bitflicker64 opened a new issue, #2960: URL: https://github.com/apache/hugegraph/issues/2960
### Bug Type (问题类型) None ### Before submit - [x] 我已经确认现有的 [Issues](https://github.com/apache/hugegraph/issues) 与 [FAQ](https://hugegraph.apache.org/docs/guides/faq/) 中没有相同 / 重复问题 (I have confirmed and searched that there are no similar problems in the historical issue and documents) ### Environment (环境信息) ## Environment - HugeGraph PD version: 1.7.0 - Docker network mode: bridge (static IPs via ipam) - Tested on: macOS Apple M4 - Related PR: #2952 - Related bug: IpAuthHandler hostname vs IP (same bridge mode root cause) ### Expected & Actual behavior (期望与实际表现) Expected: Cross-node raft connections between PD nodes work correctly in Docker bridge network mode. Actual: All cross-node raft connections are silently blocked by IpAuthHandler. The allowlist is built using PeerId::getIp which returns raw hostnames (e.g. "pd0", "pd1") but incoming connections arrive with actual bridge IPs (e.g. "172.18.0.4") — the string comparison always fails so every connection is dropped with no useful error. Error in logs: ``` WARN IpAuthHandler - Blocked connection from 172.18.0.4 ``` Workaround: assign static IPs to PD containers via docker-compose ipam and use those IPs directly in HG_PD_RAFT_PEERS_LIST instead of hostnames. ### Vertex/Edge example (问题点 / 边数据举例) ```javascript ``` ### Schema [VertexLabel, EdgeLabel, IndexLabel] (元数据结构) ```javascript ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
