Bug 1105337

Summary: SSH works, but push-pem fails to connect (host unreachable)
Product: [Community] GlusterFS Reporter: Harshavardhana <fharshav>
Component: geo-replicationAssignee: Harshavardhana <fharshav>
Status: CLOSED CURRENTRELEASE QA Contact:
Severity: high Docs Contact:
Priority: high    
Version: mainlineCC: aavati, bugs, csaba, cww, fharshav, gluster-bugs, hamiller, nlevinki
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: glusterfs-3.6.0beta1 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 1105323 Environment:
Last Closed: 2014-11-11 08:34:28 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1105323    
Bug Blocks:    

Comment 1 Anand Avati 2014-06-05 22:33:42 UTC
REVIEW: http://review.gluster.org/7997 (geo-rep/gverify: Never use ping to check for host reachability) posted (#2) for review on master by Harshavardhana (harsha)

Comment 2 Anand Avati 2014-06-09 18:44:33 UTC
REVIEW: http://review.gluster.org/7997 (geo-rep/gverify: Never use ping to check for host reachability) posted (#3) for review on master by Harshavardhana (harsha)

Comment 3 Anand Avati 2014-06-09 21:10:30 UTC
REVIEW: http://review.gluster.org/7997 (geo-rep/gverify: Never use ping to check for host reachability) posted (#4) for review on master by Harshavardhana (harsha)

Comment 4 Anand Avati 2014-06-11 04:18:55 UTC
REVIEW: http://review.gluster.org/7997 (geo-rep/gverify: Never use ping to check for host reachability) posted (#5) for review on master by Harshavardhana (harsha)

Comment 5 Anand Avati 2014-06-11 06:08:15 UTC
REVIEW: http://review.gluster.org/7997 (geo-rep/gverify: Never use ping to check for host reachability) posted (#6) for review on master by Harshavardhana (harsha)

Comment 6 Anand Avati 2014-06-12 12:48:30 UTC
COMMIT: http://review.gluster.org/7997 committed in master by Venky Shankar (vshankar) 
------
commit 665366a72b720d2eee61aba8b3108e12747db767
Author: Harshavardhana <harsha>
Date:   Thu Jun 5 13:17:24 2014 -0700

    geo-rep/gverify: Never use ping to check for host reachability
    
    On many linux distributions with iptables enabled, ICMP traffic
    is usually dropped even when port 22 is open for SSH service
    
    So practically `ping` is an unreliable command
    
    ~~~
    root@rhs1:/var/log/glusterfs # gluster volume geo-replication geo-test \
                              17.16.10.1::geo-test-slave create push-pem force
    172.16.10.1 not reachable.
    geo-replication command failed
    ~~~
    
    ~~~
    root@rhs1:/var/log/glusterfs # ping 172.16.10.1
    PING rhs2.sjc.redhat.com (172.16.10.1) 56(84) bytes of data.
    From rhs2.sjc.redhat.com (172.16.10.1) icmp_seq=1 Destination Host Prohibited
    ...
    ...
    ~~~
    
    ~~~
    root@rhs2:/var/log/glusterfs # service iptables status | grep 22
    4    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:22
    root@rhs2:/var/log/glusterfs # service iptables status | grep icmp-host-prohibited
    25   REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited
    ~~~
    
    Change-Id: I33206ca071aa5d755c0762f7c486da222ec3c7db
    BUG: 1105337
    Signed-off-by: Harshavardhana <harsha>
    Reviewed-on: http://review.gluster.org/7997
    Tested-by: Gluster Build System <jenkins.com>
    Reviewed-by: Aravinda VK <avishwan>
    Reviewed-by: Venky Shankar <vshankar>
    Tested-by: Venky Shankar <vshankar>

Comment 7 Niels de Vos 2014-09-22 12:42:14 UTC
A beta release for GlusterFS 3.6.0 has been released. Please verify if the release solves this bug report for you. In case the glusterfs-3.6.0beta1 release does not have a resolution for this issue, leave a comment in this bug and move the status to ASSIGNED. If this release fixes the problem for you, leave a note and change the status to VERIFIED.

Packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update (possibly an "updates-testing" repository) infrastructure for your distribution.

[1] http://supercolony.gluster.org/pipermail/gluster-users/2014-September/018836.html
[2] http://supercolony.gluster.org/pipermail/gluster-users/

Comment 8 Niels de Vos 2014-11-11 08:34:28 UTC
This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-3.6.1, please reopen this bug report.

glusterfs-3.6.1 has been announced [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution.

[1] http://supercolony.gluster.org/pipermail/gluster-users/2014-November/019410.html
[2] http://supercolony.gluster.org/mailman/listinfo/gluster-users