<div dir="ltr">Thanks, John.<div><br></div><div>So you're not having connectivity problems between the WANProxy client and server, but between the WANProxy server and the actual upstream server at 107.206.YY.ZZ.55123, it seems like? Obviously WANProxy is working fine on your OS, then, in terms of being able to use sockets properly, etc.</div>
<div><br></div><div>I wonder if there's some other configuration issue. Is there any chance that your WANProxy server, shuttle-XS35, could itself be misconfigured? That is, can you using nc or telnet (or curl) connect to 107.206.YY.ZZ.55123 from that system? Because it's the OS that's deciding to use the loopback interface, not WANProxy. Common causes for this might be having the <a href="http://107.206.0.0/16">107.206.0.0/16</a> network configured on loopback rather than on a physical interface, or having 107.206.YY.ZZ as an alias on that system, or perhaps a misconfigured routing table. Because WANProxy should be connecting just like anything else would, and it really seems like it must be some kind of network stack misconfiguration, but one I'd like for us to figure out just to be sure.</div>
<div><br></div><div>Thanks,</div><div>Juli.</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Sat, Apr 12, 2014 at 11:44 AM, John Nix <span dir="ltr"><<a href="mailto:jnix@vobal.com" target="_blank">jnix@vobal.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Sorry, on clarification is that I test the system from the client by issuing the command:<u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p><p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">wget <a href="http://127.0.0.1:3300" target="_blank">127.0.0.1:3300</a><u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p><p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Instead of using the port number with wget that I mentioned below.<u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p><p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Thanks, John<u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p><div><div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><font face="Tahoma"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";font-weight:bold">From:</span></font></b><font face="Tahoma"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> John Nix [mailto:<a href="mailto:jnix@vobal.com" target="_blank">jnix@vobal.com</a>] <br>
<b><span style="font-weight:bold">Sent:</span></b> Saturday, April 12, 2014 1:43 PM<br><b><span style="font-weight:bold">To:</span></b> 'Juli Mallett'<br><b><span style="font-weight:bold">Cc:</span></b> '<a href="mailto:wanproxy@lists.wanproxy.org" target="_blank">wanproxy@lists.wanproxy.org</a>'<br>
<b><span style="font-weight:bold">Subject:</span></b> RE: How to set peer0 to eth0 and not loopback?<u></u><u></u></span></font></p></div></div><div class=""><p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:12.0pt"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Hi Juli,<u></u><u></u></span></font></p><p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Thanks for the quick feedback. My setup/goal is relatively simple, so I didn’t expect this issue. Attached is the client configuration, and the server configuration (with slightly redacted/changed IP addresses/port numbers).<u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p><p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">So, when I have both the client and server running, and then test the system by issuing the command on the client: wget <a href="http://127.0.0.1:55123" target="_blank">127.0.0.1:55123</a><u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p><p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I can see wanproxy on the server is sending out the loopback interface (not eth0) to reach the server peer, which is my problem. <u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p><p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Below is an example from tcpdump on the loopback interface of the server (again IP addresses slightly redacted), when I issue the wget command from the client above. So, this shows the traffic from wanproxy on the server is going back out the loopback interface, but I need eth0. The only difference from the standard installation was that since I am on Ubuntu 12.04 I had to compile with “poll” and not “epoll” on the server, but I doubt that is related.<u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p><p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">I could give you access to the server if that would help.<u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p><p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">Thanks, John<u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p><p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><a href="mailto:root@shuttle-XS35:/usr/src/wanproxy-0.8.0/programs/wanproxy#" target="_blank">root@shuttle-XS35:/usr/src/wanproxy-0.8.0/programs/wanproxy#</a> tcpdump -i lo -U -n<u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p><p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">tcpdump: verbose output suppressed, use -v or -vv for full protocol decode<u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">listening on lo, link-type EN10MB (Ethernet), capture size 65535 bytes<u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p><p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">13:29:25.237409 IP 107.206.YY.XX.53699 > 107.206.YY.ZZ.55123: Flags [S], seq 212899101, win 43690, options [mss 65495,sackOK,TS val 19955781 ecr 0,nop,wscale 7], length 0<u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">1397327365.237644 [/wanproxy/proxy/proxy0/connector] INFO: Connect failed: <Error>/0 [Success]<u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d">13:29:25.237449 IP 107.206.YY.ZZ.55123 > 107.206.YY.XX.53699: Flags [R.], seq 0, ack 212899102, win 0, length 0<u></u><u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p><p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p>
<p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p><p class="MsoNormal"><font color="#1f497d" face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1f497d"><u></u> <u></u></span></font></p>
<div style="border:none;border-top:solid #b5c4df 1.0pt;padding:3.0pt 0in 0in 0in"><p class="MsoNormal"><b><font face="Tahoma"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif";font-weight:bold">From:</span></font></b><font face="Tahoma"><span style="font-size:10.0pt;font-family:"Tahoma","sans-serif""> Juli Mallett [<a href="mailto:juli@clockworksquid.com" target="_blank">mailto:juli@clockworksquid.com</a>] <br>
