[Pkg-nagios-devel] Bug#950167: icinga2-bin - Racy timeout in API: No data received on new API connection

[Bastian Blank]

Package: icinga2-bin
Version: 2.10.3-2
Severity: important

Hi

I upgraded the master and one satelite of a larger Icinga2 setup to
Buster.  After the upgrade those two instances where unable to establish
a working API connection.  Connections between the new master and the
Stretch instances still works fine.

API connections between two Icinga2 2.10.3-2 instances fail with
timeout:

| Jan 29 18:27:11 X icinga2[10213]: [2020-01-29 18:27:11 +0000] information/ApiListener: New client connection for identity 'Y' from [2001:db8::1]:53626
| Jan 29 18:27:21 X icinga2[10213]: [2020-01-29 18:27:21 +0000] warning/ApiListener: No data received on new API connection for identity 'Y'. Ensure that the remote endpoints are properly configured in a cluster setup.
| Jan 29 18:27:21 X icinga2[10213]: Context:
| Jan 29 18:27:21 X icinga2[10213]:         (0) Handling new API client connection

During this time the client should send an "icinga::Hello" message.
Wireshark confirms that packets (in TLS 1.3) are flowing and arriving on
the other side.  But the Icinga2 core seems to be unable to receive
them.

The problem disappears if I start icinga2 by hand or with debug log
level on the passive side of the API connection.  With notice log level
it get less frequent.

I haven't tested anything newer yet.

Regards,
Bastian

-- System Information:
Debian Release: buster
Architecture: amd64 (x86_64)