We think it is more likely that nodes accidentally are offline for two
hours and then would switch prematurely, than that they have incorrect
system time during switchover and then switch one day too late.
- add some of our own VPN servers, so that the check also works for nodes
that may only connect to the VPN servers
- remove one of the Google servers, to keep the number of servers low (the
ping check is executed every minute and sends one ping packet to each IP,
with a wait time of 10 seconds; so let's keep the total check time under
60 seconds)
These servers don't exist yet but are supposed to be set up once the Batman
v15 migration is done.
I have generated the fastd keypairs locally and will add the secret keys to
the servers once they are set up.
This prevents showing the (mandatory) domain selection field in config mode
of the stable firmware. The domain can still be activated via SSH, so that
it can be tested.
These servers will accept VPN connections for batman v15 on a different
port than used so far, to prevent batman v13 nodes from connecting to the
v15 mesh.
This is supposed to be the only server to support VPN connections for
batman v15 on port 50000, as fallback for nodes that cannot use the new
VPN port 50001 due to restrictive firewall settings.
Since this server has not been used in any stable or testing firmware so
far, there is no risk that batman v13 nodes will try to connect to this
port.
genofire
Oliver Gerlich