端口 54663(bamboo tcp 端口)的连接问题

Problem connectivity issue to port 54663 (bamboo tcp port)

我用 docker-compose 安装了 bamboo,这里是定义:

...
  bamboo:
    image: atlassian/bamboo-server
    container_name: bamboo
    restart: always
    volumes:
      - ./bamboo:/var/atlassian/application-data/bamboo
    ports:
      - 8085:8085
      - 54663:54663
...

端口 8085 的连接正常,我通过 nmap 收到此输出:

# nmap 91.98.96.204 -p8085
Starting Nmap 7.80 ( https://nmap.org ) at 2021-07-05 15:28 UTC
Nmap scan report for mail.***.com (**.***.**.***)
Host is up (0.13s latency).

PORT     STATE SERVICE
8085/tcp open  unknown

Nmap done: 1 IP address (1 host up) scanned in 0.32 seconds

但我对 54663 有疑问。

# nmap 91.98.96.204 -p54663
Starting Nmap 7.80 ( https://nmap.org ) at 2021-07-05 15:40 UTC
Nmap scan report for mail.***.com (**.***.**.***)
Host is up (0.13s latency).

PORT      STATE  SERVICE
54663/tcp closed unknown

Nmap done: 1 IP address (1 host up) scanned in 0.33 seconds

我正在使用 ufw 并且规则定义正确:

# ufw status
Status: active

To                         Action      From
--                         ------      ----
8085/tcp                     ALLOW       Anywhere
54663/tcp                     ALLOW       Anywhere
...
8085/tcp (v6)                ALLOW       Anywhere (v6)
54663/tcp (v6)                ALLOW       Anywhere (v6)
...

服务器54663端口监听状态正常:

# netstat -an | grep 54663
tcp6       0      0 :::54663                :::*                    LISTEN

这是我的 iptables 数据包传输前后的差异:

# diff Sample1 Sample2
1c1
< Chain INPUT (policy ACCEPT 9 packets, 360 bytes)
---
> Chain INPUT (policy ACCEPT 10 packets, 400 bytes)
6,8c6,8
<  180K 9856K ufw-after-logging-input  all  --  *      *       0.0.0.0/0            0.0.0.0/0
<  180K 9856K ufw-reject-input  all  --  *      *       0.0.0.0/0            0.0.0.0/0
<  180K 9856K ufw-track-input  all  --  *      *       0.0.0.0/0            0.0.0.0/0
---
>  180K 9857K ufw-after-logging-input  all  --  *      *       0.0.0.0/0            0.0.0.0/0
>  180K 9857K ufw-reject-input  all  --  *      *       0.0.0.0/0            0.0.0.0/0
>  180K 9857K ufw-track-input  all  --  *      *       0.0.0.0/0            0.0.0.0/0
65c65
< 5672K  340M ACCEPT     all  --  br-83aa54bad204 br-83aa54bad204  0.0.0.0/0            0.0.0.0/0
---
> 5673K  340M ACCEPT     all  --  br-83aa54bad204 br-83aa54bad204  0.0.0.0/0            0.0.0.0/0
127,128c127,128
< 68748 3877K ACCEPT     tcp  --  !br-83aa54bad204 br-83aa54bad204  0.0.0.0/0            172.18.0.26          tcp dpt:80
<    15   676 ACCEPT     tcp  --  !br-0f9a0f7345b4 br-0f9a0f7345b4  0.0.0.0/0            192.168.48.2         tcp dpt:54663
---
> 68755 3877K ACCEPT     tcp  --  !br-83aa54bad204 br-83aa54bad204  0.0.0.0/0            172.18.0.26          tcp dpt:80
>    16   720 ACCEPT     tcp  --  !br-0f9a0f7345b4 br-0f9a0f7345b4  0.0.0.0/0            192.168.48.2         tcp dpt:54663
190c190
< 86160   12M ufw-skip-to-policy-input  all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
---
> 86162   12M ufw-skip-to-policy-input  all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
229c229
< 39016 2581K ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            icmptype 8
---
> 39017 2581K ACCEPT     icmp --  *      *       0.0.0.0/0            0.0.0.0/0            icmptype 8
265c265
< 96024   13M RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST
---
> 96026   13M RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0            ADDRTYPE match dst-type BROADCAST

对于那些进入这个post的人,我找到了我的解决方案:

Broker URL 必须设置为 0.0.0.0:54663,在 settings > system > general cofiguration