Accessing Edge UI after installing in GCP

sriharshamohan- · 11-17-2017 12:35 PM

I created a Linux VM in GCP and tried aio installation of Apigee. It was installed successfully as seen from the below command

cd /opt/apigee/apigee-service/bin/apigee-all status

apigee-service apigee-cassandra statusapigee-service: apigee-cassandra: OK+ apigee-service apigee-openldap statusapigee-service: apigee-openldap: OK+ apigee-service apigee-postgresql statusapigee-service: apigee-postgresql: OK+ apigee-service apigee-qpidd statusapigee-service: apigee-qpidd: OK+ apigee-service apigee-zookeeper statusapigee-service: apigee-zookeeper: OK+ apigee-service edge-management-server statusapigee-service: edge-management-server: OK+ apigee-service edge-message-processor statusapigee-service: edge-message-processor: OK+ apigee-service edge-postgres-server statusapigee-service: edge-postgres-server: OK+ apigee-service edge-router statusapigee-service: edge-router: OK+ apigee-service edge-ui statusapigee-service: edge-ui: OK

Also I am able to retrieve the users and organizations using the below commands:

curl -u <adminEmail>:<admin passwd> http://localhost:8080/v1/users
> curl -u <adminEmail>:<admin passwd> http://localhost:8080/v1/organizations

However, I am unable to access the edge-ui in browser. On creating VM in GCP,I received 2 IP’s external and internal. I tried accessing Edge UI using IP’s as well as instance names but unable to access it – getting time out error.Could you please let me know how to access Edge UI ?

Further,below are the outputs of netstat on 9000/1 ports

$ netstat -an | grep 9000

tcp6 0 0 :::9000 :::* LISTEN

$ netstat -an | grep 9001

tcp 0 0 127.0.0.1:9001 0.0.0.0:* LISTEN

tcp 0 0 10.142.0.2:9001 0.0.0.0:* LISTEN

DChiesa

I've deployed the Apigee edge OPDK into GCP, and experienced a similar problem, maybe the same problem.

Here's what I did to fix it: Enable HTTP and HTTPS inbound.

By default the GCP instances block HTTP and HTTPS, at the network layer. Not the firewall on the machine, but at the network layer. So I had to enable that.

Ooops, I just noticed you're trying to hit port 9000 and 9001. For that you may have a firewall issue on the machine. You will need to manage that with OS-specific actions. For example, on CentOS 7, you can use iptables to configure the firewall correctly.

sriharshamohan-

While configuring the VM's in GCP,HTTP and HTTPS options were enabled.

Based on the link,executed below commands on the RHEL 7 to open 9000/9001 ports which returned success:

sudo firewall-cmd --zone=public --add-port=9000/tcp --permanent

sudo firewall-cmd --zone=public --add-port=9001/tcp --permanent

Output of below command is as below:

sudo firewall-cmd --list-all

trusted (active) target: ACCEPT icmp-block-inversion: no interfaces: eth0 sources: services: ports: protocols: masquerade: no forward-ports: source-ports: icmp-blocks: rich rules:

sriharshamohan-

@Dino Could you please let me know how to proceed further ?

DChiesa

Hi Sriharsha

Sorry you're still having troubles.

There's something I don't understand. The netstat output shows nothing listening on port 9000. Why is that?

Some questions, please answer them all:

You said you have an AIO install. What version of Apigee Edge?
Do you have a custom port set for the UI? (Did you create a ui.sh script as described here ?)
Please send me the output of this command
```
netstat -plnt
```

sriharshamohan-

Hi Dino,

Please see below my responses

1.4.17.09

2.Cannot find the file/folder in 4.17.09

3.Output:

[root@instance-2 ~]# netstat -plnt

Active Internet connections (only servers)

Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name

tcp 0 0 0.0.0.0:10389 0.0.0.0:* LISTEN 2881/slapd

tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 973/sshd

tcp 0 0 10.128.0.2:7000 0.0.0.0:* LISTEN 2424/java

tcp 0 0 127.0.0.1:25 0.0.0.0:* LISTEN 1040/master

tcp 0 0 0.0.0.0:41534 0.0.0.0:* LISTEN 2424/java

tcp 0 0 0.0.0.0:7199 0.0.0.0:* LISTEN 2424/java

tcp 0 0 10.128.0.2:9160 0.0.0.0:* LISTEN 2424/java

tcp 0 0 0.0.0.0:8778 0.0.0.0:* LISTEN 2424/java

tcp6 0 0 :::3888 :::* LISTEN 3168/java

tcp6 0 0 10.128.0.2:9042 :::* LISTEN 2424/java

tcp6 0 0 :::10389 :::* LISTEN 2881/slapd

tcp6 0 0 :::22 :::* LISTEN 973/sshd

tcp6 0 0 :::35000 :::* LISTEN 3168/java

tcp6 0 0 ::1:25 :::* LISTEN 1040/master

tcp6 0 0 :::2181 :::* LISTEN 3168/java

tcp6 0 0 :::9000 :::* LISTEN 3768/java

sriharshamohan-

Hi Dino,

I was able to access Edge UI and view the organisation on creating firewall rules as per https://cloud.google.com/vpc/docs/using-firewalls

Thanks

venkatvenkatsiv

It worked for me as well. Thanks for sharing