Hi friends I am running an experimental cluster with some devices running balenaOS connected to my balenaCloud application: 2x rasp pi 3B 1x rasp pi 4 My goal is for them to run a peer-to-peer cluster, and discover each other with the assistance of the resin VPN interface that balenaOS created/m…

Hi @eve an interesting project. Surprisingly I have not heard of anyone doing that before so we have forwarded the question to an engineer who might have. The only way I am aware of, to reach a device is by its uuid using either the balena cli or a public device URL ( see https://www.balena.io/do…

@eve we found this https://www.balena.io/docs/learn/welcome/security/#runtime-management statement that basically states what I suspected. Device to device communication via VPN is actively blocked to keep compromised devices from spreading their infestation through the VPN. One of our engineers su…

Thanks @samothx for this information. It sounds like Public Device URL will allow my nodes to contact each other to federate OpenVPN between them, and then pass information through the tunnel. Two questions that would be important for this flow to work: How does TLS termination work with public …

TLS is terminated at our proxy server’s ELB, from there a plaintext request hits our proxy server which is then tunneled via the vpn to the device. So the TLS portion of the HTTPS request is terminated at our load balancers, but the request is re-encrypted between our proxy servers and the device. A…

Hi Cameron, thanks for the information. That clarifies everything I need to know about the TLS situation. Now, regarding the API you referred to, I read that page https://www.balena.io/docs/learn/manage/account/#api-keys which maybe suggests that you can produce with a business account, an API key …

But is it possible to produce a token with more granular levels of access, or for example, to issue myself an API key which is for myself as a user but only having some of the “scopes” (in oauth sense) that apply to me & my resource access? Unfortunately it is not currently possible to produce a …

Peer device discovery over Balena VPN network

Product support

matthewcroughan June 26, 2020, 6:44pm 22

Bump! Alias domain for devices on resindevice.io

Topic		Replies	Views
Balena Tunnel - Direct Connection? Product support	15	1073	June 15, 2020
OpnVPN configuration and reachability openBalena	5	5885	July 15, 2019
Tunneling socket could not be established (Node.js SDK) openBalena	5	5005	January 4, 2021
Devices offline & VPN Error: Cannot load DH parameters from dh.pem openBalena docker , network	18	2221	August 26, 2019
Device registration fails with open balena openBalena	17	1896	June 18, 2020

Peer device discovery over Balena VPN network

Related topics