pub fn host(state: &Path, auth: Option<&str>) -> Vec<Check>Expand description
The six facts that describe a machine hosting a node, as opposed to one talking to somebody else’s.
Appended to run rather than folded into it, because they are only
findings on a machine that has a node: reporting “linger is off” to a
laptop that only ever clones would be six rows of noise on a report
whose value is that every row means something.
The last of them is a request to this node’s public name, made from the node itself. That is a hairpin — the packet may never leave the box — and it still answers the two questions that go wrong most often: whether the name resolves, and whether the certificate presented matches it. A firewall closed to the outside is the case it cannot see, and the firewall row is what covers that.