Details
-
Type:
extRequest
-
Status: Closed
-
Priority:
Major
-
Resolution: Done
-
Fix Version/s: 2021
-
Component/s: FIWARE-LAB-HELP
-
Sender Email:
-
HD-Node:Spain
Description
Hi
controller node IP 130.251.135.68 part of FIWARE-LAB Genoa node is currently filtered by Telefonica network, preventing authentication to master keystone.
here below the result of our debug session:
1. authentication from 130.251.135.68 times out
2. telnet from 130.251.135.68 to 130.206.84.8:4730 times out
3. traceroute from 130.251.135.68 to 130.206.84.8 fails:
root@controller02:~# traceroute 130.206.84.8
traceroute to 130.206.84.8 (130.206.84.8), 30 hops max, 60 byte packets
1 130.251.135.253 (130.251.135.253) 5.270 ms 5.226 ms 5.222 ms
2 130.251.253.221 (130.251.253.221) 4.461 ms 4.447 ms 4.448 ms
3 * * *
4 130.251.253.42 (130.251.253.42) 0.968 ms 0.894 ms 1.110 ms
5 ru-uni-ge-re1-ge1.ge1.garr.net (193.206.129.162) 1.437 ms 1.519 ms 1.742 ms
6 rx1-ge1-rx1-to1.to1.garr.net (90.147.81.173) 5.056 ms 4.349 ms 4.359 ms
7 rx1-to1-rx2-rm2.rm2.garr.net (90.147.80.213) 13.935 ms 13.683 ms 13.726 ms
8 rx2-rm2-rx2-mi2.mi2.garr.net (90.147.80.66) 16.048 ms 15.420 ms rx2-rm2-rx1-rm2.rm2.garr.net (90.147.81.49) 14.023 ms
9 rx1-rm2-rx1-mi2.mi2.garr.net (90.147.80.62) 15.466 ms 15.270 ms 15.354 ms
10 garr.mx1.mil2.it.geant.net (62.40.125.180) 15.100 ms 15.146 ms 15.594 ms
11 ae0.mx1.mar.fr.geant.net (62.40.98.70) 22.457 ms 21.469 ms 21.688 ms
12 rediris-gw.mx1.mar.fr.geant.net (62.40.124.193) 35.340 ms 35.326 ms 35.334 ms
13 XE3-0-0-264.telmad.rt6.mad.red.rediris.es (130.206.206.133) 35.615 ms 35.253 ms 35.432 ms
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *
4. authentication, telnet and traceroute work correctly on other two controller nodes, e.g.:
root@controller03:~# traceroute 130.206.84.8
traceroute to 130.206.84.8 (130.206.84.8), 30 hops max, 60 byte packets
1 130.251.135.253 (130.251.135.253) 3.819 ms 3.775 ms 3.766 ms
2 130.251.253.221 (130.251.253.221) 4.908 ms 4.937 ms 4.923 ms
3 * * *
4 130.251.253.42 (130.251.253.42) 1.316 ms 1.451 ms 1.712 ms
5 ru-uni-ge-re1-ge1.ge1.garr.net (193.206.129.162) 3.340 ms 3.397 ms 3.493 ms
6 rx1-ge1-rx1-to1.to1.garr.net (90.147.81.173) 6.335 ms 5.795 ms 5.712 ms
7 rx1-to1-rx2-rm2.rm2.garr.net (90.147.80.213) 14.921 ms 14.150 ms 14.405 ms
8 rx2-rm2-rx1-rm2.rm2.garr.net (90.147.81.49) 14.860 ms 13.783 ms 13.744 ms
9 rx2-mi2-rx1-mi2.mi2.garr.net (90.147.80.69) 15.290 ms 16.143 ms rx1-rm2-rx1-mi2.mi2.garr.net (90.147.80.62) 16.246 ms
10 garr.mx1.mil2.it.geant.net (62.40.125.180) 16.193 ms 16.178 ms 16.115 ms
11 ae0.mx1.mar.fr.geant.net (62.40.98.70) 22.516 ms 22.174 ms 22.533 ms
12 rediris-gw.mx1.mar.fr.geant.net (62.40.124.193) 36.421 ms 36.119 ms 36.441 ms
13 XE3-0-0-264.telmad.rt6.mad.red.rediris.es (130.206.206.133) 36.707 ms 36.645 ms 35.377 ms
14 130.206.193.94 (130.206.193.94) 47.798 ms 48.143 ms 47.749 ms
15 130.206.84.8 (130.206.84.8) 47.724 ms 47.865 ms 48.092 ms
Please check firewalling rules in telefonica network.
