In [GGUS ticket 156902](https://ggus.eu/index.php?mode=ticket_info&ticket_id=156902#update#38), Bockjoo discovered a possibly related TLS problem: ``` (base) [bockjoo@cms ~]$ xrdcp -d 1 -f root://xrootd.phy.bris.ac.uk//store/mc/SAM/GenericTTbar/AODSIM/CMSSW_9_2_6_91X_mcRun1_realistic_v2-v1/00000/A64CCCF2-5C76-E711-B359-0CC47A78A3F8.root /dev/null [2022-08-31 07:46:13.648599 -0400][Info ][AsyncSock ] [xrootd.phy.bris.ac.uk:1094.0] TLS hand-shake done. [2022-08-31 07:46:13.766152 -0400][Error ][TlsMsg ] [] TLS error rc=-1 ec=5 (error_syscall) errno=104. [2022-08-31 07:46:13.766192 -0400][Error ][AsyncSock ] [xrootd.phy.bris.ac.uk:1094.0] Socket error while handshaking: [ERROR] TLS error [2022-08-31 07:46:13.766299 -0400][Error ][PostMaster ] [xrootd.phy.bris.ac.uk:1094] elapsed = 0, pConnectionWindow = 120 seconds. [2022-08-31 07:46:13.766313 -0400][Info ][PostMaster ] [xrootd.phy.bris.ac.uk:1094] Attempting reconnection in 120 seconds. ^C (base) [bockjoo@cms ~]$ xrdcp -d 1 -f root://xrootd.phy.bris.ac.uk//store/mc/SAM/GenericTTbar/AODSIM/CMSSW_9_2_6_91X_mcRun1_realistic_v2-v1/00000/A64CCCF2-5C76-E711-B359-0CC47A78A3F8.root /dev/null [2022-08-31 07:47:12.718047 -0400][Info ][AsyncSock ] [xrootd.phy.bris.ac.uk:1094.0] TLS hand-shake done. [2022-08-31 07:47:17.637166 -0400][Info ][AsyncSock ] [io-37-02.acrc.bris.ac.uk:1194.0] TLS hand-shake done. [8MB/229.3MB][ 3%][=> ][1.143MB/s[144MB/229.3MB][ 62%][===============================> ][16MB/s] ``` It seems like the redirection, xrootd.phy → io02, does not always work - it can fail at the TLS handshake. In our configuration, both redirector and server should accept HTTPS. If I focus on FTS, I can see 122377 mentions in `/var/log/clustered/xrootd.log` on xrootd.phy and only 7669 on io02. That approximately corresponds to the success rate in the FTS monitoring. Is this something worth focusing on? I've enabled `xrd.trace tls -debug` for now. -- Reply to this email directly or view it on GitHub: https://github.com/xrootd/xrootd/issues/1736#issuecomment-1234451819 You are receiving this because you commented. Message ID: <[log in to unmask]> ######################################################################## Use REPLY-ALL to reply to list To unsubscribe from the XROOTD-DEV list, click the following link: https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1