How can I connect public and private node through a reverse SSH tunnel? Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern) Announcing the arrival of Valued Associate #679: Cesar Manara Unicorn Meta Zoo #1: Why another podcast?What should I do about “connection from untrusted peer” reports from tezos-node?Error: Protocol not supported when trying to connect eztz-cli to tezos nodeBinding the node to any address, not just localhostHow do I remove the private mode setting from my node? My node is not connecting to peerDoes the baker, endorser and accuser have to run next to the same node?Run Alphanet and Mainnet on the same VPSExtremely slow node sync on alphanetNode re-connection problemsHow can I migrate my Tezos baking address to Ledger Nano?Run two nodes with same identity or migrate identity to a new node
If A makes B more likely then B makes A more likely"
Area of a 2D convex hull
Stars Make Stars
How to market an anarchic city as a tourism spot to people living in civilized areas?
Can a zero nonce be safely used with AES-GCM if the key is random and never used again?
How does modal jazz use chord progressions?
How can I protect witches in combat who wear limited clothing?
How is simplicity better than precision and clarity in prose?
How to say 'striped' in Latin
Is 1 ppb equal to 1 μg/kg?
Is there a service that would inform me whenever a new direct route is scheduled from a given airport?
Do working physicists consider Newtonian mechanics to be "falsified"?
How do I keep my slimes from escaping their pens?
Why does this iterative way of solving of equation work?
Fishing simulator
How to set letter above or below the symbol?
Can I add database to AWS RDS MySQL without creating new instance?
How do you clear the ApexPages.getMessages() collection in a test?
Why don't the Weasley twins use magic outside of school if the Trace can only find the location of spells cast?
Why use gamma over alpha radiation?
What do you call a plan that's an alternative plan in case your initial plan fails?
What did Darwin mean by 'squib' here?
Why is there no army of Iron-Mans in the MCU?
Using "nakedly" instead of "with nothing on"
How can I connect public and private node through a reverse SSH tunnel?
Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern)
Announcing the arrival of Valued Associate #679: Cesar Manara
Unicorn Meta Zoo #1: Why another podcast?What should I do about “connection from untrusted peer” reports from tezos-node?Error: Protocol not supported when trying to connect eztz-cli to tezos nodeBinding the node to any address, not just localhostHow do I remove the private mode setting from my node? My node is not connecting to peerDoes the baker, endorser and accuser have to run next to the same node?Run Alphanet and Mainnet on the same VPSExtremely slow node sync on alphanetNode re-connection problemsHow can I migrate my Tezos baking address to Ledger Nano?Run two nodes with same identity or migrate identity to a new node
I have set up my baker with:
- a public non-baking node with public IP, let's call it "A.A.A.A"
- a private baking node without public IP
To lock down the private node (and also because it does not need a public IP), I have set up a reverse SSH tunnel for port 9732 from the private to the public node on 19732. Thus, the public node can connect to the private node via its own 127.0.0.1:19732, which forwards to the private nodes port 9732.
I'm running the private node with: ./tezos-node run --rpc-addr 127.0.0.1:8732 --private-mode --no-bootstrap-peers --bootstrap-threshold=1 --connections 1 --peer A.A.A.A
And I'm running the public node with: ./tezos-node run --rpc-addr 127.0.0.1:8732 --peer 127.0.0.1:19732
Additionally, I have tried adding different trust entries like:
./tezos-admin-client trust address 127.0.0.1:19732on public node./tezos-admin-client trust address A.A.A.A:9732on private node./tezos-admin-client trust peer idxxxxxxon both private and public node
All I keep getting in the private nodes log is: p2p.connection-pool: [private node] incoming connection from untrused peer rejected! and the public node tries, but can never successfully connect to the private node or the other way around.
What can I do or check to get closer to connecting my nodes?
node p2p
asked Apr 11 at 12:59
SvanteSvante
3859
add a comment |
I have set up my baker with:
- a public non-baking node with public IP, let's call it "A.A.A.A"
- a private baking node without public IP
To lock down the private node (and also because it does not need a public IP), I have set up a reverse SSH tunnel for port 9732 from the private to the public node on 19732. Thus, the public node can connect to the private node via its own 127.0.0.1:19732, which forwards to the private nodes port 9732.
I'm running the private node with: ./tezos-node run --rpc-addr 127.0.0.1:8732 --private-mode --no-bootstrap-peers --bootstrap-threshold=1 --connections 1 --peer A.A.A.A
And I'm running the public node with: ./tezos-node run --rpc-addr 127.0.0.1:8732 --peer 127.0.0.1:19732
Additionally, I have tried adding different trust entries like:
./tezos-admin-client trust address 127.0.0.1:19732on public node./tezos-admin-client trust address A.A.A.A:9732on private node./tezos-admin-client trust peer idxxxxxxon both private and public node
All I keep getting in the private nodes log is: p2p.connection-pool: [private node] incoming connection from untrused peer rejected! and the public node tries, but can never successfully connect to the private node or the other way around.
What can I do or check to get closer to connecting my nodes?
node p2p
asked Apr 11 at 12:59
SvanteSvante
3859
add a comment |
I have set up my baker with:
- a public non-baking node with public IP, let's call it "A.A.A.A"
- a private baking node without public IP
To lock down the private node (and also because it does not need a public IP), I have set up a reverse SSH tunnel for port 9732 from the private to the public node on 19732. Thus, the public node can connect to the private node via its own 127.0.0.1:19732, which forwards to the private nodes port 9732.
