Troubleshooting Tip: How to check bandwidth between super node in HA /DR setup if replication fails

[alaxkar]

Description	This article describes how to check bandwidth using 'iPerf' if replication fails between primary and follower nodes in an HA /DR setup.
Scope	FortiSIEM.
Solution	In high availability (HA) or disaster recovery (DR) setups, encountering errors like 'Failed to execute AddSuperFollower task on node' typically indicates issues in the communication or synchronization between the nodes, which could be due to a variety of factors such as network issues. One potential cause for this error is insufficient network bandwidth between the servers, as a reliable and high-speed network is critical for replication and synchronization tasks, especially in a multi-node HA/DR environment. If network performance is suboptimal, it can result in failed tasks like AddSuperFollower or other replication-related errors. See this FortiSIEM documentation. To get network bandwidth, check with the iPerf command and install it if not installed on the server using the steps below.  yum install iperf -y Run the following commands to start the server. On the server machine, run the following command to start iPerf in server mode. iperf -s Running iperf on server The above command will start the iPerf server and listen on port 5001 by default. Run the following commands to get the bandwidth report. iperf -c IP -t 60    -c, --client host | host%device       run in client mode, connecting to host where the optional %dev will SO_BINDTODEVICE that output interface. (requires root and see NOTES)   -t, --time n|0      time in seconds to transmit traffic, use zero for infinite. (default is 10 secs) The output will display the bandwidth between the client and server for each interval, along with other metrics such as Network bandwidth usage. To temporarily allow TCP traffic on port 5001 through the firewall, use the following command: sudo firewall-cmd --zone=public --add-port=5001/tcp This command adds a rule to the public zone, permitting TCP traffic on port 5001 until the next system reboot or firewall reload. To make this change permanent, use the --permanent flag and reload the firewall configuration.