nettest does not validate whether ports are open about deepsea HOT 7 CLOSED

I suspect that this could be very expensive due to combinatorial explosion if its any more than just checking the state of the firewall on each node.

Could you please expand your thoughts a little?

from deepsea.

How about a different test? How about we run nmap to all nodes from one node of each node type? Would this solve your issue?

from deepsea.

I didn't mean to run a full iperf3 test against all ports we use, just to check if a TCP connect goes through. I'd not want to pull in nmap for such a simple test.

from deepsea.

Ok so to get this clear in my head:

(1) detect if ceph is running and shut down if so.
(2) Start netcat as a server on each port on each node, corresponding to service type.
(3) Call netcat to talk to each port on each node from each node.
(4) Start ceph on each node.

Is that the summary?

from deepsea.

Wait, why would you shutdown Ceph? No - though detecting this and warning is a good idea. You'd not want a diagnosis tool to disrupt cluster operation.

netcat is a good option, yes.

from deepsea.

I don want to make the test for firewall invasive, but to do this I suspect it has to be invasive.

2 different processes cant bind to the same port, so you cant test a message passed the firewall if another process is bound to the port.

I am also concerned about the runtime of such a test.

from deepsea.

Closing since nettest componentis currently being re-written.

from deepsea.