Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

connecting to opensearch via ipv6 #121

Closed
jahlives opened this issue Nov 7, 2023 · 1 comment
Closed

connecting to opensearch via ipv6 #121

jahlives opened this issue Nov 7, 2023 · 1 comment

Comments

@jahlives
Copy link

jahlives commented Nov 7, 2023

we currently run into an issue when we want the opensearch-fluentd plugin to connect via ipv6 to our opensearch. According to the docs here it should be configured as host "[ip:v6:add:ress]" When doing so the fluent logs state that an SSL connection

Could not communicate to OpenSearch, resetting connection and trying again. SSL_connect returned=1 errno=0 peeraddr=[REDACTED]:9200 state=error: sslv3 alert illegal parameter (OpenSSL::SSL::SSLError)
Remaining retry: 10. Retry to communicate after 32 second(s).

which is weird as at least on ipv4 the SSL to the same host is no problem. Is there any special SSL handling when connecting via IPv6 to a opensearch host?

Furthermore I wonder if it should be possible to use a hostname instead of a IPv6 address? We have a hostname which resolves to 3 AAAA recs of our opensearch hosts (only AAAA recs no A recs), but when using that hostname fluentd throws errors that I cannot resolve/connect as the hostname is invalid.

Copy link

github-actions bot commented Nov 7, 2023

@jahlives this issue was automatically closed because it did not follow the issue template.

@github-actions github-actions bot closed this as completed Nov 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant