I've two servers on intranet and 2 servers on public. I want to join all four onto weave network. For my intranet servers there is only one public IP. Documentation of weave says open port 6783 on firewall. Which host should I map this port with? I have two servers behind firewall so which server should I pick to open the firewall traffic? How about other server will it still be able to communicate with weave?
It's easier if you make the connections from intranet out to public. So, if the servers were int1, int2, pub1. pub2, then:
on pub1: weave launch pub2
on pub2: weave launch pub1
on int1: weave launch pub1 pub2 int2
on int2: weave launch pub1 pub2 int1
You may have to open 6783 (tcp and udp) outgoing. If the firewall does NAT, it will remap this port for at least one connection, but that will happen automatically.
Most helpful comment
It's easier if you make the connections from intranet out to public. So, if the servers were int1, int2, pub1. pub2, then:
on pub1: weave launch pub2
on pub2: weave launch pub1
on int1: weave launch pub1 pub2 int2
on int2: weave launch pub1 pub2 int1
You may have to open 6783 (tcp and udp) outgoing. If the firewall does NAT, it will remap this port for at least one connection, but that will happen automatically.