On Mar 29, 2011, at 10:40, Bas van der Vlies wrote:
> On 28-03-11 21:12, Frans Lawaetz wrote:
>>
>>> Everyday i get several messages with communication errors with the policy
>>> server. This is complete random which node reports the problem. The size of
>>> the cluster is 600 nodes. We use splaytime of 5 minutes so the load is
>>> spread for the policy server.
>>>
>>> Are more people experiencing this problem?
>>
>> By the looks of it you're hitting this bug that I filed a few weeks ago:
>> https://cfengine.com/bugtracker/view.php?id=498
>>
>> I also get the "Transmission refused or failed statting" message. They
>> seem harmless (assuming you can handle a skipped cf-agent run) but the
>> frequency of the messages is distracting and diminishes the overall
>> usefulness of cf-agent reporting.
>>
>> If you think we are hitting the same bug then I'd suggest adding your
>> findings to the ticket as well.
>
> Thanks for the response. I have changed my admit rules to, eg
>
> allowconnects => {
> "127.0.0.1" ,
> "192.168.144.*",
> "192.168.145.*",
> "192.168.146.*",
> "192.168.147.*",
> "192.168.148.*",
> "192.168.149.*",
> "192.168.150.*"
> };
>
> instead of:
> allowconnects => { "127.0.0.1" , "192.168.144.0/21" };
>
> For now all my problems are gone. Do you use CIDR notation for the admit
> rules?
I see the same, Bas: I have allowconnects => { "127.0.0.1", "10.201.124.0/24" }.
Once I change that to 10.201.124.* the connection errors go away.
Regards,
Erik
--
Erik Mouw -- erik.m...@snow.nl
Snow B.V. -- http://snow.nl/
_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine
