D4Science Infrastructure

@luca.frosini@isti.cnr.it is it working?

It works, but you told me that you are not sure that everything is passing along a secure connection.

Luca Frosini wrote:

It works, but you told me that you are not sure that everything is passing along a secure connection.

Something needs to go on plain http and we discovered it when we closed the http ports.
But does the clients traffic go over https?
You can check it easily with tcpdump or even watching the firewall counters:

iptables -nvL reports the traffic for each rule, so if the counters associated to the https ports increase, clients use them.

With tcpdump you can use the command

tcpdump -i any -e -n host <your client IP> to intercept all the traffic from one client. This way you can have a complete scenario. The command must be run on all the orientdb servers.

tcpdump -i any -e -n host 146.48.122.34

produces the following lines:

18:48:31.432486 Out 00:16:3e:17:af:b0 ethertype IPv4 (0x0800), length 403: 146.48.122.23.2424 > 146.48.122.34.48041: Flags [P.], seq 149364:149699, ack 309239, win 661, options [nop,nop,TS val 2256673866 ecr 4021859881], length 335

Port 2424 is the plain http one. So there's something that is not working correctly.