Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Zerotier initial bring-up rocky, down after reboot #247

Closed
obrienmd opened this issue Sep 4, 2017 · 13 comments
Closed

Zerotier initial bring-up rocky, down after reboot #247

obrienmd opened this issue Sep 4, 2017 · 13 comments
Assignees
Labels
feature Adding new functionality

Comments

@obrienmd
Copy link

obrienmd commented Sep 4, 2017

Per the issue on binding interfaces #239, I was able to get OSPFv2 working as expected over a ZeroTier "switch" built in the OPNSense UI with static IPs :) Thanks @dharrigan !

During this testing, I found the following to report:

  1. The initial bring-up is a little rocky:

    • I had to disable/enable, re-apply a few times on that page to get it to come up, even after waiting 15 minutes the first time I brought it up.
    • Generally, I think the UI would benefit from information on current status (up/down, client id, error msg, and could use a UI to the ZT log.
  2. After a reboot, the ZeroTier interface does not come up as expected:

    • No networks show in zerotier-cli listnetworks at the command line, but the network does show in the ZeroTier web UI list.
    • OPNSense interface for ZT with 'Prevent interface removal' was re-assigned to igb0 (the first available NIC on my system).
    • After clicking 'Apply' again in the ZeroTier web UI, ZT interface remains down.
    • After disabling and enabling in the ZeroTier web UI, ZT interface comes up with a different client id, meaning it needs to be re-authorized in ZT Central. Once re-authorized, the OPNSense interface comes up and OSPF starts working without intervention, which was pretty cool to see.
@obrienmd
Copy link
Author

obrienmd commented Sep 4, 2017

I did some digging on 1.1 - when it's not working after initial setup, zerotier-cli listnetworks (or any subcommand for that matter) results in:
zerotier-cli: missing port and zerotier-one.port not found in /var/db/zerotier-one

@fichtner
Copy link
Member

fichtner commented Sep 4, 2017

@obrienmd Sounds like an issue in the FreeBSD package. Will check tomorrow.

@dharrigan
Copy link
Member

Hi,

Thanks for the feedback @obrienmd. @fichtner happy to work with you on this one (tbh, I think I noticed the same thing yesterday - the service didn't start cleanly after an install - but was investigating the other issue so didn't delve further).

-=david=-

@fichtner
Copy link
Member

fichtner commented Sep 4, 2017 via email

@dharrigan
Copy link
Member

@fichtner thanks. now working on an implementation to allow global activation of zerotier service.

@fichtner fichtner added the feature Adding new functionality label Sep 4, 2017
@dch
Copy link

dch commented Sep 5, 2017

I'm the freebsd zerotier port maintainer, let me know if I can help out here. Also, it might be time to move my firewall over to opnsense to take advantage of this new package.

@fichtner
Copy link
Member

fichtner commented Sep 5, 2017

@dch Hi Dave, it might have just been a misconception, sorry for the trouble! zerotier-one isn't started yet so zerotier-cli complains (rightfully) about /var/db/zerotier-one not being ready.

Thanks,
Franco

@dharrigan
Copy link
Member

Hi,

That's very kind of you thank you. I'm presently working on fixing this issue (making the code better), but I'll be happy to reach out @dch if (when!) I need some assistance! :-) So far, zerotier on FreeBSD works amazingly well - been using it for quite a while, on bare metal and within Jails without issue :-)

-=david=-

@dharrigan
Copy link
Member

@fichtner Hi, yes, part of my code cleanup is to only do zerotier-cli stuff when the zerotier-one service is running. Still cleaning things up.

-=david=-

@dharrigan
Copy link
Member

@obrienmd hi - would you like to help me test the updated plugin out-of-band? Ping me on IRC if interested :)

@obrienmd
Copy link
Author

obrienmd commented Sep 7, 2017

Sure! Pinging...

fichtner pushed a commit that referenced this issue Sep 11, 2017
#247

This commit improves upon the way that Zerotier starts and stops and how
networks are added/removed and activated/deactivated. There is now a "Global"
tab on the Zerotier page that enables or disables the service which is
honoured between reboots. Additionally, the service needs to be active in
order for networks to be added and removed. If the service is not active, then
the tab "Networks" will be disabled and the user will not be able to
add/remove or activate/deactivate Zerotier networks.

This should fix the observed problems raised in the issue.

The "Global" tab will be extended later to include further information and
actions, especially when Zerotier API usage is developed.

-=david=-
@dharrigan
Copy link
Member

I think this can be closed now. @obrienmd reach out to me on irc to talk about this if you need to :)

fichtner pushed a commit that referenced this issue Sep 11, 2017
#247

This commit improves upon the way that Zerotier starts and stops and how
networks are added/removed and activated/deactivated. There is now a "Global"
tab on the Zerotier page that enables or disables the service which is
honoured between reboots. Additionally, the service needs to be active in
order for networks to be added and removed. If the service is not active, then
the tab "Networks" will be disabled and the user will not be able to
add/remove or activate/deactivate Zerotier networks.

This should fix the observed problems raised in the issue.

The "Global" tab will be extended later to include further information and
actions, especially when Zerotier API usage is developed.

-=david=-

(cherry picked from commit 3fdca05)
(cherry picked from commit e933dfb)
@obrienmd
Copy link
Author

obrienmd commented Sep 11, 2017 via email

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature Adding new functionality
Development

No branches or pull requests

4 participants