Available for further debugging or tests
BTW, We guess this issue is the cause for ticket https://jira.fiware.org/browse/HELP-7551
Kind regards
Giorgio Robino - Genoa node fireware lab team.
Issue Links
- relates to
-
HELP-7551
FIWARE.Request.Lab.Spain.FIWARE.WorkItem.Lab.Genoa.Node.Sanity.Check.Issues
-
- Closed
-
Activity
could you run the command:
$ tcptraceroute 130.206.84.8 22
And give me the result of it?
Hi Fernando!
from controller02:
root@controller02:~# tcptraceroute 130.206.84.8 22
traceroute to 130.206.84.8 (130.206.84.8), 30 hops max, 60 byte packets
1 130.251.135.253 (130.251.135.253) 5.763 ms 5.721 ms 5.722 ms
2 130.251.253.221 (130.251.253.221) 5.803 ms 5.790 ms 5.775 ms
3 * * *
4 130.251.253.42 (130.251.253.42) 0.370 ms 0.401 ms 0.386 ms
5 ru-uni-ge-re1-ge1.ge1.garr.net (193.206.129.162) 0.859 ms 0.847 ms 0.935 ms
6 rx1-ge1-rx1-to1.to1.garr.net (90.147.81.173) 4.102 ms 4.190 ms 4.432 ms
7 rx1-to1-rx2-rm2.rm2.garr.net (90.147.80.213) 23.865 ms 13.519 ms 23.323 ms
8 rx2-rm2-rx2-mi2.mi2.garr.net (90.147.80.66) 15.370 ms 14.968 ms 15.597 ms
9 rx2-mi2-rx1-mi2.mi2.garr.net (90.147.80.69) 14.677 ms 15.828 ms rx1-rm2-rx1-mi2.mi2.garr.net (90.147.80.62) 15.857 ms
10 garr.mx1.mil2.it.geant.net (62.40.125.180) 14.817 ms 15.139 ms 14.874 ms
11 ae0.mx1.mar.fr.geant.net (62.40.98.70) 21.025 ms 21.045 ms 21.025 ms
12 rediris-gw.mx1.mar.fr.geant.net (62.40.124.193) 35.071 ms 35.413 ms 35.105 ms
13 XE3-0-0-264.telmad.rt6.mad.red.rediris.es (130.206.206.133) 35.069 ms 35.278 ms 34.969 ms
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *
from controller03:
root@controller03:~# tcptraceroute 130.206.84.8 22
traceroute to 130.206.84.8 (130.206.84.8), 30 hops max, 60 byte packets
1 130.251.135.253 (130.251.135.253) 4.279 ms 4.293 ms 4.281 ms
2 130.251.253.221 (130.251.253.221) 5.028 ms 5.020 ms 5.037 ms
3 * * *
4 130.251.253.42 (130.251.253.42) 0.384 ms 0.373 ms 0.366 ms
5 ru-uni-ge-re1-ge1.ge1.garr.net (193.206.129.162) 0.691 ms 0.762 ms 0.673 ms
6 rx1-ge1-rx1-to1.to1.garr.net (90.147.81.173) 4.058 ms 3.940 ms 3.956 ms
7 rx1-to1-rx2-rm2.rm2.garr.net (90.147.80.213) 13.073 ms 13.134 ms 13.132 ms
8 rx2-rm2-rx2-mi2.mi2.garr.net (90.147.80.66) 17.472 ms 15.084 ms 15.488 ms
9 rx1-rm2-rx1-mi2.mi2.garr.net (90.147.80.62) 15.152 ms 15.071 ms 15.072 ms
10 garr.mx1.mil2.it.geant.net (62.40.125.180) 15.108 ms 15.442 ms 15.063 ms
11 ae0.mx1.mar.fr.geant.net (62.40.98.70) 21.027 ms 21.140 ms 20.958 ms
12 rediris-gw.mx1.mar.fr.geant.net (62.40.124.193) 34.961 ms 34.975 ms 35.095 ms
13 XE3-0-0-264.telmad.rt6.mad.red.rediris.es (130.206.206.133) 35.039 ms 35.350 ms 35.362 ms
14 130.206.193.94 (130.206.193.94) 47.222 ms 46.989 ms 47.146 ms
15 130.206.84.8 (130.206.84.8) <syn,ack> 47.721 ms 47.192 ms 47.495 ms
Do you have any IPS that can ban our IP?
