yinzhijian opened a new issue, #16936: URL: https://github.com/apache/doris/issues/16936
### Search before asking - [X] I had searched in the [issues](https://github.com/apache/doris/issues?q=is%3Aissue) and found no similar issues. ### Description # Enable FQDN access This topic describes how to enable cluster access by using a fully qualified domain name (FQDN). An FQDN is a **complete domain name** for a specific entity that can be accessed over the Internet. The FQDN consists of two parts: the hostname and the domain name. Now, doris supports access to FEs and BEs via IP address only. Even if an FQDN is used to add a node to a cluster, it is transformed into an IP address eventually. This causes a huge inconvenience for DBAs because changing the IP addresses of certain nodes in a doris cluster can lead to access failures to the nodes. ## Prerequisites To enable FQDN access for a doris cluster, make sure the following requirements are satisfied: - Each machine in the cluster must have a hostname. - In the file **/etc/hosts** on each machine, you must specify the corresponding IP addresses and FQDNs of other machines in the cluster. - IP addresses in the **/etc/hosts** file must be uniqule. ## Set up a new cluster with FQDN access By default, FE nodes in a new cluster are started via IP address access. To start a new cluster with FQDN access, you must start the FE nodes by running the following commands **when you start the cluster for the first time**: ```Shell ./bin/start_fe.sh --host_type FQDN --daemon ``` The property `--host_type` specifies the access method that is used to start the node. Valid values include `FQDN` and `IP`. You only need to specify this property ONCE when you start the node for the first time. Each BE node identifies itself with `BE Address` defined in the FE metadata. Therefore, you DO NOT need to specify `--host_type` when you start BE nodes. If the `BE Address` defines a BE node with an FQDN, the BE node identifies itself with this FQDN. ## Enable FQDN access in an existing cluster You need to enable FQDN access for all the non-Leader Follower FE nodes before enabling that for the Leader FE node. > **CAUTION** > > Make sure that the cluster has at least three Follower FE nodes before you enable FQDN access for FE nodes. #### Enable FQDN access for non-Leader Follower FE nodes 1. Navigate to the deployment directory of the FE node, and run the following command to stop the FE node: ```Shell ./bin/stop_fe.sh --daemon ``` 2. Execute the following statement via your MySQL client to check the `Alive` status of the FE node that you have stopped. Wait until the `Alive` status becomes `false`. ```SQL SHOW PROC '/frontends'\G ``` 3. Execute the following statement to replace the IP address with FQDN. ```SQL ALTER SYSTEM MODIFY FRONTEND HOST "<fe_ip>" TO "<fe_hostname>"; ``` 4. Run the following command to start the FE node with FQDN access. ```Shell ./bin/start_fe.sh --host_type FQDN --daemon ``` The property `--host_type` specifies the access method that is used to start the node. Valid values include `FQDN` and `IP`. You only need to specify this property ONCE when you restart the node after you modify the node. 5. Check the `Alive` status of the FE node. Wait until the `Alive` status becomes `true`. ```SQL SHOW PROC '/frontends'\G ``` 6. Repeat the above steps to enable FQDN access for the other non-Leader Follower FE nodes one after another when the `Alive` status of the current FE node is `true`. #### Enable FQDN access for the Leader FE node After all the non-Leader FE nodes have been modified and restarted successfully, you can now enable FQDN access for the Leader FE node. > **NOTE** > > Before the Leader FE node is enabled with FQDN access, the FQDNs used to add nodes to a cluster are still transformed into the corresponding IP addresses. After a Leader FE node with FQDN access enabled is elected for the cluster, the FQDNs will not be transformed into IP addresses. 1. Navigate to the deployment directory of the Leader FE node, and run the following command to stop the Leader FE node. ```Shell ./bin/stop_fe.sh --daemon ``` 2. Execute the following statement via your MySQL client to check whether a new Leader FE node has been elected for the cluster. ```SQL SHOW PROC '/frontends'\G ``` Any FE node with status `Alive` and `isMaster` being `true` is a Leader FE that is running. 3. Execute the following statement to replace the IP address with FQDN. ```SQL ALTER SYSTEM MODIFY FRONTEND HOST "<fe_ip>" TO "<fe_hostname>"; ``` 4. Run the following command to start the FE node with FQDN access. ```Shell ./bin/start_fe.sh --host_type FQDN --daemon ``` The property `--host_type` specifies the access method that is used to start the node. Valid values include `FQDN` and `IP`. You only need to specify this property ONCE when you restart the node after you modify the node. 5. Check the `Alive` status of the FE node. ```Plain SHOW PROC '/frontends'\G ``` If the `Alive` status becomes `true`, the FE node is successfully modified and added to the cluster as a Follower FE node. ### Enable FQDN access for BE nodes Execute the following statement via your MySQL client to replace the IP address with FQDN to enable FQDN access for the BE node. ```SQL ALTER SYSTEM MODIFY BACKEND HOST "<be_ip>" TO "<be_hostname>"; ``` > **NOTE** > > You DO NOT need to restart the BE node after FQDN access is enabled. ## Rollback To rollback an FQDN access-enabled StarRocks cluster to an earlier version that does not support FQDN access, you must first enable IP address access for all nodes in the cluster. You can refer [Enable FQDN access in an existing cluster](#enable-fqdn-access-in-an-existing-cluster) for the general guidance except that you need to change the SQL commands to the following ones: - Enable IP address access for an FE node: ```SQL ALTER SYSTEM MODIFY FRONTEND HOST "<fe_hostname>" TO "<fe_ip>"; ``` - Enable IP address access for a BE node: ```SQL ALTER SYSTEM MODIFY BACKEND HOST "<be_hostname>" TO "<be_ip>"; ``` The modification takes effect after your cluster is successfully restarted. ## FAQ **Q: An error occurs when I enable FQDN access for an FE node: "required 1 replica. But none were active with this master". What should I do?** A: Make sure the cluster has at least three Follower FE nodes before you enable FQDN access for FE nodes. **Q: Can I add a new node by using IP address to a cluster with FQDN access enabled?** A: Yes. ### Use case _No response_ ### Related issues _No response_ ### Are you willing to submit PR? - [X] Yes I am willing to submit a PR! ### Code of Conduct - [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: commits-unsubscr...@doris.apache.org.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: commits-unsubscr...@doris.apache.org For additional commands, e-mail: commits-h...@doris.apache.org