使用 porter layer2模式，服务重定向后无法跳转

FaMily

基于kubesphere3安装jupyterhub服务，使用porter做loadbalance，目前可以访问虚拟ip，能够显示服务页面，但是在用户登录时，重定向后，无法跳转。
目前kubesphere是部署在本机的虚拟机中。
三台k8s节点190.168.86.71-73，master和worker共用
本机网址：190.168.86.1，网关190.168.86.2，虚拟机使用的是NAT模式
eip配置：
apiVersion: network.kubesphere.io/v1alpha2
kind: Eip
metadata:
name: porter-layer2-eip
spec:
address: 190.168.86.210
interface: ens33
protocol: layer2

日志信息：
[I 2021-03-11 11:46:18.410 JupyterHub app:2631] JupyterHub is now running at http://0.0.0.0:8898/

11:46:18.420 [ConfigProxy] [32minfo[39m: 201 POST /api/routes/

[I 2021-03-11 11:46:23.893 JupyterHub log:174] 302 GET / -> /hub/ (@190.168.86.71) 3.58ms

[I 2021-03-11 11:46:26.124 JupyterHub log:174] 302 GET / -> /hub/ (@190.168.86.71) 21.61ms

[I 2021-03-11 11:46:28.401 JupyterHub log:174] 302 GET / -> /hub/ (@190.168.86.71) 19.26ms

[I 2021-03-11 11:46:32.080 JupyterHub log:174] 200 GET /hub/login (@10.233.125.0) 80.02ms

[W 2021-03-11 11:46:42.017 JupyterHub base:392] Invalid or expired cookie token

[I 2021-03-11 11:46:42.022 JupyterHub log:174] 302 GET /hub/spawn -> /hub/login?next=%2Fhub%2Fspawn (@10.233.125.0) 10.91ms

FaMily

FaMily @duanjiong 大神能帮忙看一下吗？

duanjiong

FaMily 没太明白这里得重定向后，无法跳转。是什么意思？能不能再具体点

duanjiong

这里不是应该访问190.168.86.210这个ip？

FaMily

duanjiong
kind: Service
apiVersion: v1
metadata:
name: jupyterhub-svc
annotations:
lb.kubesphere.io/v1alpha1: porter
protocol.porter.kubesphere.io/v1alpha1: layer2
eip.porter.kubesphere.io/v1alpha2: porter-layer2-eip
spec:
selector:
app: jupyterhub
type: LoadBalancer
ports:
- name: http
port: 80
targetPort: 8898
externalTrafficPolicy: Cluster

这个是svc的配置
现在可以通过190.168.86.210访问服务的登录页面
但是登录的时候无法跳转，就是输入完用户名密码后不能跳转到服务页面，始终显示登录页面

FaMily

在不使用porterLB的时候，服务是可以正常登录跳转到服务页面的

[I 2021-03-11 16:28:23.527 JupyterHub app:2631] JupyterHub is now running at http://0.0.0.0:8898/

[I 2021-03-11 16:29:10.791 JupyterHub log:174] 302 GET / -> /hub/ (@190.168.86.1) 2.58ms

[W 2021-03-11 16:29:10.806 JupyterHub base:392] Invalid or expired cookie token

[I 2021-03-11 16:29:10.811 JupyterHub log:174] 302 GET /hub/ -> /hub/login (@190.168.86.1) 6.49ms

[I 2021-03-11 16:29:10.909 JupyterHub log:174] 200 GET /hub/login (@190.168.86.1) 88.13ms

su: user useradd does not exist

[I 2021-03-11 16:29:17.277 JupyterHub base:707] User logged in: wt

[I 2021-03-11 16:29:17.288 JupyterHub log:174] 302 POST /hub/login?next= -> /hub/spawn (wt@190.168.86.1) 877.49ms

[I 2021-03-11 16:29:17.405 JupyterHub spawner:1417] Spawning jupyterhub-singleuser –ip=127.0.0.1 –port=47879

[I 2021-03-11 16:29:18.324 JupyterHub log:174] 302 GET /hub/spawn -> /hub/spawn-pending/wt (wt@190.168.86.1) 1017.72ms

[I 2021-03-11 16:29:18.357 JupyterHub pages:347] wt is pending spawn

[I 2021-03-11 16:29:18.400 JupyterHub log:174] 200 GET /hub/spawn-pending/wt (wt@190.168.86.1) 54.31ms

[I 2021-03-11 16:29:24.055 SingleUserNotebookApp extension:158] JupyterLab extension loaded from /usr/local/anaconda3/lib/python3.7/site-packages/jupyterlab

[I 2021-03-11 16:29:24.055 SingleUserNotebookApp extension:159] JupyterLab application directory is /usr/local/anaconda3/share/jupyter/lab

这是服务正常的日志信息

duanjiong

porterlb工作在四层，所以上面描述能够出现登录界面，表示porterlb工作正常，能够建立tcp连接，之所以不能跳转那可能会是应用层得什么配置会校验源ip地址，请参考相应软件配置手册

FaMily

多谢，已经解决了
是没有配置session会话保持

sessionAffinity: ClientIP
加上这个就可以了，能正常使用了

aa8808021

FaMily 麻烦问下这个是如何配置的呢？