serinko
39 lines
1.2 KiB
Plaintext
39 lines
1.2 KiB
Plaintext
import { Steps } from 'nextra/components';
|
|
import { AccordionTemplate } from 'components/accordion-template.tsx';
|
|
import ExitPolicyTestOutput from 'components/operators/snippets/wg-exit-policy-test-output.mdx';
|
|
|
|
|
|
<Steps>
|
|
|
|
###### 1. Make sure to have the latest NTM:
|
|
```sh
|
|
curl -L https://raw.githubusercontent.com/nymtech/nym/refs/heads/develop/scripts/nym-node-setup/network-tunnel-manager.sh -o network-tunnel-manager.sh && \
|
|
chmod +x network-tunnel-manager.sh && \
|
|
./network-tunnel-manager.sh --help
|
|
```
|
|
|
|
###### 2. Run tests with NTM
|
|
```sh
|
|
./network-tunnel-manager.sh exit_policy_test_connectivity
|
|
./network-tunnel-manager.sh exit_policy_tests
|
|
```
|
|
|
|
- The output should look like this:
|
|
<AccordionTemplate name="Cosole output">
|
|
<ExitPolicyTestOutput />
|
|
</ AccordionTemplate>
|
|
|
|
###### 3. Optionally you can do some manual sanity checks
|
|
- Run this command to define variable `BLOCKED_IP` and try to `ping` it:
|
|
```shell
|
|
BLOCKED_IP=$(grep "ExitPolicy reject" /etc/nym/exit-policy.txt | head -1 | sed -E 's/ExitPolicy reject ([^:]+):.*/\1/' | sed 's/\/.*$//')
|
|
|
|
ping -c 3 $BLOCKED_IP
|
|
```
|
|
- You should see `100% packet loss` as an outcome.
|
|
```shell
|
|
telnet $BLOCKED_IP 80
|
|
```
|
|
- You should see `telnet: Unable to connect to remote host: Connection timed out`.
|
|
|
|
</ Steps> |