<p>I get no errors but no traffic and am at a loss. A couple of things:</p>
<ul>
<li><p>I load a new service from file cardano-node.xml: <code>firewall-cmd --permanent --new-service-from-file=/usr/lib64/firewalld/services/cardano-node.xml</code></p>
</li>
<li><p>I reload so it becomes runtime: <code>firewall-cmd --reload</code></p>
</li>
<li><p>I see it in my default zone, allowing two ports, that match the TCP sockets handed by systemd. <code>netstat -ap | grep &lt;port&gt;</code> shows it, though as systemd. grep cardano shows something else:</p>
</li>
</ul>
<pre><code>    tcp6       0      0 [::]:29171              [::]:*                  LISTEN      1/systemd
    tcp        0      0 localhost:12788         0.0.0.0:*               LISTEN      4513/cardano-node
</code></pre>
<ul>
<li>When inspecting with Wireshark, without passing sockets both an A and AAAA query is made, the former giving me an answer and my node starts downloading. When passing sockets only the AAAA query is made and the node does nothing.</li>
</ul>
<p>I've set the scribe to JournalSK and debug level to info but there's nothing to go on. In fact, I remember more output using stderr/stdin with a simple <code>cardano-node run</code>, so I suspect something is off here too.</p>
<pre><code>setupScribes:
  - scKind: JournalSK
    scName: journal
    scFormat: ScText
    scRotation: null

# For the Katip logging backend this specifies the default scribes that trace
# output is sent to if it is not configured to be sent to other scribes.
defaultScribes:
  - - JournalSK
    - journal

</code></pre>
<p>Is Katip and EKGViewBK something that needs to be installed separately or are they libraries used internally?</p>

CC BY-SA 4.0
2022-04-29T10:56:56.093Z
You're looking at firewall but socket activation is at systemd level. Can you share your unit files for the sockets and your node service?
Samuel Leathers
CC BY-SA 4.0
2022-04-29T21:13:12.837Z
Sure here you go: https://paste.ee/p/CJLcz 

It's my understanding once the service gets started the sockets get passed to it. I assumed no traffic was getting out and thought firewall.
bsap
CC BY-SA 4.0
2022-04-29T23:35:55.273Z
I did a little digging and it looks like an A query is never made when using the premade sockets so the node never gets it's peers and nothing happens!
bsap
CC BY-SA 4.0
2022-04-30T08:04:57.603Z
I guess the lack of an answer section means relays-new.cardano-node.iohk.io doesn't support IPv6? Also, are the IP's in the IPv4 response *relays* or my closest peers? Sorry, I am learning as I go. Look forward to knowing what I'm doing wrong!
bsap
<cardano-node>
How to get cardano-node to work with public systemd sockets?
# How to get cardano-node to work with public systemd sockets?

(Asked by: username_0 on 2022-04-29)

I get no errors but no traffic and am at a loss. A couple of things:

I load a new service from file cardano-node.xml: firewall-cmd --permanent --new-service-from-file=/usr/lib64/firewalld/services/cardano-node.xml

I reload so it becomes runtime: firewall-cmd --reload

I see it in my default zone, allowing two ports, that match the TCP sockets handed by systemd. netstat -ap | grep  shows it, though as systemd. grep cardano shows something else:


    tcp6       0      0 [::]:29171              [::]:*                  LISTEN      1/systemd
    tcp        0      0 localhost:12788         0.0.0.0:*               LISTEN      4513/cardano-node


When inspecting with Wireshark, without passing sockets both an A and AAAA query is made, the former giving me an answer and my node starts downloading. When passing sockets only the AAAA query is made and the node does nothing.

I've set the scribe to JournalSK and debug level to info but there's nothing to go on. In fact, I remember more output using stderr/stdin with a simple cardano-node run, so I suspect something is off here too.
setupScribes:
  - scKind: JournalSK
    scName: journal
    scFormat: ScText
    scRotation: null

# For the Katip logging backend this specifies the default scribes that trace
# output is sent to if it is not configured to be sent to other scribes.
defaultScribes:
  - - JournalSK
    - journal


Is Katip and EKGViewBK something that needs to be installed separately or are they libraries used internally?

**Tags:** cardano-node
> **Comments:**
> **username_1**: You're looking at firewall but socket activation is at systemd level. Can you share your unit files for the sockets and your node service?  
> **username_0**: Sure here you go: https://paste.ee/p/CJLcz   It's my understanding once the service gets started the sockets get passed to it. I assumed no traffic was getting out and thought firewall.  
> **username_0**: I did a little digging and it looks like an A query is never made when using the premade sockets so the node never gets it's peers and nothing happens!  
> **username_0**: I guess the lack of an answer section means relays-new.cardano-node.iohk.io doesn't support IPv6? Also, are the IP's in the IPv4 response *relays* or my closest peers? Sorry, I am learning as I go. Look forward to knowing what I'm doing wrong!  

---

## 0 answers

