Ntuziaka onye ọrụ API Juniper Streaming

Ntuziaka a na-akọwa otu esi ewepụ data na Paragon Active Assurance site na API nkwanye ngwaahịa.
API yana onye ahịa na-enuba na-esonye na nrụnye nkwa ike nke Paragon.
Agbanyeghị, a chọrọ ntakịrị nhazi tupu ị nwee ike iji API. Ekpuchiri nke a na “Configuring the Streaming API” na ibe 1 isi.

gafereview

Isiakwụkwọ a na-akọwa otu esi ahazi API Streaming iji nye ohere ịdenye aha na ozi metrics site na Kafka.
N'okpuru anyị ga-agafe:

Otu esi eme API gụgharia
Otu esi ahazi Kafka ka ọ gee ndị ahịa mpụga ntị
Otu esi ahazi Kafka iji ACL wee guzobe nzuzo SSL maka ndị ahịa kwuru

Kedu ihe bụ Kafka?

Kafka bụ usoro mgbasa ozi mmemme nke na-enye ohere ijide data ezitere site na isi mmalite mmemme dị iche iche (ihe mmetụta, ọdụ data, ngwaọrụ mkpanaka) n'ụdị iyi mmemme, yana ịchekwa oge na-adịgide adịgide nke iyi ihe omume ndị a maka iweghachite na ntughari.
Site na Kafka ọ ga-ekwe omume ijikwa mmemme gụgharia ngwụcha-ọgwụgwụ na nkesa nkesa, nke nwere ike ịgbatị, na-agbanwe, na-anabata mmejọ, yana n'ụzọ echekwara.
IHE: Enwere ike ịhazi Kafka n'ọtụtụ ụzọ dị iche iche ma emebere ya maka scalability na sistemụ anaghị arụ ọrụ. Akwụkwọ a na-elekwasị anya naanị otu esi ahazi ya ka ọ jiri njirimara API Streaming dị na Paragon Active Assurance Control Center. Maka ntọala ndị ọzọ dị elu anyị na-ezo aka na akwụkwọ Kafka gọọmentị: kafka.apache.org/26/documentation.html.

Okwu okwu

Kafka: ikpo okwu na-enuba mmemme.
Isiokwu Kafka: Nchịkọta ihe omume.
Ndị debanyere aha/onye ahịa Kafka: Akụkụ na-ahụ maka iweghachi ihe omume echekwara na isiokwu Kafka.

Onye na-ere ahịa Kafka: Ihe nkesa oyi akwa nke ụyọkọ Kafka.
SSL/TLS: SSL bụ ụkpụrụ echekwara maka izipu ozi na nzuzo na ịntanetị. TLS bụ onye nọchiri SSL, ewepụtara na 1999.
SASL: Framework nke na-enye usoro maka njirimara onye ọrụ, ịlele iguzosi ike n'ezi ihe data, na izo ya ezo.

Ndị debanyere aha API na-agagharị agagharị: Akụkụ na-ahụ maka iweghachi mmemme echekwara na isiokwu akọwapụtara na Paragon Active Assurance na pụtara maka ịnweta mpụga.
Ikike Asambodo: Ụlọ ọrụ tụkwasịrị obi na-ewepụta ma kagbuo asambodo igodo ọha.

Akwụkwọ mgbọrọgwụ ikike ikike: Asambodo igodo ọha na-achọpụta ikike asambodo.

Kedu ka API gụgharia si arụ ọrụ

Dịka ekwuru na mbụ, API Streaming na-enye ohere ka ndị ahịa dịpụrụ adịpụ weghachi ozi gbasara metrik na Kafka.
A na-eziga metrik niile nke ndị nnọchi anya ule anakọtara n'oge ule ma ọ bụ ọrụ nlekota na ọrụ Stream.
Mgbe usoro nhazi gasịrị, ọrụ Stream na-ebipụta metrik ndị ahụ na Kafka yana metadata ndị ọzọ.

Isiokwu Kafka

Kafka nwere echiche nke isiokwu a na-ebipụta data niile. Na Paragon Active Assurance enwere ọtụtụ isiokwu Kafka dị; Otú ọ dị, ọ bụ naanị akụkụ nke ndị a ka e mere maka ịnweta mpụga.
Akaụntụ mmesi obi ike nke Paragon ọ bụla dị na Control Center nwere isiokwu abụọ raara onwe ya nye. N'okpuru, ACCOUNT bụ aha mkpirisi akaụntụ:

paa.ọha.akaụntụ.{ACCOUNT}.metrics
Ebiputere ozi metrik niile maka akaụntụ enyere na isiokwu a

