文章目录

  • 注册中心
  • provider项目
  • consumer
  • 效果
  • 其他
  • 配置例子
  • eureka清理无效节点的默认时间
  • eureka获取服务列表
  • eureka后台如何看注册的服务
  • 安全漏洞 EurekaURI路径存在未授权访问


注册中心

注册中心pom.xml添加:

<dependency>
	<groupId>org.springframework.cloud</groupId>
	<artifactId>spring-cloud-starter-netflix-eureka-server</artifactId>
</dependency>

再添加(注意这个version目前是Hoxton.SR1,以后升级了可能会变):

<dependencyManagement>
	<dependencies>
		<dependency>
			<groupId>org.springframework.cloud</groupId>
			<artifactId>spring-cloud-dependencies</artifactId>
			<version>Hoxton.SR1</version>
			<type>pom</type>
			<scope>import</scope>
		</dependency>
	</dependencies>
</dependencyManagement>

application.yml

server:
  port: 8761
eureka:
  instance:
    hostname: eureka-server  #eureka实例的主机名
  client:
    register-with-eureka: false #不注册本身到Eureka注册中心
    fetch-registry: false #不从Eureka注册中心获取服务的注册信息
    service-url:
      defaultZone: http://localhost:8761/eureka/

EurekaSpringBootApplication代码:

@EnableEurekaServer//启用Eureka服务
@SpringBootApplication
public class EurekaSpringBootApplication {
    public static void main(String[] args) {
        SpringApplication.run(EurekaSpringBootApplication.class, args);
    }
}

启动项目,访问:http://localhost:8761/ 即可看到注册中心页面。

provider项目

除了注册中心刚才添加的,pom.xml额外添加:

<dependency>
	<groupId>org.springframework.cloud</groupId>
	<artifactId>spring-cloud-starter-netflix-eureka-client</artifactId>
</dependency>

application.yml代码:

#启动端口
server:
  port: 8001
#项目名称
spring:
  application:
    name: provider
#eureka配置
eureka:
  instance:
    prefer-ip-address: true #使用服务的id地址注册
  client:
    service-url:
      defaultZone: http://localhost:8761/eureka/

ProviderSpringBootApplication代码:

@EnableEurekaServer//启用Eureka服务
@SpringBootApplication
public class ProviderSpringBootApplication {
    public static void main(String[] args) {
        SpringApplication.run(ProviderSpringBootApplication.class, args);
    }
}

TicketService代码:

@Service
public class TicketService {
    public String getTicket(){
        return "动车票";
    }
}

TicketController代码:

@RestController
public class TicketController {
    @Autowired
    TicketService ticketService;
    @GetMapping("/ticket")
    public  String getTicket(){
        return  ticketService.getTicket();
    }
}

启动项目。

consumer

pom.xml参照刚才server和client都要。
application.yml代码:

server:
  port: 8002
spring:
  application:
    name: consumer
eureka:
  instance:
    prefer-ip-address: true #使用服务的id地址注册
  client:
    service-url:
      defaultZone: http://localhost:8761/eureka/

ConsumerSpringBootApplication代码:

@EnableEurekaServer//启用Eureka服务
@SpringBootApplication
public class ConsumerSpringBootApplication {
    @Bean
    @LoadBalanced//启用负载均衡机制
    public RestTemplate restTemplate(){
        return new RestTemplate();
    }
    public static void main(String[] args) {
        SpringApplication.run(ConsumerSpringBootApplication.class, args);
    }
}

UserController代码:

@RestController
public class UserController {
    @Autowired
    RestTemplate restTemplate;
    @GetMapping("/buy")
    public String buyTicket(String name){
        String template = restTemplate.getForObject("http://PROVIDER/ticket", String.class);
        return name+"购买了"+template;
    }
}

启动项目。

效果

注册中心如图(8001是provider,8002是consumer):

spring boot eureka 版本 springboot集成eureka_eureka

浏览器输入: http://localhost:8002/buy?name=zhangsan 返回: zhangsan购买了 动车票

该项目git地址为:
https://github.com/1054294965/boot-eureka

其他

配置例子

### 注册中心地址
eureka.client.serviceUrl.defaultZone=http://registerserver-pool.${DOMAIN}:8889/eureka
# 使用自自定义ip地址
eureka.instance.preferIpAddress=true 
# 实例规则是 ip+端口号
eureka.instance.instance-id=${spring.cloud.client.ipAddress}:${server.port}

eureka清理无效节点的默认时间

默认时间是60秒。 停止或启动服务之后,立刻刷新eureka页面是看不到效果的,最好等2分钟。

eureka:
  server:
    # 开启自我保护模式(开启状态下服务停掉eureka不会立即清除掉宕掉的服务,所以false)
    enable-self-preservation: false
    # 清理无效节点,默认60*1000毫秒,即60秒
    eviction-interval-timer-in-ms: 5000

eureka获取服务列表

eureka后台如何看注册的服务

界面访问:
http://192.168.0.1:8889/

界面最简便,但是有时界面端口被禁掉,或者容易扫描到漏洞,就禁掉了。

curl http://192.168.0.1:8889/eureka/apps
这个拿到的是xml格式的报文。

curl http://192.168.0.1:8889/eureka/apps > eureka.xml

<applications>
  <versions__delta>1</versions__delta>
  <apps__hashcode>DOWN_1_UP_99_</apps__hashcode>
  <application>
    <name>service-user</name>
    <instance>
      <instanceId>192.168.0.1:8003</instanceId>
      <hostName>192.168.0.1</hostName>
      <app>service-user</app>
      <ipAddr>192.168.0.1</ipAddr>
      <status>UP</status>
      <overriddenstatus>UNKNOWN</overriddenstatus>
      <port enabled="true">8003</port>
      <securePort enabled="false">443</securePort>
      <countryId>1</countryId>
      <dataCenterInfo class="com.netflix.appinfo.InstanceInfo$DefaultDataCenterInfo">
        <name>MyOwn</name>
      </dataCenterInfo>
      <leaseInfo>
        <renewalIntervalInSecs>30</renewalIntervalInSecs>
        <durationInSecs>90</durationInSecs>
        <registrationTimestamp>1702639885249</registrationTimestamp>
        <lastRenewalTimestamp>1704352647876</lastRenewalTimestamp>
        <evictionTimestamp>0</evictionTimestamp>
        <serviceUpTimestamp>1702627994046</serviceUpTimestamp>
      </leaseInfo>
      <metadata class="java.util.Collections$EmptyMap"/>
      <homePageUrl>http://192.168.0.1:8003/</homePageUrl>
      <statusPageUrl>http://192.168.0.1:8003/info</statusPageUrl>
      <healthCheckUrl>http://192.168.0.1:8003/health</healthCheckUrl>
      <vipAddress>service-user</vipAddress>
      <secureVipAddress>service-user</secureVipAddress>
      <isCoordinatingDiscoveryServer>false</isCoordinatingDiscoveryServer>
      <lastUpdatedTimestamp>1702639885249</lastUpdatedTimestamp>
      <lastDirtyTimestamp>1702639884730</lastDirtyTimestamp>
      <actionType>ADDED</actionType>
    </instance>
    <instance>
      <instanceId>192.168.0.2:8003</instanceId>
      <hostName>192.168.0.2</hostName>
      <app>service-user</app>
      <ipAddr>192.168.0.2</ipAddr>
      <status>UP</status>
      <overriddenstatus>UNKNOWN</overriddenstatus>
      <port enabled="true">8003</port>
      <securePort enabled="false">443</securePort>
      <countryId>1</countryId>
      <dataCenterInfo class="com.netflix.appinfo.InstanceInfo$DefaultDataCenterInfo">
        <name>MyOwn</name>
      </dataCenterInfo>
      <leaseInfo>
        <renewalIntervalInSecs>30</renewalIntervalInSecs>
        <durationInSecs>90</durationInSecs>
        <registrationTimestamp>1702639913029</registrationTimestamp>
        <lastRenewalTimestamp>1704352630498</lastRenewalTimestamp>
        <evictionTimestamp>0</evictionTimestamp>
        <serviceUpTimestamp>1702628217414</serviceUpTimestamp>
      </leaseInfo>
      <metadata class="java.util.Collections$EmptyMap"/>
      <homePageUrl>http://192.168.0.2:8003/</homePageUrl>
      <statusPageUrl>http://192.168.0.2:8003/info</statusPageUrl>
      <healthCheckUrl>http://192.168.0.2:8003/health</healthCheckUrl>
      <vipAddress>service-user</vipAddress>
      <secureVipAddress>service-user</secureVipAddress>
      <isCoordinatingDiscoveryServer>false</isCoordinatingDiscoveryServer>
      <lastUpdatedTimestamp>1702639913029</lastUpdatedTimestamp>
