Verify Required Ports Are Open for YugabyteDB & YBA

				
					#!/usr/bin/env bash
# check_db_ports.sh (minimal, robust)
# Usage:
#   ./check_db_ports.sh [--peers "IP1 IP2 ..."] [--yba IP] [--skip-conn-pool]
# Options:
#   TCP_TIMEOUT=1 ./check_db_ports.sh ...   # per-connection timeout (default 1s)
#   DEBUG=1                                 # set for bash -x tracing
# ----- safety & debug -----
[ "${DEBUG:-0}" = "1" ] && set -x
set -eu

PEERS=""
YBA_IP=""
TCP_TIMEOUT="${TCP_TIMEOUT:-1}"
SKIP_CONN_POOL=0   # NEW: default is to include 6433; --skip-conn-pool will disable it

# ----- args -----
while [[ $# -gt 0 ]]; do
  case "$1" in
    --peers) PEERS="$2"; shift 2;;
    --yba)   YBA_IP="$2"; shift 2;;
    --skip-conn-pool) SKIP_CONN_POOL=1; shift 1;;  # NEW
    *) echo "Unknown arg: $1" >&2; exit 1;;
  esac
done

# ----- deps -----
command -v ss >/dev/null 2>&1 || { echo "ERROR: ss not found (iproute2)"; exit 2; }
# ----- colors -----
G="$(printf '\033[0;32m')" ; R="$(printf '\033[0;31m')" ; Y="$(printf '\033[1;33m')" ; N="$(printf '\033[0m')"
# ----- service name helper (pure case; no assoc arrays) -----
svc_name() {
  case "$1" in
    5433)  echo "YSQL (client)";;
    9042)  echo "YCQL (client)";;
    7000)  echo "Master UI (HTTP)";;
    7100)  echo "Master RPC";;
    9000)  echo "TServer UI (HTTP)";;
    9100)  echo "TServer RPC";;
    18018) echo "YB Controller (backups)";;
    12000) echo "YSQL HTTP API";;
    13000) echo "YCQL HTTP API";;
    15433) echo "yugabyted UI (optional)";;
    6433)  echo "YSQL Built-in Connection Pooling";;  # NEW
    443)   echo "YBA UI (HTTPS)";;
    9090)  echo "Prometheus (on YBA)";;
    *)     echo "unknown";;
  esac
}
# ----- local listeners to check on a DB node -----
DB_LOCAL_PORTS=(5433 9042 7000 9000 7100 9100 18018 12000 13000 15433)
if [[ $SKIP_CONN_POOL -eq 0 ]]; then
  DB_LOCAL_PORTS=(6433 "${DB_LOCAL_PORTS[@]}")  # NEW
fi

# ----- DB <-> DB peer connectivity ports -----
PEER_PORTS=(7000 7100 9000 9100 18018 5433 9042 12000 13000)
if [[ $SKIP_CONN_POOL -eq 0 ]]; then
  PEER_PORTS=(6433 "${PEER_PORTS[@]}")  # NEW
fi

# ----- optional DB -> YBA checks -----
YBA_PORTS=(443 9090)

# ----- helpers -----
is_listening() {
  local p="$1"
  ss -lnt "( sport = :$p )" 2>/dev/null | grep -q ":$p"
}
tcp_check() {
  local host="$1" p="$2"
  if command -v nc >/dev/null 2>&1; then
    nc -z -w"$TCP_TIMEOUT" "$host" "$p" >/dev/null 2>&1
  elif command -v timeout >/dev/null 2>&1; then
    timeout "${TCP_TIMEOUT}s" bash -c ">/dev/tcp/$host/$p" >/dev/null 2>&1
  else
    bash -c ">/dev/tcp/$host/$p" >/dev/null 2>&1
  fi
}

# ----- run checks -----
listen_ok=0; listen_fail=0; ok_count=0; fail_count=0
echo "== Local LISTEN checks (this DB node) =="
for p in "${DB_LOCAL_PORTS[@]}"; do
  if is_listening "$p"; then
    echo -e "  ${G}LISTEN${N} $(svc_name "$p") :$p"
    listen_ok=$((listen_ok+1))
  else
    echo -e "  ${R}NOT LISTENING${N} $(svc_name "$p") :$p"
    listen_fail=$((listen_fail+1))
  fi
done
if [[ -n "$PEERS" ]]; then
  echo "== Outbound connectivity from THIS DB node to peer DB nodes =="
  for host in $PEERS; do
    for p in "${PEER_PORTS[@]}"; do
      if tcp_check "$host" "$p"; then
        echo -e "  ${G}OK${N}  $host $(svc_name "$p") :$p"
        ok_count=$((ok_count+1))
      else
        echo -e "  ${R}FAIL${N} $host $(svc_name "$p") :$p"
        fail_count=$((fail_count+1))
      fi
    done
  done
else
  echo -e "${Y}Skip peer tests (no --peers provided).${N}"
fi
if [[ -n "$YBA_IP" ]]; then
  echo "== Outbound connectivity from THIS DB node to YBA ($YBA_IP) =="
  for p in "${YBA_PORTS[@]}"; do
    if tcp_check "$YBA_IP" "$p"; then
      echo -e "  ${G}OK${N}  $YBA_IP $(svc_name "$p") :$p"
      ok_count=$((ok_count+1))
    else
      echo -e "  ${R}FAIL${N} $YBA_IP $(svc_name "$p") :$p"
      fail_count=$((fail_count+1))
    fi
  done
fi
echo ""
echo "== Summary =="
echo "  LISTEN OK:    $listen_ok"
echo "  LISTEN FAIL:  $listen_fail"
echo "  CONNECT OK:   $ok_count"
echo "  CONNECT FAIL: $fail_count"