我已经在由10个核心操作系统机器（3个主节点，7个代理节点）组成的dcos集群上安装了来自universe的hdfs。我的ha hdfs配置有2个name节点、3个journal节点和5个data节点。从长远来看，运行hdfs的代理节点——所有这些节点，不管它们是名称节点、日志节点还是数据节点——都会关闭它们的端口22，因此我无法用ssh连接到它们，而没有运行hdfs的节点会保持端口22打开。你知道为什么会这样吗？或者我应该寻找什么来理解为什么会这样？
以下是在集群代理节点上运行nmap后的日志。节点13和16没有hdfs角色，并保持其22端口打开。安装了hdfs的所有其他节点都关闭了端口22。

root@svr-17:/home/andreab# nmap svc-10.dc01

Starting Nmap 6.47 ( http://nmap.org ) at 2017-01-29 11:37 GMT
Nmap scan report for svc-10.dc01 (192.168.111.70)
Host is up (0.00061s latency).
Not shown: 997 closed ports
PORT     STATE SERVICE
5051/tcp open  ida-agent
9000/tcp open  cslistener
9003/tcp open  unknown
MAC Address: 52:54:00:DE:8E:96 (QEMU Virtual NIC)

Nmap done: 1 IP address (1 host up) scanned in 1.72 seconds

root@svr-17:/home/andreab# nmap svc-11.dc01

Starting Nmap 6.47 ( http://nmap.org ) at 2017-01-29 11:38 GMT
Nmap scan report for svc-11.dc01 (192.168.111.71)
Host is up (0.00084s latency).
Not shown: 996 closed ports
PORT     STATE SERVICE
5051/tcp open  ida-agent
9001/tcp open  tor-orport
9002/tcp open  dynamid
9003/tcp open  unknown
MAC Address: 52:54:00:31:1A:E9 (QEMU Virtual NIC)

Nmap done: 1 IP address (1 host up) scanned in 1.70 seconds

root@svr-17:/home/andreab# nmap svc-12.dc01

Starting Nmap 6.47 ( http://nmap.org ) at 2017-01-29 11:38 GMT
Nmap scan report for svc-12.dc01 (192.168.111.72)
Host is up (0.00082s latency).
Not shown: 996 closed ports
PORT     STATE SERVICE
5051/tcp open  ida-agent
9001/tcp open  tor-orport
9002/tcp open  dynamid
9003/tcp open  unknown
MAC Address: 52:54:00:D9:B4:F7 (QEMU Virtual NIC)

Nmap done: 1 IP address (1 host up) scanned in 1.69 seconds

root@svr-17:/home/andreab# nmap svc-13.dc01

Starting Nmap 6.47 ( http://nmap.org ) at 2017-01-29 11:38 GMT
Nmap scan report for svc-13.dc01 (192.168.111.73)
Host is up (0.00025s latency).
Not shown: 998 closed ports
PORT     STATE SERVICE
22/tcp   open  ssh
5051/tcp open  ida-agent
MAC Address: 52:54:00:43:96:45 (QEMU Virtual NIC)

Nmap done: 1 IP address (1 host up) scanned in 1.69 seconds

root@svr-17:/home/andreab# nmap svc-14.dc01

Starting Nmap 6.47 ( http://nmap.org ) at 2017-01-29 11:38 GMT
Nmap scan report for svc-14.dc01 (192.168.111.74)
Host is up (0.00029s latency).
Not shown: 998 closed ports
PORT     STATE SERVICE
5051/tcp open  ida-agent
9003/tcp open  unknown
MAC Address: 52:54:00:77:9D:2E (QEMU Virtual NIC)

Nmap done: 1 IP address (1 host up) scanned in 1.70 seconds

root@svr-17:/home/andreab# nmap svc-15.dc01

Starting Nmap 6.47 ( http://nmap.org ) at 2017-01-29 11:39 GMT
Nmap scan report for svc-15.dc01 (192.168.111.75)
Host is up (0.00020s latency).
Not shown: 998 closed ports
PORT     STATE SERVICE
5051/tcp open  ida-agent
9003/tcp open  unknown
MAC Address: 52:54:00:B9:03:FA (QEMU Virtual NIC)

Nmap done: 1 IP address (1 host up) scanned in 23.51 seconds

root@svr-17:/home/andreab# nmap svc-16.dc01

Starting Nmap 6.47 ( http://nmap.org ) at 2017-01-29 11:39 GMT
Nmap scan report for svc-16.dc01 (192.168.111.76)
Host is up (0.00065s latency).
Not shown: 998 closed ports
PORT     STATE SERVICE
22/tcp   open  ssh
5051/tcp open  ida-agent
MAC Address: 52:54:00:E8:D6:07 (QEMU Virtual NIC)

Nmap done: 1 IP address (1 host up) scanned in 1.72 seconds