Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
feat: ipv6 support in ooni-backendproxy (#61)
The `api.dev.ooni.org` domain was reportedly failing with the check-in API as reported here: ooni/probe#2741. On more inspection, we found that the `nginx` server was not configured with IPv6 support which caused the connection between the upstream server and the EC2 instance to time out. The `/var/log/nginx/error.log` logs found on the machine: ``` 2024/06/05 09:07:33 [error] 89061#89061: *519419 upstream timed out (110: Unknown error) while connecting to upstream, client: 10.0.1.164, server: _, request: "POST /api/v1/check-in HTTP/1.1", upstream: "https://[2a01:4f9:1a:9494::2]:443/api/v1/check-in", host: "api.dev.ooni.io" 2024/06/05 09:11:34 [error] 89061#89061: *519456 upstream timed out (110: Unknown error) while connecting to upstream, client: 10.0.1.164, server: _, request: "POST /api/v1/check-in HTTP/1.1", upstream: "https://[2a01:4f9:1a:9494::2]:443/api/v1/check-in", host: "api.dev.ooni.io" ``` To this end, the diff here adds support for IPv6 `egress` traffic for the `nginx_sg` security group.
- Loading branch information