Bug 1105337 - SSH works, but push-pem fails to connect (host unreachable)
Summary: SSH works, but push-pem fails to connect (host unreachable)
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: GlusterFS
Classification: Community
Component: geo-replication
Version: mainline
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Harshavardhana
QA Contact:
URL:
Whiteboard:
Depends On: 1105323
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-06-05 22:32 UTC by Harshavardhana
Modified: 2015-03-23 01:04 UTC (History)
8 users (show)

Fixed In Version: glusterfs-3.6.0beta1
Clone Of: 1105323
Environment:
Last Closed: 2014-11-11 08:34:28 UTC
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Embargoed:


Attachments (Terms of Use)

Comment 1 Anand Avati 2014-06-05 22:33:42 UTC
REVIEW: http://review.gluster.org/7997 (geo-rep/gverify: Never use ping to check for host reachability) posted (#2) for review on master by Harshavardhana (harsha)

Comment 2 Anand Avati 2014-06-09 18:44:33 UTC
REVIEW: http://review.gluster.org/7997 (geo-rep/gverify: Never use ping to check for host reachability) posted (#3) for review on master by Harshavardhana (harsha)

Comment 3 Anand Avati 2014-06-09 21:10:30 UTC
REVIEW: http://review.gluster.org/7997 (geo-rep/gverify: Never use ping to check for host reachability) posted (#4) for review on master by Harshavardhana (harsha)

Comment 4 Anand Avati 2014-06-11 04:18:55 UTC
REVIEW: http://review.gluster.org/7997 (geo-rep/gverify: Never use ping to check for host reachability) posted (#5) for review on master by Harshavardhana (harsha)

Comment 5 Anand Avati 2014-06-11 06:08:15 UTC
REVIEW: http://review.gluster.org/7997 (geo-rep/gverify: Never use ping to check for host reachability) posted (#6) for review on master by Harshavardhana (harsha)

Comment 6 Anand Avati 2014-06-12 12:48:30 UTC
COMMIT: http://review.gluster.org/7997 committed in master by Venky Shankar (vshankar) 
------
commit 665366a72b720d2eee61aba8b3108e12747db767
Author: Harshavardhana <harsha>
Date:   Thu Jun 5 13:17:24 2014 -0700

    geo-rep/gverify: Never use ping to check for host reachability
    
    On many linux distributions with iptables enabled, ICMP traffic
    is usually dropped even when port 22 is open for SSH service
    
    So practically `ping` is an unreliable command
    
    ~~~
    root@rhs1:/var/log/glusterfs # gluster volume geo-replication geo-test \
                              17.16.10.1::geo-test-slave create push-pem force
    172.16.10.1 not reachable.
    geo-replication command failed
    ~~~
    
    ~~~
    root@rhs1:/var/log/glusterfs # ping 172.16.10.1
    PING rhs2.sjc.redhat.com (172.16.10.1) 56(84) bytes of data.
    From rhs2.sjc.redhat.com (172.16.10.1) icmp_seq=1 Destination Host Prohibited
    ...
    ...
    ~~~
    
    ~~~
    root@rhs2:/var/log/glusterfs # service iptables status | grep 22
    4    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:22
    root@rhs2:/var/log/glusterfs # service iptables status | grep icmp-host-prohibited
    25   REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited
    ~~~
    
    Change-Id: I33206ca071aa5d755c0762f7c486da222ec3c7db
    BUG: 1105337
    Signed-off-by: Harshavardhana <harsha>
    Reviewed-on: http://review.gluster.org/7997
    Tested-by: Gluster Build System <jenkins.com>
    Reviewed-by: Aravinda VK <avishwan>
    Reviewed-by: Venky Shankar <vshankar>
    Tested-by: Venky Shankar <vshankar>

Comment 7 Niels de Vos 2014-09-22 12:42:14 UTC
A beta release for GlusterFS 3.6.0 has been released. Please verify if the release solves this bug report for you. In case the glusterfs-3.6.0beta1 release does not have a resolution for this issue, leave a comment in this bug and move the status to ASSIGNED. If this release fixes the problem for you, leave a note and change the status to VERIFIED.

Packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update (possibly an "updates-testing" repository) infrastructure for your distribution.

[1] http://supercolony.gluster.org/pipermail/gluster-users/2014-September/018836.html
[2] http://supercolony.gluster.org/pipermail/gluster-users/

Comment 8 Niels de Vos 2014-11-11 08:34:28 UTC
This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-3.6.1, please reopen this bug report.

glusterfs-3.6.1 has been announced [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution.

[1] http://supercolony.gluster.org/pipermail/gluster-users/2014-November/019410.html
[2] http://supercolony.gluster.org/mailman/listinfo/gluster-users


Note You need to log in before you can comment on or make changes to this bug.