Thank you. From: Gianluca Bonetti <gianluca.bone...@gmail.com> Sent: Wednesday, December 01, 2021 3:32 To: user@ignite.apache.org Subject: Re: Unknown connection detected & Failed to process selector key
CAUTION: This email originated from outside our organisation - gianluca.bone...@gmail.com<mailto:gianluca.bone...@gmail.com> Do not click on links, open attachments, or respond unless you recognize the sender and can validate the content is safe. Hello Siva If running in a shared cloud environment, you should put best security practices in place to secure all of your servers from connections from unknown hosts (iptables rules) especially on sensitive ports as databases or Apache Ignite. It does seem that this address in the range 10.0.0.0/8<http://10.0.0.0/8> is somehow belonging to your organization. It's very unlikely any cloud provider would share 10.0.0.0/8<http://10.0.0.0/8> among different tenants. Cheers Gianluca Il giorno mar 30 nov 2021 alle ore 04:15 <siva.velich...@barclays.com<mailto:siva.velich...@barclays.com>> ha scritto: Hi, I am seeing below exception in our ignite thick client logs. I am seeing remote address 10.136.96.174 which is not in our ignite cluster list and what I infer from the below logs is that someone is trying to connect to out ignite instances. Please let me know if my assumption is wrong. Also is there a better way to handle these scenarios ? Appreciate any help/pointers on this. 2021-11-27T13:35:59,656 -0500|grid-nio-worker-tcp-comm-2-#25%TcpCommunicationSpi%|||WARN |org.apache.ignite.spi.communication.tcp.TcpCommunicationSpi.warning.295| - Unknown connection detected (is some other software connecting to this Ignite port?) [rmtAddr=/10.136.96.174:52490<http://10.136.96.174:52490>, locAddr=/10.148.207.245:47101<http://10.148.207.245:47101>] 2021-11-27T13:35:59,658 -0500|grid-nio-worker-tcp-comm-3-#26%TcpCommunicationSpi%|||INFO |org.apache.ignite.spi.communication.tcp.TcpCommunicationSpi.info.285| - Accepted incoming communication connection [locAddr=/10.148.207.245:47101<http://10.148.207.245:47101>, rmtAddr=/10.136.96.174:52493<http://10.136.96.174:52493>] 2021-11-27T13:35:59,676 -0500|grid-nio-worker-tcp-comm-3-#26%TcpCommunicationSpi%|||WARN |org.apache.ignite.spi.communication.tcp.TcpCommunicationSpi.warning.295| - Unknown connection detected (is some other software connecting to this Ignite port?) [rmtAddr=/10.136.96.174:52493<http://10.136.96.174:52493>, locAddr=/10.148.207.245:47101<http://10.148.207.245:47101>] 2021-11-27T13:35:59,678 -0500|grid-nio-worker-tcp-comm-0-#23%TcpCommunicationSpi%|||INFO |org.apache.ignite.spi.communication.tcp.TcpCommunicationSpi.info.285| - Accepted incoming communication connection [locAddr=/10.148.207.245:47101<http://10.148.207.245:47101>, rmtAddr=/10.136.96.174:52496<http://10.136.96.174:52496>] 2021-11-27T13:36:01,712 -0500|grid-nio-worker-tcp-comm-0-#23%TcpCommunicationSpi%|||ERROR|org.apache.ignite.spi.communication.tcp.TcpCommunicationSpi.error.310| - Failed to process selector key [ses=GridSelectorNioSessionImpl [worker=DirectNioClientWorker [super=AbstractNioClientWorker [idx=0, bytesRcvd=533640, bytesSent=2405277, bytesRcvd0=0, bytesSent0=0, select=true, super=GridWorker [name=grid-nio-worker-tcp-comm-0, igniteInstanceName=TcpCommunicationSpi, finished=false, heartbeatTs=1638038160689, hashCode=161343674, interrupted=false, runner=grid-nio-worker-tcp-comm-0-#23%TcpCommunicationSpi%]]], writeBuf=java.nio.DirectByteBuffer[pos=0 lim=32768 cap=32768], readBuf=java.nio.DirectByteBuffer[pos=0 lim=32768 cap=32768], inRecovery=null, outRecovery=null, closeSocket=true, outboundMessagesQueueSizeMetric=o.a.i.i.processors.metric.impl.LongAdderMetric@69a257d1<mailto:outboundMessagesQueueSizeMetric=o.a.i.i.processors.metric.impl.LongAdderMetric@69a257d1>, super=GridNioSessionImpl [locAddr=/10.148.207.245:47101<http://10.148.207.245:47101>, rmtAddr=/10.136.96.174:52496<http://10.136.96.174:52496>, createTime=1638038159678, closeTime=0, bytesSent=18, bytesRcvd=0, bytesSent0=0, bytesRcvd0=0, sndSchedTime=1638038159678, lastSndTime=1638038159678, lastRcvTime=1638038159678, readsPaused=false, filterChain=FilterChain[filters=[GridNioCodecFilter [parser=o.a.i.i.util.nio.GridDirectParser@6613bbbf, directMode=true], GridConnectionBytesVerifyFilter], accepted=true, markedForClose=false]]] java.io.IOException: Connection reset by peer at sun.nio.ch.FileDispatcherImpl.read0(Native Method) at sun.nio.ch.SocketDispatcher.read(SocketDispatcher.java:39) at sun.nio.ch.IOUtil.readIntoNativeBuffer(IOUtil.java:223) at sun.nio.ch.IOUtil.read(IOUtil.java:192) at sun.nio.ch.SocketChannelImpl.read(SocketChannelImpl.java:379) at org.apache.ignite.internal.util.nio.GridNioServer$DirectNioClientWorker.processRead(GridNioServer.java:1337) at