thanks
giorgio
could you check it also to ports 4730 and 4731
fail:
root@controller02:~# tcptraceroute 130.206.84.8 4730
traceroute to 130.206.84.8 (130.206.84.8), 30 hops max, 60 byte packets
1 130.251.135.253 (130.251.135.253) 7.386 ms 7.398 ms 7.388 ms
2 130.251.253.221 (130.251.253.221) 4.132 ms 4.123 ms 4.126 ms
3 * * *
4 130.251.253.42 (130.251.253.42) 0.391 ms 0.380 ms 0.371 ms
5 ru-uni-ge-re1-ge1.ge1.garr.net (193.206.129.162) 0.628 ms 0.766 ms 0.694 ms
6 rx1-ge1-rx1-to1.to1.garr.net (90.147.81.173) 4.049 ms 3.936 ms 3.918 ms
7 rx1-to1-rx2-rm2.rm2.garr.net (90.147.80.213) 13.166 ms 13.114 ms 13.097 ms
8 rx2-rm2-rx2-mi2.mi2.garr.net (90.147.80.66) 15.022 ms 15.907 ms rx2-rm2-rx1-rm2.rm2.garr.net (90.147.81.49) 13.251 ms
9 rx2-mi2-rx1-mi2.mi2.garr.net (90.147.80.69) 14.856 ms rx1-rm2-rx1-mi2.mi2.garr.net (90.147.80.62) 14.843 ms rx2-mi2-rx1-mi2.mi2.garr.net (90.147.80.69) 14.702 ms
10 garr.mx1.mil2.it.geant.net (62.40.125.180) 15.199 ms 15.197 ms 14.814 ms
11 ae0.mx1.mar.fr.geant.net (62.40.98.70) 21.018 ms 21.084 ms 21.027 ms
12 rediris-gw.mx1.mar.fr.geant.net (62.40.124.193) 35.570 ms 36.233 ms 35.695 ms
13 XE3-0-0-264.telmad.rt6.mad.red.rediris.es (130.206.206.133) 34.829 ms 34.848 ms 35.562 ms
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *
root@controller02:~# tcptraceroute 130.206.84.8 4731
traceroute to 130.206.84.8 (130.206.84.8), 30 hops max, 60 byte packets
1 130.251.135.253 (130.251.135.253) 4.589 ms 4.547 ms 4.545 ms
2 130.251.253.221 (130.251.253.221) 5.020 ms 5.008 ms 5.005 ms
3 * * *
4 130.251.253.42 (130.251.253.42) 0.403 ms 0.387 ms 0.437 ms
5 ru-uni-ge-re1-ge1.ge1.garr.net (193.206.129.162) 0.611 ms 0.742 ms 0.679 ms
6 rx1-ge1-rx1-to1.to1.garr.net (90.147.81.173) 3.983 ms 3.992 ms 3.951 ms
7 rx1-to1-rx2-rm2.rm2.garr.net (90.147.80.213) 13.119 ms 13.691 ms 13.178 ms
8 rx2-rm2-rx1-rm2.rm2.garr.net (90.147.81.49) 14.237 ms 14.283 ms rx2-rm2-rx2-mi2.mi2.garr.net (90.147.80.66) 15.442 ms
9 rx1-rm2-rx1-mi2.mi2.garr.net (90.147.80.62) 14.946 ms 14.918 ms 14.894 ms
10 garr.mx1.mil2.it.geant.net (62.40.125.180) 15.243 ms 14.887 ms 14.949 ms
11 ae0.mx1.mar.fr.geant.net (62.40.98.70) 21.192 ms 21.299 ms 21.189 ms
12 rediris-gw.mx1.mar.fr.geant.net (62.40.124.193) 35.148 ms 35.463 ms 35.449 ms
13 XE3-0-0-264.telmad.rt6.mad.red.rediris.es (130.206.206.133) 34.951 ms 34.977 ms 35.360 ms
14 * * *
15 * * *
16 * * *
17 * * *
18 * * *
19 * * *
20 * * *
21 * * *
22 * * *
23 * * *
24 * * *
25 * * *
26 * * *
27 * * *
28 * * *
29 * * *
30 * * *
-------------------------------------------------------------------------------------
success:
root@controller03:~# tcptraceroute 130.206.84.8 4730