I'm running the private node with: ./tezos-node run --rpc-addr 127.0.0.1:8732 --private-mode --no-bootstrap-peers --bootstrap-threshold=1 --connections 1 --peer A.A.A.A
And I'm running the public node with: ./tezos-node run --rpc-addr 127.0.0.1:8732 --peer 127.0.0.1:19732
Additionally, I have tried adding different trust entries like:
./tezos-admin-client trust address 127.0.0.1:19732on public node./tezos-admin-client trust address A.A.A.A:9732on private node./tezos-admin-client trust peer idxxxxxxon both private and public node
All I keep getting in the private nodes log is: p2p.connection-pool: [private node] incoming connection from untrused peer rejected! and the public node tries, but can never successfully connect to the private node or the other way around.
What can I do or check to get closer to connecting my nodes?
node p2p
asked Apr 11 at 12:59
SvanteSvante
3859
I have set up my baker with:
- a public non-baking node with public IP, let's call it "A.A.A.A"
- a private baking node without public IP
To lock down the private node (and also because it does not need a public IP), I have set up a reverse SSH tunnel for port 9732 from the private to the public node on 19732. Thus, the public node can connect to the private node via its own 127.0.0.1:19732, which forwards to the private nodes port 9732.
I'm running the private node with: ./tezos-node run --rpc-addr 127.0.0.1:8732 --private-mode --no-bootstrap-peers --bootstrap-threshold=1 --connections 1 --peer A.A.A.A
And I'm running the public node with: ./tezos-node run --rpc-addr 127.0.0.1:8732 --peer 127.0.0.1:19732
Additionally, I have tried adding different trust entries like:
./tezos-admin-client trust address 127.0.0.1:19732on public node./tezos-admin-client trust address A.A.A.A:9732on private node./tezos-admin-client trust peer idxxxxxxon both private and public node
All I keep getting in the private nodes log is: p2p.connection-pool: [private node] incoming connection from untrused peer rejected! and the public node tries, but can never successfully connect to the private node or the other way around.
What can I do or check to get closer to connecting my nodes?
node p2p
node p2p
asked Apr 11 at 12:59
SvanteSvante
3859
asked Apr 11 at 12:59
SvanteSvante
3859
edited Apr 11 at 14:11
Svante
asked Apr 11 at 12:59
SvanteSvante
3859
asked Apr 11 at 12:59
SvanteSvante
3859
asked Apr 11 at 12:59
SvanteSvante
3859
3859
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
I had same exact situation. It seems that (and I did not see this documented anywhere) when using private mode, the private node must initiate the connection. In my case it was a firewall rule preventing the private node from establishing the connection, and after I permitted that everything worked great.
answered Apr 11 at 14:00
Bo ByrdBo Byrd
3605
1
Holy smokes, you where right! Doing asudo ufw allow out from anyand connecting from the private node solved it.
– Svante
Apr 11 at 14:06
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "698"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
noCode: true, onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2ftezos.stackexchange.com%2fquestions%2f1057%2fhow-can-i-connect-public-and-private-node-through-a-reverse-ssh-tunnel%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
I had same exact situation. It seems that (and I did not see this documented anywhere) when using private mode, the private node must initiate the connection. In my case it was a firewall rule preventing the private node from establishing the connection, and after I permitted that everything worked great.
answered Apr 11 at 14:00
Bo ByrdBo Byrd
3605
1
Holy smokes, you where right! Doing asudo ufw allow out from anyand connecting from the private node solved it.
– Svante
Apr 11 at 14:06
add a comment |
I had same exact situation. It seems that (and I did not see this documented anywhere) when using private mode, the private node must initiate the connection. In my case it was a firewall rule preventing the private node from establishing the connection, and after I permitted that everything worked great.
answered Apr 11 at 14:00
Bo ByrdBo Byrd
3605
1
Holy smokes, you where right! Doing asudo ufw allow out from anyand connecting from the private node solved it.
– Svante
Apr 11 at 14:06
add a comment |
I had same exact situation. It seems that (and I did not see this documented anywhere) when using private mode, the private node must initiate the connection. In my case it was a firewall rule preventing the private node from establishing the connection, and after I permitted that everything worked great.
answered Apr 11 at 14:00
Bo ByrdBo Byrd
3605
I had same exact situation. It seems that (and I did not see this documented anywhere) when using private mode, the private node must initiate the connection. In my case it was a firewall rule preventing the private node from establishing the connection, and after I permitted that everything worked great.
answered Apr 11 at 14:00
Bo ByrdBo Byrd
3605
answered Apr 11 at 14:00
Bo ByrdBo Byrd
3605
answered Apr 11 at 14:00
Bo ByrdBo Byrd
3605
answered Apr 11 at 14:00
Bo ByrdBo Byrd
3605
3605
1
Holy smokes, you where right! Doing asudo ufw allow out from anyand connecting from the private node solved it.
– Svante
Apr 11 at 14:06
add a comment |
1
Holy smokes, you where right! Doing asudo ufw allow out from anyand connecting from the private node solved it.
– Svante
Apr 11 at 14:06
1
1
Holy smokes, you where right! Doing a
sudo ufw allow out from any and connecting from the private node solved it.– Svante
Apr 11 at 14:06
Holy smokes, you where right! Doing a
sudo ufw allow out from any and connecting from the private node solved it.– Svante
Apr 11 at 14:06
add a comment |
Thanks for contributing an answer to Tezos Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2ftezos.stackexchange.com%2fquestions%2f1057%2fhow-can-i-connect-public-and-private-node-through-a-reverse-ssh-tunnel%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