org.apache.ignite.internal.util.nio.GridNioServer$AbstractNioClientWorker.processSelectedKeysOptimized(GridNioServer.java:2494) at org.apache.ignite.internal.util.nio.GridNioServer$AbstractNioClientWorker.bodyInternal(GridNioServer.java:2259) at org.apache.ignite.internal.util.nio.GridNioServer$AbstractNioClientWorker.body(GridNioServer.java:1896) at org.apache.ignite.internal.util.worker.GridWorker.run(GridWorker.java:120) at java.lang.Thread.run(Thread.java:748) 2021-11-27T13:36:04,703 -0500|grid-timeout-worker-#22|||WARN |org.apache.ignite.internal.processors.odbc.ClientListenerNioListener.warning.295| - Unable to perform handshake within timeout [timeout=10000, remoteAddr=/10.136.96.174:51991<http://10.136.96.174:51991>] 2021-11-27T13:36:17,069 -0500|grid-nio-worker-client-listener-2-#34|||ERROR|org.apache.ignite.internal.processors.odbc.ClientListenerProcessor.error.310| - Failed to process selector key [ses=GridSelectorNioSessionImpl [worker=DirectNioClientWorker [super=AbstractNioClientWorker [idx=2, bytesRcvd=448, bytesSent=0, bytesRcvd0=7, bytesSent0=0, select=true, super=GridWorker [name=grid-nio-worker-client-listener-2, igniteInstanceName=null, finished=false, heartbeatTs=1638038176060, hashCode=1355667889, interrupted=false, runner=grid-nio-worker-client-listener-2-#34]]], writeBuf=java.nio.DirectByteBuffer[pos=0 lim=43520 cap=43520], readBuf=java.nio.DirectByteBuffer[pos=0 lim=184640 cap=184640], inRecovery=null, outRecovery=null, closeSocket=true, outboundMessagesQueueSizeMetric=null, super=GridNioSessionImpl [locAddr=/10.148.207.245:10801<http://10.148.207.245:10801>, rmtAddr=/10.136.96.174:52993<http://10.136.96.174:52993>, createTime=1638038176029, closeTime=0, bytesSent=0, bytesRcvd=7, bytesSent0=0, bytesRcvd0=7, sndSchedTime=1638038176029, lastSndTime=1638038176029, lastRcvTime=1638038176040, readsPaused=false, filterChain=FilterChain[filters=[GridNioAsyncNotifyFilter, GridNioCodecFilter [parser=ClientListenerNioMessageParser, directMode=true]], accepted=true, markedForClose=false]]] java.io.IOException: Connection reset by peer at sun.nio.ch.FileDispatcherImpl.read0(Native Method) at sun.nio.ch.SocketDispatcher.read(SocketDispatcher.java:39) at sun.nio.ch.IOUtil.readIntoNativeBuffer(IOUtil.java:223) at sun.nio.ch.IOUtil.read(IOUtil.java:192) at sun.nio.ch.SocketChannelImpl.read(SocketChannelImpl.java:379) at org.apache.ignite.internal.util.nio.GridNioServer$DirectNioClientWorker.processRead(GridNioServer.java:1337) at org.apache.ignite.internal.util.nio.GridNioServer$AbstractNioClientWorker.processSelectedKeysOptimized(GridNioServer.java:2494) at org.apache.ignite.internal.util.nio.GridNioServer$AbstractNioClientWorker.bodyInternal(GridNioServer.java:2259) at org.apache.ignite.internal.util.nio.GridNioServer$AbstractNioClientWorker.body(GridNioServer.java:1896) at org.apache.ignite.internal.util.worker.GridWorker.run(GridWorker.java:120) at java.lang.Thread.run(Thread.java:748) 2021-11-27T13:36:17,070 -0500|grid-nio-worker-client-listener-2-#34|||WARN |org.apache.ignite.internal.processors.odbc.ClientListenerProcessor.warning.295| - Client disconnected abruptly due to network connection loss or because the connection was left open on application shutdown. [cls=class o.a.i.i.util.nio.GridNioException, msg=Connection reset by peer] 2021-11-27T13:36:26,038 -0500|grid-timeout-worker-#22|||WARN |org.apache.ignite.internal.processors.odbc.ClientListenerNioListener.warning.295| - Unable to perform handshake within timeout [timeout=10000, remoteAddr=/10.136.96.174:52993<http://10.136.96.174:52993>] 2021-11-27T13:36:26,068 -0500|grid-timeout-worker-#22|||WARN |org.apache.ignite.internal.processors.odbc.ClientListenerNioListener.warning.295| - Unable to perform handshake within timeout [timeout=10000, remoteAddr=/10.136.96.174:52996<http://10.136.96.174:52996>] 2021-11-27T13:36:46,386 -0500|grid-timeout-worker-#22|||WARN |org.apache.ignite.internal.processors.odbc.ClientListenerNioListener.warning.295| - Unable to perform handshake within timeout [timeout=10000, remoteAddr=/10.136.96.174:53454<http://10.136.96.174:53454>] 2021-11-27T13:36:56,413 -0500|grid-timeout-worker-#22|||WARN |org.apache.ignite.internal.processors.odbc.ClientListenerNioListener.warning.295| - Unable to perform handshake within timeout [timeout=10000, remoteAddr=/10.136.96.174:56198<http://10.136.96.174:56198>] 2021-11-27T13:37:06,441 -0500|grid-timeout-worker-#22|||WARN |org.apache.ignite.internal.processors.odbc.ClientListenerNioListener.warning.295| - Unable to perform handshake within timeout [timeout=10000, remoteAddr=/10.136.96.174:57<http://10.136.96.174:57> _________________________________________________________________________________________________________________________________________________________________________________________________________________________________ “This message is