pcp
[Top] [All Lists]

Re: [pcp] pmlc access control, was Re: PCP Updates: qa fallout from ipv6

To: Nathan Scott <nathans@xxxxxxxxxx>
Subject: Re: [pcp] pmlc access control, was Re: PCP Updates: qa fallout from ipv6/unix sockets for pmlogger and pmlc
From: "Frank Ch. Eigler" <fche@xxxxxxxxxx>
Date: Thu, 20 Feb 2014 18:48:56 -0500
Cc: Ken McDonell <kenj@xxxxxxxxxxxxxxxx>, pcp@xxxxxxxxxxx
Delivered-to: pcp@xxxxxxxxxxx
In-reply-to: <2078588943.13402683.1392937771745.JavaMail.zimbra@xxxxxxxxxx>
References: <52FE5058.4030702@xxxxxxxxxx> <896174788.10421447.1392770006295.JavaMail.zimbra@xxxxxxxxxx> <5304D039.9010708@xxxxxxxxxx> <1347098955.12246278.1392874951684.JavaMail.zimbra@xxxxxxxxxx> <530612EC.8020206@xxxxxxxxxx> <y0meh2xmtb9.fsf_-_@xxxxxxxx> <53067159.9050409@xxxxxxxxxxxxxxxx> <y0m38jdmnze.fsf@xxxxxxxx> <2078588943.13402683.1392937771745.JavaMail.zimbra@xxxxxxxxxx>
User-agent: Mutt/1.4.2.2i
Hi -

nathans wrote:


> The usual model would be local pmie daemon (no temporary connection).

Sorry, I was extrapolating from observations of a particular local
pmie process here, which maintained no permanent tcp connection to the
-h HOSTNAME, but rather closed / reopened it every pmie polling cycle.
But looking at it now more closely, the affected pmie is one that is
using an ssh tunnel (-h localhost:XYZ), where the remote pmcd.hostname
is of course different from localhost etc.  I see pmie trying to
connect to the pmcd.hostname, failing (since it's firewalled that
route), then falling back to the initially supplied -h HOSTSTRING.
There's a real bug in there.


> I'm not following how its a complication to have a second connection
> to pmcd...?  (relative to the level of complication of pmlogger code
> that we'd have to consider, which would appear to require a decision
> making engine like pmie to be built into pmlogger...?).

Sure, from the PoV that the pmie codebase was not written to be
encapsulated as a library.  From the PoV of the target pmcd though,
there would be less run-time complexity, in the form of one fewer
client.


> > it cannot piggy-back on an archive being written-to by pmlogger.
> 
> Can you explain that some more?  ("piggy-back" in what way?)  The pmlc
> model is that pmie tells pmlogger what (extra) to log dynamically, via
> pmlc, so in that sense it is piggy-backing on the existing archive...?

Right, I was referring to a hypothetical scenario where pmie's inputs
could be taken from the pmlogger-archive being written, rather than
via a secondary connection to pmcd.  That would reduce the load on
pmcd, if the predicate inputs happened to be subsets of the pmlogger
outputs.


- FChE

<Prev in Thread] Current Thread [Next in Thread>