[Clas12_software] switch to new clasdb server Friday morning

[Nathan Baltzell]

Dear Everyone,

It’s been reported that the new firewall behavior today, blocking IPs with offsite mysql connections to the new clasdb server, has been fixed.  And that any blocks starting today due to that have also been removed.

Please let me know if you see otherwise.

If you think you are currently blocked, which would usually appear as no response when trying to login (e.g. ssh to login.jlab.org <http://login.jlab.org/>) or even just accessing a JLab website, you’ll need to file a ServiceNow ticket with your IP address at the top left of cc.jlab.org <http://cc.jlab.org/>.

And, if you’re worried about getting blocked again over the weekend, and/or don’t want to exercise the latest firewall update over the weekend, use sqlite with clas12 software.

Sorry for the inconvenience.  The problem was noticed during the switch over this morning during testing, but it took a while to get it fully appreciated and fixed.  And it was better to move forward with the transition since that was the only issue and everything else was smooth, e.g. replication across different slave/master databases, various critical web apps, onsite data processing.

-Nathan



> On Nov 5, 2021, at 11:55 AM, Nathan Baltzell <baltzell at jlab.org> wrote:
> 
> Looks like there are firewall issues going on.  If you’ve run msqyl connections to clasdb from offsite after the transition, and find you can’t login to JLab anymore, you might be blacklisted and will need to submit a ServiceNow ticket with your IP address.  Until this is sorted out, you may want to use sqlite from offsite to avoid issues.
> 
> -Nathan
> 
> 
>> Begin forwarded message:
>> 
>> From: Nathan Baltzell <baltzell at jlab.org <mailto:baltzell at jlab.org>>
>> Subject: Re: [Clas12_software] switch to new clasdb server Friday morning
>> Date: November 5, 2021 at 10:41:26 EDT
>> To: clas12 software <clas12_software at jlab.org <mailto:clas12_software at jlab.org>>, CLAS-OFFLINE <clas_offline at jlab.org <mailto:clas_offline at jlab.org>>, clas online <clas_online at jlab.org <mailto:clas_online at jlab.org>>, "hallb at jlab.org <mailto:hallb at jlab.org>" <hallb at jlab.org <mailto:hallb at jlab.org>>
>> 
>> Hello All,
>> 
>> The transition is complete.  Please report to me and Bryan McKinnon any issues you may find.
>> 
>> There was some delay due to the lab’s firewall blocking some external IPs during testing associated with the new server, but that only really delayed write-access longer than expected.  
>> 
>> -Nathan
>> 
>> 
>> 
>>> On Nov 3, 2021, at 4:34 PM, Nathan Baltzell <baltzell at jlab.org <mailto:baltzell at jlab.org>> wrote:
>>> 
>>> Hello Everyone,
>>> 
>>> The switch to a new server for clasdb is scheduled for 9 AM this Friday, November 5, right after the HPS run in Hall B is complete.
>>> 
>>> This means a brief outage of CLAS collaboration services using those databases, including CCDB/RCDB, 6 GeV caldb, shift schedules, service work, publications opt-in.
>>> 
>>> The transition is expected to be smooth, last maybe 10 minutes, with most services already thoroughly tested and a rollback plan in place.
>>> 
>>> A followup email will be sent Friday morning.
>>> 
>>> -Nathan
>> 
>> _______________________________________________
>> Clas12_software mailing list
>> Clas12_software at jlab.org <mailto:Clas12_software at jlab.org>
>> https://mailman.jlab.org/mailman/listinfo/clas12_software
> 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://mailman.jlab.org/pipermail/clas12_software/attachments/20211105/c3a88c23/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 1509 bytes
Desc: not available
URL: <https://mailman.jlab.org/pipermail/clas12_software/attachments/20211105/c3a88c23/attachment.p7s>