tcp_port_secure>9440</tcp_port_secure>
</clickhouse>

Can someone please help me what needs to be done to make sure that NLB is working as expected.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Review the EKS internet-facing NLB setup and the ClickHouse port settings shown in the issue, especially HTTPS on 8443 and secure TCP on 9440. Reproduce the curl request and inspect the Kubernetes service and load-balancer behavior; done means the endpoint returns a non-empty HTTPS response.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws, kubernetes
Domain
cloud, databases, infrastructure
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.