Skip to Content.
Sympa Menu

perfsonar-user - Re: [perfsonar-user] Problem with Persfonar firewall ports

Subject: perfSONAR User Q&A and Other Discussion

List archive

Re: [perfsonar-user] Problem with Persfonar firewall ports


Chronological Thread 
  • From: Szymon Trocha <>
  • To: Raul Lopes <>
  • Cc: "" <>
  • Subject: Re: [perfsonar-user] Problem with Persfonar firewall ports
  • Date: Mon, 24 Feb 2020 14:25:24 +0100
  • Organization: PCSS

Hi Raul,

W dniu 21.02.2020 o 16:35, Raul Lopes pisze:
Dear Perfsonar support,
I  work with Jisc/UK and we are configuring a network of Perfsonar hosts.
The were installed by the STFC/UK admins from the Perfsonar iso.
I have a few questions:
(0) firewall
Is this link correct for firewall configuration

Failed to post task: Error getting tools from ps03-ban: Connection timed out after 10001 milliseconds



http://docs.perfsonar.net/manage_security.html
And does the Perfsonar iso leave the firewall configured after installation?


Yes, it is automatically configured when using ISO installation and the ports in the table above are correct.



(1) Is this error a firewall error

Failed to post task: Error getting tools from ps03-ban: Connection timed out after 10001 milliseconds


This error message is an information that your pscheduler server was unable to get the list of supported tools from the other side.

What does the troubleshoot commands print on you src host:

pscheduler troubleshoot

pscheduler troubleshoot ps03-ban.your_remotehost_domain

pscheduler troubleshoot ps03-management.your_remotehost_domain



(2) the NICs correctly being used?
Each host has three IPs:  - management  - latency  - bandwidth
when I run  pscheduler task throughput  --source ps00-ban --dest ps99-ban
I see ps00 using the management port in ps99-ban.
Is that expected? Can you post the whole result?

(3) archiver
In each host, there is failure try to contact the archiver through management port.
Is the archiver central or local to each host?

Again, is that expected?
(4) Error about credentials contacting the archiver
I also see in the logs an error about failed credentials contacting the archiver. WOuld it be firewall related?
Feb 20 19:54:09 ps01 journal: archiver WARNING  114317: Failed to archive https://ps01-em1.rl.ac.uk/pscheduler/tasks/8d4879e3-6794-4092-8cc3-19354c98ab9d/runs/f6573cf4-8f98-4448-83bb-107801573409 to esmond: Archiver permanently abandoned registering test after 1 attempt(s): 401: Authentication credentials were not provided.

How do you authenticate your hosts in central MA? Did you follow https://docs.perfsonar.net/multi_ma_install.html#authenticating-measurement-hosts


Regards,

--
Szymon Trocha
Poznań Supercomputing & Networking Center
General NOC phone +48 61-858-2015 | noc.pcss.pl
Personal desk phone +48 61-858-2022 Wysłaliśmy do Ciebie ten e-mail w odpowiedzi na Twoje zapytanie lub w związku z oferowaną usługą. Przesłanie korespondencji do Centrum Zarządzania PCSS lub zgłoszenie telefoniczne jest równoznaczne z wyrażeniem zgody na przetwarzanie danych osobowych przez Instytut Chemii Bioorganicznej Polskiej Akademii Nauk w Poznaniu adres: ul. Z. Noskowskiego 12/14, 61-704 Poznań. Szczegółowe informacje znajdują się w naszej Polityce prywatności. | This message has been sent as a part of communication with PSNC NOC or your service request sent to us. For more information read our Privacy Policy.



Archive powered by MHonArc 2.6.19.

Top of Page