Uploaded image for project: 'Couchbase Server'
  1. Couchbase Server
  2. MB-51752

[BP to 7.0.4] - cbcollect - failes to gather projector profiles when TLS is enforced

    XMLWordPrintable

Details

    • Untriaged
    • 1
    • Unknown

    Description

      cbcollect collects the projector CPU, memory and goroutine dumps of projector process. This is a critical piece of information which will help us debug customer CBSE's.

      So far, this information is gathered using REST requests on 127.0.0.1:9999 port using HTTP. After TLS is enabled, projector uses the same port for TLS communication as well. So, any HTTP REST request would return: "Client sent an HTTP request to an HTTPS server". Enabling HTTPS request in cbcollect requires cacert.

       

      Ask of this MB:

      a. Does cbcollect know if TLS is enforced or not so that it can query with the appropriate protocol?

      b. If cbcollect is unaware of it TLS, does each service need to query both protocols?

      c. Is cacert available to cbcollect so that it can query on HTTPS protocol?

      Attachments

        Issue Links

          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            Build couchbase-server-7.1.1-3015 contains ns_server commit 0b45ffd with commit message:
            MB-51752 [BP] Remove unnecessary line

            build-team Couchbase Build Team added a comment - Build couchbase-server-7.1.1-3015 contains ns_server commit 0b45ffd with commit message: MB-51752 [BP] Remove unnecessary line

            Build couchbase-server-7.1.1-3015 contains ns_server commit 8ed0f78 with commit message:
            MB-51752 [BP] Gather projector profiles when TLS is enforced

            build-team Couchbase Build Team added a comment - Build couchbase-server-7.1.1-3015 contains ns_server commit 8ed0f78 with commit message: MB-51752 [BP] Gather projector profiles when TLS is enforced

            Build couchbase-server-7.2.0-1066 contains ns_server commit 0b45ffd with commit message:
            MB-51752 [BP] Remove unnecessary line

            build-team Couchbase Build Team added a comment - Build couchbase-server-7.2.0-1066 contains ns_server commit 0b45ffd with commit message: MB-51752 [BP] Remove unnecessary line

            Build couchbase-server-7.2.0-1066 contains ns_server commit 8ed0f78 with commit message:
            MB-51752 [BP] Gather projector profiles when TLS is enforced

            build-team Couchbase Build Team added a comment - Build couchbase-server-7.2.0-1066 contains ns_server commit 8ed0f78 with commit message: MB-51752 [BP] Gather projector profiles when TLS is enforced

            Validated on 7.0.4-7253

             

            Steps to reproduce:

            1. Create a 2 node cluster with following services kv:n1ql-index.
            2. Set index storage mode
            3. Enable TLS 
              ./couchbase-cli setting-autofailover -c localhost:8091 -u Administrator -p password --enable-auto-failover=0
              ./couchbase-cli node-to-node-encryption -c localhost:8091 -u Administrator -p password --enable
              ./couchbase-cli setting-security -c localhost:8091 -u Administrator -p password --set --cluster-encryption-level all
              ./couchbase-cli setting-autofailover -c localhost:8091 -u Administrator -p password --enable-auto-failover=1 --auto-failover-timeout=120 --max-failovers=1
              ./couchbase-cli setting-security -c https://localhost:18091 -u Administrator -p password --set --cluster-encryption-level strict --no-ssl-verify

             

            1. Load travel-sample bucket.
            2. Run cbcollect_info on both the nodes - /opt/couchbase/bin/cbcollect_info  /tmp/$(hostname).zip

