Fix IPFS node connectivity from the outside as well as the private network #442

raucao · 2022-11-02T13:11:31Z

raucao commented

2022-11-02 13:11:31 +00:00

The problem was the configured address filters for local networks. I used both firewall rules as well as new filters to allow dialing out on 10.1.1.0/24, but not other 10.0.0.0/8 subnet.

You can verify this by connecting to the ipfs-1 like this e.g.:

ipfs swarm swarm connect /dns4/draco.kosmos.org/tcp/4001/p2p/QmRw21aC3TroRVdZhrE2Qh4W6PBA67kbE8p3fNfsVcfW8D

refs kredits/meta#10

The problem was the configured address filters for local networks. I used both firewall rules as well as new filters to allow dialing out on 10.1.1.0/24, but not other 10.0.0.0/8 subnet. You can verify this by connecting to the `ipfs-1` like this e.g.: ipfs swarm swarm connect /dns4/draco.kosmos.org/tcp/4001/p2p/QmRw21aC3TroRVdZhrE2Qh4W6PBA67kbE8p3fNfsVcfW8D refs https://gitea.kosmos.org/kredits/meta/issues/10

raucao added the

kredits-1

ops

labels 2022-11-02 13:11:31 +00:00

raucao added 2 commits 2022-11-02 13:11:32 +00:00

f7ff1248fe

Enable Web UI on private network

b1922d26f6

Allow IPFS connections on private network

(HAProxy is now also using the private network.)

This fixes IPFS connections to Kosmos nodes from outside the network, as
well as in between nodes on the private network.

raucao requested review from greg 2022-11-02 13:12:08 +00:00

raucao requested review from bumi 2022-11-02 13:12:08 +00:00

greg added 1 commit 2022-11-02 17:13:56 +00:00

c9a0310511 Merge branch 'master' into bugfix/ipfs_connectivity

greg reviewed 2022-11-02 17:15:46 +00:00

site-cookbooks/kosmos-ipfs/recipes/default.rb Outdated

						
				@ -17,1 +18,4 @@

				end

				firewall_rule 'ipfs_api' do

				  port     5001

greg commented

2022-11-02 17:15:46 +00:00

Could use the new node['kosmos-ipfs']['api']['port'] attribute you created above instead of the hardcoded value

Could use the new `node['kosmos-ipfs']['api']['port']` attribute you created above instead of the hardcoded value

greg marked this conversation as resolved

greg approved these changes 2022-11-02 18:26:42 +00:00

greg left a comment

👍

raucao added 1 commit 2022-11-02 18:27:17 +00:00

90b62e3fc1

Remove ufw logging for ipfs

raucao merged commit 08bcdcc395 into master

2022-11-02 18:32:44 +00:00

raucao deleted branch bugfix/ipfs_connectivity

2022-11-02 18:32:44 +00:00

raucao referenced this issue from a commit

2022-11-02 18:32:45 +00:00

Merge pull request 'Fix IPFS node connectivity from the outside as well as the private network' (#442) from bugfix/ipfs_connectivity into master

Sign in to join this conversation.

No reviewers

No Milestone

No project

No Assignees

2 Participants

Notifications

Due Date

The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: kosmos/chef#442