is there a way to bind master interface to multiple ip?

520 views
Skip to first unread message

Zheng Liu

unread,
Apr 13, 2012, 3:13:19 AM4/13/12
to salt-...@googlegroups.com
I have a salt master with 30+ minions set up in one local network. The master is bound to the local ip. Now I need to setup a few additional servers in a separate LAN. I would like to share the master. However, I can't use wild card '*' in the master config, for the interface binding. I have to change the binding to external ip, restart the master to server the external minion. Is there way that I can have both local and external minions co-exist? Like allowing the master to listen on multiple interfaces?

thanks,
Zheng

Jeff Schroeder

unread,
Apr 13, 2012, 8:18:07 AM4/13/12
to salt-...@googlegroups.com

Why don't you let it listen on 0.0.0.0 (the default) and block access
from source networks you don't want using iptables? Salt isn't
currently capable of listening on multiple interfaces unless you use
0.0.0.0.

--
Jeff Schroeder

Don't drink and derive, alcohol and analysis don't mix.
http://www.digitalprognosis.com

Thomas S Hatch

unread,
Apr 13, 2012, 10:16:14 AM4/13/12
to salt-...@googlegroups.com
Lemme look into this, there should be a way to do this cleanly. But for now I would just bind it to the default, 0.0.0.0 - or all interfaces

Zogg

unread,
Apr 13, 2012, 11:23:55 AM4/13/12
to salt-...@googlegroups.com
Or set syndic with another master, that is listening on external ip only?

Zheng Liu

unread,
Apr 13, 2012, 2:44:23 PM4/13/12
to Salt-users
Thanks everyone for the suggestion. I didn't know of the 0.0.0.0
option, so I always bind to a particular ip. I think it is the best
solution for me now.

thanks,
Zheng

On Apr 13, 8:23 am, Zogg <zoggif...@gmail.com> wrote:
> Or set syndic with another master, that is listening on external ip only?
>
> On 04/13/2012 05:16 PM, Thomas S Hatch wrote:
>
>
>
>
>
>
>
> > Lemme look into this, there should be a way to do this cleanly. But for now
> > I would just bind it to the default, 0.0.0.0 - or all interfaces
>
> > On Fri, Apr 13, 2012 at 6:18 AM, Jeff Schroeder
> > <jeffschroe...@computer.org>wrote:
Reply all
Reply to author
Forward
0 new messages