Home / user-120462

brevleq's questions

Martin Hope
brevleq
Asked: 2019-09-14 12:27:48 +0800 CST
  • 1

I have a ubuntu server with ip 192.168.10.144, in this server I have a docker network using ip range 10.0.0.0/24. I need connect my computer to some services running in docker, so I've added a route in Mikrotik:

#      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
0 ADS  0.0.0.0/0                          192.168.0.1               1
1 A S  10.0.0.0/24                        192.168.10.144            1
2 ADC  192.168.0.0/24     192.168.0.3     ether1-internet           0
3 ADC  192.168.10.0/24    192.168.10.1    ether2-proliant           0

However the connection between my computer and docker services are extremely slow. I used wireshark to check what was happening and found some of tcp-restransmission messages:

wireshark

I've though a nat rule could solve the problem, however when using the following rules, no communication was made between my computer and docker:

0    ;;; default configuration
  chain=srcnat action=masquerade out-interface=ether1-internet log=no 
  log-prefix="" 

1    chain=dstnat action=dst-nat to-addresses=192.168.10.144 to-ports=80 
  protocol=tcp dst-port=8000 log=no log-prefix="" 

2 X  chain=dstnat action=dst-nat to-addresses=192.168.10.144 protocol=tcp 
  dst-address=10.0.0.0/24 log=no log-prefix="" 

3 X  chain=srcnat action=src-nat to-addresses=10.0.0.0/24 protocol=tcp 
  src-address=192.168.10.144 log=no log-prefix=""

What am I doing wrong?

routing
Martin Hope
brevleq
Asked: 2018-04-22 04:17:09 +0800 CST
  • 1

I'm trying connect my network to AWS VPC using Static IP AWS VPN. I've followed the instructions of AWS and configured correctly my MikroTik router and can ping the Ubuntu instance I've attached in this VPC. As I have 2 ISP in my MikroTik, I configured another VPN in AWS and decided use two interfaces in distinct subnets at my Ubuntu AWS instance:

$ ifconfig
eth0      Link encap:Ethernet  HWaddr 0A:72:28:AF:C7:CE  
          inet addr:192.168.254.4  Bcast:192.168.254.15  Mask:255.255.255.240
          inet6 addr: fe80::872:28ff:feaf:c7ce/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:9001  Metric:1
          RX packets:24297 errors:0 dropped:0 overruns:0 frame:0
          TX packets:21627 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:7074474 (6.7 MiB)  TX bytes:2362441 (2.2 MiB)

eth1      Link encap:Ethernet  HWaddr 0A:A2:0F:7C:75:FC  
          inet addr:192.168.254.20  Bcast:192.168.254.31  Mask:255.255.255.240
          inet6 addr: fe80::8a2:fff:fe7c:75fc/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:9001  Metric:1
          RX packets:24996 errors:0 dropped:0 overruns:0 frame:0
          TX packets:25227 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:2307467 (2.2 MiB)  TX bytes:5382812 (5.1 MiB)

Now, even I having two VPN correctly configured in boot sides, just one VPN works at time. For example: imagine VPN named aws-main is configured to work with 192.168.254.0/28 subnet and VPN aws-backup is configured to work with 192.168.254.16/28 subnet, if I want to ping the ip 192.168.254.4 I need disable the route #2, and if I want ping the ip 192.168.254.20 I need disable the route #1

#      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
1 A S  ;;; ISP 1
    0.0.0.0/0                          yyy.yyy.yyy.yyy           1
2   S  ;;; ISP 2
    0.0.0.0/0                          zzz.zzz.zzz.zzz           1
4 ADC  yyy.yyy.yyy.0/24    y.y.y.y        ether3                 0
6 ADC  zzz.zzz.zzz.0/30    z.z.z.z        ether2                 0
9 ADC  192.168.15.0/24    192.168.15.254  ether5                 0

If I try ping 192.168.254.20 when both routes #1 and #2 are enabled I can see this message in log:

backup-out srcnat in:(unknown 0) out:ether3, src-mac xxx, proto ICMP(type 8,code 0), 192.168.15.31 ->192.168.254.20, len 84

Mikrotik is routing the packet to ether3 instead of ether2 (the correct gateway for VPN aws-backup), I think this is the problem, but I don't know how to force it to correct interface.

/ip firewall nat> print
0    chain=srcnat action=accept src-address=192.168.15.0/24 
  dst-address=192.168.254.0/28 log=yes log-prefix="main-out" 

1    chain=srcnat action=accept src-address=192.168.15.0/24 
  dst-address=192.168.254.16/28 log=yes log-prefix="backup-out" 

2    chain=srcnat action=accept src-address=192.168.254.0/28 
  dst-address=192.168.15.0/24 log=yes log-prefix="main-in" 

3    chain=srcnat action=accept src-address=192.168.254.16/28 
  dst-address=192.168.15.0/24 log=yes log-prefix="backup-in" 

4    chain=srcnat action=masquerade log=no log-prefix="masquerade"

this are the policies:

0  A  ;;; AWS Tunnel 2 - BACKUP
   src-address=0.0.0.0/0 src-port=any dst-address=192.168.254.16/28 
   dst-port=any protocol=all action=encrypt level=require 
   ipsec-protocols=esp tunnel=yes sa-src-address=zzz.zzz.zzz.zzz 
   sa-dst-address=x.x.x.x proposal=AWS ph2-count=9 

