[Bugs] [Bug 1540249] Gluster is trying to use a port outside documentation and firewalld' s glusterfs.xml

[bugzilla at redhat.com]

https://bugzilla.redhat.com/show_bug.cgi?id=1540249

Raghavendra Talur <rtalur at redhat.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |devianca at gmail.com,
                   |                            |rtalur at redhat.com
              Flags|                            |needinfo?(devianca at gmail.co
                   |                            |m)



--- Comment #24 from Raghavendra Talur <rtalur at redhat.com> ---
Hi,

Gaurav reproduced the same issue that you are hitting. Here is the explanation
for it.

Gluster has some sockets in listening mode and some which are just clients.
For example a glusterd process creates a LISTENING port at 24007 and also
creates a client connection using connect() call. The glusterfs.xml the we
provide *only* lists those ports that we bind to and LISTEN at.


In your setup we have

10.250.1.1     10.250.1.2
24007          24007
49151          49151

where 24007 are listening ports and 49151 are client ports. Now, 10.250.1.2
sent a packet from 49151 to 10.250.1.1:24007. That is what you see as SYN_SENT.
It was also received by 10.250.1.1 and we see that as SYN_RECV. The log message
below shows that when 10.250.1.1:24007 replied back with SYN_ACK it was
dropped.

Jan 30 13:42:11 ProdigyX kernel: STATE_INVALID_DROP: IN=bond1 OUT=
MAC=26:bb:b5:40:75:92:68:05:ca:69:9e:fc:08:00 SRC=10.250.1.1 DST=10.250.1.2
LEN=60 TOS=0x00 PREC=0x00 TTL=64 ID=0 DF PROTO=TCP SPT=24007 DPT=49151
WINDOW=27438 RES=0x00 ACK SYN URGP=0

I think glusterfs.xml isn't applied at node 10.250.1.1. Please check once,
maybe the zone isn't mapped to the interface.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.