Threaded Mode | Linear Mode

***lingu*** · (This post was last modified: 07-17-2022 05:07 PM by lingu.)

20220717/lingu visits tiejian and find wp289b bibo down. think test fails on null and think reports that it could not contact containers.

i find the iptables rules on wp289b-6 drop all incoming packets except for a few ports. but all 6 wp289b nodes are added to be "ACCEPT" nodes.

i find the routing table uses 143.64.66.254 as the default router on wp289b-6, and packets go from wp289b-6 to 143.64.66.254 then 143.64.64.254 then wp289b-1 (143.64.64.145).

so the forwarding rule may be a factor in this setting.

however, even wp289b-5 (143.64.66.190) cannot tcp to wp289b-6:30480 with iptables service running on wp289b-6. Without the iptables service, the tcp to wp289b-6:30480 is fine.

In /etc/sysconfig/iptables on wp289b-6, there is a line '-A INPUT -j REJECT --reject-with-icmp-host-prohibited' before the ACCEPT rules for the wp289b IPs. iptables-save does not show this line on wp289b-1 or wp289b-3, but wp289b-5 has it. I move the line to the end of the filter block. now tcp from wp289b-5 to wp289b-6 is successful.

i went through all iptables files and restarted all iptables services on 6 nodes.

then think test works.