Skip to Content.
Sympa Menu

perfsonar-user - Re: [perfsonar-user] Problem with Persfonar firewall ports

Subject: perfSONAR User Q&A and Other Discussion

List archive

Re: [perfsonar-user] Problem with Persfonar firewall ports


Chronological Thread 
  • From: Raul Lopes <>
  • To: Szymon Trocha <>
  • Cc: "" <>
  • Subject: Re: [perfsonar-user] Problem with Persfonar firewall ports
  • Date: Mon, 24 Feb 2020 15:10:38 +0000

Hi Szymon,


Thanks for the reply.


I had tried the troubleshooting and that's what made question the firewall. I see:

[root@ps01 PSREMOTE]# pscheduler troubleshoot
Performing basic troubleshooting of localhost.

localhost:

  Measuring MTU... 65535 (Local)
  Looking for pScheduler... OK.
  Checking clock... OK.
  Exercising API... Status... Tests... Tools... OK.
  Idle test.... 9 seconds.... Checking archiving... OK.

pScheduler appears to be functioning normally.

[root@ps01 PSREMOTE]# pscheduler troubleshoot --host ps01-ban ps03-ban
Performing basic troubleshooting of ps01-ban and ps03-ban.



ps01-ban:

  Measuring MTU... 65535 (Local)
  Looking for pScheduler... OK.
  Checking clock... OK.
  Exercising API... Status... Tests... Tools... OK.
  Idle test.... 9 seconds.... Checking archiving... OK.

ps03-ban:

  Measuring MTU... Unsafe or unknown: Error: Process took too long to run.
  Looking for pScheduler... Failed.
Connection timed out after 3001 milliseconds


As for the archiver, the latency tests are running, but weren't  getting published to MadDash.

I see in the logs in of the  perfsonar hosts that are configured:

[root@ps01 perfsonar]# tail -n 2 pscheduler.log
Feb 24 14:33:15 ps01 journal: archiver WARNING  115727: Failed to archive https://ps01-em1.rl.ac.uk/pscheduler/tasks/8b96154e-8287-4bda-abac-bde1578b8e8f/runs/60a7ea96-41e5
-4307-b7e8-a776dbe013c0 to esmond: Archiver permanently abandoned registering test after 1 attempt(s): 401: Authentication credentials were not provided.
Feb 24 14:33:15 ps01 journal: archiver WARNING  115727: Gave up archiving https://ps01-em1.rl.ac.uk/pscheduler/tasks/8b96154e-8287-4bda-abac-bde1578b8e8f/runs/60a7ea96-41e5
-4307-b7e8-a776dbe013c0 to esmond

Duncan Rand, who's doing the MadDash, has changed authentication and the first results
are showing.

I believe that the only doubt is firewall.

Raul

From: Szymon Trocha <>
Sent: 24 February 2020 13:25
To: Raul Lopes <>
Cc: <>
Subject: Re: [perfsonar-user] Problem with Persfonar firewall ports
 
Hi Raul,

W dniu 21.02.2020 o 16:35, Raul Lopes pisze:
Dear Perfsonar support,

I  work with Jisc/UK and we are configuring a network of Perfsonar hosts.

The were installed by the STFC/UK admins from the Perfsonar iso.

I have a few questions:

(0) firewall

Is this link correct for firewall configuration


Failed to post task: Error getting tools from ps03-ban: Connection timed out after 10001 milliseconds




And does the Perfsonar iso leave the firewall configured after installation?


Yes, it is automatically configured when using ISO installation and the ports in the table above are correct.



(1) Is this error a firewall error


Failed to post task: Error getting tools from ps03-ban: Connection timed out after 10001 milliseconds


This error message is an information that your pscheduler server was unable to get the list of supported tools from the other side.

What does the troubleshoot commands print on you src host:

pscheduler troubleshoot

pscheduler troubleshoot ps03-ban.your_remotehost_domain

pscheduler troubleshoot ps03-management.your_remotehost_domain



(2) the NICs correctly being used?

Each host has three IPs:
 - management
 - latency
 - bandwidth

when I run
 pscheduler task throughput  --source ps00-ban --dest ps99-ban

I see ps00 using the management port in ps99-ban.

Is that expected?
Can you post the whole result?

(3) archiver

In each host, there is failure try to contact the archiver through management port.
Is the archiver central or local to each host?

Again, is that expected?

(4) Error about credentials contacting the archiver

I also see in the logs an error about failed credentials contacting the archiver. WOuld it be firewall related?

Feb 20 19:54:09 ps01 journal: archiver WARNING  114317: Failed to archive https://ps01-em1.rl.ac.uk/pscheduler/tasks/8d4879e3-6794-4092-8cc3-19354c98ab9d/runs/f6573cf4-8f98-4448-83bb-107801573409 to esmond: Archiver permanently abandoned registering test after 1 attempt(s): 401: Authentication credentials were not provided.

How do you authenticate your hosts in central MA? Did you follow https://docs.perfsonar.net/multi_ma_install.html#authenticating-measurement-hosts


Regards,

--
Szymon Trocha
Poznań Supercomputing & Networking Center
General NOC phone +48 61-858-2015 | noc.pcss.pl
Personal desk phone +48 61-858-2022
Wysłaliśmy do Ciebie ten e-mail w odpowiedzi na Twoje zapytanie lub w związku z oferowaną usługą. Przesłanie korespondencji do Centrum Zarządzania PCSS lub zgłoszenie telefoniczne jest równoznaczne z wyrażeniem zgody na przetwarzanie danych osobowych przez Instytut Chemii Bioorganicznej Polskiej Akademii Nauk w Poznaniu adres: ul. Z. Noskowskiego 12/14, 61-704 Poznań. Szczegółowe informacje znajdują się w naszej Polityce prywatności. | This message has been sent as a part of communication with PSNC NOC or your service request sent to us. For more information read our Privacy Policy.

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under company number. 05747339, VAT number GB 197 0632 86. Jisc’s registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.

Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.

For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice



Archive powered by MHonArc 2.6.19.

Top of Page