-
Notifications
You must be signed in to change notification settings - Fork 38
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Feature: Edge gateway automatically obtains public IP #170
base: main
Are you sure you want to change the base?
Conversation
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #170 +/- ##
=======================================
Coverage 35.63% 35.63%
=======================================
Files 12 12
Lines 1476 1476
=======================================
Hits 526 526
Misses 842 842
Partials 108 108
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
边缘节点在无法连接公网环境下,是没办法通过 https://api.ipify.org 这些地址获取公网ip的 而每个边缘的gw写上public太过麻烦,wiregurd与libreswan都支持自动获取建立vpn隧道的endpoint
@a516664625 这块有e2e测试的结果么,另外只看到对wireguard的改动,libreswan似乎没改 |
@njucjc 如下在填写边缘gw的时候 不写public ip vpn 隧道仍然建立成功,libreswan 的代码我看是支持 不写public ip的,因为在创建 隧道时 host 使用 了 any [root@deepflow ~]# kubectl get gw -o yaml edge-a
![]() |
@YTGhost Nat穿越在没有publicIP的时候是否可行? |
@@ -212,10 +210,6 @@ func (c *TunnelHandler) shouldHandleGateway(gateway *v1beta1.Gateway) bool { | |||
klog.InfoS("no active endpoint , waiting for sync", "gateway", klog.KObj(gateway)) | |||
return false | |||
} | |||
if ep.PublicIP == "" { |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
这里是不是加下判断,只边缘gateway不强制要求public ip
@a516664625 目前测试的场景是云端deepflow节点与边缘ghi节点之间建立云边隧道,云端设置了publicIP,边缘节点没有设置publicIP吗? |
我理解边与边两节点之间至少得有一边知道对面的publicIP |
边缘节点在无法连接公网环境下,是没办法通过 https://api.ipify.org 这些地址获取公网ip的 而每个边缘的gw写上public太过麻烦,wiregurd与libreswan都支持自动获取建立vpn隧道的endpoint 也就是public ip ,所以去掉对public ip 的强依赖