traceroute to 130.206.84.8 (130.206.84.8), 30 hops max, 60 byte packets
1 130.251.135.253 (130.251.135.253) 5.883 ms 5.841 ms 5.839 ms
2 130.251.253.221 (130.251.253.221) 4.791 ms 4.777 ms 4.825 ms
3 * * *
4 130.251.253.42 (130.251.253.42) 0.349 ms 0.397 ms 0.435 ms
5 ru-uni-ge-re1-ge1.ge1.garr.net (193.206.129.162) 0.782 ms 0.771 ms 0.818 ms
6 rx1-ge1-rx1-to1.to1.garr.net (90.147.81.173) 4.043 ms 3.839 ms 3.832 ms
7 rx1-to1-rx2-rm2.rm2.garr.net (90.147.80.213) 15.580 ms 15.404 ms 15.403 ms
8 rx2-rm2-rx2-mi2.mi2.garr.net (90.147.80.66) 16.320 ms 15.162 ms rx2-rm2-rx1-rm2.rm2.garr.net (90.147.81.49) 13.465 ms
9 rx1-rm2-rx1-mi2.mi2.garr.net (90.147.80.62) 15.166 ms 14.771 ms rx2-mi2-rx1-mi2.mi2.garr.net (90.147.80.69) 19.247 ms
10 garr.mx1.mil2.it.geant.net (62.40.125.180) 14.859 ms 15.317 ms 14.813 ms
11 ae0.mx1.mar.fr.geant.net (62.40.98.70) 21.019 ms 21.035 ms 21.009 ms
12 rediris-gw.mx1.mar.fr.geant.net (62.40.124.193) 34.971 ms 35.453 ms 35.169 ms
13 XE3-0-0-264.telmad.rt6.mad.red.rediris.es (130.206.206.133) 35.056 ms 35.470 ms 35.087 ms
14 130.206.193.94 (130.206.193.94) 47.170 ms 47.150 ms 47.126 ms
15 130.206.84.8 (130.206.84.8) <syn,ack> 47.202 ms 48.053 ms 48.006 ms
root@controller03:~# tcptraceroute 130.206.84.8 4731
traceroute to 130.206.84.8 (130.206.84.8), 30 hops max, 60 byte packets
1 130.251.135.253 (130.251.135.253) 6.372 ms 6.371 ms 6.356 ms
2 130.251.253.221 (130.251.253.221) 5.133 ms 5.121 ms 5.121 ms
3 * * *
4 130.251.253.42 (130.251.253.42) 0.342 ms 0.375 ms 0.363 ms
5 ru-uni-ge-re1-ge1.ge1.garr.net (193.206.129.162) 41.270 ms 41.257 ms 41.241 ms
6 rx1-ge1-rx1-to1.to1.garr.net (90.147.81.173) 3.975 ms 3.888 ms 3.888 ms
7 rx1-to1-rx2-rm2.rm2.garr.net (90.147.80.213) 15.119 ms 13.857 ms 13.695 ms
8 rx2-rm2-rx2-mi2.mi2.garr.net (90.147.80.66) 15.019 ms 15.337 ms 14.994 ms
9 rx1-rm2-rx1-mi2.mi2.garr.net (90.147.80.62) 14.983 ms rx2-mi2-rx1-mi2.mi2.garr.net (90.147.80.69) 15.231 ms rx1-rm2-rx1-mi2.mi2.garr.net (90.147.80.62) 15.041 ms
10 garr.mx1.mil2.it.geant.net (62.40.125.180) 15.051 ms 16.214 ms 15.193 ms
11 ae0.mx1.mar.fr.geant.net (62.40.98.70) 21.259 ms 21.049 ms 21.069 ms
12 rediris-gw.mx1.mar.fr.geant.net (62.40.124.193) 36.386 ms 36.148 ms 35.083 ms
13 XE3-0-0-264.telmad.rt6.mad.red.rediris.es (130.206.206.133) 35.069 ms 37.189 ms 37.389 ms
14 130.206.193.94 (130.206.193.94) 47.169 ms 47.465 ms 47.463 ms
15 130.206.84.8 (130.206.84.8) <syn,ack> 47.513 ms 47.011 ms 47.073 ms
closed why ?
It is rather the same problem you have in: https://jira.fiware.org/browse/HELP-7551
see also comment here:
https://jira.fiware.org/browse/HELP-7551?focusedCommentId=56614&page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-56614