#7625 Open port between our network and the QA one
Closed: Fixed 3 months ago by kevin. Opened 3 months ago by pingou.

While trying a build of resultsdb with fedora-messaging support in staging, we ran into Connection refused errors.

We tried to debug it a little and saw the following:

# telnet rabbitmq01.stg.phx2.fedoraproject.org 5671
Trying <ip>...
telnet: connect to address <ip>: Connection refused

which succeeds on batcave.
So we are suspecting a firewall between the QA network and the phx2 one.

If this suspicion is confirmed, could we open the port 5671 in it?


The QA network holes are usually system to system ones versus wide open. What hosts do the QA network systems need to contact in what other networks? Or are we looking at 5671 being generally available for all hosts to hosts in Fedora networks?

I believe the hosts in the QA network that are currently allowed through the firewall for fedmsg would be the same ones we need for rabbitmqa/5671.

The two obvious ones for the moment are:
- resultsdb-stg01.qa.fedoraproject.org
- resultsdb01.qa.fedoraproject.org

openqa will most likely need it too later down the road

Tickets to IT have been sent. Waiting for fixes to be put in and tested.

Metadata Update from @mizdebsk:
- Issue priority set to: Waiting on External (was: Needs Review)

3 months ago

This is done.


Metadata Update from @kevin:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

3 months ago

Login to comment on this ticket.