From d4c5b765e20adec8eea72833ac58fc163fb53fc9 Mon Sep 17 00:00:00 2001 From: hengyunabc Date: Sat, 30 Jul 2022 18:11:33 +0800 Subject: [PATCH] update tunnel.md --- site/docs/doc/tunnel.md | 10 +++++++--- site/docs/en/doc/tunnel.md | 9 ++++++--- 2 files changed, 13 insertions(+), 6 deletions(-) diff --git a/site/docs/doc/tunnel.md b/site/docs/doc/tunnel.md index 8ea67df8..efe597b2 100644 --- a/site/docs/doc/tunnel.md +++ b/site/docs/doc/tunnel.md @@ -105,9 +105,11 @@ Tunnel server 会以`_`做分隔符,提取出`appName`,方便按应用进行 ### Tunnel Server 的管理页面 -> 需要在 spring boot 的`application.properties`里配置 `arthas.enable-detail-pages=true` +::: tip +需要在 spring boot 的`application.properties`里配置 `arthas.enable-detail-pages=true` -> **注意,开放管理页面有风险!管理页面没有安全拦截功能,务必自行增加安全措施。** +**注意,开放管理页面有风险!管理页面没有安全拦截功能,务必自行增加安全措施。** +::: 在本地启动 tunnel-server,然后使用`as.sh` attach,并且指定应用名`--app-name test`: @@ -147,11 +149,13 @@ id test_PE3LZO9NA9ENJYTPGL9L ### 安全和权限管理 +::: tip **强烈建议不要把 tunnel server 直接暴露到公网上。** +::: 目前 tunnel server 没有专门的权限管理 -1. 用户需要自行开发,对 app name 鉴权. +1. 用户需要自行开发,对 app name 鉴权。 2. 如果开放管理页面,需要增加安全措施。 ### 集群方式管理 diff --git a/site/docs/en/doc/tunnel.md b/site/docs/en/doc/tunnel.md index 26ef369c..f7dc5210 100644 --- a/site/docs/en/doc/tunnel.md +++ b/site/docs/en/doc/tunnel.md @@ -101,9 +101,11 @@ Alternatively, you can configure `appName` in `arthas.properties` in the unzippe ### Tunnel Server Management Page -> Need to configure `arthas.enable-detail-pages=true` in `application.properties` of spring boot +::: tip +Need to configure `arthas.enable-detail-pages=true` in `application.properties` of spring boot -> **Attention, opening admin pages is risky! There is no security blocking function on the management page, you must add security measures by yourself.** +**Attention, opening admin pages is risky! There is no security blocking function on the management page, you must add security measures by yourself.** +::: Start the tunnel-server locally, then use `as.sh` attach, and specify the application name `--app-name test`: @@ -142,8 +144,9 @@ Then open the details, you can see a list of all connected agents: ![](/images/tunnel-server-agents.png) ### Security and Privilege Management - +::: tip **It is strongly recommended not to expose the tunnel server directly to the public network.** +::: Currently tunnel server does not have special permission management