Gateway not opening in Policy manager

[Sumeet Basu]

I'm trying to login to a gateway via the policy manager but it is loading for quite a long time and then the connection is getting broken. Also if it opens after loading for long time,the assertions are not loaded in that gateway in policy manager showing ? symbol in some assertions. Someone please help out to resolve this issue.  



LOG

Oct 19, 2020 6:59:18 PM com.l7tech.gui.util.ClipboardActions a

INFO: Updated cached clipboard flavors for sun.awt.windows.WClipboard@50ad4b: [java.awt.datatransfer.DataFlavor[mimetype=application/x-java-serialized-object;representationclass=java.lang.String], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.io.Reader], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.lang.String], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.nio.CharBuffer], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=[C], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.io.InputStream;charset=unicode], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.nio.ByteBuffer;charset=UTF-16], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=[B;charset=UTF-16], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.io.InputStream;charset=UTF-8], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.io.InputStream;charset=UTF-8], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.nio.ByteBuffer;charset=UTF-8], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=[B;charset=UTF-8], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.io.InputStream;charset=UTF-16BE], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.nio.ByteBuffer;charset=UTF-16BE], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=[B;charset=UTF-16BE], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.io.InputStream;charset=UTF-16LE], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.nio.ByteBuffer;charset=UTF-16LE], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=[B;charset=UTF-16LE], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.io.InputStream;charset=ISO-8859-1], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.nio.ByteBuffer;charset=ISO-8859-1], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=[B;charset=ISO-8859-1], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.io.InputStream;charset=US-ASCII], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=java.nio.ByteBuffer;charset=US-ASCII], java.awt.datatransfer.DataFlavor[mimetype=text/plain;representationclass=[B;charset=US-ASCII], java.awt.datatransfer.DataFlavor[mimetype=application/x-java-text-encoding;representationclass=[B]]

Oct 19, 2020 6:59:35 PM com.l7tech.console.security.SecurityProvider refreshPermissionCache

INFO: Loaded 6 permissions.

Oct 19, 2020 6:59:35 PM com.l7tech.console.security.SecurityProvider refreshPermissionCache

INFO: Loaded 0 EntitiesProtectionInfo.

Oct 19, 2020 7:06:38 PM com.l7tech.console.util.AdminContextImpl a

WARNING: Exception during remote API call: org.springframework.remoting.RemoteAccessException: Could not access HTTP invoker remote service at [https://securespangateway/ssg/manager/CustomAssertionsRegistrar]; nested exception is java.net.SocketTimeoutException: Read timed out

Oct 19, 2020 7:06:38 PM com.l7tech.console.policy.ConsoleAssertionRegistry updateModularAssertions

INFO: Loading modular assertions took 423317ms.

Oct 19, 2020 7:06:38 PM com.l7tech.console.bl onAuthSuccess

WARNING: Unable to update modular assertions: Unexpected error getting modular assertion info: Could not access HTTP invoker remote service at [https://securespangateway/ssg/manager/CustomAssertionsRegistrar]; nested exception is java.net.SocketTimeoutException: Read timed out.

Oct 19, 2020 7:06:42 PM com.l7tech.console.MainWindow setInactivitiyTimeout

INFO: Inactivity timeout updated (timeout = 1800000)

Oct 19, 2020 7:06:52 PM com.l7tech.util.c5 terminated

INFO: Thread pool 'logGrabberPool' has terminated.

Oct 19, 2020 7:06:52 PM com.l7tech.util.ThreadPool shutdown

INFO:

Pool Status:

                Pool 'logGrabberPool' is terminated.

Summary Stats:

                MaxRunningThreads=1

                CompletedTasks=3

[Zhijun He]

As the log shows, it's due to "java.net.SocketTimeoutException: Read timed out.".
It's a network problem, we recommend to run policy manager in the same LAN of the gateway nodes, you might think of running policy manager on a jump box.

Regards,
Mark

[Sumeet Basu]

Hi Mark,
We are running the policy manager in jump box only. Sometimes it opens, sometimes it's not. If it opens it takes a lot of time time. Also after opening the policy manager, the assertions are not loaded(like compare varaiable) showing ? symbol in assertions. Also is aarertion pallete some assertions are not there. Any solution for this issue. 


Regards,
Sumeet Basu

[Zhijun He]

Is the jump box in the same LAN of the gateway nodes?
Or, anything in the middle of the jump box and gateway node?

Also check if the gateway node has high cpu usage.

Regards,
Mark

[Sumeet Basu]

Hi Mark,
It is the same LAN of the gateway nodes.
Also gateway node doesn't have any high cpu usage.

Regards,
Sumeet

[Jackie Wilson]

Was there any resolution to this problem?  I'm running 10.0CR03 and I'm seeing similar behavior from the policy manager.  There are especially long delays after "com.l7tech.gui.util.ClipboardActions a" call based on what I see written to the ...\.l7thech\ssm0.log file.  Generally, the Policy Manager takes between 60-70 seconds to become responsive after credentials have been submitted.