Tim,
Can you please file a SLIDER bug on this issue and also upload the patch?

-Gour

From: Tim I <t...@timisrael.com<mailto:t...@timisrael.com>>
Reply-To: 
"dev@slider.incubator.apache.org<mailto:dev@slider.incubator.apache.org>" 
<dev@slider.incubator.apache.org<mailto:dev@slider.incubator.apache.org>>
Date: Thursday, March 3, 2016 at 11:30 PM
To: "dev@slider.incubator.apache.org<mailto:dev@slider.incubator.apache.org>" 
<dev@slider.incubator.apache.org<mailto:dev@slider.incubator.apache.org>>
Subject: Re: Firewalls and internal endpoint ports issue

I think I've resolved the issue on my cluster with the attached patch.  I'm 
still testing it, but, so far so good.  I just wanted to get this out there for 
now in case others are having similar issues.

Hopefully the diff doesn't get stripped.  Essentially, I tacked oneway and 
twoway SSL port configuration to the Builder class in AgentWebApp

Then, I used getPortToRequest() to pull a port from the pool of predefined 
ports when creating the App (in SliderAppMaster).


Tim

On Thu, Mar 3, 2016 at 3:32 PM, Tim I 
<t...@timisrael.com<mailto:t...@timisrael.com>> wrote:
Hi all,

Our use case is to run apps on slider in an environment where all no registered 
ports (or ranges of ports) need to be firewalled off.

I'm getting some issues when my appmaster runs on a different node than the 
agent.  It appears to be due to the following ports (specifically the oneway 
port):


}; internal endpoints: {{
  "api" : "classpath:org.apache.slider.agents.secure",
  "addressType" : "uri",
  "protocolType" : "REST",
  "addresses" : [ {
    "uri" : "https://node03.domain.com:54673/ws/v1/slider/agents";
  } ]
}; {
  "api" : "classpath:org.apache.slider.agents.oneway",
  "addressType" : "uri",
  "protocolType" : "REST",
  "addresses" : [ {
    "uri" : "https://node03.domain.com:42728/ws/v1/slider/agents";
  } ]

The error from the agent container is:
INFO 2016-03-03 20:06:37,358 NetUtil.py:38 - Connecting to the following url 
https://node03.domain.com:42728/ws/v1/slider/agents/
INFO 2016-03-03 20:07:40,359 NetUtil.py:57 - Failed to connect to 
https://node03.domain.com:42728/ws/v1/slider/agents/ due to [Errno 110] 
Connection timed out
INFO 2016-03-03 20:07:40,359 NetUtil.py:76 - Server at 
https://node03.domain.com:42728/ws/v1/slider/agents/ is not reachable, sleeping 
for 10 seconds...


A few of questions:
1.  Is it possible to set this port?
2.  Is it possible to set this port per application?
3.  Is it possible to set this to a range of ports (like the ALLOCATED_PORT)?

Thanks,

Tim

Reply via email to