            lfc@LFCs-MacBook-Pro cbcollect_info_ns_1@10.112.205.101_20220412-034824 % cat projector_cprof.log 
            .???????&N[7???q21i???8??&?i?δq?$?????9??C0dlņ?{????}??;??ܝ??????????K<P??%???}???4????^??@<x`???d??_7?g???'5??????#??O?q?N??:?????Q"?&???ǟl#u2?z???sm?p?]VM?$5״??@???%??
                                                                                                                                                                                     ߬F?Ђ-?"??u1?s?A+?Jm2???/??`???~?K ?I#??ܱ:?K???. ?o=!`@@M?_?P?Pt`????o_??W??fP3tb??%i?????eQ??'m??W?sNmBW?%??Z4yT?x??I?<???Ћ??2?O_{?\??a?$?@??'??Ch?.?v??~??@x?S??*p?/?@FY??t?/
                                                                                                     ??,?????.?N???u?
            \!?.???????N?u?J\)?n|??c?^7<?l7??UR(?^?
                                                   ?C{????[҃??{??z
                                                                 ⠴L?x??#\?K??
                                                                             ?	3?????9????V?j???/?#.?5??V\????
                                                                                                                   d	??!?f	?lj??0K?
                                                                                                                                            d)?s?!??`?/?^???B?.?z)????^?o??+?H??y??WL5,YڻL?@???	?O???{!?a)"??g?e0?aP?҈?'??????b[D1*??@d|??I??#??m?0&Rt?|G`??57E?!?q??^?_?XN??????>?_X.Y?/}?/8{~?n?!?	))Y?_y?s?W]?0???Z?*???os???g\l9??u?z??!?p?M??7H̊??B??
            ??"?a|?ņ?7n%                                                                                ⩣"?WBR?^	?p???!|?U????ka܄7?l_??>-23??l?f?,?b
                        ??x???r???<?@?d???C??
                                             +"?U????x???V
            ?W?V?*4?,?g?Qx?/?_qj8?)TS???D
                                         ?,
            ?ð???#X?|??U??)?,?9+JQ??????N?)?d 1|??????p
                                                       ?"????Ks܊?

            hemant.rajput Hemant Rajput added a comment - Validated on 7.0.4-7253   Steps to reproduce: Create a 2 node cluster with following services kv:n1ql-index. Set index storage mode Enable TLS  ./couchbase-cli setting-autofailover -c localhost:8091 -u Administrator -p password --enable-auto-failover=0 ./couchbase-cli node-to-node-encryption -c localhost:8091 -u Administrator -p password --enable ./couchbase-cli setting-security -c localhost:8091 -u Administrator -p password --set --cluster-encryption-level all ./couchbase-cli setting-autofailover -c localhost:8091 -u Administrator -p password --enable-auto-failover=1 --auto-failover-timeout=120 --max-failovers=1 ./couchbase-cli setting-security -c https://localhost:18091 -u Administrator -p password --set --cluster-encryption-level strict --no-ssl-verify   Load travel-sample bucket. Run cbcollect_info on both the nodes - /opt/couchbase/bin/cbcollect_info  /tmp/$(hostname).zip lfc@LFCs-MacBook-Pro cbcollect_info_ns_1@10.112.205.101_20220412-034824 % cat projector_cprof.log  .???????&N[7???q21i???8??&?i?δq?$?????9??C0dlņ?{????}??;??ܝ??????????K<P??%???}???4????^??@<x`???d??_7?g???'5??????#??O?q?N??:?????Q"?&???ǟl#u2?z???sm?p?]VM?$5״??@???%??                                                                                                                                                                          ߬F?Ђ-?"??u1?s?A+?Jm2???/??`???~?K ?I#??ܱ:?K???. ?o=!`@@M?_?P?Pt`????o_??W??fP3tb??%i?????eQ??'m??W?sNmBW?%??Z4yT?x??I?<???Ћ??2?O_{?\??a?$?@??'??Ch?.?v??~??@x?S??*p?/?@FY??t?/                                                                                          ??,?????.?N???u? \!?.???????N?u?J\)?n|??c?^7<?l7??UR(?^?                                        ?C{????[҃??{??z                                                      ⠴L?x??#\?K??                                                                  ? 3?????9????V?j???/?#.?5??V\????                                                                                                        d ??!?f ?lj??0K?                                                                                                                                 d)?s?!??`?/?^???B?.?z)????^?o??+?H??y??WL5,YڻL?@??? ?O???{!?a)"??g?e0?aP?҈?'??????b[D1*??@d|??I??#??m?0&Rt?|G`??57E?!?q??^?_?XN??????>?_X.Y?/}?/8{~?n?!? ))Y?_y?s?W]?0???Z?*???os???g\l9??u?z??!?p?M??7H̊??B?? ??"?a|?ņ?7n%                                                                                ⩣"?WBR?^ ?p???!|?U????ka܄7?l_??>-23??l?f?,?b             ??x???r???<?@?d???C??                                  +"?U????x???V ?W?V?*4?,?g?Qx?/?_qj8?)TS???D                              ?, ?ð???#X?|??U??)?,?9+JQ??????N?)?d 1|??????p                                            ?"????Ks܊?

            People

              hemant.rajput Hemant Rajput
              varun.velamuri Varun Velamuri
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes

                  PagerDuty