Bug Type (问题类型)
None
Before submit
Environment (环境信息)
Environment
Expected & Actual behavior (期望与实际表现)
Expected: Cross-node raft connections between PD nodes work correctly in
Docker bridge network mode.
Actual: All cross-node raft connections are silently blocked by
IpAuthHandler. The allowlist is built using PeerId::getIp which returns
raw hostnames (e.g. "pd0", "pd1") but incoming connections arrive with
actual bridge IPs (e.g. "172.18.0.4") — the string comparison always
fails so every connection is dropped with no useful error.
Error in logs:
WARN IpAuthHandler - Blocked connection from 172.18.0.4
Workaround: assign static IPs to PD containers via docker-compose ipam
and use those IPs directly in HG_PD_RAFT_PEERS_LIST instead of hostnames.