update tunnel.md

This commit is contained in:
hengyunabc 2022-07-30 18:11:33 +08:00
parent 98a28bd9d1
commit d4c5b765e2
2 changed files with 13 additions and 6 deletions

View File

@ -105,9 +105,11 @@ Tunnel server 会以`_`做分隔符,提取出`appName`,方便按应用进行
### Tunnel Server 的管理页面
> 需要在 spring boot 的`application.properties`里配置 `arthas.enable-detail-pages=true`
::: tip
需要在 spring boot 的`application.properties`里配置 `arthas.enable-detail-pages=true`
> **注意,开放管理页面有风险!管理页面没有安全拦截功能,务必自行增加安全措施。**
**注意,开放管理页面有风险!管理页面没有安全拦截功能,务必自行增加安全措施。**
:::
在本地启动 tunnel-server然后使用`as.sh` attach并且指定应用名`--app-name test`
@ -147,11 +149,13 @@ id test_PE3LZO9NA9ENJYTPGL9L
### 安全和权限管理
::: tip
**强烈建议不要把 tunnel server 直接暴露到公网上。**
:::
目前 tunnel server 没有专门的权限管理
1. 用户需要自行开发,对 app name 鉴权.
1. 用户需要自行开发,对 app name 鉴权
2. 如果开放管理页面,需要增加安全措施。
### 集群方式管理

View File

@ -101,9 +101,11 @@ Alternatively, you can configure `appName` in `arthas.properties` in the unzippe
### Tunnel Server Management Page
> Need to configure `arthas.enable-detail-pages=true` in `application.properties` of spring boot
::: tip
Need to configure `arthas.enable-detail-pages=true` in `application.properties` of spring boot
> **Attention, opening admin pages is risky! There is no security blocking function on the management page, you must add security measures by yourself.**
**Attention, opening admin pages is risky! There is no security blocking function on the management page, you must add security measures by yourself.**
:::
Start the tunnel-server locally, then use `as.sh` attach, and specify the application name `--app-name test`:
@ -142,8 +144,9 @@ Then open the details, you can see a list of all connected agents:
![](/images/tunnel-server-agents.png)
### Security and Privilege Management
::: tip
**It is strongly recommended not to expose the tunnel server directly to the public network.**
:::
Currently tunnel server does not have special permission management