825071750290210916 #netmaker

bored-island-21407

05/28/2022, 12:11 AM

https://gist.github.com/mattkasun/face2a7c1f32031a2126ff7243caad12

kind-lizard-33284

05/28/2022, 12:21 AM

Oh, i dont think broker.domain.com is accessible.

kind-lizard-33284

05/28/2022, 12:22 AM

Thank you very much,, i'll troubleshoot tomorrow

kind-lizard-33284

05/28/2022, 12:36 PM

error running command: systemctl restart netclient.service

bored-island-21407

05/28/2022, 12:36 PM

what os

kind-lizard-33284

05/28/2022, 12:37 PM

systemctl status netclient

returns

Unit netclient.service could not be found.

kind-lizard-33284

05/28/2022, 12:37 PM

NAME="Ubuntu"
VERSION="20.04.2 LTS (Focal Fossa)"
ID=ubuntu
ID_LIKE=debian
PRETTY_NAME="Ubuntu 20.04.2 LTS"
VERSION_ID="20.04"
HOME_URL="https://www.ubuntu.com/"
SUPPORT_URL="https://help.ubuntu.com/"
BUG_REPORT_URL="https://bugs.launchpad.net/ubuntu/"
PRIVACY_POLICY_URL="https://www.ubuntu.com/legal/terms-and-policies/privacy-policy"
VERSION_CODENAME=focal
UBUNTU_CODENAME=focal

bored-island-21407

05/28/2022, 12:38 PM

Did you use the apt installer

kind-lizard-33284

05/28/2022, 12:39 PM

i used the

docker run

command which netmaker gave me on creation of the client

bored-island-21407

05/28/2022, 12:41 PM

The docker version of netclient doesn't use the netclient service. That message should be suppressed when running in docker. Could you open a GitHub issue for that

kind-lizard-33284

05/28/2022, 12:46 PM

sure

kind-lizard-33284

05/28/2022, 12:46 PM

my client log doesnt look right anyways

kind-lizard-33284

05/28/2022, 1:00 PM

think i fixed it by removing the certs again, client shows healthy in the dashboard now

kind-lizard-33284

05/28/2022, 1:01 PM

console is still getting spammed with

OpenSSL Error[0]: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate

tho

bored-island-21407

05/28/2022, 1:04 PM

Client will show healthy for 5 minutes but with those errors it will go into warning/error in 5 minutes. Something with MQ is misconfigured

kind-lizard-33284

05/28/2022, 1:06 PM

per_listener_settings true

listener 8883
allow_anonymous false
require_certificate true
use_identity_as_username true
cafile /mosquitto/certs/root.pem
certfile /mosquitto/certs/server.pem
keyfile /mosquitto/certs/server.key

listener 1883 
allow_anonymous true

kind-lizard-33284

05/28/2022, 1:06 PM

using the exact same config as https://raw.githubusercontent.com/gravitl/netmaker/master/docker/mosquitto.conf

many-portugal-19899

05/28/2022, 8:38 PM

i have found the default port range to be blocked on public wifi frequently. is there a way to change the default port for the VPS that it's listing on after installation? it's grayed out

witty-dinner-5399

05/28/2022, 8:53 PM

if you're using docker you can map the external udp ports to something else. that worked for me on some networks like the library which is really strict.

many-portugal-19899

05/28/2022, 9:23 PM

I don't know how to do that but I will Google and figure it out, seems like a good option

witty-dinner-5399

05/28/2022, 9:30 PM

ports: - "8843:51821/udp" something like this is how you would map a container port to a different external port.

witty-dinner-5399

05/28/2022, 9:32 PM

https://pad.nixnet.services/fCfB84GPQwyR5CUpOR_fjw?edit here's a compose setup showing how internal container ports are mapped to external ports that would be bridged. in this case it would use a common bridge named traefik but you could name it whatever you like.

many-portugal-19899

05/28/2022, 9:37 PM

thank you!

ambitious-mouse-49215

05/29/2022, 10:50 AM

What are the disadvantages of using Cloudflare Proxy?

mysterious-forest-94789

05/29/2022, 1:52 PM

Finally getting around to messing with the DNS stuff. Question, is DNS needed outside of the container? If the internal wg connection is providing access to DNS services, then that is after connecting to the internal network session?

cuddly-father-61188

05/30/2022, 6:33 AM

I've been testing netmaker for potential use for my little project. I noticed that i don't need to open inbound ports on netclients for the connections to be established. Why is that so? Is the netmaker server the only one that requires inbound?

cuddly-father-61188

05/30/2022, 6:35 AM

By the way, i am testing with ubuntu servers in aws and oracle cloud

bored-island-21407

05/30/2022, 10:27 AM

if you are using udp hole punching no ports on client need to be opened