Advanced Configuration
The following are more advanced configurations for the xSpace management component, all of which are optional steps. Please choose to execute them based on actual on-site requirements.
1. SMS Authentication Settings
If the on-site environment requires enabling SMS authentication, please first confirm that the master management component can normally access Alibaba Cloud SMS services on the Internet.
Verification Example:
[xspace@host151 ~]# ping dysmsapi.aliyuncs.com
PING popunify-public.cn-zhangbei-center.aliyuncs.com.vipgds.alibabadns.com (106.11.45.35) 56(84) bytes of data.
64 bytes from 106.11.45.35 (106.11.45.35): icmp_seq=1 ttl=36 time=37.5 ms
64 bytes from 106.11.45.35 (106.11.45.35): icmp_seq=2 ttl=36 time=37.7 ms
64 bytes from 106.11.45.35 (106.11.45.35): icmp_seq=3 ttl=36 time=38.6 ms
If access is normal, execute the following script on the master node to enable SMS authentication:
[xspace@host151 ~]# sudo /opt/installation/scripts/enable_smsconfig.sh
Note: As SMS content carries specific service provider signature information, please decide whether to enable it based on actual business scenario requirements.
2. Firewall Settings
The firewall service (firewalld) is not enabled by default on the installed xSpace management component virtual machine nodes.
2.1 Check Status
[xspace@host151 ~]# systemctl is-active firewalld
inactive
2.2 Enable Firewall
To enable the firewall, follow these steps:
- Verify Node IPs: Check if the script fully includes the addresses of all nodes in the cluster.
[xspace@host151 ~]# grep ^NODE_IPS /opt/installation/scripts/enable_firewall.sh
NODE_IPS=(192.222.8.151 192.222.8.152 192.222.8.153)
- Execute on All Nodes: Copy this script to all worker nodes. Then execute it on each machine (master node and all worker nodes) separately:
# Execute on all nodes separately
[xspace@host15x ~]# sudo /opt/installation/scripts/enable_firewall.sh
3. Middleware Console Settings
The middleware components (such as Nacos, Redis, etc.) that the xSpace management component relies on come with their own Web management consoles. For security reasons, they are disabled by default. If O&M personnel need to temporarily view or modify configurations, they can enable them manually.
3.1 Enable Console
[xspace@host151 ~]# sudo /opt/installation/scripts/enable_middlewares_console.sh on
3.2 Disable Console (Must Disable After Maintenance)
[xspace@host151 ~]# sudo /opt/installation/scripts/enable_middlewares_console.sh off
Note:
Please refer to the on-screen prompts after script execution for specific URL and operation instructions for accessing the console.
Please consult the vendor's technical support personnel for the system O&M accounts and passwords of the middleware services.