for information purposes only, it is not a recommendation, advice, offer or solicitation to buy or sell a product or service nor an official confirmation of any transaction. It is directed at persons who are professionals and is not intended for retail customer use. Intended for recipient only. This message is subject to the terms at: www.barclays.com/emaildisclaimer<https://clicktime.symantec.com/3K3MnGU1wLT6VZZxn98A8ex7GS?u=http%3A%2F%2Fwww.barclays.com%2Femaildisclaimer>. For important disclosures, please see: www.barclays.com/salesandtradingdisclaimer<https://clicktime.symantec.com/3LHCZmghLgU4r7kR4D7KLf47GS?u=http%3A%2F%2Fwww.barclays.com%2Fsalesandtradingdisclaimer> regarding market commentary from Barclays Sales and/or Trading, who are active market participants; https://www.investmentbank.barclays.com/disclosures/barclays-global-markets-disclosures.html<https://clicktime.symantec.com/3SPCL2TUTa4DZ2s8MfnG1mw7GS?u=https%3A%2F%2Fwww.investmentbank.barclays.com%2Fdisclosures%2Fbarclays-global-markets-disclosures.html> regarding our standard terms for the Investment Bank of Barclays where we trade with you in principal-to-principal wholesale markets transactions; and in respect of Barclays Research, including disclosures relating to specific issuers, please see http://publicresearch.barclays.com<https://clicktime.symantec.com/3Qkfv1nRnjad6H1aKULVbgB7GS?u=http%3A%2F%2Fpublicresearch.barclays.com>.” _________________________________________________________________________________________________________________________________________________________________________________________________________________________________ If you are incorporated or operating in Australia, please see https://www.home.barclays/disclosures/importantapacdisclosures.html<https://clicktime.symantec.com/39C7aTdY2syZ5F2wRzFJsDB7GS?u=https%3A%2F%2Fwww.home.barclays%2Fdisclosures%2Fimportantapacdisclosures.html> for important disclosure. _________________________________________________________________________________________________________________________________________________________________________________________________________________________________ How we use personal information see our privacy notice https://www.investmentbank.barclays.com/disclosures/personalinformationuse.html<https://clicktime.symantec.com/37t4ex3d6qM5ijpKVj1ee3b7GS?u=https%3A%2F%2Fwww.investmentbank.barclays.com%2Fdisclosures%2Fpersonalinformationuse.html> _________________________________________________________________________________________________________________________________________________________________________________________________________________________________ _________________________________________________________________________________________________________________________________________________________________________________________________________________________________ �This message is for information purposes only, it is not a recommendation, advice, offer or solicitation to buy or sell a product or service nor an official confirmation of any transaction. It is directed at persons who are professionals and is not intended for retail customer use. Intended for recipient only. This message is subject to the terms at: www.barclays.com/emaildisclaimer. For important disclosures, please see: www.barclays.com/salesandtradingdisclaimer regarding market commentary from Barclays Sales and/or Trading, who are active market participants; https://www.investmentbank.barclays.com/disclosures/barclays-global-markets-disclosures.html regarding our standard terms for the Investment Bank of Barclays where we trade with you in principal-to-principal wholesale markets transactions; and in respect of Barclays Research, including disclosures relating to specific issuers, please see http://publicresearch.barclays.com.� _________________________________________________________________________________________________________________________________________________________________________________________________________________________________ If you are incorporated or operating in Australia, please see https://www.home.barclays/disclosures/importantapacdisclosures.html for important disclosure. _________________________________________________________________________________________________________________________________________________________________________________________________________________________________ How we use personal information see our privacy notice https://www.investmentbank.barclays.com/disclosures/personalinformationuse.html _________________________________________________________________________________________________________________________________________________________________________________________________________________________________