search

matrix-org / matrix-federation-tester

Tester for matrix federation written in golang.
77 stars 17 forks source link

IPv6 only main site and dual stack matrix server #143

Closed fsa closed 9 months ago

fsa commented 9 months ago

When conducting a federation test, it does not take into account that the main site where .well-Known is located may not respond via IPv6 or be completely unavailable due to local blocking (for example, in Russia). In this case, you need to additionally test the SRV record in the DNS, since the main site may not be accessible to another server. Currently the check is ignored if the tester has access to .well-know. For example: https://federationtester.matrix.org/#tavda.org But the website https://tavda.org is not accessible via IPv4 and matrix servers without IPv6 will not be able to receive records from it.

richvdh commented 9 months ago

In this case, you need to additionally test the SRV record in the DNS

It seems an odd decision to have both SRV and well-known on the same domain. If you don't want to rely on .well-known that's a valid decision, but then why have a well-known at all?

As for checking both IPv6 and IPv4, that seems like a duplicate of https://github.com/matrix-org/matrix-federation-tester/issues/103.

fsa commented 9 months ago

Yes. The problem is passable, just another version of the server “failure”. It looks like using only DNS is the best option.