Skip to Content.
Sympa Menu

ndt-users - Re: NDT test over a proxy

Subject: ndt-users list created

List archive

Re: NDT test over a proxy


Chronological Thread 
  • From: Chris Ritzo <>
  • To: Peter Boothe <>
  • Cc: Tom Ammon <>,
  • Subject: Re: NDT test over a proxy
  • Date: Mon, 12 Sep 2016 11:26:17 -0400
  • Ironport-phdr: 9a23:8qDB5B+I/UtNOv9uRHKM819IXTAuvvDOBiVQ1KB90+4cTK2v8tzYMVDF4r011RmSAtWdtqkP0reempujcFJDyK7JiGoFfp1IWk1NouQttCtkPvS4D1bmJuXhdS0wEZcKflZk+3amLRodQ56mNBX660e/5j8KGxj5KRE9ZqGsQtaT3IyL0LWK9oHeeU1igz2hYb46eA28qgLNtsQ+joxlJaI8jBDOpy0bVf5RwDZDJUiShF7G59ui+9Y3+D5Rp+Am38lYXKPmcq84TLpDEDU6Lnw4osrxuk+QHkO0+nIAXzBOwVJzCA/f4US/B8+pvw==

Hi Tom,

On the M-Lab platform, the NDT server listen on TCP port 3001 for unencrypted tests, and TCP port 3010 for SSL. Perfsonar may not be providing the SSL NDT test.

As Peter mentioned, those ports are used for the control channel between the client and server, but then the NDT server provides a random port in the ephemeral range to the client specifying which port to use to conduct the actual test. Those port numbers are semi-random and in the high ephemeral range, so you will also need to open ports 32768 to 61000.

I am also curious about your experience.

Best,
Chris

 Chris Ritzo
 Senior Technologist, Open Technology Institute @ New America
 740 15th Street NW, Suite 900
 Washington, DC 20036     

On Mon, Sep 12, 2016 at 9:46 AM, Peter Boothe <> wrote:

Unfortunately, as designed and written, to perform a speed test ndt requires at least two open ports. One for the command channel along which to request tests and report results, and one port for each of the tests requested. There are command line options to configure these port numbers, but they can't be set to the same value :(

One thing you could do is to use the default command channel port (3000? I forget.) And then to use command line options to set the download test port range to restrict it to the ones you want to filter/test (use --help to discover the right option here, but I recall seeing that such an option exists). I give roughly even odds that this will work, as I can imagine some proxy setups that wouldn't work with the current ndt server code and some that would work. I think the only way to find out is to try it.

Please report back if this works, as I am now quite curious about how well (and whether!) NDT works through proxies!

  -Peter


On Mon, Sep 12, 2016, 9:11 AM Tom Ammon <> wrote:
Hi, 

I have recently stood up a perfsonar server for doing speed tests from our international sites to our U.S.-based headquarters location. Everything works great, although I admit that I'm only using a small part of its capabilities. 

Now, though, I would like to set up the NDT test so that I can verify performance through our web proxies. We use cisco CWS web filtering, which is just a proxy. The problem is that I can only redirect port 80 and 443 through this proxy. So my question is, is it possible to set up NDT that comes on the perfsonar toolkit to listen on port 80 and do its testing through that instead of 3001-3003?

Thanks, 
Tom

--
-----------------------------------------------------------------------------
Tom Ammon
Network Engineer
M: (801) 784-2628

-----------------------------------------------------------------------------




Archive powered by MHonArc 2.6.19.

Top of Page