jschoubben
3c836f0abb
On an adopted hub the private network takes over the tunnel it finds rather than running beside it (hq ADR 0105): two tunnels leave the mesh's unreachable through the provider's filter, so no machine can ever join. The node presents the found tunnel when it enrols, under the key it took as its own; the inventory records it (node.tunnel, tunnel_peer — migration 0031) and the mesh composes from it: the overlay's range is the adopted tunnel's, the hub is placed at the tunnel's address on the tunnel's port, and every peer the tunnel had is carried in the hub's peer list as a peer of the tunnel, not a node of the mesh, until a node enrols with that key — which then keeps the address the tunnel had for it. A fresh node never gets an address the tunnel holds. The hub's declaration tells the host which unit to take over; the host's account of carrying it is recorded and shown. Every reader of the range follows the setting; nothing stores it. A found tunnel under another key is recorded and not adopted, so ADR 0100's non-overlap rule keeps applying where a tunnel is left running beside the mesh's. A lab bed and test skeleton for "How it is checked" are under lab/.
28 lines
1.5 KiB
SQL
28 lines
1.5 KiB
SQL
-- The tunnel a node found on its machine, and the peers it carried (novox/hq ADR 0105).
|
|
--
|
|
-- On an adopted node that is the hub, the private network takes over the tunnel it finds: its
|
|
-- key, its port, its address and range, and every peer. The node presents what it found when it
|
|
-- enrols -- the same moment it presents its keys, because the found tunnel's key IS its key on the
|
|
-- private network from then on -- and the mesh composes every address from it.
|
|
|
|
-- What the node presented: interface, unit and configuration path, port, address and range, and
|
|
-- the tunnel's public key. The private key never travels; the node keeps it as its own overlay
|
|
-- key. Null on a node that found no tunnel, which is every converged one.
|
|
alter table node add column tunnel jsonb;
|
|
|
|
-- The node's last account of carrying it: the found interface down and disabled, the mesh's up
|
|
-- in its place. Null until the node says so.
|
|
alter table node add column tunnel_carried jsonb;
|
|
|
|
-- The peers the found tunnel had: a public key and the address the tunnel routed to it. Peers of
|
|
-- the tunnel, not nodes of the mesh, until they enrol -- a machine the mesh has no record of, whose
|
|
-- identity precedes its enrolment. One row per key, and one address per key on one tunnel.
|
|
create table tunnel_peer (
|
|
node uuid not null references node(id) on delete cascade,
|
|
public_key text not null,
|
|
address inet not null,
|
|
since timestamptz not null default now(),
|
|
primary key (node, public_key),
|
|
unique (node, address)
|
|
);
|