Welcome! Log In Create A New Profile

Advanced

NIC deletes all listeners when rejecting new listener on reserved port

All files from this thread

File Name File Size   Posted by Date  
image001.jpg 454 KB open | download Brad Bishop via nginx 12/08/2023 Read message
Brad Bishop via nginx
December 07, 2023 11:56PM
Hi Folks,

We're using NGINX Ingress Controller 3.0.2 (NGINX 1.23.3) in AKS on a couple AKSUbuntu-2204gen2containerd-202309.06.0 nodes. We do regular helm release installs of a single-tenanted TCP & HTTP service for law firms. Today we had a P1 issue when we added a listener for a new law firm to GlobalConfiguration and set the port number to 9113. NGINX rejected the change because 9113 is reserved for prometheus - fair enough. But it also immediately deleted all other existing listeners, which broke 100 TransportServers and blocked access to 100 law firms. We reproduced this on a second AKS cluster. Is this the intended behaviour?

I expected in this case that NGINX would reject the bad config and revert to last-good config, and the docs suggest this is what should happen:
https://docs.nginx.com/nginx-ingress-controller/configuration/global-configuration/globalconfiguration-resource/#:~:text=the%20Ingress%20Controller%20will%20ignore%20the%20new%20version

Thanks,
Brad Bishop
_______________________________________________
nginx mailing list
nginx@nginx.org
https://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

NIC deletes all listeners when rejecting new listener on reserved port

Brad Bishop via nginx December 07, 2023 11:56PM

Re: NIC deletes all listeners when rejecting new listener on reserved port

J Carter December 08, 2023 04:58AM

Re: NIC deletes all listeners when rejecting new listener on reserved port Attachments

Brad Bishop via nginx December 08, 2023 06:50AM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 216
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready