Change Details

Currently only machines within the same cluster can communicate problem is that with cross cluster search we want node1 to open node2 on port 9700 even if node node1 is not on the cluster responsible for 9700.

Currently only machines within the same cluster can communicate with each others, problem is that with cross cluster search we want node1 to open node2 on port 9700 even if node node1 is not on the cluster responsible for 9700. Current behavior: - from elastic2042: curl elastic2045.codfw.wmnet:9700 => DENIED - from elastic2042: curl elastic2045.codfw.wmnet:9600 => DENIED - from elastic2042: curl elastic2045.codfw.wmnet:9643 => DENIED - from elastic2045: curl elastic2042.codfw.wmnet:9500 => DENIED - from elastic2045: curl elastic2042.codfw.wmnet:9400 => DENIED - from elastic2045: curl elastic2042.codfw.wmnet:9443 => DENIED Expected behavior: connection opens on all these ports Same problem is present on eqiad.

Currently only machines within the same cluster can communicate with each others, problem is that with cross cluster search we want node1 to open node2 on port 9700 even if node node1 is not on the cluster responsible for 9700. Current behavior: - from elastic2042: curl elastic2045.codfw.wmnet:9700 => DENIED - from elastic2042: curl elastic2045.codfw.wmnet:9600 => DENIED - from elastic2042: curl elastic2045.codfw.wmnet:9643 => DENIED - from elastic2045: curl elastic2042.codfw.wmnet:9500 => DENIED - from elastic2045: curl elastic2042.codfw.wmnet:9400 => DENIED - from elastic2045: curl elastic2042.codfw.wmnet:9443 => DENIED Expected behavior: connection opens on all these ports Same problem is present on eqiad.