ZeroMQ or TCP transport ?

[bruno binet]

Hi all,

I'm still using the ZeroMQ transport, but while migrating to the recent v2016.3.1 release, I'm wondering if I should also switch to the new TCP transport as well.

So what are the pros/cons of both transports? Are there specific use cases to prefer one over the other? (I couldn't find anything relevant in the documentation).

Is the TCP transport considered production ready?

Is the TCP transport secured? (could it be used safely to run minions over the hostile internet?)

Does the TCP transport requires some additional firewall configuration on the minions? (I don't want to allow inbound connections like it is required for the RAET transport)

Thanks!

Bruno

[Jeremy McMillan]

You should check out the SaltConf 2016 talks that are available online now.

https://youtu.be/XjkTfBpen8M?list=PL9svBjLDUl_-sVwcRliUQ-VGDb2qvwpx_

[bruno binet]

The video is indeed very informative, thanks!

--
You received this message because you are subscribed to the Google Groups "Salt-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to salt-users+...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Glenn E. Bailey III]

So where are the docs on how to implement it? Simply set "transport"
to "tcp" on both the master and the minion? Is it stable in 2015.8.10?
Different ports than 4505 and 4506? Would *love* to implement this on
a new deployment I'm working on.

--
"replicants are like any other machine. They're either a benefit or a
hazard. If they're a benefit, it's not my problem."

[Glenn E. Bailey III]

Took some digging in the docs but I found it:

transport_opts:
tcp:
publish_port: 4605
ret_port: 4606
zeromq: []

Didn't see any mention of it in the transports section, only the main
config section.

[Daniel Jung]

Are you using TCP transport in environment using syndic(s) as well?  Based on the video, TCP sounds like better transport for high throughput environment

Cheers

[Dylan Baars]

Hi Glenn,

did you get (or find) any answer to whether TCP transport is stable in 2015.8.10? I am seeing some "Bad load from minion" errors from zeromq (which I found a bug report for 2016.3 here https://github.com/saltstack/salt/issues/33201) - no fix, but workaround is to go to TCP transport! I think your solution is referring to https://docs.saltstack.com/en/latest/ref/configuration/master.html#transport-opts (which is for 2016.3), are you running that on 2015.8.10? All OK?

Thanks,
Dylan

[Glenn E. Bailey III]

I actually went back to using ZeroMQ for now. While I did get it to
work the masters were throwing some errors, that I unfortunately
forgot to log :-(

[Daniel Jung]

Just to be sure, what release were you running ?

Could anyone who is using TCP transport comment on the stability ? It's nice to know that TCP has promising results based on the salt conf talk, it would be nice to know on what release with what kind arch setup.

Thanks

You received this message because you are subscribed to a topic in the Google Groups "Salt-users" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/salt-users/6Fh9ehHc2y4/unsubscribe.
To unsubscribe from this group and all its topics, send an email to salt-users+...@googlegroups.com.

[Glenn E. Bailey III]

I tried both 2015.8.10 and 2016.3.1 .. I don't think I tested with
2016.3.1 on the minions though, just the master.