Maintenance script: Created page with " Due to a problem with the firewall, we are sometimes unable to reacht the myproxy site of cern. A hack is to add a static route to these servers. Current situation (it ..."

2015-08-26T12:28:49Z

Created page with " Due to a problem with the firewall, we are sometimes unable to reacht the myproxy site of cern. A hack is to add a static route to these servers. Current situation (it ..."

New page

Due to a problem with the firewall, we are sometimes unable to reacht the myproxy site of cern.

A hack is to add a static route to these servers.

Current situation (it goes through 193.190.247.65):

<pre>
[root@m2 ~]# traceroute myproxy.cern.ch
traceroute to myproxy.cern.ch (128.142.168.114), 30 hops max, 40 byte packets
1 rtr02.iihe.ac.be (193.190.247.65) 0.835 ms 1.076 ms 1.310 ms
2 172.16.156.254 (172.16.156.254) 0.812 ms 1.052 ms 1.287 ms
3 172.16.158.253 (172.16.158.253) 1.027 ms 1.025 ms 1.264 ms
4 fe.m20.access.brussels.belnet.net (193.191.4.93) 2.741 ms 2.736 ms 2.729 ms
5 10ge.cr2.brueve.belnet.net (193.191.16.22) 5.964 ms 5.961 ms 5.953 ms
6 belnet.rt1.ams.nl.geant.net (62.40.124.161) 7.186 ms 6.201 ms 5.965 ms
7 so-2-0-0.rt1.fra.de.geant2.net (62.40.112.9) 15.626 ms 15.604 ms 15.597 ms
8 so-5-0-0.rt1.gen.ch.geant2.net (62.40.112.162) 25.321 ms 25.315 ms 25.308 ms
9 switch-lb2-gw.rt1.gen.ch.geant.net (62.40.124.106) 25.286 ms 25.295 ms 25.288 ms
10 e513-e-rbrxl-1-te1.cern.ch (192.65.184.222) 25.275 ms 25.273 ms 25.266 ms
</pre>

*Bypass through ccq.wn.iihe.ac.be (traffic is routed trough the GEANT gateway by default):

<pre>
[root@m2 ~]# route add -host 128.142.168.114 gw 192.168.10.100
[root@m2 ~]# route add -host 128.142.168.104 gw 192.168.10.100
</pre>

(two IPs for myproxy.cern.ch)

Then you see the traffic goes through ggw (our gateway to GEANT network)

<pre>
[root@m2 ~]# traceroute myproxy.cern.ch
traceroute to myproxy.cern.ch (128.142.168.114), 30 hops max, 40 byte packets
1 ccq.wn.iihe.ac.be (192.168.10.100) 0.459 ms 0.450 ms 0.442 ms
2 ggw.iihe.ac.be (193.190.247.113) 0.574 ms 0.576 ms 0.607 ms
3 iihe-vrrp.access.brussels.belnet.net (193.191.4.211) 97.294 ms 97.296 ms 97.370 ms
4 10ge.cr2.brueve.belnet.net (193.191.16.22) 98.660 ms 98.656 ms 98.648 ms
5 belnet.rt1.ams.nl.geant.net (62.40.124.161) 102.025 ms 102.019 ms 102.011 ms
6 so-2-0-0.rt1.fra.de.geant2.net (62.40.112.9) 109.783 ms 109.911 ms 109.510 ms
7 so-5-0-0.rt1.gen.ch.geant2.net (62.40.112.162) 119.932 ms 119.928 ms 119.921 ms
8 swiCE2-10GE-1-1.switch.ch (62.40.124.22) 119.908 ms 111.203 ms 111.981 ms
9 e513-e-rbrxl-1-te0.cern.ch (192.65.184.209) 111.661 ms 111.751 ms 111.895 ms
</pre>

{{TracNotice|{{PAGENAME}}}}

MyproxyProblem - Revision history

Maintenance script: Created page with " Due to a problem with the firewall, we are sometimes unable to reacht the myproxy site of cern. A hack is to add a static route to these servers. Current situation (it ..."