I have set up my baker with:
- a public non-baking node with public IP, let's call it "A.A.A.A"
- a private baking node without public IP
To lock down the private node (and also because it does not need a public IP), I have set up a reverse SSH tunnel for port 9732 from the private to the public node on 19732. Thus, the public node can connect to the private node via its own 127.0.0.1:19732, which forwards to the private nodes port 9732.
I'm running the private node with:
./tezos-node run --rpc-addr 127.0.0.1:8732 --private-mode --no-bootstrap-peers --bootstrap-threshold=1 --connections 1 --peer A.A.A.A
And I'm running the public node with:
./tezos-node run --rpc-addr 127.0.0.1:8732 --peer 127.0.0.1:19732
Additionally, I have tried adding different
trust entries like:
./tezos-admin-client trust address 127.0.0.1:19732on public node
./tezos-admin-client trust address A.A.A.A:9732on private node
./tezos-admin-client trust peer idxxxxxxon both private and public node
All I keep getting in the private nodes log is:
p2p.connection-pool: [private node] incoming connection from untrused peer rejected! and the public node tries, but can never successfully connect to the private node or the other way around.
What can I do or check to get closer to connecting my nodes?