XMPP Service Operators - 2024-11-06

> Is there a way to know if a JID is black listed in RTBL? good idea

obviously yes, otherwise it'd be useless ?

how ?

https://modules.prosody.im/mod_muc_rtbl

you sha256 hash the jid and see if it's in the list

what's the `curl` command ? or you write xml manually ? or you install Arch ? or what ?

yes

mkay

Do load balancers generally offer functionality for a TCP client to prefer to be serviced by the same server, for successive TCP connections? Something akin to 'sticky sessions'? I'd like consecutive TCP connections for 5222 to end up with the same server in a group of servers.

I'm guessing that source-IP based algorithms are available - but are there other options?

what other options are there, conceptually, for plain tcp?

magic

(I'm not particularly well versed in these things - I'd rather ask than assume)

right

I can't come up with a scheme for _plain tcp_ which would allow stickiness beyond source-IP based bucketing of connections

I was hoping someone here was doing this for XMPP, and share some thoughts.

for XMPP IIRC you'd have to do at least start TLS before you have an idea about the identity of the connecting entity (@from on the stream header, I think that's only sent post-TLS, if not even only post-auth, for c2s)

Although I appreciate the thought, I kind of want to avoid the theoretical and hope to learn about practical / real-world experience.

okay :)

pinging moparisthebest, because if anything, xmpp-proxy seems like the tool which might be able to achieve that.

what's xmpp-proxy?

is it better than haproxy?

nuegia.net, https://github.com/moparisthebest/xmpp-proxy/

> Do load balancers generally offer functionality for a TCP client to prefer to be serviced by the same server, for successive TCP connections? Something akin to 'sticky sessions'? I'd like consecutive TCP connections for 5222 to end up with the same server in a group of servers. haproxy does ↺

i'm using it to convert ipv4-only clients to my ipv6-only network

jonas’, why proxyprotov1 only? why not proxyprotov2?

nuegia.net, not my project, no idea, don't care.

Guus, seconding the recommendation for haproxy if you're looking for this kind of thing. While stickiness options for TCP are limited, I've also managed deployments that use BOSH with cookies for stickiness.

Thanks. Yeah, the web-based connections are a bit more straight-forward. I'm assuming that HA-Proxy uses a source-IP based approach, too (nothing more fancy than the magic that I was hoping to learn about here)?

Yep, there aren't really many other options in the general case. If there is something specific you want to use instead of source IP, then haproxy can probably do that too (it's very flexible).