open access only once sshd answers on the host's forwarded port - #196
Merged
Merged
Conversation
vast reports a running instance with a forwarded port before anything listens on it, and three of four hosts today refused every connection for the whole window while the renter paid. the lifecycle worker now reads the ssh banner before start_access, keeps the lease provisioning until it hears one, and refuses the host inside the boot budget when it never does. Signed-off-by: winterstacks <release@prismnetwork.tech>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Vast reports a running instance with a forwarded port before anything listens on it. Three of four hosts today refused every SSH connection for the whole window while the renter paid for them.
The lifecycle worker now reads the SSH banner at the advertised address before
start_access: the lease stays provisioning until a banner arrives, and a host that never produces one is refused inside the boot budget and replaced like any other refusal. Nothing is sent to the host; only the banner is read.Tests: lifecycle-worker 57 (new: banner, silent listener, closed port).