besu-pro-testnet icon indicating copy to clipboard operation
besu-pro-testnet copied to clipboard

TLS - Inter Orion communication failure when new IP is assigned to any of them

Open eum602 opened this issue 3 years ago • 0 comments

When assigning a new IP to an Orion node (let's say Node A), which has already established connections with other orion nodes (Node B, Node C) with mutual authentication, then the communication does not succeeds when the updating process of the orion_ca.pem file in the other orion nodes (Nodes "B" and "C") is not totally made. For instance, let's say that only node "B" updates its orion.conf file with the new Node "A" IP address; In that case communication between "A" and "B" won't succeed because node "C" still advertises the old IP address of node "A".

The only way I found as a workaround is that all other nodes ("B" and "C") should update their orion.conf file.

This issue has a huge impact especially in scenarios where lots of orion nodes have complex interactions.

eum602 avatar Apr 28 '21 15:04 eum602