2  A  ;;; AWS Tunnel 1 - MAIN
   src-address=0.0.0.0/0 src-port=any dst-address=192.168.254.0/28 
   dst-port=any protocol=all action=encrypt level=require 
   ipsec-protocols=esp tunnel=yes sa-src-address=yyy.yyy.yyy.yyy 
   sa-dst-address=K.K.K.K proposal=AWS ph2-count=8

At least for me, mikrotik is not routing the VPN packets using the correct subnet to correct gateway. Is this the problem? How can I solve this?

amazon-web-services
Martin Hope
brevleq
Asked: 2012-06-16 05:10:21 +0800 CST
  • 5

I have a connection pool in Glassfish 3.1 to connect to SqlServer 2008 Express, this pool works fine, but when Glassfish is restarted, the connection pool can't ping and stops working. To work again, I change the url hostname from "localhost" to "127.0.0.1" or the contrary... Apparently this problem just happen when Glassfish is running in Windows Server 2008, when I run Glassfish in a Linux server no problem like this happen...

EDITED

[#|2012-06-20T14:21:34.992-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.connectors.service|_ThreadID=24;_ThreadName=Thread-2;|RAR8054: Exception while creating an unpooled [test] connection for pool [ erp_hm_pool ], null|#]
[#|2012-06-20T14:21:35.006-0300|SEVERE|oracle-glassfish3.1.2|org.glassfish.admingui|_ThreadID=25;_ThreadName=Thread-2;|RestResponse.getResponse() dá FAILURE. endpoint = 'http://localhost:48/management/domain/resources/ping-connection-pool.json'; attrs = '{id=erp_hm_pool}'|#]
[#|2012-06-20T14:22:42.187-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.resource.pool.resizer|_ThreadID=26;_ThreadName=Thread-2;|RAR5058: Error while Resizing pool erp_hm_pool. Exception : null|#]
[#|2012-06-20T14:22:42.193-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.resource.pool.resizer|_ThreadID=26;_ThreadName=Thread-2;|RAR5058: Error while Resizing pool erp_hm_pool. Exception : null|#]
[#|2012-06-20T14:22:42.194-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.resource.pool.resizer|_ThreadID=26;_ThreadName=Thread-2;|RAR5058: Error while Resizing pool erp_hm_pool. Exception : null|#]
[#|2012-06-20T14:22:42.195-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.resource.pool.resizer|_ThreadID=26;_ThreadName=Thread-2;|RAR5058: Error while Resizing pool erp_hm_pool. Exception : null|#]
[#|2012-06-20T14:22:42.196-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.resource.pool.resizer|_ThreadID=26;_ThreadName=Thread-2;|RAR5058: Error while Resizing pool erp_hm_pool. Exception : null|#]
[#|2012-06-20T14:22:42.197-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.resource.pool.resizer|_ThreadID=26;_ThreadName=Thread-2;|RAR5058: Error while Resizing pool erp_hm_pool. Exception : null|#]
[#|2012-06-20T14:22:42.198-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.resource.pool.resizer|_ThreadID=26;_ThreadName=Thread-2;|RAR5058: Error while Resizing pool erp_hm_pool. Exception : null|#]
[#|2012-06-20T14:23:09.253-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.resource.pool.resizer|_ThreadID=26;_ThreadName=Thread-2;|RAR5058: Error while Resizing pool xml_nfe_pool. Exception : null|#]
[#|2012-06-20T14:23:09.255-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.resource.pool.resizer|_ThreadID=26;_ThreadName=Thread-2;|RAR5058: Error while Resizing pool xml_nfe_pool. Exception : null|#]
[#|2012-06-20T14:23:09.255-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.resource.pool.resizer|_ThreadID=26;_ThreadName=Thread-2;|RAR5058: Error while Resizing pool xml_nfe_pool. Exception : null|#]
[#|2012-06-20T14:23:09.256-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.resource.pool.resizer|_ThreadID=26;_ThreadName=Thread-2;|RAR5058: Error while Resizing pool xml_nfe_pool. Exception : null|#]
[#|2012-06-20T14:23:09.257-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.resource.pool.resizer|_ThreadID=26;_ThreadName=Thread-2;|RAR5058: Error while Resizing pool xml_nfe_pool. Exception : null|#]
[#|2012-06-20T14:23:09.258-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.resource.pool.resizer|_ThreadID=26;_ThreadName=Thread-2;|RAR5058: Error while Resizing pool xml_nfe_pool. Exception : null|#]
[#|2012-06-20T14:23:09.259-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.resource.pool.resizer|_ThreadID=26;_ThreadName=Thread-2;|RAR5058: Error while Resizing pool xml_nfe_pool. Exception : null|#]
[#|2012-06-20T14:23:09.260-0300|WARNING|oracle-glassfish3.1.2|javax.enterprise.resource.resourceadapter.com.sun.enterprise.resource.pool.resizer|_ThreadID=26;_ThreadName=Thread-2;|RAR5058: Error while Resizing pool xml_nfe_pool. Exception : null|#]

Could someone explain me why is it happening and how can I solve it??

windows-server-2008 sql-server glassfish connection-pool