search

scion-backbone / sbas

Prototype implementation for the Secure Backbone AS (SBAS) routing system.
0 stars 1 forks source link

VPN endpoints of other clients cannot be pinged #17

Closed joelwanner closed 3 years ago

joelwanner commented 3 years ago

From Oregon, I would expect to be able to ping the VPN endpoint in Frankfurt:

scionlab@scionlab-1008-sagan:~/sbas-proto/node$ ping 184.164.236.129

but there is no connectivity—even though Frankfurt is reachable over the VPN (verify using ping 172.22.2.1). I think this is a problem, right?

gcimaszewski commented 3 years ago

I was talking to Henry about this and he said the external IPs are not internally pingable from the nodes - you need to specify a different source ip. ping -I 172.22.1.1 184.164.236.129 seems to go through

joelwanner commented 3 years ago

I see, thanks!