Yes, I think the same way about NAT.
tcpdump on the Bcfg2 server
18:01:01.651073 IP 8.8.8.8.48336 > 10.11.110.111.6789:
Flags [S], seq 1863191799, win 65535, options [mss
1460,nop,nop,sackOK], length 0
18:01:01.651095 IP 10.11.110.111.6789 > 8.8.8.8.48336: Flags
[S.], seq 840793119, ack 1863191800, win 5840, options [mss
1460,nop,nop,sackOK], length 0
18:01:04.578897 IP 8.8.8.8.48336 > 10.11.110.111.6789: Flags
[S], seq 1863191799, win 65535, options [mss
1460,nop,nop,sackOK], length 0
18:01:04.578918 IP 10.11.110.111.6789 > 8.8.8.8.48336: Flags
[S.], seq 840793119, ack 1863191800, win 5840, options [mss
1460,nop,nop,sackOK], length 0
18:01:04.856950 IP 10.11.110.111.6789 > 8.8.8.8.48336: Flags
[S.], seq 840793119, ack 1863191800, win 5840, options [mss
1460,nop,nop,sackOK], length 0
18:01:06.056945 IP 10.11.110.111.6789 > 8.8.8.8.48304: Flags
[S.], seq 195973425, ack 1411788650, win 5840, options [mss
1460,nop,nop,sackOK], length 0
18:01:10.612614 IP 8.8.8.8.48336 > 10.11.110.111.6789: Flags
[S], seq 1863191799, win 65535, options [mss
1460,nop,nop,sackOK], length 0
18:01:10.612632 IP 10.11.110.111.6789 > 8.8.8.8.48336: Flags
[S.], seq 840793119, ack 1863191800, win 5840, options [mss
1460,nop,nop,sackOK], length 0
18:01:11.256947 IP 10.11.110.111.6789 > 8.8.8.8.48336: Flags
[S.], seq 840793119, ack 1863191800, win 5840, options [mss
1460,nop,nop,sackOK], length 0
18:01:24.056952 IP 10.11.110.111.6789 > 8.8.8.8.48336: Flags
[S.], seq 840793119, ack 1863191800, win 5840, options [mss
1460,nop,nop,sackOK], length 0
18:01:48.057078 IP 10.11.110.111.6789 > 8.8.8.8.48336: Flags
[S.], seq 840793119, ack 1863191800, win 5840, options [mss
1460,nop,nop,sackOK], length 0
18:01:54.056943 IP 10.11.110.111.6789 > 8.8.8.8.48304: Flags
[S.], seq 195973425, ack 1411788650, win 5840, options [mss
1460,nop,nop,sackOK], length 0
on the client
18:01:02.038243 IP 8.8.8.8.48336 >
4.4.4.4.6789: Flags [S], seq 2541594619, win 5840, options
[mss 1460,sackOK,TS val 3654813583 ecr 0,nop,wscale 7],
length 0
18:01:02.040345 IP 4.4.4.4.6789 > 8.8.8.8.48336: Flags
[S.], seq 3765359903, ack 2541594620, win 16384, options
[mss 1460,nop,wscale 0,nop,nop,TS val 0 ecr
0,nop,nop,sackOK], length 0
18:01:02.040384 IP 8.8.8.8.48336 > 4.4.4.4.6789: Flags
[.], ack 1, win 46, options [nop,nop,TS val 3654813584 ecr
0], length 0
18:01:02.040985 IP 8.8.8.8.48336 > 4.4.4.4.6789: Flags
[P.], seq 1:106, ack 1, win 46, options [nop,nop,TS val
3654813584 ecr 0], length 105
18:01:02.154631 IP 4.4.4.4.6789 > 8.8.8.8.48336: Flags
[.], ack 106, win 65430, options [nop,nop,TS val 488223659
ecr 3654813584], length 0
18:01:23.080056 IP 4.4.4.4.6789 > 8.8.8.8.48336: Flags
[R.], seq 1, ack 106, win 0, length 0
On 01/13/2012 04:43 PM, Chris St. Pierre wrote:
To be honest, it looks like your NAT might be set up incorrectly, as
that traceback usually indicates a timeout of some sort.
Do you see anything in the Bcfg2 server logs that indicates a
connection has been made? What about a tcpdump on the Bcfg2 server?
On Fri, Jan 13, 2012 at 3:40 AM, Alexander Tiurin <alexanderyt <at> gmail.com> wrote:
Hello!
This is my scheme of bcfg2-server <> clients
client gate (NAT) bcfg2-server
8.8.8.8 <-> 4.4.4.4 <-> 10.11.110.111
On gate I opened port 6789->10.11.110.111.
Then I run bcfg2
# bcfg2 -qvn -p ovz-ubuntu10
Traceback (most recent call last):
File "/usr/sbin/bcfg2", line 340, in <module>
client.run()
File "/usr/sbin/bcfg2", line 191, in run
proxy.AssertProfile(self.setup['profile'])
File "/usr/lib/python2.6/xmlrpclib.py", line 1199, in __call__
return self.__send(self.__name, args)
File "/usr/lib/python2.6/xmlrpclib.py", line 1489, in __request
verbose=self.__verbose
File "/usr/lib/pymodules/python2.6/Bcfg2/Proxy.py", line 304, in request
self.send_content(h, request_body)
File "/usr/lib/python2.6/xmlrpclib.py", line 1349, in send_content
connection.endheaders()
File "/usr/lib/python2.6/httplib.py", line 904, in endheaders
self._send_output()
File "/usr/lib/python2.6/httplib.py", line 776, in _send_output
self.send(msg)
File "/usr/lib/python2.6/httplib.py", line 735, in send
self.connect()
File "/usr/lib/pymodules/python2.6/Bcfg2/Proxy.py", line 186, in connect
self._connect_py26ssl()
File "/usr/lib/pymodules/python2.6/Bcfg2/Proxy.py", line 220, in
_connect_py26ssl
self.sock.connect((self.host, self.port))
File "/usr/lib/python2.6/ssl.py", line 309, in connect
self.do_handshake()
File "/usr/lib/python2.6/ssl.py", line 293, in do_handshake
self._sslobj.do_handshake()
socket.error: [Errno 104] Connection reset by peer
tcpdump on 8.8.8.8
12:20:22.950748 IP 8.8.8.8.55147 > 4.4.4.4.6789: tcp 0
12:20:22.952753 IP 4.4.4.4.6789 > 8.8.8.8.55147: tcp 0
12:20:22.952788 IP 8.8.8.8.55147 > 4.4.4.4.6789: tcp 0
12:20:22.953610 IP 8.8.8.8.55147 > 4.4.4.4.6789: tcp 105
12:20:23.151201 IP 4.4.4.4.6789 > 8.8.8.8.55147: tcp 0
12:20:44.076819 IP 4.4.4.4.6789 > 8.8.8.8.55147: tcp 0
bcfc2.conf 8.8.8.8
[communication]
protocol = xmlrpc/ssl
user = 3ED9E831-A914-3906-662BA06A44A64F29
password = 123
ca = /etc/bcfg2.crt
[components]
encoding = UTF-8
bcfg2 = https://4.4.4.4:6789
I read about NAT http://docs.bcfg2.org/appendix/guides/nat_howto.html , but
I can't understand, how use those HOWTO in my choice.
Any ideas are welcomed.