Opensearch-dashboards内部调用间歇性认证失败求助

我现在部署了OpenSearch v3.1.0和OpenSearch Dashboards v3.1.0的容器集群，每次从浏览器访问Dashboards控制台时，OpenSearch节点都会刷出大量认证失败的警告日志，同时Dashboards自身也会报请求异常的日志，这个间歇性的认证问题已经卡了我好一阵了，想请大家帮忙排查下！

OpenSearch 节点日志 #

[2025-08-19T06:49:46,666][WARN ][o.o.s.a.BackendRegistry ] [opensearch-node1] Authentication finally failed for null from 172.20.0.10:43800
[2025-08-19T06:49:46,681][WARN ][o.o.s.a.BackendRegistry ] [opensearch-node1] Authentication finally failed for null from 172.20.0.10:43800
[2025-08-19T06:49:46,698][WARN ][o.o.s.a.BackendRegistry ] [opensearch-node1] Authentication finally failed for null from 172.20.0.10:43800
[2025-08-19T06:49:46,714][WARN ][o.o.s.a.BackendRegistry ] [opensearch-node1] Authentication finally failed for null from 172.20.0.10:43800
[2025-08-19T06:49:46,729][WARN ][o.o.s.a.BackendRegistry ] [opensearch-node1] Authentication finally failed for null from 172.20.0.10:43800
[2025-08-19T06:49:46,774][WARN ][o.o.s.a.BackendRegistry ] [opensearch-node1] Authentication finally failed for null from 172.20.0.10:43856
[2025-08-19T06:49:46,792][WARN ][o.o.s.a.BackendRegistry ] [opensearch-node1] Authentication finally failed for null from 172.20.0.10:43856
[2025-08-19T06:49:46,808][WARN ][o.o.s.a.BackendRegistry ] [opensearch-node1] Authentication finally failed for null from 172.20.0.10:43856
[2025-08-19T06:49:46,823][WARN ][o.o.s.a.BackendRegistry ] [opensearch-node1] Authentication finally failed for null from 172.20.0.10:43856
[2025-08-19T06:49:46,838][WARN ][o.o.s.a.BackendRegistry ] [opensearch-node1] Authentication finally failed for null from 172.20.0.10:43856
[2025-08-19T06:49:46,854][WARN ][o.o.s.a.BackendRegistry ] [opensearch-node1] Authentication finally failed for null from 172.20.0.10:43856
[2025-08-19T06:49:46,868][WARN ][o.o.s.a.BackendRegistry ] [opensearch-node1] Authentication finally failed for null from 172.20.0.10:43856

OpenSearch Dashboards 日志 #

{"type":"log","@timestamp":"2025-08-19T06:15:13Z","tags":["debug","opensearch","opendistro_security","query"],"pid":1,"message":"0\nGET /_plugins/_security/authinfo\n"}
{"type":"log","@timestamp":"2025-08-19T06:15:13Z","tags":["error","opensearch","opendistro_security"],"pid":1,"message":"Request error, retrying\nGET https://opensearch-node1:9200/_plugins/_security/authinfo => socket hang up"}
{"type":"log","@timestamp":"2025-08-19T06:15:13Z","tags":["debug","opensearch","opendistro_security","query"],"pid":1,"message":"401\nHEAD /\n"}
{"type":"log","@timestamp":"2025-08-19T06:15:13Z","tags":["debug","opensearch","opendistro_security","query"],"pid":1,"message":"200\nGET /_plugins/_security/authinfo\n"}
{"type":"log","@timestamp":"2025-08-19T06:15:13Z","tags":["debug","opensearch","opendistro_security","query"],"pid":1,"message":"0\nGET /_plugins/_security/dashboardsinfo\n"}
{"type":"log","@timestamp":"2025-08-19T06:15:13Z","tags":["error","opensearch","opendistro_security"],"pid":1,"message":"Request error, retrying\nGET https://opensearch-node1:9200/_plugins/_security/dashboardsinfo => socket hang up"}
{"type":"log","@timestamp":"2025-08-19T06:15:13Z","tags":["debug","opensearch","opendistro_security","query"],"pid":1,"message":"401\nHEAD /\n"}
{"type":"log","@timestamp":"2025-08-19T06:15:13Z","tags":["debug","opensearch","opendistro_security","query"],"pid":1,"message":"200\nGET /_plugins/_security/dashboardsinfo\n"}
{"type":"log","@timestamp":"2025-08-19T06:15:13Z","tags":["debug","opensearch","opendistro_security","query"],"pid":1,"message":"0\nGET /_plugins/_security/authinfo\n"}
{"type":"log","@timestamp":"2025-08-19T06:15:13Z","tags":["error","opensearch","opendistro_security"],"pid":1,"message":"Request error, retrying\nGET https://opensearch-node1:9200/_plugins/_security/authinfo => socket hang up"}

我自己初步排查过的点 #

• 确认了OpenSearch和Dashboards的版本完全匹配，都是v3.1.0
• 手动在Dashboards容器内curl OpenSearch的接口，大部分时候能返回200，但偶尔会出现超时

想请教大家的排查方向 #

• 有没有遇到过类似的间歇性认证+连接超时问题？
• 从日志里的Authentication finally failed for null能看出是凭证没传过去吗？会不会是Dashboards的配置里有什么参数导致凭证偶尔不携带？
• 容器网络层面需要检查哪些点？比如Docker的网桥配置、连接数限制之类的？

内容来源于stack exchange