perfSONAR User Q&A and Other Discussion

[Shawn McKee <>]

Hi Winnie,

Actually probably best to address additional questions about the WLCG installation to the WLCG list .

We also have a GGUS unit if you need to open a ticket:  https://wiki.egi.eu/wiki/GGUS:WLCG_perfSONAR_FAQ

I just refreshed the tests on pfomd.grid.iu.edu but I am still seeing some problems.

We have a prototype instance of the monitoring at https://maddash.aglt2.org/WLCGperfSONAR/check_mk/index.py?start_url=%2FWLCGperfSONAR%2Fcheck_mk%2Fview.py%3Fview_name%3Dhosts%26host%3Dbris

If you try that URL you will see your sites ARE all green

It seems like the OSG subnet  129.79.53.0/24  may still be blocked?  Are there any messages in /var/log/message regarding IPTABLE  drops?

Thanks,

Shawn

On Mon, Feb 9, 2015 at 9:22 AM, Winnie Lacesso <> wrote:

Good afternoon,

>From Mon Feb  2 13:40:06 2015
>Date: Mon, 2 Feb 2015 14:39:13 +0100
> Subject: [lcg-site-admin] perfSONAR Infrastructure Monitoring and 3.4.1 Update Reminder

<snip>
> like to stress out, that after updating, it's very important to reconfigure
> your instances following the instructions at
> https://twiki.opensciencegrid.org/bin/view/Documentation/InstallUpdatePS

I followed the instructions (I believe)

> We'd like to also ask ALL sites to reboot their instances in order to ensure
> that the latest security updates are applied and to check if you have
Did that

> correctly whitelisted the OSG subnet, which is now hosting the core
> infrastructure for WLCG perfSONAR.
Think done ok!

> Finally, we would like to announce availability of the perfSONAR
> infrastructure monitoring at:
> http://pfomd.grid.iu.edu
<snip>
> and troubleshooting is available at
> https://twiki.opensciencegrid.org/bin/view/Documentation/TroubleFAQPS

Most of our 2 nodes are red with a date of 2014-12-25 or thereabouts. I'm
familiar with nagios & choosing something to re-test & submitting a
re-test, but don't seem to be able to do that with this (sort of makes
sense, it knows my Grid Cert but says I'm just a Guest).

Most of the entries are not "wrong info" but "can't connect" or "Service
Check timed out" & as I say with date of 1.5months ago.

Anyone know how to get it to rerun the tests????

(Other UKI sites are all Green, so it can be done!)

Both our BW & Lat boxen explicitly accept that subnet's port 443 packets:
ACCEPT     tcp  --  129.79.53.0/24       0.0.0.0/0           tcp dpt:443