[Reverse Proxy] How to configure for Nginx and SN on different hosts

[IMOKURI]

Hello,
Thank you for adding the reverse proxy example.

In the reverse proxy example, the nginx and SN nodes are on the same host.
I think that nginx and SN nodes are often on different hosts.

In that case, can the --sn-p2p-service option of the run-sn command specify the host where nginx is running?
Or do I need to specify the host where the SN node is running?

The reason I ask this is because in this example, when starting SN, the P2P service name (which is usually expected to translate to the nginx IP address) is listed, but nginx does not listen on port 30303.

swarm-learning/examples/reverse-proxy/mnist/run-all

Lines 178 to 192 in 7772029

	"./scripts/bin/run-sn" \
	-d \
	--name=sn-1 \
	--hostname=sn-1.swarm \
	--dns=${BIND9_IP} \
	--sn-api-service=api.sn-1.swarm \
	--sn-p2p-service=p2p.sn-1.swarm \
	--sentinel \
	-p 30303:30303 \
	-p 30304:30304 \
	--apls-ip=${APLS_IP} \
	-e no_proxy="${no_proxy}" \
	--key=${workingDir}/cert/sn-1-key.pem \
	--cert=${workingDir}/cert/sn-1-cert.pem \
	--capath=${workingDir}/cert/ca/capath

swarm-learning/examples/reverse-proxy/mnist/nginx.conf

Lines 50 to 55 in 7772029

	server {
	listen 443;
	ssl_preread on;
	proxy_pass $name;
	}
	}

#148 (comment)

[girisairam450]

This example is more like a quick start for understanding swarm learning with reverse proxy. As of now sn-p2p-service still uses the 30303 port for communication, having it on the Nginx is more like a placeholder within this example. Please refer to the note highlighted in read me files of these examples.

Yes, when you have Nginx and SN running on two different machines then you have to change the configurations. The tables mentioned in the readme in such a scenario will be different. Please try with the Bind 9 configuration where only sn-p2p-service resolves to the host where SN is running.

[IMOKURI]

Thank you.
I have confirmed that it works by setting the following.
(It does not seem to work when the port number is not specified.)

--sn-p2p-service=<SN FQDN>:30303

[girisairam450]

Yes, the 30303 Ethereum port needs to be opened explicitly. Also, We have added a multi-host example for reverse proxy. Request you to try and share your feedback. [https://github.com/HewlettPackard/swarm-learning/tree/master/examples/reverse-proxy/cifar10]