825071750290210916 #general

straight-lock-3524

08/20/2021, 2:53 PM

straight-lock-3524

08/20/2021, 2:53 PM

the same what I'm trying to do

strong-father-52987

08/20/2021, 2:54 PM

I also have the same case for ip whitelisting of some third party service where I have some service that connects to it and I would like my service to have the traffic routed through the same ip. This is because this 3rd party service only updates whitelist by email request.

strong-father-52987

08/20/2021, 2:54 PM

Then I have a k8s test cluster that I would like to provide a secure connection with netmaker in the future if possible to our developers.

straight-lock-3524

08/20/2021, 2:55 PM

you mean use your whitelisted IP to access the 3rdparty service from netmaker?

strong-father-52987

08/20/2021, 2:55 PM

yes

strong-father-52987

08/20/2021, 2:56 PM

so I would have a floating ip that I can assign to the egress server and pass this ip to the 3rdparty whitelist.

straight-lock-3524

08/20/2021, 2:56 PM

a question in between @User if I want to change the IP of my netmaker server, can I just change the IP in the compose file and recreate the docker containers and use it on the new ip?

straight-lock-3524

08/20/2021, 2:56 PM

jolly-london-20127

08/20/2021, 2:57 PM

if you setup with an nginx proxy + domain then the ip wont matter

jolly-london-20127

08/20/2021, 2:57 PM

as long as you're pointing to the new IP with dns

straight-lock-3524

08/20/2021, 2:57 PM

yes, but as you still need to input the IP in the compose file 🙂

jolly-london-20127

08/20/2021, 2:57 PM

ahhh right

jolly-london-20127

08/20/2021, 2:57 PM

for coredns

jolly-london-20127

08/20/2021, 2:57 PM

yeah that should be fine

jolly-london-20127

08/20/2021, 2:58 PM

existing access keys will not work for new machines tho

strong-father-52987

08/20/2021, 2:58 PM

since I have another ip (the floating ip) in the egress server, would it be possible to have the ip route routing all trafic from nm- interface to this ip? and maybe solve the issue i am having?

straight-lock-3524

08/20/2021, 2:58 PM

good, as I shot myself in running my netmaker instance on the subnet I want to whitelist on the egress server, so it "thinks" that all traffic for that subnet needs to go over wirewguard 😛

straight-lock-3524

08/20/2021, 2:59 PM

which results in the same issue as I wrote about above

straight-lock-3524

08/20/2021, 3:00 PM

but only on the egress server you have the cpu issue?

strong-father-52987

08/20/2021, 3:00 PM

no, normally i had it in the ingress server

straight-lock-3524

08/20/2021, 3:01 PM

strong-father-52987

08/20/2021, 3:01 PM

just this time I did it manually on the egress server

straight-lock-3524

08/20/2021, 3:02 PM

I'll do some tests over the weekend, and see if I can recreate it

straight-lock-3524

08/20/2021, 3:02 PM

or if it's a hetzner thing

strong-father-52987

08/20/2021, 3:59 PM

I don't know how to read this but it looks different from my laptop

root@netmaker-ingress-gateway:~# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         _gateway        0.0.0.0         UG    100    0        0 eth0
10.20.30.0      0.0.0.0         255.255.255.0   U     0      0        0 nm-office
_gateway        0.0.0.0         255.255.255.255 UH    100    0        0 eth0

strong-father-52987

08/20/2021, 4:00 PM

on my laptop I only have the route from default to gateway and not gateway to 0.0.0.0

strong-father-52987

08/20/2021, 4:00 PM

so maybe it's a hetzner thing

straight-lock-3524

08/20/2021, 5:32 PM

any way you can for example create a screenshot from their console if it's not working?

straight-lock-3524

08/20/2021, 5:33 PM

want to see how the routing table looks there