Skip to content

ateom: drop the family from the atunnel ingress listen defaults - #1080

Open
Yuan Gao (ygao-g) wants to merge 3 commits into
agent-substrate:mainfrom
ygao-g:ateom-atunnel-listen-defaults
Open

ateom: drop the family from the atunnel ingress listen defaults#1080
Yuan Gao (ygao-g) wants to merge 3 commits into
agent-substrate:mainfrom
ygao-g:ateom-atunnel-listen-defaults

Conversation

@ygao-g

@ygao-g Yuan Gao (ygao-g) commented Aug 19, 2026

Copy link
Copy Markdown
Collaborator

Part of #246.

Both ateom herders default the actor ingress flags to 0.0.0.0:443 and 0.0.0.0:444, and the
worker Deployment passes those same two values explicitly — so the command line on a running worker
reads IPv4-only. It never was: Go treats an unspecified IPv4 address as a wildcard on a listen and
binds it dual-stack, so those sockets already served both families. This spells all four :443 and
:444 so the flag says what it does.

No behavior change. The egress listen address stays 0.0.0.0:15001 until the actor datapath
carries v6. #1042 carried the same lines under its egress pin and is closed as superseded.

🤖 Generated with Claude Code

Both ateom herders defaulted the actor ingress flags to "0.0.0.0:443"
and "0.0.0.0:444", which reads as IPv4-only. It never was: Go treats an
unspecified address as a wildcard and binds it dual-stack, so the
sockets already served both families. Spell the defaults ":443" and
":444" so the flag says what it does, and note why in a comment.

Part of the dual-stack actor networking series; no behavior change.
@ygao-g
Yuan Gao (ygao-g) force-pushed the ateom-atunnel-listen-defaults branch from 368d702 to 53e5195 Compare August 20, 2026 05:19
The worker Deployment passes --atunnel-listen-address=0.0.0.0:443 and
--atunnel-connect-listen-address=0.0.0.0:444 explicitly, so the ateom
flag defaults never reach a deployed worker and the command line a
reader inspects still says IPv4. Spell these ":443" and ":444" to match.

Part of the dual-stack actor networking series; no behavior change, as
Go binds an unspecified IPv4 wildcard dual-stack either way.
The comment singled out the ingress addresses as unspecified wildcards
and said egress stays IPv4 below. 0.0.0.0 is unspecified too, so Go
binds the egress listener dual-stack as well and the distinction does
not exist -- which reintroduces exactly the misreading the rest of this
change removes. Egress keeps the v4 spelling as a marker until the actor
datapath carries v6; that is a note to a future reader, not a property
of the socket.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants