[gpfsug-discuss] Ganesha all IPv6 sockets - ist this to be expected?
Billich Heinrich Rainer (ID SD)
heinrich.billich at id.ethz.ch
Tue Oct 1 13:34:38 BST 2019
Hello,
I wanted to completely disable IPv6 to get ganesha to use IPv4 sockets only. Once we did set the sysctl configs to disable IPv6 *and* did rebuild the initramfs.*.img file to include the new settings IPv6 was completely gone and ganesha did open an IPv4 socket only. We missed to rebuild the initramfs.*.img file in the first trial. Rpcbind/ganesha failed to start without the initramfs rebuild.
Cheers, Heiner
Some related documents from netapp
https://access.redhat.com/solutions/8709#rhel7disable
https://access.redhat.com/solutions/2798411
https://access.redhat.com/solutions/2963091
From: <gpfsug-discuss-bounces at spectrumscale.org> on behalf of "Billich Heinrich Rainer (ID SD)" <heinrich.billich at id.ethz.ch>
Reply to: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Date: Monday, 16 September 2019 at 17:51
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Subject: Re: [gpfsug-discuss] Ganesha all IPv6 sockets - ist this to be expected?
Hello Olaf,
Thank you, so we’ll try to get rid of IPv6. Actually we do have this settings active but I may have to add them to the initrd file, too. (See https://access.redhat.com/solutions/8709#rhel7disable) to prevent ganesha from opening an IPv6 socket. It’s probably no big issue if ganesha uses IPv4overIPv6 for all connections, but to keep things simple I would like to avoid it.
@Edward
We got /etc/tuned/scale/tuned.conf with GSS/xCAT. I’m not sure whether it’s part of any rpm.
Cheers,
Heiner
From: <gpfsug-discuss-bounces at spectrumscale.org> on behalf of Olaf Weiser <olaf.weiser at de.ibm.com>
Reply to: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Date: Monday, 16 September 2019 at 09:12
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Subject: Re: [gpfsug-discuss] Ganesha all IPv6 sockets - ist this to be expected?
Hallo Heiner,
usually, Spectrum Scale comes with a tuned profile (named scale) ..
[root at nsd01 ~]# tuned-adm active
Current active profile: scale
in there
[root at nsd01 ~]# cat /etc/tuned/scale/tuned.conf | tail -3
# Disable IPv6
net.ipv6.conf.all.disable_ipv6=1
net.ipv6.conf.default.disable_ipv6=1
[root at nsd01 ~]#
depending on .... what you need to achieve .. one might be forced to changed that.. e.g. for RoCE .. you need IPv6 to be active ...
but for all other scenarios with SpectrumScale (at least what I'm aware of right now) ... IPv6 can be disabled...
From: "Billich Heinrich Rainer (ID SD)" <heinrich.billich at id.ethz.ch>
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Date: 09/13/2019 05:02 PM
Subject: [EXTERNAL] [gpfsug-discuss] Ganesha all IPv6 sockets - ist this to be expected?
Sent by: gpfsug-discuss-bounces at spectrumscale.org
________________________________
Hello,
I just noted that our ganesha daemons offer IPv6 sockets only, IPv4 traffic gets encapsulated. But all traffic to samba is IPv4, smbd offers both IPv4 and IPv6 sockets.
I just wonder whether this is to be expected? Protocols support IPv4 only, so why running on IPv6 sockets only for ganesha? Did we configure something wrong and should completely disable IPv6 on the kernel level
Any comment is welcome
Cheers,
Heiner
--
=======================
Heinrich Billich
ETH Zürich
Informatikdienste
Tel.: +41 44 632 72 56
heinrich.billich at id.ethz.ch
========================
I did check with
ss -l -t -4
ss -l -t -6
add -p to get the process name, too.
do you get the same results on your ces nodes?
[root at nas22ces04-i config_samples]# ss -l -t -4
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 8192 *:gpfs *:*
LISTEN 0 50 *:netbios-ssn *:*
LISTEN 0 128 *:5355 *:*
LISTEN 0 128 *:sunrpc *:*
LISTEN 0 128 *:ssh *:*
LISTEN 0 100 127.0.0.1:smtp *:*
LISTEN 0 10 10.250.135.24:4379 *:*
LISTEN 0 128 *:32765 *:*
LISTEN 0 50 *:microsoft-ds *:*
[root at nas22ces04-i config_samples]# ss -l -t -6
State Recv-Q Send-Q Local Address:Port Peer Address:Port
LISTEN 0 128 :::32767 :::*
LISTEN 0 128 :::32768 :::*
LISTEN 0 128 :::32769 :::*
LISTEN 0 128 :::2049 :::*
LISTEN 0 128 :::5355 :::*
LISTEN 0 50 :::netbios-ssn :::*
LISTEN 0 128 :::sunrpc :::*
LISTEN 0 128 :::ssh :::*
LISTEN 0 128 :::32765 :::*
LISTEN 0 50 :::microsoft-ds :::*
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20191001/8ea3dc3a/attachment.htm>
More information about the gpfsug-discuss
mailing list