RIPE Atlas Probe (hardware, v.4) periodically dropped connections
-
Hi pfSense Gurus!
I try to install RIPE Atlas Probe (hardware, v.4) behind the pfSense and see on RIPE-based probe status page that probe periodically (once a 5-10-15min for 2-3 min) “disconnected”.
Check double twice ETH cables, power cables, power adapter for sufficient amps/v , see that already static IP received from pfSense DHCP Resolver,… All looks like ok.
I think the problem is how exactly RIPE server determines the probe are “connected “ or “disconnected “.
From Atlas Probe status page:
RIPE Atlas probes are connected from all over the world, therefore we need a mechanism that detects the current IP address of the probe. There are three ways we try to determine your probe's IP address: - the address it uses when it connects to the RIPE Atlas infrastructure (connection address), - the IP address returned by a separate service based on HTTP measurements (IP echo service, also known as "what's my IP?"), and - the local address contained in the probe's configuration (the local IP). We then select which of these is most likely to be the actual public address, which can vary by protocol, and place a green checkmark next to it. We put black checkmarks next to the addresses which are the same as the top pick.
I have GREEN and BLACK checkmarks that really reflect my external IP from uplink ISP. So this mean RIPE systems able to correctly detecting state of exactly this Atlas Probe on that step.
The SYSTEM TAGS (https://atlas.ripe.net/docs/getting-started/probe-tags.html#system-tags)
also show that RIPE systems able to see my Atlas Probe correctlyWhere am I seek for source of problem?
And additional question: how to limiting Atlas Probe to working exactly with certain WAN IP in case that I have several uplinks WAN IPs?
Like I have 2 x Atlas Probe and 2 x external static IPs on 2 WANs from different ISPs. And need that each of Atlas Probes send/receive only to certain WAN.
If I understand RIPE Atlas system correctly, all other Probes/Anchors able to connect my Probe/Anchor directly by external WAN IP. So their IPs are from worldwide.
P.S.
Have several uplinks WANs. Right now no any Firewall on NAT rules for Atlas Probe IP. Also IDS disabled.