Docker-compose containers within Azure Container Instances crash

Products

• Symantec ZTNA

Issue/Introduction

SAC deployed with docker compose connector types within Docker containers running within Azure Container instances.

These docker containers are crashing at random times within Azure, often daily.

We need to fix the issue fast by re-deploying the container., but we always need to generate a new OTP which prevents quick deployments.

Is it also possible to have permanent password so we can quickly redeploy the container without generating a new OTP. 

Environment

SAC connectors.

Azure Container instances.

Cause

make sure that you are running the latest RECOMMENDED connector image and not the latest downloaded from the docker hub. 

 

Resolution

Deploy connector version 2.10.5 and newer images downloaded from the docker hub.

The 2.10.5 certainly improved things and reduced the number of crashes. However crashes are still seen irregularly and in all cases is due to regional issue within Azure itself. While troubleshooting and before contacting Microsoft we even found some docs and forum post of people who had a lot of stability issues with the use of Azure Container Instances.

We also deployed an Ubuntu 22.04 LTS VM with docker and this one is running the 2.10.5 fine for a weeks now.

If a non Azure connector works fine when Azure fails, we would recommend opening a ticket with Microsoft. The Symantec SAC containers within Azure’s native solution is useful because it gives us out of the box high availability, more resiliency and it is typically cheaper to run it this way.