Re: [Handle-info] Option to configure bind address for outgoing connections?

Unfortunately, there is no existing handle software configuration to set the local IP address used for outgoing connections.

You can change the configuration of your OS / network stack in order to make .61 the default choice for outgoing connections instead of .58.

I came across this technique which might possibly be useful to you: https://stackoverflow.com/questions/33961459/java-set-local-ip-address-without-changing-code

You could also use the techniques in Chapter 10 of http://www.handle.net/tech_manual/HN_Tech_Manual_9.pdf to make it so that you do not need your handle server to make outgoing calls in order to administer your handle server.

Best,

Robert

On Fri, Sep 30, 2022 at 3:36 AM Jasper Bedaux <J.Bedaux@uva.nl> wrote:

Hello all,

In consultation with our security/network/server management departments, we have a separate IP address for a Handle server (ending with .61). The main IP address of this server ends with .58.

Incoming and outgoing traffic is allowed for ports 2641 and 8000 for the IP address ending with .61, but not for the IP address ending with .58. For incoming connections, this is working fine but for outgoing connections, the Handle server tries to initiate connections on the IP address ending with .58, which is not allowed in our network.

Is it possible to configure the Handle server to bind to a certain IP address for OUTGOING connections like this is possible for incoming connections by using "bind_address" in the config.dct?

ss -a | grep hdl-srv

udp   UNCONN     0      0    [::ffff:***.***.***.61]:hdl-srv    *:*

tcp   LISTEN     0      50   [::ffff:***.***.***.61]:hdl-srv    *:*

tcp   CLOSE-WAIT 1      0    [::ffff:***.***.***.61]:hdl-srv    [::ffff:52.32.51.238]:37770

tcp   SYN-SENT   0      1    [::ffff:***.***.***.58]:54304      [::ffff:212.193.120.1]:hdl-srv

In the last line it can be seen the IP address ending with .58 is used for an outgoing connection instead of the desired IP address ending with .61, resulting in our Handle server not being able to setup outgoing connections.

Thanks,

Jasper

_______________________________________________
Handle-Info mailing list
Handle-Info@cnri.reston.va.us
http://www.handle.net/mailman/listinfo/handle-info