3 votes
Accepted

403 from Google certificate endpoint when using IPv4

Hetzner resolved the issue. It turned out that the IP of the server was falsify flagged as Iranian. (The server itself was located in Germany) Iran is currently under sanctions and blocked by Google. ...
Nikolai Jay Summers's user avatar
1 vote

Change netmask subnet on server because of smaller IP range

That depends. To make sure you should ask the datacenter guys, they must know. If you've got a routed subnet of your own, then you might need to change the mask. Not doing so prevents your servers ...
Zac67's user avatar
  • 11.5k
1 vote

MQ broker in private or public subnet?

My opinion is given you would have a security group the only allows specific IPs access to your MQ, there's little benefit adding a network load balancer. If it was on the public internet, the ...
Tim's user avatar
  • 32.7k
1 vote
Accepted

Port unreachable when wireguard is connected

Your routing tables are stateless, they don't have any information about a packet being an answer or your port being bound. So you can use the connection table to add a mark when a connection is made ...
setenforce 1's user avatar
  • 1,390
1 vote

AWS NAT Instance Setup

After many tries, the configuration script which worked perfectly for me on the Amazon Linux 2023 (AMI like "al2023-ami-2023*") NAT instance was: sudo yum install iptables-services -y sudo ...
Romain Spinelli's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible