perfSONAR User Q&A and Other Discussion

[Jason Zurawski <>]

Greetings John;

BWCTL requires some more ports than just 6001-6200 unfortunately - the full listing is here:

    http://www.perfsonar.net/deploy/security-considerations/#Using_perfSONAR_with_Firewalls

In particular it needs 6001-6200/tcp,udp, 4823/tcp (control) and 5001-5900/tcp,udp (test ports). 

Thanks;

-jason

John Bell wrote:

Hello Everyone,

 

We recently added our Science DMZ perfSONAR nodes to the perfSONAR Dashboard hosted by ESnet (ps-dashboard [dot] es [dot] net).

 

We are listed under the University categories.

 

With one our PF servers, the one related to BWCTL testing, data has not appeared since it has been added a few weeks back. I thought at first it was due to scheduling, but the another of our hosts has since been showing results. When I dig into the events on the dashboard, I see:

“Error from bwctl/:

bwctl: Unable to initiate peer handshake with [198.83.92.4]:6145 – canceling”

 

On my local host, we have IPTables running but there are rules in place for allowing these ports:

16   ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW,ESTABLISHED tcp dpts:6001:6200

17   ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpts:6001:6200

32   ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpts:6001:6200

33   ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW,ESTABLISHED tcp dpts:6001:6200

34   ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpts:6001:6200

35   ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW,ESTABLISHED tcp dpts:6001:6200

 

I see this message in the /var/log/perfsonar/owamp_bwctl.log:

Oct 20 12:44:31 ps-dmz-1 bwctld[13490]: FILE=sapi.c, LINE=353, Connection to (ps-dmz-1.unm.edu:6070) from (atla-pt1.es.net:37802)

Oct 20 12:44:42 ps-dmz-1 bwctld[13491]: FILE=sapi.c, LINE=353, Connection to (ps-dmz-1.unm.edu:4823) from (elpa-pt1.es.net:59341)

Oct 20 12:44:49 ps-dmz-1 bwctld[13490]: FILE=sapi.c, LINE=391, BWLControlAccept(): Unable to read ClientGreeting message

 

 

With this information, are we able to determine why the bwctl test is failing?

 

Thank you for your time,

 

-- John Bell

IT Networks

University of New Mexico