diff --git a/docs-main/global-synchronizer/troubleshooting-guide/connectivity-issues.mdx b/docs-main/global-synchronizer/troubleshooting-guide/connectivity-issues.mdx index 53f1559b3..2fb401575 100644 --- a/docs-main/global-synchronizer/troubleshooting-guide/connectivity-issues.mdx +++ b/docs-main/global-synchronizer/troubleshooting-guide/connectivity-issues.mdx @@ -1,14 +1,12 @@ --- title: "Connectivity Issues" -description: "Diagnosing and resolving synchronizer connection failures, TLS errors, and VPN problems" +description: "Diagnosing and resolving synchronizer connection failures and TLS errors" --- import CantonGlobalSynchronizerTroubleshootingGuideConnectivityIssuesL36 from "/snippets/canton-docs/global-synchronizer_troubleshooting-guide_connectivity-issues_L36.mdx"; import CantonGlobalSynchronizerTroubleshootingGuideConnectivityIssuesL71 from "/snippets/canton-docs/global-synchronizer_troubleshooting-guide_connectivity-issues_L71.mdx"; import CantonGlobalSynchronizerTroubleshootingGuideConnectivityIssuesL101 from "/snippets/canton-docs/global-synchronizer_troubleshooting-guide_connectivity-issues_L101.mdx"; -import CantonGlobalSynchronizerTroubleshootingGuideConnectivityIssuesL121 from "/snippets/canton-docs/global-synchronizer_troubleshooting-guide_connectivity-issues_L121.mdx"; -import CantonGlobalSynchronizerTroubleshootingGuideConnectivityIssuesL128 from "/snippets/canton-docs/global-synchronizer_troubleshooting-guide_connectivity-issues_L128.mdx"; Connectivity failures prevent your validator from communicating with the synchronizer. The symptoms vary -- from outright connection refusals to subtle TLS handshake errors -- but the diagnostic approach is consistent. @@ -96,33 +94,3 @@ If you see `PKIX path building failed`, the validator's JVM does not trust the s If the certificate's Subject Alternative Name (SAN) does not include the hostname you are connecting to, the handshake will fail. Verify with: - - -## VPN Problems - -DevNet requires a VPN connection. TestNet and MainNet validators connect over the public internet but may still use VPNs for internal infrastructure. - -### VPN Connection Drops - -If your validator periodically loses connectivity, check: - -- VPN client logs for reconnection events -- Whether the VPN assigns a stable IP (some providers rotate IPs on reconnect, which can break IP-whitelisted access) - -### MTU Issues - -VPN tunnels reduce the effective MTU. If you see stalled connections that work for small requests but hang on larger payloads: - - - - -If pings succeed at 1400 bytes but fail at 1500, lower the MTU on the VPN interface: - - - - -### Split-Tunnel Configuration - -If your VPN routes all traffic through the tunnel, the validator may be unable to reach external services (OIDC provider, container registries). Configure split-tunnel routing so that only synchronizer traffic goes through the VPN, while other traffic uses the default gateway. - -Consult your VPN provider's documentation for split-tunnel setup. diff --git a/docs-main/snippets/canton-docs/global-synchronizer_troubleshooting-guide_connectivity-issues_L121.mdx b/docs-main/snippets/canton-docs/global-synchronizer_troubleshooting-guide_connectivity-issues_L121.mdx deleted file mode 100644 index 37efd1a2b..000000000 --- a/docs-main/snippets/canton-docs/global-synchronizer_troubleshooting-guide_connectivity-issues_L121.mdx +++ /dev/null @@ -1,4 +0,0 @@ -```bash -# Test with reduced packet size -ping -M do -s 1400 sequencer.dev.sync.global -``` diff --git a/docs-main/snippets/canton-docs/global-synchronizer_troubleshooting-guide_connectivity-issues_L128.mdx b/docs-main/snippets/canton-docs/global-synchronizer_troubleshooting-guide_connectivity-issues_L128.mdx deleted file mode 100644 index 25a7df3ef..000000000 --- a/docs-main/snippets/canton-docs/global-synchronizer_troubleshooting-guide_connectivity-issues_L128.mdx +++ /dev/null @@ -1,3 +0,0 @@ -```bash -sudo ip link set dev tun0 mtu 1400 -```