could not get mac address for nic: software loopback interface 1 udeploy agent

I have to correct myself from my last message, consul won't advertise a public IP by default, but if there is an IP to advertise it will listen on *. Trough rules on our routers we make sure that we don't let anything weird into our network. Through rules in iptables on each host we configure the communication that we allow and drop the rest. We only assign public IP's to our machines. Private IP's may be seen as more secure since they aren't routeable on the internet, but in reality they aren't.įor example: We may have rfc1918 addresses configured on some interfaces in our servers but in our case those are untrusted networks since they're connecting to something outside of our datacenter. It may be something that can be configured, but no assumptions about security should be made by the service by default. Some thoughts i have about service design:Ī service shouldn't treat ip addresses differently if they are from one range or another as that's up to network design and network security.

It would also be very nice if the -bind and the -client options could be specified multiple times, currently it only seems to bind to the last option specified on the commandline. The option should be able to be specified multiple times, we may for example have multiple address-ranges we want to allow. If this option is set it should override the default privateBlocks variable in util.go with the configured range, so the default rfc1918 addresses should not be set if this option is configured. By default it can continue to have the current behavior where it will only advertise rfc1918 addresses. I believe a proper solution is to add a 'allow announce networks' option.

Consul runs and listens on any ip-address by default, but it refuses to announce any address that isn't rfc1918 by default? :) After investigating some more i realize it's not about bind-addresses, but advertise-addresses which almost makes this a bit silly.

Could not get mac address for nic: software loopback interface 1 udeploy agent