{"id":33563,"date":"2025-03-07T10:45:07","date_gmt":"2025-03-07T02:45:07","guid":{"rendered":"https:\/\/www.yunshan.net\/blog\/?p=33563"},"modified":"2025-03-07T10:45:07","modified_gmt":"2025-03-07T02:45:07","slug":"skywalking%e5%a6%82%e4%bd%95%e7%9b%91%e6%8e%a7https%e6%9c%8d%e5%8a%a1%ef%bc%9f","status":"publish","type":"post","link":"https:\/\/www.yunshan.net\/blog\/archives\/33563.html","title":{"rendered":"SkyWalking\u5982\u4f55\u76d1\u63a7HTTPS\u670d\u52a1\uff1f"},"content":{"rendered":"<p style=\"text-align: center;\">\n<p><img decoding=\"async\" src=\"https:\/\/www.yunshan.net\/blog\/wp-content\/uploads\/2025\/03\/cl6ezY.jpg\" alt=\"SkyWalking\u5982\u4f55\u76d1\u63a7HTTPS\u670d\u52a1\uff1f\" ><\/p>\n<\/p>\n<hr>\n<h3 id=\"\u524d\u8a00\">\u524d\u8a00<\/h3>\n<p>\u5728\u5f53\u4eca\u7684\u5206\u5e03\u5f0f\u67b6\u6784\u4e2d\uff0cHTTPS\u5df2\u6210\u4e3a\u4fdd\u969c\u6570\u636e\u4f20\u8f93\u5b89\u5168\u7684\u6838\u5fc3\u534f\u8bae\u3002\u7136\u800c\uff0c<strong>\u52a0\u5bc6\u6d41\u91cf<\/strong>\u7684\u666e\u53ca\u4e5f\u5e26\u6765\u4e86\u76d1\u63a7\u7684\u590d\u6742\u6027\u2014\u2014\u4f20\u7edf\u7684\u6027\u80fd\u5206\u6790\u5de5\u5177\u5f80\u5f80\u56e0\u65e0\u6cd5\u89e3\u5bc6\u6d41\u91cf\u800c\u201c\u5931\u660e\u201d\uff0c\u5bfc\u81f4\u8fd0\u7ef4\u56e2\u961f\u96be\u4ee5\u7cbe\u51c6\u5b9a\u4f4d\u95ee\u9898\u3002\u4f5c\u4e3a\u4e00\u6b3e\u5f00\u6e90\u7684<strong>APM\uff08<a href=\"https:\/\/www.yunshan.net\/\"   target=\"_blank\" style=\"color:blue\">\u5e94\u7528\u6027\u80fd\u7ba1\u7406<\/a>\uff09\u5de5\u5177<\/strong>\uff0c<strong><a href=\"https:\/\/www.yunshan.net\/\"   target=\"_blank\" style=\"color:blue\">SkyWalking<\/a><\/strong>\u51ed\u501f\u5176\u72ec\u7279\u7684\u67b6\u6784\u8bbe\u8ba1\uff0c\u6210\u529f\u6253\u7834\u4e86HTTPS\u76d1\u63a7\u7684\u58c1\u5792\u3002\u672c\u6587\u5c06\u6df1\u5165\u89e3\u6790<a href=\"https:\/\/www.yunshan.net\/\"   target=\"_blank\" style=\"color:blue\">SkyWalking<\/a>\u5982\u4f55\u5b9e\u73b0\u5bf9HTTPS\u670d\u52a1\u7684\u5168\u94fe\u8def\u76d1\u63a7\uff0c\u4e3a\u5f00\u53d1\u8005\u63d0\u4f9b\u517c\u5177\u5b89\u5168\u6027\u4e0e\u53ef\u89c2\u6d4b\u6027\u7684\u89e3\u51b3\u65b9\u6848\u3002<\/p>\n<hr>\n<h3 id=\"\u4e00-https\u76d1\u63a7\u7684\u6311\u6218\u4e0e\u9700\u6c42\">\u4e00\u3001HTTPS\u76d1\u63a7\u7684\u6311\u6218\u4e0e\u9700\u6c42<\/h3>\n<p>HTTPS\u901a\u8fc7<strong>TLS\/SSL\u52a0\u5bc6<\/strong>\u786e\u4fdd\u4e86\u6570\u636e\u5728\u4f20\u8f93\u8fc7\u7a0b\u4e2d\u7684\u673a\u5bc6\u6027\u548c\u5b8c\u6574\u6027\uff0c\u4f46\u8fd9\u4e5f\u610f\u5473\u7740\u4f20\u7edf\u76d1\u63a7\u5de5\u5177\u65e0\u6cd5\u76f4\u63a5\u89e3\u6790\u8bf7\u6c42\u5185\u5bb9\u3002\u4ee5\u4e0b\u4e09\u70b9\u662fHTTPS\u76d1\u63a7\u7684\u4e3b\u8981\u96be\u70b9\uff1a<\/p>\n<ol>\n<li><strong>\u52a0\u5bc6\u6d41\u91cf\u65e0\u6cd5\u7a7f\u900f<\/strong>\uff1a\u76d1\u63a7\u5de5\u5177\u65e0\u6cd5\u50cf\u5904\u7406HTTP\u660e\u6587\u6d41\u91cf\u4e00\u6837\u76f4\u63a5\u63d0\u53d6URL\u3001\u72b6\u6001\u7801\u7b49\u5173\u952e\u4fe1\u606f\uff1b\n<\/li>\n<li><strong>\u4e0a\u4e0b\u6587\u4fe1\u606f\u7f3a\u5931<\/strong>\uff1a\u52a0\u5bc6\u5bfc\u81f4\u8bf7\u6c42\u4e4b\u95f4\u7684\u8c03\u7528\u94fe\uff08Trace\uff09\u96be\u4ee5\u5173\u8054\uff0c\u5f71\u54cd<a href=\"https:\/\/www.yunshan.net\/\"   target=\"_blank\" style=\"color:blue\">\u6839\u56e0\u5206\u6790<\/a>\u6548\u7387\uff1b\n<\/li>\n<li><strong>\u8bc1\u4e66\u7ba1\u7406\u590d\u6742<\/strong>\uff1a\u52a8\u6001\u8bc1\u4e66\u52a0\u8f7d\u3001\u53cc\u5411\u8ba4\u8bc1\u7b49\u573a\u666f\u9700\u8981\u5de5\u5177\u5177\u5907\u7075\u6d3b\u7684\u9002\u914d\u80fd\u529b\u3002\n<\/li>\n<\/ol>\n<p>\u9762\u5bf9\u8fd9\u4e9b\u6311\u6218\uff0c<strong>SkyWalking\u901a\u8fc7\u63a2\u9488\uff08Agent\uff09\u4e0e\u670d\u52a1\u7f51\u683c\u7684\u65e0\u7f1d\u96c6\u6210<\/strong>\uff0c\u5b9e\u73b0\u4e86\u5bf9HTTPS\u6d41\u91cf\u7684\u900f\u660e\u5316\u76d1\u63a7\uff0c\u540c\u65f6\u517c\u987e\u5b89\u5168\u89c4\u8303\u3002<\/p>\n<hr>\n<h3 id=\"\u4e8c-skywalking\u76d1\u63a7https\u7684\u6838\u5fc3\u673a\u5236\">\u4e8c\u3001SkyWalking\u76d1\u63a7HTTPS\u7684\u6838\u5fc3\u673a\u5236<\/h3>\n<h4 id=\"1-\u57fa\u4e8etls-ssl\u89e3\u5bc6\u7684\u6d41\u91cf\u6355\u83b7\">1. <strong>\u57fa\u4e8eTLS\/SSL\u89e3\u5bc6\u7684\u6d41\u91cf\u6355\u83b7<\/strong><\/h4>\n<p>SkyWalking\u7684\u63a2\u9488\u901a\u8fc7<strong>Hook\u6280\u672f<\/strong>\u62e6\u622a\u5e94\u7528\u7a0b\u5e8f\u7684TLS\/SSL\u901a\u4fe1\u8fc7\u7a0b\u3002\u4f8b\u5982\uff0cJava Agent\u4f1a\u4fee\u6539<code>SSLEngine<\/code>\u7c7b\u7684\u884c\u4e3a\uff0c\u5728\u52a0\u5bc6\u524d\/\u89e3\u5bc6\u540e\u6355\u83b7\u660e\u6587\u6570\u636e\u3002\u8fd9\u79cd\u8bbe\u8ba1<strong>\u65e0\u9700\u4fee\u6539\u4e1a\u52a1\u4ee3\u7801<\/strong>\uff0c\u5373\u53ef\u83b7\u53d6\u4ee5\u4e0b\u5173\u952e\u4fe1\u606f\uff1a<\/p>\n<ul>\n<li>\u8bf7\u6c42\u8def\u5f84\uff08\u5982<code>\/api\/v1\/user<\/code>\uff09\n<\/li>\n<li>HTTP\u65b9\u6cd5\uff08GET\/POST\u7b49\uff09\n<\/li>\n<li>\u54cd\u5e94\u72b6\u6001\u7801\uff08200\u3001500\u7b49\uff09\n<\/li>\n<li>\u8017\u65f6\u7edf\u8ba1\uff08RT\u3001QPS\uff09\n<\/li>\n<\/ul>\n<p><strong>\u6ce8\u610f<\/strong>\uff1a\u6b64\u8fc7\u7a0b\u4ec5\u5728\u5185\u5b58\u4e2d\u5904\u7406\u6570\u636e\uff0c\u4e0d\u4f1a\u5b58\u50a8\u6216\u4f20\u8f93\u654f\u611f\u4fe1\u606f\uff0c\u7b26\u5408GDPR\u7b49\u9690\u79c1\u6cd5\u89c4\u3002<\/p>\n<h4 id=\"2-\u5206\u5e03\u5f0f\u94fe\u8def\u8ffd\u8e2a\u7684\u4e0a\u4e0b\u6587\u4f20\u64ad\">2. <strong>\u5206\u5e03\u5f0f\u94fe\u8def\u8ffd\u8e2a\u7684\u4e0a\u4e0b\u6587\u4f20\u64ad<\/strong><\/h4>\n<p>HTTPS\u8bf7\u6c42\u901a\u5e38\u6d89\u53ca\u591a\u4e2a\u5fae\u670d\u52a1\u95f4\u7684\u52a0\u5bc6\u901a\u4fe1\u3002SkyWalking\u901a\u8fc7<strong>\u6ce8\u5165\u81ea\u5b9a\u4e49Header\uff08\u5982Sw8\uff09<\/strong>\uff0c\u5c06Trace ID\u3001Span ID\u7b49\u4fe1\u606f\u5d4c\u5165HTTPS\u8bf7\u6c42\u5934\u3002\u5373\u4f7f\u6d41\u91cf\u88ab\u52a0\u5bc6\uff0c\u4e0b\u6e38\u670d\u52a1\u4ecd\u80fd\u8bc6\u522b\u5e76\u5ef6\u7eed\u8c03\u7528\u94fe\uff0c\u786e\u4fdd<strong>\u7aef\u5230\u7aef\u7684\u53ef\u89c6\u5316\u8ffd\u8e2a<\/strong>\u3002<\/p>\n<h4 id=\"3-\u4e0eservice-mesh\u7684\u6df1\u5ea6\u96c6\u6210\">3. <strong>\u4e0eService Mesh\u7684\u6df1\u5ea6\u96c6\u6210<\/strong><\/h4>\n<p>\u5728Istio\u3001Envoy\u7b49\u670d\u52a1\u7f51\u683c\u67b6\u6784\u4e2d\uff0cSkyWalking\u901a\u8fc7<strong>\u9002\u914d\u5668\uff08Adapter\uff09<\/strong> \u76f4\u63a5\u5bf9\u63a5\u63a7\u5236\u5e73\u9762\uff0c\u6536\u96c6Sidecar\u4ee3\u7406\u7684\u52a0\u5bc6\u6d41\u91cf\u6307\u6807\u3002\u8fd9\u79cd\u65b9\u5f0f<strong>\u65e0\u9700\u4fb5\u5165\u4e1a\u52a1\u5bb9\u5668<\/strong>\uff0c\u5373\u53ef\u5b9e\u73b0\u670d\u52a1\u62d3\u6251\u3001\u6d41\u91cf\u70ed\u529b\u56fe\u7684\u5b9e\u65f6\u5c55\u793a\u3002<\/p>\n<hr>\n<h3 id=\"\u4e09-\u914d\u7f6eskywalking\u76d1\u63a7https\u7684\u5b9e\u8df5\u6b65\u9aa4\">\u4e09\u3001\u914d\u7f6eSkyWalking\u76d1\u63a7HTTPS\u7684\u5b9e\u8df5\u6b65\u9aa4<\/h3>\n<h4 id=\"\u6b65\u9aa41-\u542f\u7528agent\u7684https\u652f\u6301\"><strong>\u6b65\u9aa41\uff1a\u542f\u7528Agent\u7684HTTPS\u652f\u6301<\/strong><\/h4>\n<p>\u5728\u5e94\u7528\u7684\u542f\u52a8\u53c2\u6570\u4e2d\u6dfb\u52a0SkyWalking Agent\uff0c\u5e76\u5f00\u542fHTTPS\u63d2\u4ef6\uff1a<\/p>\n<pre><code class=\"language-bash\">-javaagent:\/path\/skywalking-agent.jar  \r\n-Dskywalking.agent.service_name=your-https-service  \r\n-Dskywalking.plugin.httpclient.collect_http_ssl=true  \r\n<\/code><\/pre>\n<p><em>\u6ce8\uff1a\u4e0d\u540c\u8bed\u8a00\uff08\u5982Go\u3001Node.js\uff09\u7684Agent\u914d\u7f6e\u7565\u6709\u5dee\u5f02\uff0c\u9700\u53c2\u8003\u5b98\u65b9\u6587\u6863\u3002<\/em><\/p>\n<h4 id=\"\u6b65\u9aa42-\u914d\u7f6etls\u8bc1\u4e66-\u53ef\u9009\"><strong>\u6b65\u9aa42\uff1a\u914d\u7f6eTLS\u8bc1\u4e66\uff08\u53ef\u9009\uff09<\/strong><\/h4>\n<p>\u82e5\u670d\u52a1\u4f7f\u7528<strong>\u53cc\u5411\u8ba4\u8bc1\uff08mTLS\uff09<\/strong>\uff0c\u9700\u5728Agent\u4e2d\u6307\u5b9a\u5bc6\u94a5\u5e93\u8def\u5f84\uff1a<\/p>\n<pre><code class=\"language-yaml\">plugins:  \r\n- httpclient  \r\n- https  \r\nagent.config:  \r\nhttp.ssl.keystore_path: \/etc\/certs\/keystore.jks  \r\nhttp.ssl.truststore_path: \/etc\/certs\/truststore.jks  \r\n<\/code><\/pre>\n<h4 id=\"\u6b65\u9aa43-\u9a8c\u8bc1\u94fe\u8def\u8ffd\u8e2a\u6548\u679c\"><strong>\u6b65\u9aa43\uff1a\u9a8c\u8bc1\u94fe\u8def\u8ffd\u8e2a\u6548\u679c<\/strong><\/h4>\n<p>\u53d1\u8d77HTTPS\u8bf7\u6c42\u540e\uff0c\u767b\u5f55SkyWalking UI\uff0c\u68c0\u67e5\u4ee5\u4e0b\u5185\u5bb9\uff1a<\/p>\n<ul>\n<li><strong>\u62d3\u6251\u56fe<\/strong>\u4e2d\u662f\u5426\u663e\u793a\u76ee\u6807\u670d\u52a1\u8282\u70b9\uff1b\n<\/li>\n<li><strong>Trace\u5217\u8868<\/strong>\u4e2d\u662f\u5426\u5305\u542b\u5b8c\u6574\u7684HTTPS\u8c03\u7528\u94fe\uff1b\n<\/li>\n<li><strong>\u6307\u6807\u4eea\u8868\u76d8<\/strong>\u4e2d\u662f\u5426\u7edf\u8ba1\u4e86\u52a0\u5bc6\u8bf7\u6c42\u7684\u8017\u65f6\u4e0e\u9519\u8bef\u7387\u3002\n<\/li>\n<\/ul>\n<hr>\n<h3 id=\"\u56db-\u6700\u4f73\u5b9e\u8df5\u4e0e\u6027\u80fd\u4f18\u5316\u5efa\u8bae\">\u56db\u3001\u6700\u4f73\u5b9e\u8df5\u4e0e\u6027\u80fd\u4f18\u5316\u5efa\u8bae<\/h3>\n<ol>\n<li>\n<p><strong>\u8bc1\u4e66\u7ba1\u7406\u7684\u81ea\u52a8\u5316<\/strong><br \/>\n\u7ed3\u5408Kubernetes\u7684Secret\u6216Vault\u5de5\u5177\uff0c\u52a8\u6001\u66f4\u65b0Agent\u7684\u8bc1\u4e66\u914d\u7f6e\uff0c\u907f\u514d\u624b\u52a8\u7ef4\u62a4\u5e26\u6765\u7684\u98ce\u9669\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u6d41\u91cf\u91c7\u6837\u7b56\u7565<\/strong><br \/>\n\u5728\u9ad8\u5e76\u53d1\u573a\u666f\u4e0b\uff0c\u901a\u8fc7<code>agent.sample_n_per_3_secs<\/code>\u53c2\u6570\u63a7\u5236\u91c7\u6837\u7387\uff0c\u5e73\u8861\u76d1\u63a7\u7cbe\u5ea6\u4e0e\u7cfb\u7edf\u5f00\u9500\u3002<\/p>\n<\/li>\n<li>\n<p><strong>\u544a\u8b66\u89c4\u5219\u7684\u7cbe\u7ec6\u5316<\/strong><br \/>\n\u9488\u5bf9HTTPS\u670d\u52a1\u7279\u6709\u7684\u9519\u8bef\uff08\u5982SSL\u63e1\u624b\u5931\u8d25\uff09\uff0c\u914d\u7f6e\u81ea\u5b9a\u4e49\u544a\u8b66\uff1a<\/p>\n<\/li>\n<\/ol>\n<pre><code class=\"language-yaml\">rules:  \r\n- name: TLS Handshake Error  \r\nexpression: endpoint_cpm &gt; 100 &amp;&amp; endpoint_ssl_error &gt; 5  \r\n<\/code><\/pre>\n<ol>\n<li><strong>\u4e0e\u65e5\u5fd7\u7cfb\u7edf\u7684\u8054\u52a8<\/strong><br \/>\n\u5c06SkyWalking\u7684Trace ID\u4e0eELK\u6216Loki\u65e5\u5fd7\u5173\u8054\uff0c\u5b9e\u73b0\u201c\u6307\u6807-\u65e5\u5fd7-\u94fe\u8def\u201d\u4e09\u4f4d\u4e00\u4f53\u7684\u6545\u969c\u6392\u67e5\u3002\n<\/li>\n<\/ol>\n<hr>\n<h3 id=\"\u4e94-\u6848\u4f8b\u5206\u6790-\u7535\u5546\u5e73\u53f0\u7684https\u76d1\u63a7\u5347\u7ea7\">\u4e94\u3001\u6848\u4f8b\u5206\u6790\uff1a\u7535\u5546\u5e73\u53f0\u7684HTTPS\u76d1\u63a7\u5347\u7ea7<\/h3>\n<p>\u67d0\u8de8\u5883\u7535\u5546\u5e73\u53f0\u5728\u8fc1\u79fb\u81f3HTTPS\u534f\u8bae\u540e\uff0c\u66fe\u56e0\u652f\u4ed8\u63a5\u53e3\u7684\u5076\u53d1\u6027\u8d85\u65f6\u95ee\u9898\u5bfc\u81f4\u8ba2\u5355\u6d41\u5931\u3002\u901a\u8fc7\u90e8\u7f72SkyWalking\uff0c\u8fd0\u7ef4\u56e2\u961f\u53d1\u73b0<strong>SSL\u63e1\u624b\u8017\u65f6\u6ce2\u52a8<\/strong>\u662f\u6839\u672c\u539f\u56e0\u2014\u2014\u90e8\u5206\u5730\u533a\u7684CDN\u8282\u70b9\u8bc1\u4e66\u52a0\u8f7d\u5ef6\u8fdf\u9ad8\u8fbe2\u79d2\u3002\u4f18\u5316\u8bc1\u4e66\u5206\u53d1\u7b56\u7565\u540e\uff0c\u63a5\u53e3\u5e73\u5747\u54cd\u5e94\u65f6\u95f4\u964d\u4f4e40%\uff0c\u9a8c\u8bc1\u4e86HTTPS\u76d1\u63a7\u7684\u5b9e\u9645\u4ef7\u503c\u3002<\/p>\n<hr>\n<p>\u901a\u8fc7\u4e0a\u8ff0\u65b9\u6848\uff0cSkyWalking\u4e0d\u4ec5\u89e3\u51b3\u4e86HTTPS\u73af\u5883\u4e0b\u7684\u76d1\u63a7\u76f2\u533a\uff0c\u8fd8\u901a\u8fc7<strong>\u4f4e\u4fb5\u5165\u6027<\/strong>\u548c<strong>\u9ad8\u6269\u5c55\u6027<\/strong>\u7684\u8bbe\u8ba1\uff0c\u4e3a\u590d\u6742\u5fae\u670d\u52a1\u67b6\u6784\u63d0\u4f9b\u4e86\u53ef\u9760\u7684\u89c2\u6d4b\u80fd\u529b\u3002\u65e0\u8bba\u662f\u4f20\u7edf\u865a\u62df\u673a\u8fd8\u662f\u4e91\u539f\u751f\u73af\u5883\uff0c\u5f00\u53d1\u8005\u5747\u53ef\u501f\u52a9\u8fd9\u4e00\u5de5\u5177\u6784\u5efa\u5b89\u5168\u4e0e\u6027\u80fd\u5e76\u91cd\u7684\u670d\u52a1\u4f53\u7cfb\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u524d\u8a00 \u5728\u5f53\u4eca\u7684\u5206\u5e03\u5f0f\u67b6\u6784\u4e2d\uff0cHTTPS\u5df2\u6210\u4e3a\u4fdd\u969c\u6570\u636e\u4f20\u8f93\u5b89\u5168\u7684\u6838\u5fc3\u534f\u8bae\u3002\u7136\u800c\uff0c\u52a0\u5bc6\u6d41\u91cf\u7684\u666e\u53ca\u4e5f\u5e26\u6765\u4e86\u76d1\u63a7\u7684\u590d\u6742\u6027\u2014\u2014\u4f20\u7edf\u7684\u6027\u80fd\u5206\u6790\u5de5\u5177\u5f80\u5f80\u56e0\u65e0\u6cd5\u89e3\u5bc6\u6d41\u91cf\u800c\u201c\u5931\u660e\u201d\uff0c\u5bfc\u81f4\u8fd0\u7ef4\u56e2\u961f\u96be\u4ee5\u7cbe\u51c6\u5b9a\u4f4d\u95ee\u9898\u3002\u4f5c\u4e3a\u4e00\u6b3e\u5f00\u6e90\u7684APM\uff08\u5e94\u7528\u6027\u80fd\u7ba1\u7406\uff09\u5de5\u5177\uff0cSkyWalking\u51ed\u501f\u5176\u72ec\u7279\u7684\u67b6\u6784\u8bbe\u8ba1\uff0c\u6210\u529f\u6253\u7834\u4e86HTTPS\u76d1\u63a7\u7684\u58c1\u5792\u3002\u672c\u6587\u5c06\u6df1\u5165\u89e3\u6790SkyWalking\u5982\u4f55\u5b9e\u73b0\u5bf9HTTPS\u670d\u52a1\u7684\u5168\u94fe\u8def\u76d1\u63a7\uff0c\u4e3a\u5f00\u53d1\u8005\u63d0\u4f9b\u517c\u5177\u5b89\u5168\u6027\u4e0e\u53ef\u89c2\u6d4b\u6027\u7684\u89e3\u51b3\u65b9\u6848\u3002 \u4e00\u3001HTTPS\u76d1\u63a7\u7684\u6311\u6218\u4e0e\u9700\u6c42 HTTPS\u901a\u8fc7TLS\/SSL\u52a0\u5bc6\u786e\u4fdd\u4e86\u6570\u636e\u5728\u4f20\u8f93\u8fc7\u7a0b\u4e2d\u7684\u673a\u5bc6\u6027\u548c\u5b8c\u6574\u6027\uff0c\u4f46\u8fd9\u4e5f\u610f\u5473\u7740\u4f20\u7edf\u76d1\u63a7\u5de5\u5177\u65e0\u6cd5\u76f4\u63a5\u89e3\u6790\u8bf7\u6c42\u5185\u5bb9\u3002\u4ee5\u4e0b\u4e09\u70b9\u662fHTTPS\u76d1\u63a7\u7684\u4e3b\u8981\u96be\u70b9\uff1a \u52a0\u5bc6\u6d41\u91cf\u65e0\u6cd5\u7a7f\u900f\uff1a\u76d1\u63a7\u5de5\u5177\u65e0\u6cd5\u50cf\u5904\u7406HTTP\u660e\u6587\u6d41\u91cf\u4e00\u6837\u76f4\u63a5\u63d0\u53d6URL\u3001\u72b6\u6001\u7801\u7b49\u5173\u952e\u4fe1\u606f\uff1b \u4e0a\u4e0b\u6587\u4fe1\u606f\u7f3a\u5931\uff1a\u52a0\u5bc6\u5bfc\u81f4\u8bf7\u6c42\u4e4b\u95f4\u7684\u8c03\u7528\u94fe\uff08Trace\uff09\u96be\u4ee5\u5173\u8054\uff0c\u5f71\u54cd\u6839\u56e0\u5206\u6790\u6548\u7387\uff1b \u8bc1\u4e66\u7ba1\u7406\u590d\u6742\uff1a\u52a8\u6001\u8bc1\u4e66\u52a0\u8f7d\u3001\u53cc\u5411\u8ba4\u8bc1\u7b49\u573a\u666f\u9700\u8981\u5de5\u5177\u5177\u5907\u7075\u6d3b\u7684\u9002\u914d\u80fd\u529b\u3002 \u9762\u5bf9\u8fd9\u4e9b\u6311\u6218\uff0cSkyWalking\u901a\u8fc7\u63a2\u9488\uff08Agent\uff09\u4e0e\u670d\u52a1\u7f51\u683c\u7684\u65e0\u7f1d\u96c6\u6210\uff0c\u5b9e\u73b0\u4e86\u5bf9HTTPS\u6d41\u91cf\u7684\u900f\u660e\u5316\u76d1\u63a7\uff0c\u540c\u65f6\u517c\u987e\u5b89\u5168\u89c4\u8303\u3002 \u4e8c\u3001SkyWalking\u76d1\u63a7HTTPS\u7684\u6838\u5fc3\u673a\u5236 1. \u57fa\u4e8eTLS\/SSL\u89e3\u5bc6\u7684\u6d41\u91cf\u6355\u83b7 SkyWalking\u7684\u63a2\u9488\u901a\u8fc7Hook\u6280\u672f\u62e6\u622a\u5e94\u7528\u7a0b\u5e8f\u7684TLS\/SSL\u901a\u4fe1\u8fc7\u7a0b\u3002\u4f8b\u5982\uff0cJava Agent\u4f1a\u4fee\u6539SSLEngine\u7c7b\u7684\u884c\u4e3a\uff0c\u5728\u52a0\u5bc6\u524d\/\u89e3\u5bc6\u540e\u6355\u83b7\u660e\u6587\u6570\u636e\u3002\u8fd9\u79cd\u8bbe\u8ba1\u65e0\u9700\u4fee\u6539\u4e1a\u52a1\u4ee3\u7801\uff0c\u5373\u53ef\u83b7\u53d6\u4ee5\u4e0b\u5173\u952e\u4fe1\u606f\uff1a \u8bf7\u6c42\u8def\u5f84\uff08\u5982\/api\/v1\/user\uff09 HTTP\u65b9\u6cd5\uff08GET\/POST\u7b49\uff09 \u54cd\u5e94\u72b6\u6001\u7801\uff08200\u3001500\u7b49\uff09 \u8017\u65f6\u7edf\u8ba1\uff08RT\u3001QPS\uff09 \u6ce8\u610f\uff1a\u6b64\u8fc7\u7a0b\u4ec5\u5728\u5185\u5b58\u4e2d\u5904\u7406\u6570\u636e\uff0c\u4e0d\u4f1a\u5b58\u50a8\u6216\u4f20\u8f93\u654f\u611f\u4fe1\u606f\uff0c\u7b26\u5408GDPR\u7b49\u9690\u79c1\u6cd5\u89c4\u3002 2. \u5206\u5e03\u5f0f\u94fe\u8def\u8ffd\u8e2a\u7684\u4e0a\u4e0b\u6587\u4f20\u64ad HTTPS\u8bf7\u6c42\u901a\u5e38\u6d89\u53ca\u591a\u4e2a\u5fae\u670d\u52a1\u95f4\u7684\u52a0\u5bc6\u901a\u4fe1\u3002SkyWalking\u901a\u8fc7\u6ce8\u5165\u81ea\u5b9a\u4e49Header\uff08\u5982Sw8\uff09\uff0c\u5c06Trace ID\u3001Span ID\u7b49\u4fe1\u606f\u5d4c\u5165HTTPS\u8bf7\u6c42\u5934\u3002\u5373\u4f7f\u6d41\u91cf\u88ab\u52a0\u5bc6\uff0c\u4e0b\u6e38\u670d\u52a1\u4ecd\u80fd\u8bc6\u522b\u5e76\u5ef6\u7eed\u8c03\u7528\u94fe\uff0c\u786e\u4fdd\u7aef\u5230\u7aef\u7684\u53ef\u89c6\u5316\u8ffd\u8e2a\u3002 3. \u4e0eService Mesh\u7684\u6df1\u5ea6\u96c6\u6210 \u5728Istio\u3001Envoy\u7b49\u670d\u52a1\u7f51\u683c\u67b6\u6784\u4e2d\uff0cSkyWalking\u901a\u8fc7\u9002\u914d\u5668\uff08Adapter\uff09 \u76f4\u63a5\u5bf9\u63a5\u63a7\u5236\u5e73\u9762\uff0c\u6536\u96c6Sidecar\u4ee3\u7406\u7684\u52a0\u5bc6\u6d41\u91cf\u6307\u6807\u3002\u8fd9\u79cd\u65b9\u5f0f\u65e0\u9700\u4fb5\u5165\u4e1a\u52a1\u5bb9\u5668\uff0c\u5373\u53ef\u5b9e\u73b0\u670d\u52a1\u62d3\u6251\u3001\u6d41\u91cf\u70ed\u529b\u56fe\u7684\u5b9e\u65f6\u5c55\u793a\u3002 \u4e09\u3001\u914d\u7f6eSkyWalking\u76d1\u63a7HTTPS\u7684\u5b9e\u8df5\u6b65\u9aa4 \u6b65\u9aa41\uff1a\u542f\u7528Agent\u7684HTTPS\u652f\u6301 \u5728\u5e94\u7528\u7684\u542f\u52a8\u53c2\u6570\u4e2d\u6dfb\u52a0SkyWalking Agent\uff0c\u5e76\u5f00\u542fHTTPS\u63d2\u4ef6\uff1a -javaagent:\/path\/skywalking-agent.jar -Dskywalking.agent.service_name=your-https-service -Dskywalking.plugin.httpclient.collect_http_ssl=true \u6ce8\uff1a\u4e0d\u540c\u8bed\u8a00\uff08\u5982Go\u3001Node.js\uff09\u7684Agent\u914d\u7f6e\u7565\u6709\u5dee\u5f02\uff0c\u9700\u53c2\u8003\u5b98\u65b9\u6587\u6863\u3002 \u6b65\u9aa42\uff1a\u914d\u7f6eTLS\u8bc1\u4e66\uff08\u53ef\u9009\uff09 \u82e5\u670d\u52a1\u4f7f\u7528\u53cc\u5411\u8ba4\u8bc1\uff08mTLS\uff09\uff0c\u9700\u5728Agent\u4e2d\u6307\u5b9a\u5bc6\u94a5\u5e93\u8def\u5f84\uff1a plugins: &#8211; httpclient &#8211; https agent.config: http.ssl.keystore_path: \/etc\/certs\/keystore.jks http.ssl.truststore_path: \/etc\/certs\/truststore.jks \u6b65\u9aa43\uff1a\u9a8c\u8bc1\u94fe\u8def\u8ffd\u8e2a\u6548\u679c \u53d1\u8d77HTTPS\u8bf7\u6c42\u540e\uff0c\u767b\u5f55SkyWalking UI\uff0c\u68c0\u67e5\u4ee5\u4e0b\u5185\u5bb9\uff1a \u62d3\u6251\u56fe\u4e2d\u662f\u5426\u663e\u793a\u76ee\u6807\u670d\u52a1\u8282\u70b9\uff1b Trace\u5217\u8868\u4e2d\u662f\u5426\u5305\u542b\u5b8c\u6574\u7684HTTPS\u8c03\u7528\u94fe\uff1b \u6307\u6807\u4eea\u8868\u76d8\u4e2d\u662f\u5426\u7edf\u8ba1\u4e86\u52a0\u5bc6\u8bf7\u6c42\u7684\u8017\u65f6\u4e0e\u9519\u8bef\u7387\u3002 \u56db\u3001\u6700\u4f73\u5b9e\u8df5\u4e0e\u6027\u80fd\u4f18\u5316\u5efa\u8bae [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":33564,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14],"tags":[],"class_list":["post-33563","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-product-news"],"_links":{"self":[{"href":"https:\/\/www.yunshan.net\/blog\/wp-json\/wp\/v2\/posts\/33563","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.yunshan.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.yunshan.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.yunshan.net\/blog\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.yunshan.net\/blog\/wp-json\/wp\/v2\/comments?post=33563"}],"version-history":[{"count":1,"href":"https:\/\/www.yunshan.net\/blog\/wp-json\/wp\/v2\/posts\/33563\/revisions"}],"predecessor-version":[{"id":33565,"href":"https:\/\/www.yunshan.net\/blog\/wp-json\/wp\/v2\/posts\/33563\/revisions\/33565"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.yunshan.net\/blog\/wp-json\/wp\/v2\/media\/33564"}],"wp:attachment":[{"href":"https:\/\/www.yunshan.net\/blog\/wp-json\/wp\/v2\/media?parent=33563"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.yunshan.net\/blog\/wp-json\/wp\/v2\/categories?post=33563"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.yunshan.net\/blog\/wp-json\/wp\/v2\/tags?post=33563"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}