      <lastDirtyTimestamp>1702639913026</lastDirtyTimestamp>
      <actionType>ADDED</actionType>
    </instance>
  </application>
  <application>
    <name>CONTAINER-CORE</name>
    <instance>
      <instanceId>192.168.0.4:11188</instanceId>
      <hostName>192.168.0.4</hostName>
      <app>CONTAINER-CORE</app>
      <ipAddr>192.168.0.4</ipAddr>
      <status>UP</status>
      <overriddenstatus>UNKNOWN</overriddenstatus>
      <port enabled="true">11188</port>
      <securePort enabled="false">443</securePort>
      <countryId>1</countryId>
      <dataCenterInfo class="com.netflix.appinfo.InstanceInfo$DefaultDataCenterInfo">
        <name>MyOwn</name>
      </dataCenterInfo>
      <leaseInfo>
        <renewalIntervalInSecs>30</renewalIntervalInSecs>
        <durationInSecs>90</durationInSecs>
        <registrationTimestamp>1702624960160</registrationTimestamp>
        <lastRenewalTimestamp>1704352625597</lastRenewalTimestamp>
        <evictionTimestamp>0</evictionTimestamp>
        <serviceUpTimestamp>1702624960160</serviceUpTimestamp>
      </leaseInfo>
      <metadata class="java.util.Collections$EmptyMap"/>
      <homePageUrl>http://192.168.0.4:11188/</homePageUrl>
      <statusPageUrl>http://192.168.0.4:11188/info</statusPageUrl>
      <healthCheckUrl>http://192.168.0.4:11188/health</healthCheckUrl>
      <vipAddress>container-core</vipAddress>
      <secureVipAddress>container-core</secureVipAddress>
      <isCoordinatingDiscoveryServer>false</isCoordinatingDiscoveryServer>
      <lastUpdatedTimestamp>1702624960160</lastUpdatedTimestamp>
      <lastDirtyTimestamp>1702624960090</lastDirtyTimestamp>
      <actionType>ADDED</actionType>
    </instance>
    <instance>
      <instanceId>192.168.0.3:11188</instanceId>
      <hostName>192.168.0.3</hostName>
      <app>CONTAINER-CORE</app>
      <ipAddr>192.168.0.3</ipAddr>
      <status>UP</status>
      <overriddenstatus>UNKNOWN</overriddenstatus>
      <port enabled="true">11188</port>
      <securePort enabled="false">443</securePort>
      <countryId>1</countryId>
      <dataCenterInfo class="com.netflix.appinfo.InstanceInfo$DefaultDataCenterInfo">
        <name>MyOwn</name>
      </dataCenterInfo>
      <leaseInfo>
        <renewalIntervalInSecs>30</renewalIntervalInSecs>
        <durationInSecs>90</durationInSecs>
        <registrationTimestamp>1702624805637</registrationTimestamp>
        <lastRenewalTimestamp>1704352625397</lastRenewalTimestamp>
        <evictionTimestamp>0</evictionTimestamp>
        <serviceUpTimestamp>1702624805637</serviceUpTimestamp>
      </leaseInfo>
      <metadata class="java.util.Collections$EmptyMap"/>
      <homePageUrl>http://192.168.0.3:11188/</homePageUrl>
      <statusPageUrl>http://192.168.0.3:11188/info</statusPageUrl>
      <healthCheckUrl>http://192.168.0.3:11188/health</healthCheckUrl>
      <vipAddress>container-core</vipAddress>
      <secureVipAddress>container-core</secureVipAddress>
      <isCoordinatingDiscoveryServer>false</isCoordinatingDiscoveryServer>
      <lastUpdatedTimestamp>1702624805637</lastUpdatedTimestamp>
      <lastDirtyTimestamp>1702624805566</lastDirtyTimestamp>
      <actionType>ADDED</actionType>
    </instance>
  </application>
</applications>

那么直接grep下即可。
grep instanceId eureka.xml -A 2 >eureka.txt

安全漏洞 EurekaURI路径存在未授权访问

http://192.168.0.1:8889 一般来说eureka的界面是可以直接访问的,但是也因为如此,被漏扫到了。

方案一:
添加访问账号密码。
但是这样其他微服务注册过来也需要账号密码,改动比较大,例如集群有几十个微服务。

方案二(推荐):
通过防火墙策略来实现。
只允许集群内的机器访问8889端口,其他机器不允许访问。
该方案改动较小。