2020-08-17T02:23:05  *** okurz_ is now known as okurz
2020-08-17T14:35:07  <kl_eisbaer> ns3.opensuse.org is running as a virtual machine in a data center near Nuremberg and should be fine.
2020-08-17T14:35:40  <kl_eisbaer> ns4.opensuse.org is running as a virtual machine in the Provo datacenter - and supports currently only IPv4, that's why it's not listed in root.
2020-08-17T14:36:39  <kl_eisbaer> For those inside the heroes VPN: ns3 should be reachable as qsc-ns3.infra.opensuse.org - or (alternative) via serial console on slimhat.infra.opensuse.org
2020-08-17T14:38:33  <kl_eisbaer> The main problem is just, that the machines at QSC (the datacenter in Nuremberg) are using the standard VPN to connect to the infra network. And as long as someone (hello, lcp ;-) plays with FreeIPA, they could be pushed out of the VPN because their authentication is suddenly failing.
2020-08-17T14:38:55  <lcp> whoops
2020-08-17T14:39:10  <lcp> I haven't broken freeipa in a few days now though
2020-08-17T14:39:39  <kl_eisbaer> jip: and all 3 machines at QSC and the gateway in Provo lost their VPN connection since than
2020-08-17T14:40:23  <kl_eisbaer> I've restored the VPN connection now (simply by restarting it on all nodes at QSC and in Provo, but we might need to think about another solution if the problem persists
2020-08-17T14:42:02  <lcp> it is a bad idea to have machines that require restart on every network outage anyway
2020-08-17T14:42:46  <lcp> or I guess vpn connection outage, which can have any number of possible causes apart from network outage
2020-08-17T14:44:24  <kl_eisbaer> lcp: during a "normal" network outage, they re-connect automatically. But it looks like the VPN service stops hard if it get's an "auth-failed" back from the server as answer
2020-08-17T14:45:56  <lcp> I guess the number of factors shrunk down then
2020-08-17T14:48:32  <kl_eisbaer> having each machine connected individually via an own VPN account (as we have in the QSC datacenter) needs more maintenance. That's why I decided to use only one VPN connection for the machines in Provo (and established a "gate" server there as well). But both setups need some love from time to time ;-)
2020-08-17T14:49:10  <kl_eisbaer> which reminds me that I wanted to check the routing between NUE and PRV again