Re: RE: bandwidth with Site2site

[e-sociaux]

Hello,

 

thanks all for your reply.

 

After check if the iperf3 tools and confirm with the network guys, it seems network infra issue. It is very slow, we got a bandwidth is 100 bytes/seconds :)

 

Thanks

 

Minh

 

 

Envoyé: vendredi 11 octobre 2024 à 12:09
De: "stephen.hindmarch.bt.com via users" <users@nifi.apache.org>
À: users@nifi.apache.org
Objet: RE: bandwidth with Site2site

Minh,

 

Have you checked the app log to see if there are any errors related to S2S?

 

If this is a secure system I would

 

• Set the protocol to HTTP as this will force the communications over HTTPS.
• Remember the remote process group (RPG) is acting as a client and the host with the remote port is acting as the server.
• Ensure both hosts can trust each other’s certificates.
• Check the client host exists as a user on the server host. The client is identified by the full DN from their certificate. You can add users to users.xml.
• Check that the client host is included in the global policy “retrieve site-to-site details” on the server host.
• Check that the client host is included in the object policy “send/receive data via site-to-site” on the remote port you are trying to access. (send for an output port, receive for an input port).
• Check both the remote port and the remote process group are enabled.
• Check that you can access the “Refresh remote” and “Manage remote ports” menus on the RPG and that you can see the remote ports in the manage menu.

 

The problems I encountered were firstly that the CA for the certificates were not in the trust chain for the other host. You have to check this in both directions.

 

Secondly that the DN as recorded in users.xml did not match the DN on the certificate. Even spaces, punctuation and case matter. For example if users.xml says “…; DC=Foo; DC=Com” but the certificate says “…, DC=foo, DC=com” then this will cause problems. Fix the values in users.xml to match the certificate.

 

Regards

 

Steve Hindmarch

 

From: e-soci...@gmx.fr <e-soci...@gmx.fr>
Sent: Thursday, October 10, 2024 2:58 PM
To: usersnifi.apache.org <users@nifi.apache.org>
Subject: bandwidth with Site2site

 

 

Hello,

We have a lot flowfiles stucks in the connection before s2s (raw mode).

We are not sure if it is network or NIFI issues.
 

The S2S uses tcp connection or wraps to https ?

Do you know how it is possible to test the bandwidth without NIFI ?
Between server A and B, we have only NIFI port opened.

If you have some tips, it will help me.

 

Thanks

Minh