{"action":"created","issue":{"url":"https://api.github.com/repos/hyperboria/peers/issues/50","repository_url":"https://api.github.com/repos/hyperboria/peers","labels_url":"https://api.github.com/repos/hyperboria/peers/issues/50/labels{/name}","comments_url":"https://api.github.com/repos/hyperboria/peers/issues/50/comments","events_url":"https://api.github.com/repos/hyperboria/peers/issues/50/events","html_url":"https://github.com/hyperboria/peers/issues/50","id":142623197,"number":50,"title":"DNS in credentials","user":{"login":"ansuz","id":1264398,"avatar_url":"https://avatars.githubusercontent.com/u/1264398?v=3","gravatar_id":"","url":"https://api.github.com/users/ansuz","html_url":"https://github.com/ansuz","followers_url":"https://api.github.com/users/ansuz/followers","following_url":"https://api.github.com/users/ansuz/following{/other_user}","gists_url":"https://api.github.com/users/ansuz/gists{/gist_id}","starred_url":"https://api.github.com/users/ansuz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ansuz/subscriptions","organizations_url":"https://api.github.com/users/ansuz/orgs","repos_url":"https://api.github.com/users/ansuz/repos","events_url":"https://api.github.com/users/ansuz/events{/privacy}","received_events_url":"https://api.github.com/users/ansuz/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/hyperboria/peers/labels/duplicate","name":"duplicate","color":"cccccc"},{"url":"https://api.github.com/repos/hyperboria/peers/labels/question","name":"question","color":"cc317c"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":13,"created_at":"2016-03-22T11:30:47Z","updated_at":"2016-06-12T12:44:21Z","closed_at":null,"body":"DNS records in peering credentials are only resolved at launch time.\r\n\r\nWhile they make it possible to provide a public node even if you have a dynamic IP address, this can make it difficult to debug peering problems when users encounter problems stemming from 'UNRESPONSIVE' peers.\r\n\r\nEach time the IP being pointed to changes, nodes which are using those credentials will need to restart (or otherwise dynamically reconfigure their peering credentials). This is problematic when considering that the purpose of this repo was initially to provide a simplified means of gaining access to the network.\r\n\r\nThoughts?"},"comment":{"url":"https://api.github.com/repos/hyperboria/peers/issues/comments/225430413","html_url":"https://github.com/hyperboria/peers/issues/50#issuecomment-225430413","issue_url":"https://api.github.com/repos/hyperboria/peers/issues/50","id":225430413,"user":{"login":"ansuz","id":1264398,"avatar_url":"https://avatars.githubusercontent.com/u/1264398?v=3","gravatar_id":"","url":"https://api.github.com/users/ansuz","html_url":"https://github.com/ansuz","followers_url":"https://api.github.com/users/ansuz/followers","following_url":"https://api.github.com/users/ansuz/following{/other_user}","gists_url":"https://api.github.com/users/ansuz/gists{/gist_id}","starred_url":"https://api.github.com/users/ansuz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ansuz/subscriptions","organizations_url":"https://api.github.com/users/ansuz/orgs","repos_url":"https://api.github.com/users/ansuz/repos","events_url":"https://api.github.com/users/ansuz/events{/privacy}","received_events_url":"https://api.github.com/users/ansuz/received_events","type":"User","site_admin":false},"created_at":"2016-06-12T12:44:21Z","updated_at":"2016-06-12T12:44:21Z","body":"As I understand it, DNS hosts are resolved at launch time, before seccomp is set up. After seccomp is active, DNS resolution is forbidden.\r\n\r\nIf somebody were to programatically drop and reset their peers at runtime (with peers that depend on DNS) then seccomp would crash the cjdns process.\r\n\r\nGranted, this only affects linux clients that have compiled with seccomp, and people have the choice of resolving the domain and keeping the IP in their version of the credentials, so there are workarounds.\r\n\r\nDNS might be useful if a node has a dynamic IP, but again, given that domains are only resolved at launch time, [such peers are not ideal for this repository](#issuecomment-213465403). We'd like to minimize the amount of things that can go wrong when configuring a node using public peers, and DNS is just another moving part that can cause problems.\r\n"}}
{"actor":{"display_login":"ansuz"}}