为什么无法从浏览器访问我的EC2站点？

Question

启动EC2实例，设置安全组

​

​

我可以通过ssh进入我的实例，更新并安装Apache aserver。无论如何，我不能从Chrome浏览器访问它。

This site can’t be reached

也不是来自firefox

Firefox can’t establish a connection to the server at 3.123.456.125.

netstat

tcp        0      0 127.0.0.1:631           0.0.0.0:*               LISTEN      -                   
tcp        0      0 0.0.0.0:445             0.0.0.0:*               LISTEN      -                   
tcp        0      0 0.0.0.0:139             0.0.0.0:*               LISTEN      -                   
tcp        0      0 127.0.0.53:53           0.0.0.0:*               LISTEN      -                   
tcp6       0      0 ::1:631                 :::*                    LISTEN      -                   
tcp6       0      0 :::445                  :::*                    LISTEN      -                   
tcp6       0      0 :::139                  :::*                    LISTEN      -                   
udp        0      0 127.0.0.53:53           0.0.0.0:*                           -                   
udp        0      0 0.0.0.0:68              0.0.0.0:*                           -                   
udp        0      0 192.168.0.255:137       0.0.0.0:*                           -                   
udp        0      0 192.168.0.12:137        0.0.0.0:*                           -                   
udp        0      0 0.0.0.0:137             0.0.0.0:*                           -                   
udp        0      0 192.168.0.255:138       0.0.0.0:*                           -                   
udp        0      0 192.168.0.12:138        0.0.0.0:*                           -                   
udp        0      0 0.0.0.0:138             0.0.0.0:*                           -                   
udp        0      0 0.0.0.0:631             0.0.0.0:*                           -                   
udp        0      0 224.0.0.251:5353        0.0.0.0:*                           3734/chrome --type= 
udp        0      0 224.0.0.251:5353        0.0.0.0:*                           3695/chrome         
udp        0      0 224.0.0.251:5353        0.0.0.0:*                           3734/chrome --type= 
udp        0      0 0.0.0.0:5353            0.0.0.0:*                           -                   
udp        0      0 0.0.0.0:38227           0.0.0.0:*                           -                   
udp6       0      0 :::60592                :::*                                -                   
udp6       0      0 :::5353                 :::*                                -  

在哪个端口上？在主机上还是在EC2上？

netstat -ant | awk '$6 == "LISTEN" && $4 ~ /\.80$/' | wc -l

端口80上没有port服务器。为什么？

当我ssh到我的EC2时，我得到了这个

   __|  __|_  )
   _|  (     /   Amazon Linux 2 AMI
  ___|\___|___|

https://aws.amazon.com/amazon-linux-2/
3 package(s) needed for security, out of 24 available
Run "sudo yum update" to apply all updates.
[ec2-user@ip-172-31-24-192 ~]$ ip addr show
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host 
       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9001 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 02:ae:75:dd:e9:d8 brd ff:ff:ff:ff:ff:ff
    inet 172.31.24.192/20 brd 172.31.31.255 scope global dynamic eth0
       valid_lft 3149sec preferred_lft 3149sec
    inet6 fe80::ae:75ff:fedd:e9d8/64 scope link 
       valid_lft forever preferred_lft forever

Answer 1

问题是，通过在安全组中打开端口80，不会在我的EC2实例中创建侦听该端口的进程。这就是为什么需要Apache (监听端口80)的原因。第一步

sudo su

然后

[ec2-user@ip-172-31-33-157 ~]$ yum update -y
[root@ip-172-31-33-157 ec2-user]# yum install -y httpd.x86_64
[root@ip-172-31-33-157 ec2-user]# service httpd start

现在我们可以检查

[root@ip-172-31-33-157 ec2-user]# service httpd status
Redirecting to /bin/systemctl status httpd.service
● httpd.service - The Apache HTTP Server
   Loaded: loaded (/usr/lib/systemd/system/httpd.service; disabled; vendor preset: disabled)
   Active: active (running) since суб 2020-01-18 12:57:23 UTC; 6s ago
     Docs: man:httpd.service(8)
 Main PID: 21386 (httpd)
   Status: "Processing requests..."
   CGroup: /system.slice/httpd.service
           ├─21386 /usr/sbin/httpd -DFOREGROUND
           ├─21387 /usr/sbin/httpd -DFOREGROUND
           ├─21388 /usr/sbin/httpd -DFOREGROUND
           ├─21389 /usr/sbin/httpd -DFOREGROUND
           ├─21390 /usr/sbin/httpd -DFOREGROUND
           └─21391 /usr/sbin/httpd -DFOREGROUND

效果很好。