825071750290210916 #upgrades

stale-judge-54185

05/18/2023, 10:06 PM

Removing that iptables rule immediately causes the problem to occur again, so testing a few things out.

stale-judge-54185

05/18/2023, 10:12 PM

OK so the failures are occurring over IPv4 netmaker IPs, eg: 100.100.100.1. If it happens to try the IPv6 NM address (eg: via DNS), or if I just use the IPv6 address manually it works fine.

stale-judge-54185

05/18/2023, 10:13 PM

I should also note that the Egress does not have a NAT enabled on it, but I have my network setup in such a way that it should not be a problem. Originally using NM back in 0.18.x this wasn't an issue at least.

stale-judge-54185

05/18/2023, 10:14 PM

The Egress includes 2 IPv4 ranges, and 2 IPv6 ranges (internal home network)

stale-judge-54185

05/18/2023, 10:15 PM

My router (Unifi) has static routes setup so any traffic over the IPv4/IPv6 netmaker IP range goes to that Egress node, which is the only node on local network that has the netclient installed.

stale-judge-54185

05/18/2023, 10:18 PM

Again, the example I gave (Ext Client -> Ingress w/ Caddy server -> (Reverse Proxy) other node over NM network), none of those nodes are on my local network or make use of the Egress. It's all standard* node-node traffic

stale-judge-54185

05/18/2023, 10:21 PM

here's the ipables on the Ingress node, https://gist.github.com/IAreKyleW00t/e31ac22e6e38af5a607782ac260d723f Rule #1 in the FORWARD chain is the fix quick tcpdump (on port 80) too, client was doing a

curl -v http://100.100.100.1/something

and dump was on the Ingress node. Also included a dump of a successful connection, after the iptable fix is applied https://gist.github.com/IAreKyleW00t/132f9020ac006010305180e2926ed2d9

stale-judge-54185

05/18/2023, 10:27 PM

Let me know if there's any more details you'd like. Also happy to open an issue or do whatever to help track this. Otherwise the upgrade to 0.20.0 was great!

jolly-london-20127

05/19/2023, 2:18 AM

@stale-judge-54185 I’m gonna try to make a client that fixes this tomorrow, will reach out. Would love it if you can test.

stale-judge-54185

05/19/2023, 2:19 AM

Absolutely! Thanks 🙂

bored-solstice-58967

05/19/2023, 2:21 AM

@stale-judge-54185 are there any rules present under chain

netmakerfilter

```

stale-judge-54185

05/19/2023, 2:25 AM

ubuntu@netmaker-1:~$ sudo iptables -L netmakerfilter
iptables v1.8.7 (nf_tables): chain `netmakerfilter' in table `filter' is incompatible, use 'nft' tool.

do you happen to have the command on hand to check that? (sorry, my iptables-fu is limited haha)

also can you please post the output of

jolly-london-20127

05/19/2023, 2:29 AM

also, can you please post the output of the following?

cat /etc/netclient/netclient.yml | grep firewallinuse
iptables --version
nft --version
iptables-legacy --version
iptables-legacy-save --version
iptables-nft-save --version

average-market-48334

05/19/2023, 8:31 AM

I'm using netmaker on a digitalocean droplet - how do I go about upgrading to 0.20.0?

bored-island-21407

05/19/2023, 8:35 AM

what version are you upgrading from?

average-market-48334

05/19/2023, 8:36 AM

0.18.6

bored-island-21407

05/19/2023, 8:39 AM

compare your docker-compose file with the new docker-compose file for v0.20.0(https://github.com/gravitl/netmaker/blob/release-v0.20.0/compose/docker-compose.yml) ... update your docker compose file by changing the docker image tags for netmaker and netmaker-ui to v0.20.0 and adding any new fields (from the v0.20.0 compose-file) to the your compose file

important-pager-78326

05/19/2023, 10:22 AM

After updating to 0.20.0 the OICD SSo button is gone from the login screen. I even added the environment variable to the UI container just in case, but no luck

important-pager-78326

05/19/2023, 10:42 AM

Also, my phone is unable to parse the new external client QR code for some reason

helpful-sunset-79921

05/19/2023, 10:52 AM

I have the same problem it just does not recognize it as valid QR code.. 😦

important-pager-78326

05/19/2023, 10:53 AM

I think the Netmaker logo on the center is kinda messing it up

jolly-london-20127

05/19/2023, 11:25 AM

QR issue noted, prioritizing to fix @helpful-sunset-79921 @important-pager-78326

important-pager-78326

05/19/2023, 11:26 AM

Found another possible bug 😅 : Graph does dot reflect the state of ACLs

jolly-london-20127

05/19/2023, 11:29 AM

Yup, that’s a known one. Keep ‘em coming though, feedback is valuable

important-pager-78326

05/19/2023, 12:45 PM

I must say though, that I'm loving the new UI

stale-judge-54185

05/19/2023, 3:49 PM

I noticed with the new UI, If you have the dashboard open when a new Host joins a network, the UI crashes (refreshing fixes it)

https://cdn.discordapp.com/attachments/975815762096848896/1109145845431013447/firefox_5703IVIMvi.png▾

jolly-london-20127

05/19/2023, 4:03 PM

that's a biggie, will log a ticket

bored-island-21407

05/19/2023, 4:25 PM

One already exists

jolly-london-20127

05/19/2023, 4:34 PM

not sure I saw, was going through all tickets. There's one for deleting a host, but not creating

bored-island-21407

05/19/2023, 4:42 PM

Same issue, creating or deleting