Ọnụ ọgụgụ buru ibu nke data
Ugboro mmelite dị elu
paa.ọha.akaụntụ.{ACCOUNT}.metadata
Nwere metadata metụtara data metrik, maka example ule, nyochaa ma ọ bụ onye nnọchi anya ule jikọtara na metrik
Obere data
Ugboro mmelite dị ala

Na-eme API gụgharia

IHE: Ntuziaka ndị a ga-agba ọsọ na sava Center Control site na iji sudo.
Ebe API gụgharia na-agbakwunye ụfọdụ isi na ebe njikwa, anaghị enyere ya aka na ndabara. Iji mee API, anyị ga-ebu ụzọ mee ka ibipụta metrics na Kafka na nhazi bụ isi file:

/etc/netrounds/netrounds.conf
KAFKA_METRICS_ENABLED = Eziokwu
Ịdọ aka ná ntị: Ịkwado njirimara a nwere ike imetụta arụmọrụ Center Control. Jide n'aka na i meela ihe atụ gị n'otu aka ahụ.
Na-esote, iji mee ka iziga metrik ndị a gaa na isiokwu Kafka ziri ezi:
/etc/netrounds/metrics.yaml
streaming-api: eziokwu

Iji mee ma malite ọrụ API Streaming, gbaa ọsọ:
sudo ncc ọrụ na-enyere timescaledb metrics ọrụ sudo ncc na-amalite timescaledb metrics
N'ikpeazụ, malitegharịa ọrụ ndị a:
sudo ncc malitegharịa

Na-enyocha na API gụgharia na-arụ ọrụ na ebe njikwa

IHE: A ga-eme ntuziaka ndị a na sava ebe njikwa.
Ị nwere ike ịchọpụta ugbu a na ị na-enweta metrik na isiokwu Kafka ziri ezi. Iji mee nke a, wụnye ngwa kafkacat:
sudo apt-nweta mmelite sudo apt-nweta wụnye kafkacat
Ọ bụrụ na ị nwere ule ma ọ bụ nyochaa na-agba ọsọ na Control Center, ị ga-enwe ike iji kafkacat nweta metrics na metadata na isiokwu ndị a.
Dochie akaụntụ m na obere aha akaụntụ gị (nke a bụ ihe ị na-ahụ na ebe njikwa gị URL):
mbupu METRICS_TOPIC=paa.public.accounts.myaccount.metrics
mbupu METADATA_TOPIC=paa.public.accounts.myaccount.metadata
Ị ga-ahụ metrics ugbu a site na iji iwu a:
kafkacat -b ${KAFKA_FQDN}:9092 -t ${METRICS_TOPIC} -C -e
Iji view metadata, mee iwu a (rịba ama na nke a agaghị emelite ugboro ugboro):
kafkacat -b ${KAFKA_FQDN}:9092 -t ${METADATA_TOPIC} -C -e
IHE:
kafkacat” Client Examples” na ibe 14
Nke a na-achọpụta na anyị nwere API gụgharia na-arụ ọrụ site na ebe njikwa. Agbanyeghị, o yikarịrị ka ị nwere mmasị ịnweta data sitere n'aka onye ahịa mpụga kama. Akụkụ na-esote na-akọwa otu esi emepe Kafka maka ịnweta mpụga.

Mepee Kafka maka ndị ọbịa mpụga

IHE: A ga-eme ntuziaka ndị a na sava ebe njikwa.
Site na ndabara, a haziri Kafka na-agba ọsọ na Control Center ka ọ gee ntị na localhost maka ojiji ime.
Ọ ga-ekwe omume imeghe Kafka maka ndị ahịa mpụga site n'ịgbanwe ntọala Kafka.
Ijikọ na Kafka: Caveats
kpachara anya: Biko gụọ nke ọma nke ọma, ebe ọ bụ na ọ dị mfe ịbanye na okwu njikọ na Kafka ma ọ bụrụ na ị ghọtaghị echiche ndị a.
N'ime ntọala njikwa njikwa akọwapụtara na akwụkwọ a, enwere naanị otu onye na-ere ahịa Kafka.
Otú ọ dị, rịba ama na onye na-ere ahịa Kafka pụtara ịgba ọsọ dị ka akụkụ nke ụyọkọ Kafka nke nwere ike ịgụnye ọtụtụ ndị na-ere ahịa Kafka.
Mgbe ị na-ejikọta na onye na-ere ahịa Kafka, onye ahịa Kafka na-ahazi njikọ mbụ. N'ime njikọ a, onye na-ere ahịa Kafka ga-eweghachite ndepụta nke "ndị na-ege ntị mgbasa ozi", nke bụ ndepụta nke otu ma ọ bụ karịa ndị na-ere ahịa Kafka.
Na ịnweta ndepụta a, onye ahịa Kafka ga-akwụsị njikọ, wee jikọọ na otu n'ime ndị na-ege ntị mgbasa ozi. Ndị na-ege ntị kpọsara ga-enwerịrị aha nnabata ma ọ bụ adreesị IP nke ndị ahịa Kafka nwere ike ịnweta, ma ọ bụ onye ahịa agaghị ejikọta ya.
Ọ bụrụ na ejiri SSL ezoro ezo, gụnyere asambodo SSL nke ejikọtara na aha nnabata, ọ dị mkpa karịa na onye ahịa Kafka nata adreesị ziri ezi iji jikọọ na, ebe ọ bụ na enwere ike ịjụ njikọ ahụ.
Gụkwuo maka ndị na-ege Kafka ebe a: www.confluent.io/blog/kafka-listeners-explained
SSL/TLS ezoro ezo
Iji hụ na ọ bụ naanị ndị ahịa tụkwasịrị obi ka anabatara Kafka na API Streaming, anyị ga-ahazi ihe ndị a:

