Verifying internode SSL

[Jason Williams]

Hi Guys,

I've configured internode SSL and set it to be used between datacenters only. 
Is there a way in the logs to verify SSL is operating between nodes in 
different DCs or do I need to break out tcpdump?

Thank you in advance. 

-J

Sent via iPhone

Re: Verifying internode SSL

[Nate McCall]

> I've configured internode SSL and set it to be used between datacenters
only. Is there a way in the logs to verify SSL is operating between nodes
in different DCs or do I need to break out tcpdump?
>

Even on DC only encryption, you should see the following message in the log:

"Starting Encrypted Messaging Service on SSL port 7001"

With any Java-based thing using SSL, you can always use the following
startup parameter to find out exactly what is going in:

-Djavax.net.debug=ssl

This page will tell you how to interpret the debug output:
http://docs.oracle.com/javase/7/docs/technotes/guides/security/jsse/ReadDebug.html

--
-
Nate McCall
Austin, TX
@zznate

Co-Founder & Sr. Technical Consultant
Apache Cassandra Consulting
http://www.thelastpickle.com

Re: Verifying internode SSL

[Jason J. W. Williams]

Awesome. Thanks Nate!

On Tue, Oct 13, 2015 at 10:32 AM, Nate McCall 
wrote:

> > I've configured internode SSL and set it to be used between datacenters
> only. Is there a way in the logs to verify SSL is operating between nodes
> in different DCs or do I need to break out tcpdump?
> >
>
> Even on DC only encryption, you should see the following message in the
> log:
>
> "Starting Encrypted Messaging Service on SSL port 7001"
>
> With any Java-based thing using SSL, you can always use the following
> startup parameter to find out exactly what is going in:
>
> -Djavax.net.debug=ssl
>
> This page will tell you how to interpret the debug output:
>
> http://docs.oracle.com/javase/7/docs/technotes/guides/security/jsse/ReadDebug.html
>
> --
> -
> Nate McCall
> Austin, TX
> @zznate
>
> Co-Founder & Sr. Technical Consultant
> Apache Cassandra Consulting
> http://www.thelastpickle.com
>

reiserfs - DirectoryNotEmptyException

[Modha, Digant]

Hi,

I am running Cassandra 2.1.10 and noticed intermittent 
DirectoryNotEmptyExceptions during repair.  My cassandra data drive is 
reiserfs.  I noticed that on reiserfs wiki site 
https://en.m.wikipedia.org/wiki/ReiserFS#Criticism, it states that unlink 
operation is not synchronous. Is that the reason for the exception below:


ERROR [ValidationExecutor:137] 2015-10-13 00:46:30,759 CassandraDaemon.java:227 
- Exception in thread Thread[ValidationExecutor:137,1,main]
org.apache.cassandra.io.FSWriteError: java.nio.file.DirectoryNotEmptyException:
at 
org.apache.cassandra.io.util.FileUtils.deleteWithConfirm(FileUtils.java:135) 
~[apache-cassandra-2.1.10.jar:2.1.10]
at 
org.apache.cassandra.io.util.FileUtils.deleteRecursive(FileUtils.java:381) 
~[apache-cassandra-2.1.10.jar:2.1.10]
at 
org.apache.cassandra.db.Directories.clearSnapshot(Directories.java:647) 
~[apache-cassandra-2.1.10.jar:2.1.10]
at 
org.apache.cassandra.db.ColumnFamilyStore.clearSnapshot(ColumnFamilyStore.java:2451)
 ~[apache-cassandra-2.1.10.jar:2.1.10]
at 
org.apache.cassandra.db.compaction.CompactionManager.doValidationCompaction(CompactionManager.java:1018)
 ~[apache-cassandra-2.1.10.jar:2.1.10]
at 
org.apache.cassandra.db.compaction.CompactionManager.access$600(CompactionManager.java:94)
 ~[apache-cassandra-2.1.10.jar:2.1.10]
at 
org.apache.cassandra.db.compaction.CompactionManager$9.call(CompactionManager.java:622)
 ~[apache-cassandra-2.1.10.jar:2.1.10]
at java.util.concurrent.FutureTask.run(FutureTask.java:266) 
~[na:1.8.0_60]
at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142) 
~[na:1.8.0_60]

Thanks,

Digant

TD Securities disclaims any liability or losses either direct or consequential 
caused by the use of this information. This communication is for informational 
purposes only and is not intended as an offer or solicitation for the purchase 
or sale of any financial instrument or as an official confirmation of any 
transaction. TD Securities is neither making any investment recommendation nor 
providing any professional or advisory services relating to the activities 
described herein. All market prices, data and other information are not 
warranted as to completeness or accuracy and are subject to change without 
notice Any products described herein are (i) not insured by the FDIC, (ii) not 
a deposit or other obligation of, or guaranteed by, an insured depository 
institution and (iii) subject to investment risks, including possible loss of 
the principal amount invested. The information shall not be further distributed 
or duplicated in whole or in part by any means without the prior written 
consent of TD Securities. TD Securities is a trademark of The Toronto-Dominion 
Bank and represents TD Securities (USA) LLC and certain investment banking 
activities of The Toronto-Dominion Bank and its subsidiaries.

G1 GC settings

[K F]

Hi,
has anyone started to use G1 collector. If so, how is the experience. Can you 
share your insights into some of the important tune up you had to do for 
cassandra. We are planning to use G1 collector with the latest version of jre 
1.8.x
Thanks.

Re: G1 GC settings

[Jon Haddad]

You may want to read Al Tobey’s Cassandra tuning guide.  It’s got a section on 
G1.  It’s being widely used, successfully, at massive scale.

https://tobert.github.io/pages/als-cassandra-21-tuning-guide.html 



> On Oct 13, 2015, at 2:03 PM, K F  wrote:
> 
> Hi,
> 
> has anyone started to use G1 collector. If so, how is the experience. Can you 
> share your insights into some of the important tune up you had to do for 
> cassandra. We are planning to use G1 collector with the latest version of jre 
> 1.8.x
> 
> Thanks.

Re: G1 GC settings

[K F]

Excellent, thanks Jonathan.
  From: Jon Haddad 
 To: user@cassandra.apache.org; K F  
 Sent: Tuesday, October 13, 2015 5:09 PM
 Subject: Re: G1 GC settings
   
You may want to read Al Tobey’s Cassandra tuning guide.  It’s got a section on 
G1.  It’s being widely used, successfully, at massive scale.
https://tobert.github.io/pages/als-cassandra-21-tuning-guide.html




On Oct 13, 2015, at 2:03 PM, K F  wrote:
Hi,
has anyone started to use G1 collector. If so, how is the experience. Can you 
share your insights into some of the important tune up you had to do for 
cassandra. We are planning to use G1 collector with the latest version of jre 
1.8.x
Thanks.



  

Re: G1 GC settings

[K F]

Adding to the below thread planning to use stable 2.1.x release of cassandra
  From: K F 
 To: User  
 Sent: Tuesday, October 13, 2015 5:03 PM
 Subject: G1 GC settings
   
Hi,
has anyone started to use G1 collector. If so, how is the experience. Can you 
share your insights into some of the important tune up you had to do for 
cassandra. We are planning to use G1 collector with the latest version of jre 
1.8.x
Thanks.