cassandra with a firewall

[Patrick de Torcy <pd...@gmail.com>]

Hi,

I've installed Cassandra 0.5 on Windows server 2003. It works fine with the
firewall disabled, but if it's enabled, I can't connect to Cassandra. I've
opened the following ports : 9160, 7000, 7001, 9170, 8888, but it didn't
work.
What could I do ?

Thanks !

Re: cassandra with a firewall

[David Strauss <da...@fourkitchens.com>]

On 2010-02-09 23:12, Patrick de Torcy wrote:
> I've installed Cassandra 0.5 on Windows server 2003. It works fine with
> the firewall disabled, but if it's enabled, I can't connect to
> Cassandra. I've opened the following ports : 9160, 7000, 7001, 9170,
> 8888, but it didn't work.
> What could I do ?

Does your firewall have reporting tools for blocked traffic?

-- 
David Strauss
   | david@fourkitchens.com
=Four Kitchens
   | http://fourkitchens.com
   | +1 512 454 6659 [office]
   | +1 512 870 8453 [direct]

Re: cassandra with a firewall

[Jonathan Ellis <jb...@gmail.com>]

On Wed, Feb 10, 2010 at 7:23 AM, Byron Clark <by...@theclarkfamily.name> wrote:
> If you want to connect remotely to the JMX server, you'll
> have to open up another port on the firewall.  Connecting to 8080 only
> tells the JMX client which port to connect on next.  Unfortunately,
> that next port is not predictable other than being in the range
> 1024:65535.

As usual with Java, there's a way around this.  And as usual, it's
extraordinarily painful:
http://blogs.sun.com/jmxetc/entry/connecting_through_firewall_using_jmx

I'd consider adding something like this to Cassandra by default, but I
can't think of a reason to firewall your monitoring system away from
your servers.  So don't do that. :)

-Jonathan

Re: cassandra with a firewall

[Byron Clark <by...@theclarkfamily.name>]

On Tue, Feb 09, 2010 at 09:03:56PM -0800, Weijun Li wrote:
> Yes port 8080 is jmx port that you can change in Cassandra.in.sh. Has
> anybody been able to REMOTELY connect to the jmx server (default 8080) on
> Cassandra? I kept getting freezing then timeout for that. This is important
> for us to monitor the cluster.

If you want to connect remotely to the JMX server, you'll
have to open up another port on the firewall.  Connecting to 8080 only
tells the JMX client which port to connect on next.  Unfortunately,
that next port is not predictable other than being in the range
1024:65535.

-- 
Byron Clark

RE: cassandra with a firewall

[Weijun Li <we...@gmail.com>]

Yes port 8080 is jmx port that you can change in Cassandra.in.sh. Has
anybody been able to REMOTELY connect to the jmx server (default 8080) on
Cassandra? I kept getting freezing then timeout for that. This is important
for us to monitor the cluster.

Thanks!

-----Original Message-----
From: Rich Atkinson [mailto:atkinsonr@gmail.com] 
Sent: Tuesday, February 09, 2010 6:15 PM
To: cassandra-user@incubator.apache.org
Subject: Re: cassandra with a firewall

i think you need port 8080


On Wed, Feb 10, 2010 at 10:12 AM, Patrick de Torcy <pd...@gmail.com>
wrote:
> Hi,
>
> I've installed Cassandra 0.5 on Windows server 2003. It works fine with
the
> firewall disabled, but if it's enabled, I can't connect to Cassandra. I've
> opened the following ports : 9160, 7000, 7001, 9170, 8888, but it didn't
> work.
> What could I do ?
>
> Thanks !

Re: cassandra with a firewall

[Rich Atkinson <at...@gmail.com>]

i think you need port 8080


On Wed, Feb 10, 2010 at 10:12 AM, Patrick de Torcy <pd...@gmail.com> wrote:
> Hi,
>
> I've installed Cassandra 0.5 on Windows server 2003. It works fine with the
> firewall disabled, but if it's enabled, I can't connect to Cassandra. I've
> opened the following ports : 9160, 7000, 7001, 9170, 8888, but it didn't
> work.
> What could I do ?
>
> Thanks !