NiFi ERR_CONNECTION_REFUSED from other computers than where it's installed

Question

Hi,I can't seem to figure out why I'm unable to reach my NiFi GUI from computers on our intranet other than where it's installed.nifi.properties has these entries (nothing on the http settings)nifi.web.https.host=ourMacMini20nifi.web.https.port=9444nifi.web.https.network.interface.default=nifi.web.https.application.protocols=h2 http/1.1nifi.web.jetty.working.directory=./work/jettynifi.web.jetty.threads=200nifi.web.max.header.size=16 KBnifi.web.proxy.context.path=nifi.web.proxy.host=nifi.web.max.content.size=nifi.web.max.requests.per.second=30000nifi.web.max.access.token.requests.per.second=25nifi.web.request.timeout=60 secsnifi.web.request.ip.whitelist=nifi.web.should.send.server.version=truenifi.web.request.log.format=%{client}a - %u %t "%r" %s %O "%{Referer}i" "%{User-Agent}i"From the computer itself where the installation occurs this works:https://ourmacmini20:9444/nifi/For other computers (where certificates are installed) this message is shownThis site can’t be reachedourmacmini20 refused to connect.ERR_CONNECTION_REFUSED No error messages appear in any log files.This is what seems to point to some NiFi setting being incomplete. Two other services run on that computer and they are reachable from other computers:http://ourmacmini20:8080/andhttps://ourmacmini20:9443/#!/authPlease any suggestions as to what I'm overlooking?Thank you!

Shelton · Accepted Answer

@Emery
I think this should resolve your problem, change the nifi.web.https.host and shown below so it binds to all network interfaces, allowing access from other machines in your intranet

Spoiler

nifi.web.https.host=ourMacMini20 --> nifi.web.https.host=0.0.0.0

Browser Trust for Self-Signed Certificates

Problem: If you're using a self-signed certificate, browsers on other machines may block access or show warnings.

Solution:

Install the certificate from the NiFi server on the client machines' trusted certificate store.
Alternatively, use a certificate from a trusted Certificate Authority (CA).

Please let me know if that helped

Happy hadooping

Translate

SAMSAL · Answer

Hi,Is the host name defined in the DNS? If not then use the IP address or machine FQDN  instead.

Sign up

Please use your Cloudera account.

Login to the community

Please use your Cloudera account.