On Mon, Mar 4, 2024 at 2:16 PM Bryan Davis <bd808(a)wikimedia.org> wrote: The destination server has created an opening in the firewall for the request, but I am still getting network unreachable errors. I gave the ip of the proxy for the vps, obtained with ping, as the expected ip. I now tried accessing a web site I control from the same vps also in python using requests.get, and in the web server log I see the request coming from what looks to be a gateway (xxx.xxx.xxx.1, rather than the proxy xxx.xxx.xxx.nnn) Is this to be expected and can I rely on the address for such requests? https://wikitech.wikimedia.org/wiki/Help:Toolforge/Database#Connecting_to_t… I completely misread the direction of our connection. I apologize. Yes, outbound connections from a Cloud VPS instance to the internet will show as coming from the shared outbound NAT gateway IP at the remote. The only change from this is if the Cloud VPS instance has a "floating IP" that gives it a direct route to the Internet. Bryan -- Bryan Davis Wikimedia Foundation Principal Software Engineer Boise, ID USA [[m:User:BDavis_(WMF)]] irc: bd808 _______________________________________________ Wikitech-l mailing list -- wikitech-l(a)lists.wikimedia.org To unsubscribe send an email to wikitech-l-leave(a)lists.wikimedia.org https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/

On Mon, Mar 4, 2024 at 3:53 PM Tim Moody <tim(a)timmoody.com> wrote: I have two choices, install tailscale or request a floating IP. Is tailscale permissible and possible on vps? If there is a client with an OSI approved Open Source license, then yes it would be permissible. If not, then likely no per the TOU. [0] It does appear that https://github.com/tailscale/tailscale is licensed under a 3-clause BSD license, so that is helpful. [1] It does not at this point sound like your use case would be a violation of the prohibition on network proxying [2] as the VPN would be for traffic originating from your Cloud VPS instance and not a generally open proxy for others or inbound traffic. I wonder if there is an XY problem [3] here as well. What is the underlying use case that requires you to connect to an off-premise database to operate a Wikimedia focused tool in Cloud VPS? Is this somehow related to your new project to generate ZIM files of MDWiki? [4] [0]: https://wikitech.wikimedia.org/wiki/Wikitech:Cloud_Services_Terms_of_use#4.… [1]: https://github.com/tailscale/tailscale/blob/main/LICENSE [2]: https://wikitech.wikimedia.org/wiki/Wikitech:Cloud_Services_Terms_of_use#4.… [3]: https://en.wikipedia.org/wiki/XY_problem [4]: https://phabricator.wikimedia.org/T358023 Bryan -- Bryan Davis Wikimedia Foundation Principal Software Engineer Boise, ID USA [[m:User:BDavis_(WMF)]] irc: bd808 _______________________________________________ Wikitech-l mailing list -- wikitech-l(a)lists.wikimedia.org To unsubscribe send an email to wikitech-l-leave(a)lists.wikimedia.org https://lists.wikimedia.org/postorius/lists/wikitech-l.lists.wikimedia.org/