Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix static host map wrong responder situations, correct logging #1259

Merged
merged 1 commit into from
Oct 23, 2024

Conversation

nbrownus
Copy link
Collaborator

@nbrownus nbrownus commented Oct 23, 2024

This corrects a situation where you change the overlay address at a static host endpoint.

Starting config:

static_host_map:
    "192.168.1.1": ["0.0.0.1:4242"]

Change the vpn addr serviced at 0.0.0.1:4242 (replaced your lighthouse with a new overlay addr but reused the underlay addr)

static_host_map:
    "192.168.1.2": ["0.0.0.1:4242"]

nebula still knows about the first config "192.168.1.1": ["0.0.0.1:4242"]. If nebula is asked to talk to 192.168.1.1 it will handshake with 0.0.0.1:4242 who is now 192.168.1.2.

The issue was we were unable to block the underlay addresses provided by the statis host map so nebula would rapidly re handshake with the same bad host.

This also corrects the blocked udp addrs log line and finishes forming the bad tunnel so we can close it correctly.

@nbrownus nbrownus merged commit 3e6c755 into master Oct 23, 2024
10 checks passed
@nbrownus nbrownus deleted the wrong-responder-fix branch October 23, 2024 19:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants