[erlang-questions] clustering with SSL (-proto_dist inet_tls)

[Ingela Andin]

Hi!

2013/4/6, Kevin Carosso <kvc@REDACTED>:
> We've run into a couple of issues using R15B03-1 and enabling SSL on
> Erlang distribution protocol between cluster members:
>
>  (1) We're used to being able to restrict the range of ports used
>      between the cluster members via the -kernel parameters
>      inet_dist_listen_min and inet_dist_listen_max.
>
>      These seem to be ignored by -proto_dist inet_tls
>      Is this expected? Is there an alternative mechanism for specifying
>      a range for coordination with firewalls?


This is proably a bug we will look into it.

>  (2) Everytime a BEAM that's been clustered using dist inet_tls exits, it
>      produces what appears to be debug output to the console, of the form:
>
>           close called #Port<0.1074> [{inet_tls_dist,close,1,
>
> [{file,"inet_tls_dist.erl"},{line,99}]},
>
> {lists,foreach,2,[{file,"lists.erl"},{line,1262}]},
>                                       {net_kernel,terminate,2,
>
> [{file,"net_kernel.erl"},{line,570}]},
>                                       {gen_server,terminate,6,
>
> [{file,"gen_server.erl"},{line,722}]},
>                                       {proc_lib,init_p_do_apply,3,
>
> [{file,"proc_lib.erl"},{line,227}]}]
>
>      which is coming from inet_tls_dist.erl right here:
>
>           close(Socket) ->
>               try
>           	erlang:error(foo)
>               catch _:_ ->
>           	io:format("close called ~p ~p~n",[Socket,
> erlang:get_stacktrace()])
>               end,
>               gen_tcp:close(Socket),
>               ok.
>
>      Looks like left-over debug code, or similar.
>      Is this a bug in R15B?
>

We will remove that debug code thanks for alerting us.

Regards Ingela Erlang/OTP team - Ericsson AB