在 AWS ecs 中设置 GRPC 服务

Question

我尝试使用 ALB 设置 GRPC 服务器，我已经完成了所有设置，并且我的目标群体是健康的但是当我使用 GRPC 客户端访问服务时它失败了。下面是 GRPC 客户端日志[ec2-user@ greeter_client]$ GRPC_GO_LOG_SEVERITY_LEVEL=info GREETER_ENDPOINT=testgrpc-<>.us-west-1.elb.amazonaws.com:443 INSECURE=1  go run main.goINFO: 2022/05/08 20:43:46 [core] parsed scheme: ""INFO: 2022/05/08 20:43:46 [core] scheme "" not registered, fallback to default schemeINFO: 2022/05/08 20:43:46 [core] ccResolverWrapper: sending update to cc:{[{testgrpc-<>.us-west-1.elb.amazonaws.com:443  <nil> 0 <nil>}] <nil> <nil>}INFO: 2022/05/08 20:43:46 [core] ClientConn switching balancer to "pick_first"INFO: 2022/05/08 20:43:46 [core] Channel switches to new LB policy "pick_first"INFO: 2022/05/08 20:43:46 [core] Subchannel Connectivity change to CONNECTINGINFO: 2022/05/08 20:43:46 [core] blockingPicker: the picked transport is not ready, loop back to repickINFO: 2022/05/08 20:43:46 [core] Subchannel picks a new address "testgrpc-<>.us-west-1.elb.amazonaws.com:443" to connectINFO: 2022/05/08 20:43:46 [core] Channel Connectivity change to CONNECTINGINFO: 2022/05/08 20:43:46 [core] Subchannel Connectivity change to TRANSIENT_FAILUREINFO: 2022/05/08 20:43:46 [core] Channel Connectivity change to TRANSIENT_FAILURE2022/05/08 20:43:46 could not greet: rpc error: code = Unavailable desc = connection closed

Answer 1

问题是 https 侦听器中使用的证书是错误的，所以遵循以下使其工作

1. 将我的名称服务器移至 r53

2. 在 acm 中创建公共证书

3. 在 https 侦听器中使用的证书