{"action":"created","issue":{"url":"https://api.github.com/repos/docker/for-aws/issues/35","repository_url":"https://api.github.com/repos/docker/for-aws","labels_url":"https://api.github.com/repos/docker/for-aws/issues/35/labels{/name}","comments_url":"https://api.github.com/repos/docker/for-aws/issues/35/comments","events_url":"https://api.github.com/repos/docker/for-aws/issues/35/events","html_url":"https://github.com/docker/for-aws/issues/35","id":223982517,"number":35,"title":"ELB Listeners automatically resetting","user":{"login":"KevinJMcGarry","id":16822455,"avatar_url":"https://avatars0.githubusercontent.com/u/16822455?v=3","gravatar_id":"","url":"https://api.github.com/users/KevinJMcGarry","html_url":"https://github.com/KevinJMcGarry","followers_url":"https://api.github.com/users/KevinJMcGarry/followers","following_url":"https://api.github.com/users/KevinJMcGarry/following{/other_user}","gists_url":"https://api.github.com/users/KevinJMcGarry/gists{/gist_id}","starred_url":"https://api.github.com/users/KevinJMcGarry/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/KevinJMcGarry/subscriptions","organizations_url":"https://api.github.com/users/KevinJMcGarry/orgs","repos_url":"https://api.github.com/users/KevinJMcGarry/repos","events_url":"https://api.github.com/users/KevinJMcGarry/events{/privacy}","received_events_url":"https://api.github.com/users/KevinJMcGarry/received_events","type":"User","site_admin":false},"labels":[{"id":522008390,"url":"https://api.github.com/repos/docker/for-aws/labels/area/aws","name":"area/aws","color":"bfd4f2","default":false},{"id":522008671,"url":"https://api.github.com/repos/docker/for-aws/labels/kind/enhancement","name":"kind/enhancement","color":"e99695","default":false},{"id":522008724,"url":"https://api.github.com/repos/docker/for-aws/labels/kind/feature","name":"kind/feature","color":"006b75","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":47,"created_at":"2017-04-24T23:53:44Z","updated_at":"2017-06-21T15:19:48Z","closed_at":null,"body":"Docker for AWS 17.04.0-ce-aws1\r\n\r\nRunning into an odd issue where the Listener ports on my ELB sporadically reset themselves using the default configuration of the Docker for AWS Cloudformation template. \r\n\r\nBasically I terminate SSL at my ELB and then forward the non-encrypted traffic onto my docker swarm. Example, I have an api service/container listening in the swarm on tcp port 2112 but externally, my clients connect to it through the ELB via https port 443. So the ELB receives the request on ssl 443 and then hands it off to tcp port 2112, which it is then processed by the api service. I realized early on that Docker for AWS CF template is configured to auto update the ELB listeners with the published service ports which overwrites anything I had manually configured in the ELB listener. So I wrote a script that auto updates the ELB after every deployment to remap the 443 to 2112 port. This has been working great until yesterday when for no apparent reason at all, the ports on my ELB listener were reset to the published ports of the services, therefore removing all my manually configured port mappings. I checked all the logs and nothing changed on my end, no new deployments, no changes to the swarm, no autoscaling events etc. It seems like the swarm performed some sort of check with the Cloud Formation config and reset the ELB listeners. \r\n\r\nIs there any info on this process? Is there anything I can do to prevent this?\r\nMy ideal scenario would be to delete this auto-updating of the ELB listeners, allowing me to statically configure the port mappings as needed and keep them set until I manually change them."},"comment":{"url":"https://api.github.com/repos/docker/for-aws/issues/comments/310112873","html_url":"https://github.com/docker/for-aws/issues/35#issuecomment-310112873","issue_url":"https://api.github.com/repos/docker/for-aws/issues/35","id":310112873,"user":{"login":"nasali","id":1334585,"avatar_url":"https://avatars2.githubusercontent.com/u/1334585?v=3","gravatar_id":"","url":"https://api.github.com/users/nasali","html_url":"https://github.com/nasali","followers_url":"https://api.github.com/users/nasali/followers","following_url":"https://api.github.com/users/nasali/following{/other_user}","gists_url":"https://api.github.com/users/nasali/gists{/gist_id}","starred_url":"https://api.github.com/users/nasali/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nasali/subscriptions","organizations_url":"https://api.github.com/users/nasali/orgs","repos_url":"https://api.github.com/users/nasali/repos","events_url":"https://api.github.com/users/nasali/events{/privacy}","received_events_url":"https://api.github.com/users/nasali/received_events","type":"User","site_admin":false},"created_at":"2017-06-21T15:19:48Z","updated_at":"2017-06-21T15:19:48Z","body":"@volenin I am not sure I'm following. You do not have to publish all the ports on the ELB necessarily. I guess you could utilize the SERVICE_PORTS mechanism of [docker cloud haproxy](https://github.com/docker/dockercloud-haproxy) and not worry about ports clashing?\r\n\r\nWould that work for you?"}}
{"actor":{"display_login":"nasali"}}