Comments (13)
Just had a look at freifunk/icvpn#213 - but this pull request doesn't remove hamburg01 and nordgw0. And these are the servers which tried to connect to vogtland1 and vogtland4
from icvpn-meta.
from icvpn-meta.
from icvpn-meta.
@ecsv This is related to how peer builds its network graph. Every peer may introduce other peers it knows, so we can't really get rid of peers on the VPN unless everyone upgrades.
There are some options I meant to take a look at, namely TunnelServer and StrictSubnets.
from icvpn-meta.
I'm trying to find out where this is coming from for Hamburg.
from icvpn-meta.
Well, it seems like hamburg1 bgp had been down for quite a long time and came back a week after getting removed during Großreinemachen... So I think the solution would be to remove the comment in hamburg meta file for this host, since it seems to be working again. But I guess that should be up to the hamburgerians...
from icvpn-meta.
I've disabled tinc on vpn0 now. Maybe we'll check it later.
from icvpn-meta.
The logs of vogtland(1,3,4) from today contained following "offenders" with ~75k connection requests in the last 10 hours:
- Franken: @RedDog99 @mayosemmel
fec0::a:cf:0:17
- Hamburg: @7adietri @ohrensessel
10.207.0.61
fec0::a:cf:0:3d
from icvpn-meta.
Hi,
hamburg1 is back since around mid of August. Before, tincd kept crashing and our motivation was low to fix icvpn as we nevertheless have public, unfiltered IPv6 in our mesh. tinc should now automatically be restarted in case it crashed. Additionally, all icvpn peers are now passive on our side to avoid unnecessary connection attempts from our side. Sorry for that, @ecsv.
I was not aware of Großreinemachen, otherwise I would have voted for keeping hamburg1 for the moment.
Hamburg2 will come back in a week or so.
Kind regards,
Leo
from icvpn-meta.
from icvpn-meta.
Looks like the relevant messages now disappeared from my logs after the mentioned communities fixed their icvpn-meta entries or disabled icvpn. @mweinelt Would you agree that this ticket can be closed now?
from icvpn-meta.
I am assuming that this is a "yes, can be closed".
@RedDog99 I see from time to time that 10.83.252.14 is trying to connect. Maybe setting it to non-multihop BGP (aka direct) sessions could work around this problem.
from icvpn-meta.
from icvpn-meta.
Related Issues (20)
- Problem mit Community Netzen HOT 3
- Are these AS numbers valid? HOT 3
- Duplicate Domain (ffwk): vfnnrw westkueste HOT 2
- duplicate ipv4, kiel3 + bielefeld1 HOT 2
- duplicate ipv4 subnet 10.31/16: Berlin vs. Hameln HOT 1
- Reservierung für private Netze HOT 6
- How do I find a free ip for a new community? HOT 1
- Check missing communities
- Too specific announced networks in celle and gera-greiz
- herne: Missing delegates in ruhrgebiet HOT 5
- ennepe-ruhr-kreis: Missing delegates in ruhrgebiet HOT 2
- rhein-neckar: unknown ASN announces networks for rhein-neckar networks HOT 3
- bielefeld: Incorrect ASN for announced networks HOT 2
- franken: Missing delegation for 10.50.60.0/22 ASN 4242420205 HOT 6
- Hamburg announces wrong network 10.83.15.0/24 HOT 3
- rhein-neckar: Bad peer AS HOT 1
- neonetwork: new nameserver breaks mkdns HOT 1
- [dnssec] Any way to add dnssec trust anchor?
- Enforce hexadecimal representation of last IPv4 octet in last IPv6 hextet HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from icvpn-meta.