Skip to Content.
Sympa Menu

perfsonar-user - [perfsonar-user] virtual bridge

Subject: perfSONAR User Q&A and Other Discussion

List archive

[perfsonar-user] virtual bridge


Chronological Thread 
  • From: Marian Babik <>
  • To: "" <>
  • Subject: [perfsonar-user] virtual bridge
  • Date: Wed, 9 Dec 2015 15:12:20 +0000
  • Accept-language: en-GB, en-US
  • Authentication-results: spf=pass (sender IP is 188.184.36.48) smtp.mailfrom=cern.ch; internet2.edu; dkim=none (message not signed) header.d=none;internet2.edu; dmarc=bestguesspass action=none header.from=cern.ch;
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:23

Hi,
we’re trying to run network measurements using perfSONAR at a cloud provider
that has some tricky network setup.

Provider’s VMs have both private and public IP addresses, but the public IP
is not configured directly on the VM (I have only eth0 with 192.168.4.105).
However traffic is routed correctly for the public IP address, if I open a
port locally, I’m able to connect to it via public IP address from a remote
location (so there is some virtual bridge that forwards connections,
connecting to opened ports on 175.6.57.170 works fine from remote locations).

If I try to run owping from this box to a working perfSONAR, I get denied
with the following in the owamp log :
Dec 9 15:27:47 ps-lt owampd[2232]: FILE=sapi.c, LINE=303, Connection to
([ps-lt.cern.ch]:861) from ([175.6.57.170]:34659)
Dec 9 15:27:47 ps-lt owampd[2232]: FILE=sapi.c, LINE=466,
ControlSession([ps-lt.cern.ch]:861) accepted from
userid(nil):([175.6.57.170]:34659)
Dec 9 15:27:47 ps-lt owampd[2232]: FILE=sapi.c, LINE=610, Test Denied:
OpenMode recieve_addr(192.168.4.105) != control_client(175.6.57.170)

I tried to setup sub-interface and added 175.6.57.170 as eth0:1, however this
doesn’t get routed since the virtual bridge is dropping such packets (as it
should).

My question is if there is way how I can either configure perfSONAR to think
it has public IP address not visible locally (175.6.57.170), or alternatively
get the other end to accept connections when receive_addr is not the same as
control_client address ?

Thanks,
Marian






Attachment: smime.p7s
Description: S/MIME cryptographic signature




Archive powered by MHonArc 2.6.16.

Top of Page