Thomas Eizinger

Gateways don't have a delete resource message: https://github.com/firezone/firezone/blob/2c221aea0c37a799c975f9b0bf7eaef4b5e0878f/rust/connlib/tunnel/src/messages/gateway.rs#L178-L188 We only have `reject_access`, is that what you are sending?

> What that does is broadcast a `delete` followed by a `create` to clients and gateway when we change a field on the resource that affects addressability. Can you guarantee...

> This might be a case of the gateway missing the `reject_access` message then? I don't see any other logs in the breadcrumbs which is odd. Not sure why Sentry...

> Sentry Issue: [GATEWAY-CW](https://firezone-inc.sentry.io/issues/6655020545/?referrer=github_integration) > > ``` > Resources cannot change type > ``` If this is allowed, then we can handle such an update in the Gateway. Changing from...

> Logs from the above session > > [firezone_logs_2025_06_05-04-52.zip](https://github.com/user-attachments/files/20602717/firezone_logs_2025_06_05-04-52.zip) Can you reproduce with debug logs please?

> All other apps on windows use the "Primary" resolver unless it fails. I believe we round-robin among all the ones we "find", which could the explain the things here....

> INFO snownet::node: Connection failed (no candidates received) This one worries me. If we don't receive candidates (not even `host` candidates) then this suggests that the signalling layer is broken...

> Disconnecting from relay; no response received. Is STUN blocked? We give up after 4 retransmits, spread over ~10s. We can of course increase this but I wonder what a...

> Is it possible that the Relays timing out for this connection also lost our host candidates? Relays are not connection specific and no, we only clear them on network...

What I've found is that lychee currently doesn't appear to de-duplicate requests to the same URL. I've now reduced the concurrency to 1 and added a cache which somewhat mitigates...