Hi, I deployed Private ARO cluster in West Europe location. We are able to connect this cluster from India and Europe location. But we are unable to connect this from USA location. Firewall end, everything is enabled. Anybody faced this kind of issue ? It will be a great help, if you have some idea on this issue. Regards, Balaraju M

Hello Mangi,Balaraju,IN-Chennai , Welcome to microsoft Q&A, thankyou posting your query. We cannot exactly say the reason for the failure of connection only for one region. please check and try some configurations and troubleshooting steps. Check the DNS settings for the private endpoints of your ARO cluster are correctly configured. Since the cluster is private, and DNS resolution must be set up properly in all locations. Check the NSG rules and firewall configurations to ensure that they are not blocking traffic from the USA Use tools like traceroute, ping, and telnet from a machine in the USA to diagnose where the connection is failing. Check if there are any specific configurations required for connecting from different regions. Azure Network Watcher's capabilities, such as Connection Monitor and IP Flow Verify, to diagnose and monitor the network traffic. If you are using VNet peering, check if the peering is properly configured to allow traffic between the USA VNet and the ARO cluster. hope this helps you.

Unable to connect ARO cluster from USA location

Accepted answer

Anveshreddy Nimmala 3,550 Reputation points Microsoft Vendor

2024-06-07T04:04:39.3566667+00:00
Hello Mangi,Balaraju,IN-Chennai,

Welcome to microsoft Q&A, thankyou posting your query.

We cannot exactly say the reason for the failure of connection only for one region. please check and try some configurations and troubleshooting steps.

Check the DNS settings for the private endpoints of your ARO cluster are correctly configured. Since the cluster is private, and DNS resolution must be set up properly in all locations.

Check the NSG rules and firewall configurations to ensure that they are not blocking traffic from the USA

Use tools like traceroute, ping, and telnet from a machine in the USA to diagnose where the connection is failing.

Check if there are any specific configurations required for connecting from different regions.

Azure Network Watcher's capabilities, such as Connection Monitor and IP Flow Verify, to diagnose and monitor the network traffic.

If you are using VNet peering, check if the peering is properly configured to allow traffic between the USA VNet and the ARO cluster.

hope this helps you.
Please sign in to rate this answer.
Mangi,Balaraju,IN-Chennai 185 Reputation points

2024-06-20T17:30:17.0666667+00:00

Hi Anveshreddy,

Upon checking with network, we came to know that Pod CIDR subnet is overlapping with the USA region subnet. Do we have any option to resolve this, without rebuilding the ARO cluster?

Anveshreddy Nimmala 3,550 Reputation points Microsoft Vendor

2024-06-21T05:33:01.9+00:00

Hello Mangi,Balaraju,IN-Chennai

Try changing the Pod CIDR subnet to a range that doesn't overlap. To do this, restart the pods with the updated CIDR range after making changes to the ARO cluster configuration.

The USA subnet can be resized to a non-overlapping range. Updating resources utilizing the USA region subnet would probably be required for this.

refer this documentation

https://docs.openshift.com/aro/3/architecture/core_concepts.html

Anveshreddy Nimmala 3,550 Reputation points Microsoft Vendor

2024-06-25T03:43:13.2066667+00:00

Hello Mangi,Balaraju,IN-Chennai,

We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help

Mangi,Balaraju,IN-Chennai 185 Reputation points

2024-07-22T14:39:54.73+00:00

Issue has been resolved after deploying ARO cluster correct pod network.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Unable to connect ARO cluster from USA location

0 additional answers

Your answer