[erlang-questions] clustering with SSL (-proto_dist inet_tls)

Kevin Carosso kvc@REDACTED
Sat Apr 6 01:14:45 CEST 2013


We've run into a couple of issues using R15B03-1 and enabling SSL on
Erlang distribution protocol between cluster members:

 (1) We're used to being able to restrict the range of ports used
     between the cluster members via the -kernel parameters
     inet_dist_listen_min and inet_dist_listen_max.

     These seem to be ignored by -proto_dist inet_tls
     Is this expected? Is there an alternative mechanism for specifying
     a range for coordination with firewalls?

 (2) Everytime a BEAM that's been clustered using dist inet_tls exits, it
     produces what appears to be debug output to the console, of the form:

          close called #Port<0.1074> [{inet_tls_dist,close,1,
                                          [{file,"inet_tls_dist.erl"},{line,99}]},
                                      {lists,foreach,2,[{file,"lists.erl"},{line,1262}]},
                                      {net_kernel,terminate,2,
                                          [{file,"net_kernel.erl"},{line,570}]},
                                      {gen_server,terminate,6,
                                          [{file,"gen_server.erl"},{line,722}]},
                                      {proc_lib,init_p_do_apply,3,
                                          [{file,"proc_lib.erl"},{line,227}]}]

     which is coming from inet_tls_dist.erl right here:

          close(Socket) ->
              try
          	erlang:error(foo)
              catch _:_ ->
          	io:format("close called ~p ~p~n",[Socket, erlang:get_stacktrace()])
              end,
              gen_tcp:close(Socket),
              ok.

     Looks like left-over debug code, or similar.
     Is this a bug in R15B?

Thanks much,

	/Kevin Carosso




More information about the erlang-questions mailing list