Nyocha: Ndị ahịa ga-enye aha njirimara na paswọọdụ site na njikọ SSL/TLS dị n'etiti onye ahịa na Kafka.
Ikike: Ndị ahịa nwere nkwenye nwere ike ịrụ ọrụ ndị ACL na-ahazi.
Nke a bụ njedebeview:

*) Nyocha aha njirimara/paswọọdụ emere na ọwa ezoro ezo SSL
Iji ghọta nke ọma ka nzuzo SSL/TLS si arụ ọrụ maka Kafka, biko rụtụ aka na akwụkwọ gọọmentị: docs.confluent.io/platform/current/kafka/encryption.html
Asambodo SSL/TLS gafereview
IHE: Na nkeji nke a anyị ga-eji okwu ndị a:
Asambodo: Asambodo SSL nke ndị ikike Asambodo bịanyere aka na ya. Onye na-ere ahịa Kafka ọ bụla nwere otu.
Igodo: Ụlọ ahịa igodo file nke na-echekwa akwụkwọ. Ụlọ ahịa igodo file nwere igodo nzuzo nke asambodo; ya mere, ekwesịrị idobe ya na nchekwa.
Ụlọ nkwakọba ihe: A file nwere asambodo CA ntụkwasị obi.
Iji guzobe nkwenye n'etiti onye ahịa mpụga na Kafka na-agba ọsọ na Control Center, akụkụ abụọ ahụ ga-enwerịrị akwụkwọ ikike nke akọwapụtara ya na akwụkwọ metụtara ya nke Asambodo Asambodo (CA) bịanyere aka na ya na akwụkwọ mgbọrọgwụ CA.
Na mgbakwunye na nke a, onye ahịa ga-enwekwa ụlọ ahịa ntụkwasị obi na akwụkwọ mgbọrọgwụ CA.
Asambodo mgbọrọgwụ CA na-ahụkarị maka onye na-ere ahịa Kafka na onye ahịa Kafka.
Ịmepụta Asambodo achọrọ
Ekpuchiri nke a na “Ihe Okike” dị na peeji nke 17.
Nhazi Kafka Broker SSL/TLS na ebe njikwa
IHE: A ga-eme ntuziaka ndị a na sava ebe njikwa.
IHE: Tupu ịga n'ihu, ị ga-emerịrị ụlọ ahịa ahụ nke nwere asambodo SSL site na isoro ntuziaka dị na “Ihe mgbakwunye” na ibe 17. Ụzọ ndị a kpọtụrụ aha n'okpuru si na ntuziaka ndị a.
Ebe nchekwa SSL bụ a file echekwara na diski na file ndọtị .jks.
Ozugbo ị nwetara asambodo achọrọ maka ma onye na-ere ahịa Kafka na onye ahịa Kafka dị, ị nwere ike ịga n'ihu site na ịhazi onye na-ere ahịa Kafka na-agba ọsọ na Control Center. Ịkwesịrị ịma ihe ndị a:

: Aha nnabata ọha nke Control Center; nke a ga-edozirịrị ma nweta ndị ahịa Kafka.

: Okwuntughe ụlọ ahịa enyere mgbe ị na-eke asambodo SSL.
na : Ndị a bụ okwuntughe nke ịchọrọ ịtọ maka onye nchịkwa na onye ọrụ ahịa n'otu n'otu.
Rịba ama na ị nwere ike itinyekwu ndị ọrụ, dịka egosiri na example.
Dezie ma ọ bụ tinye (yana sudo access) ihe onwunwe dị n'okpuru /etc/kafka/server.properties, na-etinye mgbanwe ndị dị n'elu dị ka egosiri:

Ịdọ aka ná ntị: Ewepụla PLAINTEXT://localhost:9092; nke a ga-emebi ọrụ Control Center ebe ọ bụ na ọrụ ime agaghị enwe ike ịkparịta ụka.
…# Adreesị ndị na-ere ahịa Kafka na-ege ntị.
ndị na-ege ntị=PLAINTEXT://localhost:9092,SASL_SSL://0.0.0.0:9093
# Ndị a bụ ndị nnabata akpọsara azụ na njikọ ndị ahịa ọ bụla.
advertised.listeners=PLAINTEXT://localhost:9092,SASL_SSL:// : 9093…
####### CONFIG
# Nhazi SSL
ssl.endpoint.identification.algorithm=
ssl.keystore.location=/var/ssl/private/kafka.server.keystore.jks
ssl.keystore.password=
ssl.key.password=
ssl.client.auth=ọ dịghị
ssl.protocol=TLSv1.2
# Nhazi SASL sasl.enabled.mechanisms=PLAIN
listener.name.sasl_ssl.plain.sasl.jaas.config=org.apache.kafka.common.security.plain.PlainLoginMo dule chọrọ \ aha njirimara = "admin" \ paswọọdụ =" " \ user_admin =" " \ user_client =" ”; # IHE: enwere ike ịgbakwunye ndị ọrụ na onye ọrụ_ =
# ikike, gbanye ACLs authorizer.class.name=kafka.security.authorizer.AclAuthorizer super.users=Onye ọrụ: admin
Ịtọlite ndepụta njikwa nnweta (ACLs)
Na-agbanye ACL na localhost
Ịdọ aka ná ntị: Anyị ga-ebu ụzọ guzobe ACL maka localhost, ka Control Center n'onwe ya ka nwere ike nweta Kafka. Ọ bụrụ na emeghị nke a, ihe ga-agbaji.
######### ndenye ACL maka ndị ọrụ amaghị
/usr/lib/kafka/bin/kafka-acls.sh
–authorizer kafka.security.authorizer.AclAuthorizer -authorizer-properties zookeeper.connect=localhost:2181 –add –allow-onye ọrụ:ANONYMOUS –allow-host 127.0.0.1 –cluster
/usr/lib/kafka/bin/kafka-acls.sh
–authorizer kafka.security.authorizer.AclAuthorizer \ –authorizer-properties zookeeper.connect=localhost:2181 –add –allow-isi onye ọrụ:ANONYMOUS –allow-host 127.0.0.1 – isiokwu '*'
/usr/lib/kafka/bin/kafka-acls.sh
–authorizer kafka.security.authorizer.AclAuthorizer \ –authorizer-properties zookeeper.connect=localhost:2181 –add –allow-isi onye ọrụ:ANONYMOUS –allow-host 127.0.0.1 –otu ‘*'
Anyị kwesịrị ime ka ACL nwee ohere ịgụ naanị mpụga, ka ndị ọrụ mpụga gụta isiokwu paa.ọha.*.
IHE: Maka njikwa mara mma karịa, biko rụtụ aka na akwụkwọ Kafka gọọmentị.
######### ndenye ACL maka ndị ọrụ mpụga
/usr/lib/kafka/bin/kafka-acls.sh
–authorizer kafka.security.authorizer.AclAuthorizer \–authorizer-properties zookeeper.connect=localhost:2181 \
–add –allow-isi onye ọrụ:* –ọrụ na-agụ –operation kọwara \–otu 'NCC'
/usr/lib/kafka/bin/kafka-acls.sh
-onye edemede kafka.security.authorizer.AclAuthorizer \
–authorizer-properties zookeeper.connect=localhost:2181 \
-add -allow-onye ọrụ:* -ọrụ na-agụ -ọrụ kọwara \
– isiokwu paa.ọha. -Akụkọ-ụkpụrụ-ụdị prefixed
Ozugbo ịmechara nke a, ịkwesịrị ịmalitegharị ọrụ ndị a:
sudo ncc malitegharịa
Iji nyochaa na onye ahịa nwere ike guzobe njikọ echekwara, mee iwu a na kọmputa ndị ahịa dị na mpụga (ọ bụghị na sava Control Center). N'okpuru, PUBLIC_HOSTNAME bụ aha nnabata ebe njikwa:
openssl s_client -debug -jikọọ ${PUBLIC_HOSTNAME}:9093 -tls1_2 | grep "A akwadoro mkparita ụka echekwara"
Na mmepụta iwu ị ga-ahụ asambodo nkesa yana ndị a:
akwadoro mkparita uka siri ike
Iji hụ na enyerela ọrụ dị n'ime ohere ịnweta sava Kafka, biko lelee ndekọ na-esonụfiles:

Na-akwado Njikọ Ndị ahịa Mpụga

kafkacat
IHE: A ga-eme ntuziaka ndị a na kọmputa ndị ahịa (ọ bụghị na sava ebe njikwa).
IHE: Iji gosi ozi metrik, hụ na opekata mpe otu nleba anya na-agba na Ogige njikwa.
Iji nyochaa na kwado njikọ dị ka onye ahịa si mpụga, ọ ga-ekwe omume iji kafkacat nke arụnyere na ngalaba "Ịchọpụta na API Streaming na-arụ ọrụ na Control Center" na ibe 4.
Mee usoro ndị a:
IHE: N'okpuru, CLIENT_USER bụ onye ọrụ akọwapụtara na mbụ file /etc/kafka/server.properties in
Ebe njikwa: ya bụ, user_client na paswọọdụ edobere ebe ahụ.
Asambodo mgbọrọgwụ CA na-eji abanye n'akụkụ SSL akwụkwọ ga-adịrịrị na onye ahịa.

Mepụta a file client.properties nwere ọdịnaya ndị a:
security.protocol=SASL_SSL
ssl.ca.location={PATH_TO_CA_CERT}
sasl.mechanisms=PLAIN
sasl.username={CLIENT_USER}
sasl.password={CLIENT_PASSWORD} ebe
• {PATH_TO_CA_CERT} bụ ebe asambodo mgbọrọgwụ CA nke onye na-ere ahịa Kafka ji
• {CLIENT_USER} na {CLIENT_PASSWORD} bụ nzere onye ọrụ maka onye ahịa.
• Gbaa iwu a ka ịhụ ozi kafkacat na-eri:
mbupu KAFKA_FQDN =
mbupụ METRICS_TOPIC=paa.public.accounts. .metrics
kafkacat -b ${KAFKA_FQDN}:9093 -F client.properties -t ${METRICS_TOPIC} -C -e
ebe {METRICS_TOPIC} bụ aha isiokwu Kafka nwere prefix "paa.public.".

IHE: Ụdị kafkacat ochie anaghị enye nhọrọ -F maka ịgụ ntọala ndị ahịa site na a file. Ọ bụrụ na ị na-eji ụdị ụdị a, ị ga-enwerịrị otu ntọala site na ahịrị iwu dịka egosiri n'okpuru.
kafkacat -b ${KAFKA_FQDN}:9093 \
-X security.protocol=SASL_SSL \
-X ssl.ca.location={PATH_TO_CA_CERT} \
-X sasl.mechanisms=PLAIN \
-X sasl.username={CLIENT_USER} \
-X sasl.password={CLIENT_PASSWORD} \
-t ${METRICS_TOPIC} -C -e
Iji mebie njikọ ahụ, ịnwere ike iji nhọrọ -d:
Mebie nkwukọrịta ndị ahịa
kafkacat -d ahịa -b ${KAFKA_FQDN}:9093 -F client.properties -t ${METRICS_TOPIC} -C -e
# Mebie nkwukọrịta onye na-ere ahịa
kafkacat -d broker -b ${KAFKA_FQDN}:9093 -F client.properties -t ${METRICS_TOPIC} -C -e
Jide n'aka na ị na-ezo aka na akwụkwọ maka ụlọ akwụkwọ ndị ahịa Kafka na-eji, dịka ihe onwunwe nwere ike ịdị iche na nke ndị ahịa.properties.

Usoro ozi

A na-edobe ozi ndị ejiri maka metrik na isiokwu metadata n'usoro ihe nchekwa Protocol (protobuf) (lee. developers.google.com/protocol-buffers). Atụmatụ maka ozi ndị a na-agbaso usoro a:
Metrics Protobuf Schema
syntax = "proto3"; mbubata "google/protobuf/timestamp.proto"; ngwugwu paa.streamingapi; nhọrọ go_package = ".;paa_streamingapi"; Metrics ozi {google.protobuf.Timestamp ogeamp = 1; map ụkpụrụ = 2; int32 nha_id = 3; } /** * Ọnụ metric nwere ike ịbụ integer ma ọ bụ see n'elu mmiri. */
ozi MetricValue {otu n'ime ụdị {int64 int_val = 1; sere n'elu float_val = 2; } }
Metadata Protobuf Schema
syntax = "proto3"; ngwugwu paa.streamingapi; nhọrọ go_package = ".;paa_streamingapi"; Metadata ozi {int32 dimension_id = 1; eriri nha nha_aha = 2; map tags = 13; }

Onye ahịa Examples

IHE: Ezubere iwu ndị a ka ọ rụọ ọrụ na onye ahịa mpụga, maka exampLaptọọpụ gị ma ọ bụ ihe yiri ya, ọ bụghị na Control Center.
IHE: Ka egosipụtara ozi metrik, hụ na opekata mpe otu nyocha na-agba na Ogige njikwa.
Egwuregwu bọọlụ Control Center gụnyere ebe nchekwa paa-streaming-api-client-examples.tar.gz (onye ahịa-examples), nke nwere exampEderede Python na-egosi otu esi eji API Streaming.
Ịwụnye na ịhazi Client Examples
Ị na-ahụ ahịa-examples na Paragon Active Assurance Control Center nchekwa:
mbupụ CC_VERSION=3.3.1
cd ./paa-control-center_${CC_VERSION} ls paa-streaming-api-client-examples*
Iji wụnye client-exampna kọmputa onye ahịa gị dịpụrụ adịpụ, gaba n'ihu dị ka ndị a:
# Mepụta ndekọ maka iwepụta ọdịnaya nke onye ahịa bụbuamples tarball mkdir paa-streaming-api-client-examples
# Wepụ ọdịnaya nke onye ahịa examples tarball tar xzf paa-streaming-api-client-examples.tar.gz -C paa-streaming-api-client-examples
# Gaa na akwụkwọ ndekọ aha emepụtara ọhụrụ cd paa-streaming-api-client-examples client-examples chọrọ Docker ka ọ gbaa ọsọ. Enwere ike ịchọta nbudata na ntuziaka nwụnye maka Docker na https://docs.docker.com/engine/install.
Iji Client Examples
Onye ahịa-examples ngwaọrụ nwere ike na-agba ọsọ na ma isi ma ọ bụ elu mode na-ewu examples nke iche iche mgbagwoju. N'okwu abụọ ahụ, ọ ga-ekwe omume ịgba ọsọ examples na nhazi file nwere ihe ndị ọzọ maka nhazi ọzọ nke akụkụ ndị ahịa.
Ụkpụrụ ntọala N'ụdị isi, a na-ebugharị metrics na metadata ha iche. Iji mezuo nke a, onye ahịa na-ege ntị na isiokwu Kafka ọ bụla dị maka ịnweta mpụga wee bipụta ozi enwetara na njikwa.
Iji malite ogbugbu nke isi examples, gbaa: ./build.sh run-basic -kafka-brokers localhost:9092 - akaụntụ ACCOUNT_SHORTNAME
ebe ACCOUNT_SHORTNAME bụ aha mkpirisi akaụntụ ịchọrọ inweta metrik ahụ.
Iji kwụsị ogbugbu nke example, pịa Ctrl + C. (Enwere ike ịnwe ntakịrị igbu oge tupu ogbugbu ahụ akwụsị n'ihi na onye ahịa na-echere ihe omume oge.)
Ụdị dị elu
IHE: A na-egosipụta metrics naanị maka ndị nleba anya HTTP na-agba ọsọ na ebe njikwa.
Mmezu na ọnọdụ dị elu na-egosi njikọ dị n'etiti ozi metadata. Nke a ga-ekwe omume n'ihi ọnụnọ na ozi metric ọ bụla nke ubi id iyi nke na-ezo aka na ozi metadata kwekọrọ.
Iji mezuo examples, run: ./build.sh run-advanced -kafka-brokers localhost:9092 -akaụntụ ACCOUNT_SHORTNAME ebe ACCOUNT_SHORTNAME bụ aha mkpirisi nke akaụntụ ahụ ịchọrọ inweta metrik ahụ.
Iji kwụsị ogbugbu nke example, pịa Ctrl + C. (Enwere ike ịnwe ntakịrị igbu oge tupu ogbugbu ahụ akwụsị n'ihi na onye ahịa na-echere ihe omume oge.)
Ntọala mgbakwunye
Ọ ga-ekwe omume ịgba ọsọ examples nwere nhazi ọzọ nke onye ahịa site na iji –config-file nhọrọ sochiri a file aha nwere akụrụngwa n'ụdị igodo = uru.
./build.sh run-advanced \-kafka-brokers localhost:9092 - akaụntụ ACCOUNT_SHORTNAME \ -config-file client_config.properties
IHE: Ha niile files zoro aka na iwu dị n'elu ga-adịrịrị na ndekọ aha ugbu a wee zoo ya site na iji naanị ụzọ ikwu. Nke a na-emetụta ma -config-file arụmụka na ndenye niile na nhazi file na-akọwa file ebe.
Na-akwado nkwenye ndị ahịa mpụga
Iji kwado nkwenye ndị ahịa site na mpụga ebe njikwa site na iji ahịa-examples, mee usoro ndị a:

Site na Paragon Active Assurance Control Center nchekwa, gbanwee gaa na paa-streaming-api-clientexamples folda:
cd paa-streaming-api-client-examples
Detuo ca-cert mgbọrọgwụ CA n'ime ndekọ aha ugbu a.
Mepụta onye ahịa.properties file ya na ọdịnaya ndị a:
security.protocol=SASL_SSL
ssl.ca.location=ca-cert
sasl.mechanism=PLAIN
sasl.username={CLIENT_USER}
sasl.password={CLIENT_PASSWORD}
ebe {CLIENT_USER} na {CLIENT_PASSWORD} bụ nzere onye ọrụ maka onye ahịa.
Gbaa isi examples:
mbupu KAFKA_FQDN = ./build.sh run-basic –kafka-brokers ${KAFKA_FQDN}:9093 \ –akaụntụ ACCOUNT_SHORTNAME
- nhazi-file client.properties ebe ACCOUNT_SHORTNAME bụ aha mkpirisi akaụntụ ị chọrọ inweta metrik ahụ.
Gbaa Advanced examples:
mbupu KAFKA_FQDN = ./build.sh run-advanced –kafka-brokers ${KAFKA_FQDN}:9093 \ –akaụntụ ACCOUNT_SHORTNAME–config-file client.property

Ihe odide ntụkwasị

Na mgbakwunye a anyị na-akọwa otu esi emepụta:

ebe nchekwa file maka ịchekwa akwụkwọ SSL onye na-ere ahịa Kafka
ụlọ ahịa ntụkwasị obi file maka ịchekwa Asambodo Asambodo (CA) akwụkwọ mgbọrọgwụ eji abanye na asambodo onye na-ere ahịa Kafka.

Ịmepụta Asambodo Broker Kafka
Ịmepụta Asambodo Iji ezigbo Asambodo ikike (A kwadoro)
A na-atụ aro ka ị nweta ezigbo asambodo SSL site na CA ntụkwasị obi.
Ozugbo ị kpebiri na a CA, detuo ha CA mgbọrọgwụ akwụkwọ ca-cert file gaa n'ụzọ nke gị dị ka egosiri n'okpuru:
mbupu CA_PATH=~/my-ca mkdir ${CA_PATH} cp ca-cert ${CA_PATH}
Mepụta ikike asambodo nke gị
IHE: Dị ka ọ na-adịkarị, ị ga-enwerịrị ndị nwe asambodo gị binye aka na ya; lee nkeji nke bu ụzọ. Ihe na-esote bụ naanị example.
N'ebe a, anyị na-emepụta akwụkwọ mgbọrọgwụ ikike ikike (CA) nke anyị file dị irè maka ụbọchị 999 (anaghị akwado ya na mmepụta):
# Mepụta ndekọ maka ịchekwa mbupụ CA_PATH=~/my-ca mkdir ${CA_PATH}
# Mepụta asambodo CA openssl req -new -x509 -keyout ${CA_PATH}/ca-key -out ${CA_PATH}/ca-cert -days 999
Ịmepụta ụlọ ahịa ntụkwasị obi ndị ahịa
Ugbu a ị nwere ike ịmepụta ntụkwasị obi file nke nwere ca-cert ewepụtara n'elu. Nke a file onye ahịa Kafka ga-achọ nke ga-enweta API Streaming:
keytool -keystore kafka.client.truststore.jks \ -alias CARoot \ -importcert -file ${CA_PATH}/ca-cert
Ugbu a akwụkwọ CA dị na Truststore, onye ahịa ga-atụkwasị akwụkwọ ọ bụla aka na ya.
I kwesịrị iṅomi ya file kafka.client.truststore.jks gaa na ebe amaara na kọmputa onye ahịa gị wee rụtụ aka na ya na ntọala.
Ịmepụta igodo maka onye na-ere ahịa Kafka
Iji mepụta akwụkwọ SSL onye na-ere ahịa Kafka wee wee keystore kafka.server.keystore.jks, gaba n'ihu dị ka ndị a:
Na-amụba Asambodo SSL
N'okpuru, 999 bụ ọnụọgụ ụbọchị nke nkwado nke igodo ahụ, yana FQDN bụ ngalaba aha onye ahịa tozuru oke (aha nnabata ọha nke ọnụ).
IHE: Ọ dị mkpa na FQDN dabara kpọmkwem aha nnabata nke onye ahịa Kafka ga-eji jikọọ na ebe njikwa. sudo mkdir -p /var/ssl/private
sudo chown -R $USER: /var/ssl/cd nzuzo /var/ssl/bupu onwe FQDN=
keytool -keystore kafka.server.keystore.jks \ -alias server \ -validity 999 \ -genkey -keyalg RSA -ext SAN=dns:${FQDN}
Mepụta arịrịọ mbinye aka akwụkwọ ma chekwaa ya na file Arịrịọ-arịrịọ nke nkesa:
keytool -keystore kafka.server.keystore.jks \ -alias nkesa \ -certreq \ -file arịrịọ nke ihe nkesa
I kwesịrị iziga ya ugbu a file arịrịọ cert-server-request na Asambodo Asambodo gị (CA) ma ọ bụrụ na ị na-eji nke dị adị. Ha ga-eweghachite akwụkwọ e binyere aka n'akwụkwọ. Anyị ga-ezo aka na nke a dị ka ihe nkesa-binyere aka n'okpuru. Ịbanye na SSL Asambodo Iji a onwe-kere ca Certificate
IHE: Ọzọ, iji CA nke gị adịghị atụ aro na usoro mmepụta. Binye aka na asambodo site na iji CA file arịrịọ cert-server, nke na-ewepụta asambodo mbinye aka-ihe nkesa-binyere aka. Hụ okpuru; ca-paswọọdụ bụ paswọọdụ atọrọ mgbe ị na-eke asambodo CA.
cd /var/ssl/private openssl x509 -req \ -CA ${CA_PATH}/ca-cert \ -CAkey ${CA_PATH}/ca-key \ -na cert-server-request \ -out cert-server-binyere aka \ -days 999 -CAcreateserial \-passin pass:{ca-password}
Na-ebubata Asambodo mbinye aka n'ime igodo
Bubata akwụkwọ mgbọrọgwụ ca-cert n'ime ụlọ ahịa ahụ:
keytool -keystore kafka.server.keystore.jks \ -alias ca-cert \ -import \ -file ${CA_PATH}/ca-cert
Bubata asambodo mbinye aka nke akpọrọ ka ihe nkesa-binyere aka n'akwụkwọ:
keytool -keystore kafka.server.keystore.jks \ -alias nkesa \ -import \ -file mbinye aka na asambodo-ihe nkesa
Nke file Ekwesịrị iṅomi kafka.server.keystore.jks na ebe amaara na sava Control Center, wee zoo aka na /etc/kafka/server.properties.
Iji API gụgharia

