On Aug 22, 2023, there were two devices identifying on the tailscale admin page with "orange" in their name. One of them has an unknown Pi Serial number, the other has a Pi Serial number ending in aa5ba0 ("ba0").
Right now, ba0 is definitely attached to sensors in my garage as a TSnap for orange. According to our scratch sheet, it has been the orange SCADA since March 23, 2pm ET 2023. The scratch sheet also claimed that the TaiScale IP address for ba0 was 100.90.68.108 (which is also the IP address we both have in our cli alias short cuts).
However, ba0 is definitely showing up right now on tailscale as 100.126.71.96 with the tailscale name "orange1". And some other device was showing up until 1 pm today with an expired tailscale certificate. Unfortunately I did not check the pi serial number of that device before it dropped off tailscale and did not come back.
The concern of course is that there are two SCADA devices showing up and identifying as orange. We don't think that is happening, but this is a real head-scratcher. Note that we were aware of the reasons this would be very bad last winter, so we do not think we would have thoughtlessly left two pi's that both identified as orange.
We don't know where this second Pi is. I checked my router's admin page, and only see one Pi. George doesn't think he has any Pi's plugged in.
In any case, I am removing the orange made by gbaker333@github with current VPN address of 100.90.68.108 from tailscale. And maybe we ought to consider including the pi serial (or last 6 digits of the serial number) as a HardwareUid in at least starting handshake messages from the SCADA
On Aug 22, 2023, there were two devices identifying on the tailscale admin page with "orange" in their name. One of them has an unknown Pi Serial number, the other has a Pi Serial number ending in aa5ba0 ("ba0").
Right now, ba0 is definitely attached to sensors in my garage as a TSnap for orange. According to our scratch sheet, it has been the orange SCADA since March 23, 2pm ET 2023. The scratch sheet also claimed that the TaiScale IP address for ba0 was 100.90.68.108 (which is also the IP address we both have in our cli alias short cuts).
However, ba0 is definitely showing up right now on tailscale as 100.126.71.96 with the tailscale name "orange1". And some other device was showing up until 1 pm today with an expired tailscale certificate. Unfortunately I did not check the pi serial number of that device before it dropped off tailscale and did not come back.
The concern of course is that there are two SCADA devices showing up and identifying as orange. We don't think that is happening, but this is a real head-scratcher. Note that we were aware of the reasons this would be very bad last winter, so we do not think we would have thoughtlessly left two pi's that both identified as orange.
We don't know where this second Pi is. I checked my router's admin page, and only see one Pi. George doesn't think he has any Pi's plugged in.
In any case, I am removing the
orangemade by gbaker333@github with current VPN address of 100.90.68.108 from tailscale. And maybe we ought to consider including the pi serial (or last 6 digits of the serial number) as a HardwareUid in at least starting handshake messages from the SCADA