Mailing-List: contact user-help@cassandra.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@cassandra.apache.org
Received-SPF: pass (nike.apache.org: local policy)
DomainKey-Signature: a=rsa-sha1; c=nofws; d=thelastpickle.com; h=content-type
	:mime-version:subject:from:in-reply-to:date
	:content-transfer-encoding:message-id:references:to; q=dns; s=
	thelastpickle.com; b=NamxyGJBO3rjKihE8Vcc9zm4awBlXs9RCvb5/CyO2IQ
	rNskzmrG8IDil8yjkWJQpal6rYQ7A84+USKWrw++wr3GZUftlmLyoAX5s284wG/3
	EdhpFZYtoX7cnnFEmuRwO21QqheMfgzu8UPnOipcS1YxdutY0ih+qVjtXL8YkVo0
	=
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Apple Message framework v1082)
Subject: Re: Dual NIC server problems
From: aaron morton <aaron@thelastpickle.com>
In-Reply-To: <E91F2189-D6DB-4FE7-BBC8-0EB229D526FF@bunchball.com>
Date: Tue, 14 Dec 2010 22:15:30 +1300
Content-Transfer-Encoding: quoted-printable
Message-Id: <3998F2A7-EA3E-48EF-9893-EF21A052FFC8@thelastpickle.com>
References: <E91F2189-D6DB-4FE7-BBC8-0EB229D526FF@bunchball.com>
To: user@cassandra.apache.org

The code for nodetool appears to just pass the host value through to the =
NodeProbe. Was there anything else in the stack trace ?=20

If you use the host name of the machine rather than ip what happens?

cassandra-env.sh includes a link to this page about getting JMX running =
with firewalls
=
http://blogs.sun.com/jmxetc/entry/troubleshooting_connection_problems_in_j=
console=20
Perhaps the info on  java.rmi.server.hostname may be helpful=20

Hope that helps.
Aaron


On 14 Dec 2010, at 21:36, Arjan van Ham wrote:

>=20
> I have a cluster with three nodes, version 0.7.0 RC2. Each node has =
dual NIC's, eth0 to the internet and eth1 to a private network =
(192.168.1.xxx). The outside NIC  on each node is frewalled using =
iptables, only port 22 is allowed through. My cassandra.yaml =
configuration file refers only to the internal hostnames that resolve to =
192.168.1.xxx addresses.
>=20
> Most of my Cassandra installation works fine, except for a few =
nodetool commands. It seems that they are trying to access the servers =
over the outside (firewalled) NIC and thus fail. If I disable the =
firewall they work fine.=20
>=20
> For example:
>=20
> [cassandra@node11 ~]$ nodetool -h 192.168.1.153 decommission
> Error connecting to remote JMX agent!
> java.rmi.ConnectException: Connection refused to host: 72.52.199.70; =
nested exception is:=20
>        java.net.ConnectException: Connection timed out
>        at =
sun.rmi.transport.tcp.TCPEndpoint.newSocket(TCPEndpoint.java:601)
>        at =
sun.rmi.transport.tcp.TCPChannel.createConnection(TCPChannel.java:198)
>        at =
sun.rmi.transport.tcp.TCPChannel.newConnection(TCPChannel.java:184)
>        at sun.rmi.server.UnicastRef.invoke(UnicastRef.java:110)
>        at =
javax.management.remote.rmi.RMIServerImpl_Stub.newClient(Unknown Source)
>        at =
javax.management.remote.rmi.RMIConnector.getConnection(RMIConnector.java:2=
327)
>        at =
javax.management.remote.rmi.RMIConnector.connect(RMIConnector.java:279)
>        at =
javax.management.remote.JMXConnectorFactory.connect(JMXConnectorFactory.ja=
va:248)
>        at =
org.apache.cassandra.tools.NodeProbe.connect(NodeProbe.java:115)
>        at =
org.apache.cassandra.tools.NodeProbe.<init>(NodeProbe.java:91)
>=20
>=20
> And if I disable the firewall on the remote node it works right away.
>=20
>=20
> Any ideas anyone?
>=20
> Thanks.