Izugbe

API nkwanye ugwu na-enweta ma nwalee ma nyochaa data. Ọ gaghị ekwe omume ịwepụta otu n'ime edemede ndị a.
API gụgharia anaghị ewepụta data sitere na ule dabere na edemede (ndị nke rectangle nọchiri anya ya kama ibe jigsaw na Control Center GUI), dị ka ule ịgbalite ọrụ Ethernet na ule nghọta.
Aha isiokwu Kafka
Aha isiokwu Kafka maka API nkwanye bụ ndị a, ebe %s bụ aha mkpirisi nke njikwa
Akaụntụ etiti (egosiri mgbe ị na-eke akaụntụ):
const (exporterAha = "kafka"metadataTopicTpl = "paa.public.accounts.%s.metadata" metricsTopicTpl = "paa.public.accounts.%s.metrics")
Examples nke Iji API gụgharia
The exampA na-ahụ les ndị na-esonụ na tarball paa-streaming-api-client-examples.tar.gz dị n'ime bọọlụ ebe njikwa.
Mbụ, e nwere isi exampna-egosipụta ka esi agbasa metrik na metadata ha iche iche wee bipụta ozi enwetara na njikwa. Ị nwere ike ịgba ya dị ka ndị a: sudo ./build.sh run-basic -kafka-brokers localhost:9092 -account ACCOUNT_SHORTNAME
Enwekwara onye exampebe ejikọtara ozi metrik na metadata. Jiri iwu a iji mee ya:
sudo ./build.sh run-advanced -kafka-brokers localhost:9092 -account ACCOUNT_SHORTNAME Ịkwesịrị iji sudo iji mee iwu Docker dị ka ndị dị n'elu. Nhọrọ, ị nwere ike ịgbaso usoro ntinye ntinye Linux ka ị nwee ike ịme iwu Docker na-enweghị sudo.
Maka nkọwa, gaa na docs.docker.com/engine/install/linux-postinstall.
Juniper Networks, akara Juniper Networks, Juniper na Junos bụ ụghalaahịa edenyere n'akwụkwọ ikikere nke Juniper Networks, Inc. na United States na obodo ndị ọzọ. ụghalaahịa ndị ọzọ niile, akara ọrụ, akara edenyere n'akwụkwọ, ma ọ bụ akara ọrụ edebanyere aha bụ ihe onwunwe nke ndị nwe ha. Juniper Networks anaghị ewere ọrụ maka ezighi ezi ọ bụla na akwụkwọ a. Juniper Networks nwere ikike ịgbanwe, gbanwee, nyefee, ma ọ bụ megharịa akwụkwọ a na-enweghị ọkwa. Nwebiisinka © 2022 Juniper Networks, Inc. Ikike niile echekwabara.

Akwụkwọ / akụrụngwa

API gụgharia Juniper [pdf] Ntuziaka onye ọrụ
API gụgharia, API

Ntụaka

Akwụkwọ ntuziaka onye ọrụ

Okwu mmalite