View Issue Details

Related ChangesetsJump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0000061bareos-coreGeneralpublic2013-02-09 09:422015-03-25 19:19
Reporterpstorz Assigned To 
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status closedResolutionfixed 
PlatformLinuxOSanyOS Version3
Product Version13.1.0 
Fixed in Version13.1.0 
Summary0000061: reverse data channel initialization
DescriptionIt would be nice if the initialization of the data channel could be reversed, so that the SD connects to the FD.

This would make the network setup and firewalling much easier in many cases, and
make tricks like ssh tunnels no longer necessary.

For Example things like SDs being situated behind a NAT gateway would be no problem anymore.
TagsNo tags attached.

Relationships

parent of 0000227 closed directive Passive client not documented 

Activities

pstorz

pstorz

2013-07-04 13:07

administrator   ~0000488

TODO is creating a regression test.
mvwieringen adm

mvwieringen adm

2013-08-13 03:12

administrator   ~0000601

Fix committed to bareos master branch with changesetid 718.
mvwieringen

mvwieringen

2015-03-25 16:51

developer   ~0001421

Fix committed to bareos2015 bareos-13.2 branch with changesetid 4274.
joergs

joergs

2015-03-25 19:19

developer   ~0001578

Due to the reimport of the Github repository to bugs.bareos.org, the status of some tickets have been changed. These tickets will be closed again.
Sorry for the noise.

Related Changesets

bareos: master c17a30e1

2013-05-04 21:13

mvwieringen adm

Ported: N/A

Details Diff		 Reverse data channel initialization

It would be nice if the initialization of the data channel could be
reversed, so that the SD connects to the FD. This would make the
network setup and firewalling much easier in many cases, and make
tricks like ssh tunnels no longer necessary. For Example things like
SDs being situated behind a NAT gateway would be no problem anymore.

We can also tag this as the firewall friendly solution. The default
for all clients is still active mode e.g. FD contacts SD but when
the DIR and SD are within a firewalled site and the FD is in a DMZ
or out on the Internet you can define the client as a passive client
and the DIR and SD will contact the FD so you have only socket
connections being initiated from the secure site without the need for
special resolving tricks (like a split DNS) and/or portforwarders on the
firewall that tunnel the traffic from the DMZ or Internet to your SD.

This passive mode is implemented for Backups, Restores and Verifies
of Jobs. The Director checks the version of the client to make sure
it supports the new passive protocol features.

Fixes 0000061: reverse data channel initialization		 Affected Issues
0000061
mod - src/stored/stored_conf.h Diff File
mod - src/stored/stored_conf.c Diff File
mod - src/stored/sd_cmds.c Diff File
mod - src/stored/protos.h Diff File
mod - src/stored/fd_cmds.c Diff File
mod - src/stored/authenticate.c Diff File
mod - src/stored/Makefile.in Diff File
mod - src/include/jcr.h Diff File
mod - src/filed/verify_vol.c Diff File
add - src/filed/sd_cmds.c Diff File
mod - src/filed/protos.h Diff File
mod - src/filed/filed_conf.c Diff File
mod - src/filed/filed.c Diff File
mod - src/filed/authenticate.c Diff File
mod - src/filed/Makefile.in Diff File
mod - src/dird/verify.c Diff File
mod - src/dird/ua_label.c Diff File
mod - src/dird/sd_cmds.c Diff File
mod - src/dird/restore.c Diff File
mod - src/dird/fd_cmds.c Diff File
mod - src/dird/dird_conf.h Diff File
mod - src/dird/dird_conf.c Diff File
mod - src/dird/dird.h Diff File
mod - src/dird/bsr.c Diff File
mod - src/dird/backup.c Diff File

bareos2015: bareos-13.2 2f80c5ec

2013-05-04 23:13

mvwieringen

Ported: N/A

Details Diff		 Reverse data channel initialization

It would be nice if the initialization of the data channel could be
reversed, so that the SD connects to the FD. This would make the
network setup and firewalling much easier in many cases, and make
tricks like ssh tunnels no longer necessary. For Example things like
SDs being situated behind a NAT gateway would be no problem anymore.

We can also tag this as the firewall friendly solution. The default
for all clients is still active mode e.g. FD contacts SD but when
the DIR and SD are within a firewalled site and the FD is in a DMZ
or out on the Internet you can define the client as a passive client
and the DIR and SD will contact the FD so you have only socket
connections being initiated from the secure site without the need for
special resolving tricks (like a split DNS) and/or portforwarders on the
firewall that tunnel the traffic from the DMZ or Internet to your SD.

This passive mode is implemented for Backups, Restores and Verifies
of Jobs. The Director checks the version of the client to make sure
it supports the new passive protocol features.

Fixes 0000061: reverse data channel initialization		 Affected Issues
0000061
mod - src/dird/backup.c Diff File
mod - src/dird/bsr.c Diff File
mod - src/dird/dird.h Diff File
mod - src/dird/dird_conf.c Diff File
mod - src/dird/dird_conf.h Diff File
mod - src/dird/fd_cmds.c Diff File
mod - src/dird/restore.c Diff File
mod - src/dird/sd_cmds.c Diff File
mod - src/dird/ua_label.c Diff File
mod - src/dird/verify.c Diff File
mod - src/filed/Makefile.in Diff File
mod - src/filed/authenticate.c Diff File
mod - src/filed/filed.c Diff File
mod - src/filed/filed_conf.c Diff File
mod - src/filed/protos.h Diff File
add - src/filed/sd_cmds.c Diff File
mod - src/filed/verify_vol.c Diff File
mod - src/include/jcr.h Diff File
mod - src/stored/Makefile.in Diff File
mod - src/stored/authenticate.c Diff File
mod - src/stored/fd_cmds.c Diff File
mod - src/stored/protos.h Diff File
mod - src/stored/sd_cmds.c Diff File
mod - src/stored/stored_conf.c Diff File
mod - src/stored/stored_conf.h Diff File

Issue History

Date Modified Username Field Change
2013-02-09 09:42 pstorz New Issue
2013-02-09 10:30 mvwieringen Target Version => 12.4.0
2013-02-09 10:30 mvwieringen Fixed in Version => 12.4.0
2013-02-09 10:30 mvwieringen Severity minor => feature
2013-02-09 10:30 mvwieringen Description Updated
2013-03-17 16:36 mvwieringen Assigned To => mvwieringen
2013-03-17 16:36 mvwieringen Status new => assigned
2013-03-17 16:37 mvwieringen Product Version => 13.1.0
2013-03-27 17:05 mvwieringen Changeset attached => bareos master 1dce1de5
2013-03-27 17:05 mvwieringen Status assigned => closed
2013-03-27 17:05 mvwieringen Resolution open => fixed
2013-03-27 17:12 mvwieringen Assigned To mvwieringen =>
2013-03-27 17:12 mvwieringen Fixed in Version => 13.1.0
2013-05-24 12:52 pstorz Assigned To => pstorz
2013-05-24 12:52 pstorz Status closed => resolved
2013-07-04 13:07 pstorz Note Added: 0000488
2013-07-11 09:01 mvwieringen adm Status resolved => closed
2013-07-11 09:01 mvwieringen adm Assigned To pstorz =>
2013-08-13 03:12 mvwieringen adm Changeset attached => bareos master c17a30e1
2013-08-13 03:12 mvwieringen adm Note Added: 0000601
2013-08-13 03:12 mvwieringen adm Assigned To => mvwieringen adm
2013-08-13 03:12 mvwieringen adm Status closed => resolved
2013-08-13 09:20 mvwieringen adm Assigned To mvwieringen adm =>
2013-08-13 09:20 mvwieringen adm Status resolved => closed
2013-10-11 16:52 maik Relationship added parent of 0000227
2015-03-25 16:51 mvwieringen Changeset attached => bareos2015 bareos-13.2 2f80c5ec
2015-03-25 16:51 mvwieringen Note Added: 0001421
2015-03-25 16:51 mvwieringen Status closed => resolved
2015-03-25 19:19 joergs Note Added: 0001578
2015-03-25 19:19 joergs Status resolved => closed