<b><span style="font-weight:bold">Sent:</span></b> Saturday, April 12, 2014 12:42 PM<br><b><span style="font-weight:bold">To:</span></b> John Nix<br><b><span style="font-weight:bold">Cc:</span></b> <a href="mailto:wanproxy@lists.wanproxy.org" target="_blank">wanproxy@lists.wanproxy.org</a><br>
<b><span style="font-weight:bold">Subject:</span></b> Re: How to set peer0 to eth0 and not loopback?<u></u><u></u></span></font></p></div><p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:12.0pt"><u></u> <u></u></span></font></p>
</div><div><p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:12.0pt">You absolutely should not need to go over loopback to connect to a remote peer. Can I ask how you're encountering that behaviour? Can you include your full configuration (redacting IPs if you feel it's necessary) and how you're verifying that it's not going out over the external interface? I ask on the last point because it's certainly the case that in some cases you may see traffic when doing tcpdump on a loopback interface if that traffic originates locally.<u></u><u></u></span></font></p>
<div><div class="h5"><div><p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:12.0pt"><u></u> <u></u></span></font></p></div><div><p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:12.0pt">Really, every useful configuration not involving an exterior tunnelling system should include at least one non-local peer, so I'm a little confused as to what your configuration must be that you're only seeing local traffic, or have gotten the impression that WANProxy cannot make connections across a network interface. If you've only looked at a configuration which uses SSH as a tunnel mechanism, such as the first configuration on <a href="http://wanproxy.org/examples.shtml" target="_blank">http://wanproxy.org/examples.shtml</a>, I'd encourage you to look at the second configuration, which connects directly over a WAN, or at the SSH optimization examples on <a href="http://wanproxy.org/ssh.shtml" target="_blank">http://wanproxy.org/ssh.shtml</a>, for inspiration.<u></u><u></u></span></font></p>
</div><div><p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:12.0pt"><u></u> <u></u></span></font></p></div><div><p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:12.0pt">It should be enough to simply modify the peer0 definition to use a non-local IP to which you have a route. If something else is going wrong, I'd guess it's some kind of portability bug that I'd like to fix urgently, so would appreciate any more information you can give.<u></u><u></u></span></font></p>
</div><div><p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:12.0pt"><u></u> <u></u></span></font></p></div><div><p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:12.0pt">Thanks very much for the report!<u></u><u></u></span></font></p>
</div><div><p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:12.0pt">Juli.<u></u><u></u></span></font></p></div></div></div></div><div><div class="h5"><div><p class="MsoNormal" style="margin-bottom:12.0pt">
<font size="3" face="Times New Roman"><span style="font-size:12.0pt"><u></u> <u></u></span></font></p><div><p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:12.0pt">On Sat, Apr 12, 2014 at 10:31 AM, John Nix <<a href="mailto:jnix@vobal.com" target="_blank">jnix@vobal.com</a>> wrote:<u></u><u></u></span></font></p>
<div><div><p class="MsoNormal"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Hi,</span></font><u></u><u></u></p><p class="MsoNormal"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></font><u></u><u></u></p>
<p class="MsoNormal"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">The wanproxy software looks like a good fit for our equipment connected over satellite links.</span></font><u></u><u></u></p>
<p class="MsoNormal"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></font><u></u><u></u></p><p class="MsoNormal"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Setting it up was straightforward, but I do have a basic question that doesn’t seem to be addressed in the documentation or through several searches on Google.</span></font><u></u><u></u></p>
<p class="MsoNormal"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></font><u></u><u></u></p><p class="MsoNormal"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">For various reasons, I need peer0 to be on eth0 and not the loopback interface. For example, when use the command ‘set peer0.host “x.y.z.q” ‘, and look at tcpdump wanproxy is sending to x.y.z.q on the loopback interface, which won’t readily work for our particular application. </span></font><u></u><u></u></p>
<p class="MsoNormal"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></font><u></u><u></u></p><p class="MsoNormal"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">I expect there are workarounds (like trying to use iptables to redirect from lo to eth0, or running redir to listen on loopback, etc.), but the simplest would be to have the wanproxy peer on eth0. In case it matters, I’m using Ubuntu 12.04.</span></font><u></u><u></u></p>
<p class="MsoNormal"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></font><u></u><u></u></p><p class="MsoNormal"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif"">Thanks, John</span></font><u></u><u></u></p>
<p class="MsoNormal"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></font><u></u><u></u></p><p class="MsoNormal"><font color="blue" face="Arial"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue">-------------------<br>
John Nix<br>Founder and CEO<br>Vobal Technologies<br></span></font><font color="green" face="Arial"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:green"><a href="tel:%2B1-847-350-9998" target="_blank">+1-847-350-9998</a> (o)<br>
<a href="tel:%2B1-847-452-3754" target="_blank">+1-847-452-3754</a> (m)<br></span></font><font color="blue" face="Arial"><span style="font-size:10.0pt;font-family:"Arial","sans-serif";color:blue"><a href="http://www.vobal.com/" target="_blank">www.vobal.com</a></span></font><u></u><u></u></p>
<p class="MsoNormal"><font face="Calibri"><span style="font-size:11.0pt;font-family:"Calibri","sans-serif""> </span></font><u></u><u></u></p></div></div><p class="MsoNormal" style="margin-bottom:12.0pt">
<font size="3" face="Times New Roman"><span style="font-size:12.0pt"><br>_______________________________________________<br>wanproxy mailing list<br><a href="mailto:wanproxy@lists.wanproxy.org" target="_blank">wanproxy@lists.wanproxy.org</a><br>
<a href="http://lists.wanproxy.org/listinfo.cgi/wanproxy-wanproxy.org" target="_blank">http://lists.wanproxy.org/listinfo.cgi/wanproxy-wanproxy.org</a><u></u><u></u></span></font></p></div><p class="MsoNormal"><font size="3" face="Times New Roman"><span style="font-size:12.0pt"><u></u> <u></u></span></font></p>
</div></div></div></div></div></blockquote></div><br></div>