Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Connectivity check can break routing in VPN setups #3006

Closed
josecv opened this issue Feb 3, 2023 · 0 comments
Closed

Connectivity check can break routing in VPN setups #3006

josecv opened this issue Feb 3, 2023 · 0 comments

Comments

@josecv
Copy link
Member

josecv commented Feb 3, 2023

Describe the bug
When first connecting to a cluster, telepresence does a connectivity check to ensure that the cluster isn't already reachable. I assume this is in case of duplicate instances, or complex network stacks where one container spins up a telepresence connect for another. At any rate, some VPNs will route the traffic manager's IP address, to which the local telepresence is connecting for its connectivity check, and produce a result that makes it look like we're already connected to the cluster. The outcome of this is that telepresence makes no attempt to establish routing to the cluster, thinking it's already been configured. We need the connectivity check to be a bit more sophisticated to make sure it's not giving false positives simply because the routes already happen to be configured. That way, test-vpn will continue to work as a way for users to find conflicting routes and possibly reconfigure the VPN/cluster if needed; currently this bug prevents affected users from getting any meaningful output from test-vpn

To Reproduce
Unclear, but some VPNs clearly hit it.

Expected behavior
Telepresence should add the routes into the table

Versions (please complete the following information):

  • Observed on v2.10.5

VPN-related bugs:
Bug breaks test-vpn unfortunately.

@josecv josecv closed this as completed Feb 16, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant