Closed
Conversation
9a7d78a to
5a4e2a3
Compare
hendoxc
previously approved these changes
Aug 13, 2025
fouadkada
previously approved these changes
Aug 14, 2025
32e986b to
d6e830b
Compare
d6e830b to
b445f68
Compare
b445f68 to
c5c3258
Compare
Contributor
Author
|
Closing this PR, ChipIngressForceIPV4 is not needed for communicating to public Cloudflare ChIP ingress endpoint. Opened new PR for ChipIngressInsecureConnection only |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
This is needed to connect to the public Cloudflare endpoint when IPv6 is not enabled on the local client network stack.
Why
loop/server: wire up properly ChipIngressInsecureConnection option
In some cases chipingress and beholder gateway collector connections could have different setup for TLS (InsecureConnection option). E.g connecting to local collector sidecar might not need TLS while connecting to public chipingress domain does need TLS. For local development both do not need TLS.
chipingress: add option for gRPC client to force IPv4 connections.
Error
Error message explanation:
Client tries to connect to
staging.telemetry.chain.linkThe DNS resolver looks up the domain and gets back both IPv4 and IPv6 addresses from Cloudflare (
IPv6 Compatibilityflag is enabled by default on Cloudflare network settings and cant be disabled).The OS decides to try the IPv6 address [2606:4700:10::ac42:aedd] first.
It seems the node network stack has no route to send IPv6 packets to the public internet, so it immediately fails with network is unreachable.