EPICS Controls Argonne National Laboratory

Experimental Physics and
Industrial Control System

1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  2009  2010  2011  2012  2013  2014  2015  2016  2017  2018  2019  2020  <20212022  2023  2024  Index 1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  2009  2010  2011  2012  2013  2014  2015  2016  2017  2018  2019  2020  <20212022  2023  2024 
<== Date ==> <== Thread ==>

Subject: Re: Need clarification on UDP Broadcasting to multiple IOCs on same PC
From: Ralph Lange via Tech-talk <tech-talk at aps.anl.gov>
To: EPICS Tech Talk <tech-talk at aps.anl.gov>
Date: Tue, 7 Dec 2021 19:45:49 +0100
Hi Adam,

On Tue, 7 Dec 2021 at 19:30, Manoussakis, Adamandios via Tech-talk <tech-talk at aps.anl.gov> wrote:

 I have been trying to understand the UDP broadcast requests when having multiple IOCs running on a single host (ubuntu).  I am using the script from https://wiki-ext.aps.anl.gov/epics/index.php/How_to_Make_Channel_Access_Reach_Multiple_Soft_IOCs_on_a_Linux_Host and the rule is in place on my host:    0     0 DNAT       udp  --  any    any     anywhere             ubuntu               udp dpt:5064 to:192.168.252.255.  My confusion comes from that when I hook up wireshark to my local interface I am seeing traffic from caget requests but don’t seem to see the broadcast going out (192.168.252.255:5064).  The rule seems like any source traffic pointed at my hostname should get funneled to the broadcast address.


That firewall rule works on incoming unicast UDP search requests. It replaces the unicast destination address with the broadcast address to trick the kernel (that gets the message next) into seeing an incoming broadcast message, so that it distributes it to all local processes (CA servers) listening on that port. (And not just to one process, like it would do with incoming unicasts.)
That firewall rule does not reroute or send the messages out; it just replaces (rewrites) a field in the header of incoming messages. It needs to run on the host that is running multiple IOCs.

I am running into an issue with my gateway where the gateway is not able to reach all the IOCs but without the gateway it seems to work with the 10 IOCs I have running.  But now I am not so sure its due to the prerouting rule and might be some other magic happening?


The differences you are seeing are most likely related to the firewall rule not working properly, while your "direct" CA client is using a different configuration (sending UDP broadcasts) than the client side of the Gateway (sending UDP unicasts).

Cheers,
~Ralph

Replies:
RE: Need clarification on UDP Broadcasting to multiple IOCs on same PC Manoussakis, Adamandios via Tech-talk
References:
Need clarification on UDP Broadcasting to multiple IOCs on same PC Manoussakis, Adamandios via Tech-talk

Navigate by Date:
Prev: Need clarification on UDP Broadcasting to multiple IOCs on same PC Manoussakis, Adamandios via Tech-talk
Next: Re: Trying to use elauncher: _main_ thread failed Crisp, Daniel via Tech-talk
Index: 1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  2009  2010  2011  2012  2013  2014  2015  2016  2017  2018  2019  2020  <20212022  2023  2024 
Navigate by Thread:
Prev: Need clarification on UDP Broadcasting to multiple IOCs on same PC Manoussakis, Adamandios via Tech-talk
Next: RE: Need clarification on UDP Broadcasting to multiple IOCs on same PC Manoussakis, Adamandios via Tech-talk
Index: 1994  1995  1996  1997  1998  1999  2000  2001  2002  2003  2004  2005  2006  2007  2008  2009  2010  2011  2012  2013  2014  2015  2016  2017  2018  2019  2020  <20212022  2023  2024 
ANJ, 07 Dec 2021 Valid HTML 4.01! · Home · News · About · Base · Modules · Extensions · Distributions · Download ·
· Search · EPICS V4 · IRMIS · Talk · Bugs · Documents · Links · Licensing ·