LISTSERV 16.5 - XROOTD-DEV Archives

In GGUS ticket 156902, Bockjoo discovered a possibly related TLS problem:

(base) [bockjoo@cms ~]$ xrdcp -d 1 -f root://xrootd.phy.bris.ac.uk//store/mc/SAM/GenericTTbar/AODSIM/CMSSW_9_2_6_91X_mcRun1_realistic_v2-v1/00000/A64CCCF2-5C76-E711-B359-0CC47A78A3F8.root /dev/null
[2022-08-31 07:46:13.648599 -0400][Info   ][AsyncSock         ] [xrootd.phy.bris.ac.uk:1094.0] TLS hand-shake done.
[2022-08-31 07:46:13.766152 -0400][Error  ][TlsMsg            ] [] TLS error rc=-1 ec=5 (error_syscall) errno=104.
[2022-08-31 07:46:13.766192 -0400][Error  ][AsyncSock         ] [xrootd.phy.bris.ac.uk:1094.0] Socket error while handshaking: [ERROR] TLS error
[2022-08-31 07:46:13.766299 -0400][Error  ][PostMaster        ] [xrootd.phy.bris.ac.uk:1094] elapsed = 0, pConnectionWindow = 120 seconds.
[2022-08-31 07:46:13.766313 -0400][Info   ][PostMaster        ] [xrootd.phy.bris.ac.uk:1094] Attempting reconnection in 120 seconds.
^C
(base) [bockjoo@cms ~]$ xrdcp -d 1 -f root://xrootd.phy.bris.ac.uk//store/mc/SAM/GenericTTbar/AODSIM/CMSSW_9_2_6_91X_mcRun1_realistic_v2-v1/00000/A64CCCF2-5C76-E711-B359-0CC47A78A3F8.root /dev/null
[2022-08-31 07:47:12.718047 -0400][Info   ][AsyncSock         ] [xrootd.phy.bris.ac.uk:1094.0] TLS hand-shake done.
[2022-08-31 07:47:17.637166 -0400][Info   ][AsyncSock         ] [io-37-02.acrc.bris.ac.uk:1194.0] TLS hand-shake done.
[8MB/229.3MB][  3%][=>                                                ][1.143MB/s[144MB/229.3MB][ 62%][===============================>                  ][16MB/s]

It seems like the redirection, xrootd.phy → io02, does not always work - it can fail at the TLS handshake.
In our configuration, both redirector and server should accept HTTPS.
If I focus on FTS, I can see 122377 mentions in /var/log/clustered/xrootd.log on xrootd.phy and only 7669 on io02.
That approximately corresponds to the success rate in the FTS monitoring.

Is this something worth focusing on?
I've enabled xrd.trace tls -debug for now.

—
Reply to this email directly, view it on GitHub, or unsubscribe.
You are receiving this because you commented.

[ { "@context": "http://schema.org", "@type": "EmailMessage", "potentialAction": { "@type": "ViewAction", "target": "https://github.com/xrootd/xrootd/issues/1736#issuecomment-1234451819", "url": "https://github.com/xrootd/xrootd/issues/1736#issuecomment-1234451819", "name": "View Issue" }, "description": "View this Issue on GitHub", "publisher": { "@type": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

Use REPLY-ALL to reply to list

To unsubscribe from the XROOTD-DEV list, click the following link:
https://listserv.slac.stanford.edu/cgi-bin/wa?SUBED1=XROOTD-DEV&A=1