[Sks-devel] Need help with clustered setup

[Danny Horne]

Hi all,

My main keyserver (from now on I'll call this the master) listens on
both external and internal interfaces, ports 11370 & 11371 are open on
both interfaces.  As a standalone server this has been running fine.

I've now set up another keyserver (I'll call this the slave) which only
listens on its internal interface, ports 11370 and 11371 are open on
this interface.

Both master and slave have each other in their membership file

The slave is requesting and receiving keys from the master, this shows
in its recon.log

The master is requesting keys from the slave but the logs appear to say
the connection is timing out -

2016-09-07 11:20:25 Requesting 100 missing keys from <ADDR_INET
[10.78.100.5]:11371>, starting with 48E84C85DFB97E46E8F042CF177F52C3
2016-09-07 11:22:32 Error getting missing keys: Unix error: Connection
timed out - connect()

I'm assuming it's a firewall issue (firewalld on Fedora 24) but I'm
clueless what to look for

All help appreciated

signature.asc
Description: OpenPGP digital signature