Support Board
Date/Time: Tue, 04 Mar 2025 03:24:09 +0000
Issue with conecction to historical stock data
View Count: 492
| [2021-11-19 20:34:19] |
| Agent Orange - Posts: 40 |
|
I tracked this down. Sierra Chart is trying to connect to ds01.ddfplus.com And when I enable this to come through my firewall, historical daily stock data loads fine again. If you do have a range of IP addresses that this will map to, by all means let me know so I can specify them in my firewall rules (like I do with all other Sierra Chart IP addresses. Failing that, I can figure out a work around for myself (it will involve some programming), but I'm guessing I'm not the only person operating behind a firewall, and perhaps, unlike me, some users may need to involve a system admin to get through a company firewall. Not sure exactly when this problem started, noticed for the first time today. Attempting to update a DAILY (no problem with intraday data) stock chart, get "HTTP error when downloading from SC external historical data service. Status code: 0." I was able to work around this by temporarily disabling my firewall, but that's not an acceptable solution. I have always used these firewall settings with Sierra Chart (for many years), allowing connections to the IP addresses indicated in your documentation. My guess is that you have recently changed how you are hosting your historical daily data, and it's not coming from historicaldata.sierrachart.com as indicated in the documentation. Haven't had time to fully investigate, but my preliminary look seemed like you might be hosting this on AWS now. If so, is there some new range of IP addresses that needs to be let through the firewall? Or is there a domain other than historicaldata.sierrachart.com that I need to let through? Date Time Of Last Edit: 2021-11-19 23:02:56
|
| [2021-11-21 18:37:54] |
| Sierra_Chart Engineering - Posts: 18634 |
|
You do need to allow: ds01.ddfplus.com We do not know the IP addresses. This is not our domain. It belongs to Barchart.com. Sierra Chart Support - Engineering Level Your definitive source for support. Other responses are from users. Try to keep your questions brief and to the point. Be aware of support policy: https://www.sierrachart.com/index.php?l=PostingInformation.php#GeneralInformation For the most reliable, advanced, and zero cost futures order routing, use the Teton service: Sierra Chart Teton Futures Order Routing Date Time Of Last Edit: 2021-11-21 18:38:02
|
| [2021-11-21 19:35:50] |
| Agent Orange - Posts: 40 |
|
OK, thanks for confirming that. I'm guessing that until recently (sometime last week), you were routing that traffic from barchart.com through one of your servers, and now you're going to them directly. (Well, actually, it probably was a change you made in a recent update to Sierra Chart which began to affect me after I upgraded to 2328 last week.) For the sake of anyone else having any related firewall issues, I add the following: 1) The documentation should be updated to include that domain. 2) As far as I can tell, that barchart.com site is being hosted by AWS (Amazon Web Services) and therefore the IP addresses are subject to change. This can complicate matters for setting firewall rules. For example, my firewall is running pf on openbsd, which can use domain names in lieu of hard coded IP addresses, but the DNS lookups only occur when a ruleset is first loaded. So suppose your firewall rules allow ds01.ddfplus.com through and the actual IP address of that domain changes after pf is running --- then the new IP address will not get through the firewall but whatever is at the original IP address will still get through. I plan to work around this by writing some code that "frequently" does DNS lookups on domains specified by name and reloads the ruleset when changes are detected, thereby forcing pf to do new DNS lookups. Note that none of that is necessary when traffic you want to allow is always coming from a fixed set of IP addresses. Then you can just specify the IP address ranges by actual number in your firewall ruleset. I've been doing that for years, but as more and more companies move to the cloud for hosting their sites, it seems their IP addresses are subject to frequent changes. I guess it's possible they still have specific IP ranges assigned by their cloud provider, but I'm not sure about that. One more point: perhaps enterprise firewalls already handle this sort of thing, so maybe this is not an issue for people working from behind company firewalls, i.e., maybe they always work from domain names instead of hard coded address ranges, but given the security weaknesses of DNS, it sounds a little "scary" to me. I apologize for the length of this, but maybe someone will benefit from the "work" I had to put into this. Finally, if you are more expert on firewalls than I am (I am strictly self taught for my own needs) and you know of simpler ways to manage this sort of thing, by all means point me in a better direction. Thanks. Date Time Of Last Edit: 2021-11-21 19:39:45
|
| [2021-11-21 21:52:37] |
| |
|
This change to use that domain was made about four months ago and it was effectively mandated by CME market data rules and we do not want to go into further details.
Sierra Chart Support - Engineering Level Your definitive source for support. Other responses are from users. Try to keep your questions brief and to the point. Be aware of support policy: https://www.sierrachart.com/index.php?l=PostingInformation.php#GeneralInformation For the most reliable, advanced, and zero cost futures order routing, *change* to the Teton service: Sierra Chart Teton Futures Order Routing Date Time Of Last Edit: 2021-11-21 21:53:18
|
To post a message in this thread, you need to log in with your Sierra Chart account: