Log selected VPN fabric endpoint candidate
This commit is contained in:
@@ -4675,6 +4675,7 @@ func fabricSessionGatewayTransportForAssignment(ctx context.Context, identity st
|
|||||||
continue
|
continue
|
||||||
}
|
}
|
||||||
cancel()
|
cancel()
|
||||||
|
log.Printf("vpn fabric session transport selected: vpn_connection_id=%s next_hop=%s candidate=%d endpoint=%s transport=%s pinned_cert=%t fallback_candidates=%d", assignment.VPNConnectionID, nextHop, index, selectedTarget.Endpoint, selectedTarget.Transport, selectedTarget.PeerCertSHA256 != "", len(targets)-index-1)
|
||||||
return &vpnruntime.FabricSessionPacketTransport{
|
return &vpnruntime.FabricSessionPacketTransport{
|
||||||
Sender: session,
|
Sender: session,
|
||||||
Receiver: session,
|
Receiver: session,
|
||||||
|
|||||||
@@ -319,6 +319,8 @@ instead of disabling verification while the cluster CA path is being finished.
|
|||||||
VPN fabric-session dialing now walks all ranked endpoint candidates before
|
VPN fabric-session dialing now walks all ranked endpoint candidates before
|
||||||
falling back to the legacy peer endpoint, so a failed QUIC candidate does not
|
falling back to the legacy peer endpoint, so a failed QUIC candidate does not
|
||||||
block WebSocket/HTTPS compatibility transport.
|
block WebSocket/HTTPS compatibility transport.
|
||||||
|
Successful VPN fabric-session dialing logs the selected candidate, transport,
|
||||||
|
certificate pin usage, and remaining fallback count for phone-side diagnostics.
|
||||||
|
|
||||||
Deliverables:
|
Deliverables:
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user