Questions tagged [iproute2]

iproute2 (ip) is a tool used to manipulate network configurations.

Filter by
Sorted by
Tagged with
1
vote
1answer
81 views

Change an active slave of Linux network bonding interface without ifenslave command

Linux supports bonding of multiple Ethernet network interfaces for extra reliability or load balancing. Bonding driver used to be configured via ifenslave command, which has been deprecated (...
0
votes
0answers
15 views

pfsense, port forward and two WAN

I try to create port forward rules to a single host (ssh server) through two wan IPs. You want to see my virtual lab on a attached picture. I created two Port Forward rules from "Internet" ...
0
votes
1answer
25 views

CentoOS and IP RULE

I don't understand my situation. I have a network lab like on a picture. I can't ping 192.168.5.1 from 192.168.1.2 then the 192.168.5.1 has 192.168.4.2 like a default gateway. Linux# ip route default ...
2
votes
1answer
44 views

How to force `ip route get` to ignore a specific device?

How can I do ip route get, but force it to ignore a specific device? When I start my VPN, I run ip route get <vpn_server_ip> to determine what interface to use to connect to the VPN. Then I add ...
2
votes
0answers
49 views

WireGuard Failover for MySQL Galera Cluster

I'm setting up four servers across four locations in an attempt to create a geo-redundant MySQL Galera cluster. Two of the servers are behind NAT, and I'm currently attempting to use WireGuard to ...
0
votes
1answer
284 views

How to bridge an internal network interface to an OpenVPN tun/tap device

I'm using a two-VM setup wherein the first VM, machine A, has a closed, private LAN shared with the second VM, machine B, which has a second network interface that is configured to hit the internet. ...
0
votes
0answers
27 views

How can I route usb modem packets with squid

I have two usb modems connected to a linux machine, both connections are made through wvdial and are working, I verified they work with: curl https://api.myip.com/ --interface pppx and ping www.google....
0
votes
0answers
22 views

ss --events no output on CentOS 7

I try to monitor continously TCP connections on a CentOS 7 box with the ss utility. If I start ss --events I recieve no events. Is there any trick to enable this? Or is the kernel (3.10) in CentOS 7 ...
0
votes
0answers
47 views

Kernel TCP stack not forwarding packets immediately to remote server

I'm trying to figure out why a single HTTP POST request over a re-used TLS connection is still taking roughly twice the roundtrip time (RTT). The client is running on Debian 10.8 within a container on ...
0
votes
0answers
32 views

Per-user routing of incoming(!) and outgoing traffic

The outgoing traffic of user1234 on the client should run via the tunnel and be NAT'ed to 2.3.4.5. On the opposite direction a certain port range on that IP should be forwarded back through the tunnel ...
0
votes
1answer
41 views

Linux internet default gateway + VPN default gateway

I'm currently using a barracuda vpn client to connect to a vpn, which sets a default gateway for the vpn, routing all traffic through it. I've read about iproute2 and secondary routing tables, but my ...
0
votes
0answers
43 views

Routing traffic through specific interface

I do have a debian based gateway that provides internet access through two interfaces (eth0, tun0) - the later being connected to a public vpn. Some clients are routed through eth0 and some are routed ...
0
votes
2answers
126 views

Can't ping between interfaces on one device on the same network

There is a device, let's call it 1, on network A Device 1 has two interfaces, eth5 and eth7 There is a device 2 on network A Pinging from eth5 to device 2 works Pinging from eth7 to device 2 works ...
1
vote
2answers
24 views

Process that adds hosts as unreachable

I have been troubleshooting an issue where users could not connect to a CentOS 7 server from a particular host. I eventually determined that the system considered the requesting host to be unreachable,...
3
votes
1answer
129 views

Reading back Linux gre[tap] local/remote address

With iproute2 on Linux, gre/gretap interfaces are setup with ip link add, which for GRE needs remote and optionally local attributes specifying the endpoints. However, I can't find any way to read ...
0
votes
0answers
36 views

reach nat defualt gateway from same interface

I created a NAT to forward traffic from one interface network to the other. The NAT default gateway works on other machines on the network (that have gateway set to NAT machine IP) but the NAT routing ...
1
vote
2answers
232 views

How to retrieve the routing tables in JSON format (linux)?

The ip command is able to return some of its results in JSON format, but it seems to be unable to format the routing table(s). Here are some examples of what I mean. List of all addresses: ip --json ...
0
votes
0answers
75 views

ERSPAN iproute2 kernel native decapsulation

We have a fully Virtual environment for our servers. I want to use vDS mirroring to send traffic of specific VM's to our NIDS sensor (Ubuntu 18.04, 5.4.0-42-generic kernel and iproute2-ss180813). I ...
0
votes
1answer
433 views

NetworkManager adding extra default gateway

Using NetworkManager, I am trying to setup multiple interfaces on different VLANs; the primary interface, em1, is used on a development VLAN; the secondary interface is on a dedicated iSCSI VLAN. I am ...
0
votes
1answer
43 views

Routing between two networks

Basically I would like to know what should I do to connect two PCs in different networks and make them to see each other. The diagram is like the following linux-pc-1-1 (192.168.0.2 eth0) <---> (...
0
votes
1answer
731 views

Unable to Configure WireGuard to Use Secondary IP Address Instead of Main IP Address of the Server

The Setup The main ethernet interface of my server is enp8s0, has one public IP address (116.202.221.254—server's main IP address), and here's how it is set up. # ip addr show enp8s0 2: enp8s0: <...
0
votes
0answers
66 views

how to apply TC htb class to each of IPs in an IP range separately?

I use HTB for TC and mark packets with iptables. First I mark a range of IPs (like 192.168.1.0/24). Now I want to apply a htb class to each of these IPs separately. If I add a class and a filter for ...
0
votes
1answer
79 views

OpenVPN Server on a Multi-WAN Router

I have a OpenVPN Server on a MultiWAN Router (Ubuntu Based). The Problem is, that incoming packages not leaving the same WAN interface where they entered. I tested already with iptables MARK rules in ...
0
votes
1answer
158 views

gretap tunnel return traffic not being handled

I'm using iproute2 to add a GRE layer 2 tunnel with a vlan tag as shown below. ip link add name gre1 type gretap local 10.0.0.2 remote 8.8.8.8 ip link add name gre1.100 link gre1 type vlan proto 802....
1
vote
1answer
2k views

Response packet on the same interface as incoming in LAN

Currently, I'm struggling with the following scenario: I have a server with 2 interfaces in 2 separate LAN subnets. IF1, IF2 I have a laptop which has an IP address from the first subnet When I try ...
4
votes
1answer
453 views

How is Netflix tracking that I'm behind a VPN?

Disclaimer: This is not a "I need VPN to surf Netflix". Surfing without VPN at this site allows Netflix. The question is instead the other way around: "There is a PC that needs to Internet through ...
0
votes
0answers
31 views

Unable to change link-local address for tunnel with iproute2

I have a couple of HE sit tunnels on Ubuntu 18.04 box. Only first one works as expected and I suppose the reason is almost same link-local addresses (generated from same MAC). What I'm trying is to ...
0
votes
1answer
366 views

IPsec tunnel between 2 remote host

I'm using mininet, I have created a ESP tunnel between two machine such that if I ping from one machine to other then I am seeing ESP packets, and everything works fine. Here below the commands used: ...
2
votes
1answer
2k views

Ping does not work on TAP interfaces with bridge

I am trying to understand the linux bridging and local ip rules, I have following topology on my linux laptop. br0 ___________|__________ | | |tap0 ...
1
vote
0answers
239 views

How to group interfaces for the purpose of using ip-rule's suppress_ifgroup feature?

I found out about ip-rule's "suppress_ifgroup X" feature which seems to allow me to tell the kernel to ignore a route from the given table with an outgoing interface that belongs to that group X. But ...
0
votes
1answer
46 views

Filter ss process output without using grep

ss -p can give the process name, process id (PID) and the file descriptor associated with the connection. Example: ss -tuanp [...] tcp ESTAB 0 0 x.x.x.x:59594 x.x.x.x:993 users:(("...
0
votes
1answer
77 views

tc filter … ht HANDLE … does not allow buckets of 8 bits

TC-u32 man page states that HANDLE is: HANDLE := { u12_hex_htid:[**u8_hex_hash:[u12_hex_nodeid]** | 0xu32_hex_value } so the size of the bucket should range from 0x00 to 0xff as it is a u8 value. ...
1
vote
0answers
253 views

Use iptables to load balance between multiple AWS elastic network interfaces

Environment: Amazon EC2 m4.4xlarge, running Amazon Linux 2 AMI 2.0 I would like to use iptables to load balance https requests between a set of elastic IPs that are assigned to multiple Amazon ...
2
votes
1answer
832 views

Netplan: Route multiple parallel internet connections with port forwarding to a single server with 1 network port

Here's my network diagram: 56.56.56.56 192.168.0.1/24 MAC:AA:BB:CC:DD:EE:01 ___________ ---| Modem 1 |------- | ___________ ...
0
votes
1answer
138 views

How to swap(with yum) two rpms on fly?

I'm trying to install MPTCP(Multi-Path TCP) enabled kernel and tools on a CentOS7 box according to the installation doc. It needs 3 rpm packages to be installed. I encounter a trouble when I ...
1
vote
1answer
897 views

hostapd not working anymore

I had a working hostapd file and a functioning wifi hotspot (device is busybox, iMX6 board). While the hotspot was up and running, I was doing manual routing connected to the device via ssh (I'm able ...
0
votes
1answer
121 views

Need to create route to bypass VPN which allocate full traffic as default route

I have 2 VPNs: utun0 and ppp0. ip r s default via 175.15.105.123 dev utun0 default via 192.168.0.1 dev en0 127.0.0.0/8 via 127.0.0.1 dev lo0 169.254.0.0/16 dev en0 scope link 10.0.15.0/24 via ppp0 ...
1
vote
1answer
2k views

Linux bridge_slave changes automatically to forwarding state

I'm trying to change the state of bridge slaves on Linux brigde system and It has very weird behaviour, changing all the time the port state to forwarding. I.E: Create a bridge with dummy interface ...
0
votes
1answer
65 views

iptables: Marked packets not routed via configured route

I need to configure a firewall server with two internet lines (A on eth1, B on eth0) and an internal network (C on eth2). Additionally to the default routing table (via A / eth1), I have two routing ...
-1
votes
1answer
270 views

How to understand this output of ip route list table 255 [closed]

broadcast 100.125.71.152 dev rmnet_data1 proto kernel scope link src 100.125.71.153 local 100.125.71.153 dev rmnet_data1 proto kernel scope host src 100.125.71.153 broadcast 100.125.71.155 dev ...
0
votes
1answer
671 views

How to multiple incoming from interface[s]

I have 3 interface(2 wan, 1 local) and enabled forward, but only one incoming interface(ppp0) can to local destination, the following is my iptable command: iptables -t nat -A PREROUTING -i ppp0 -p ...
0
votes
1answer
493 views

How can I add (not replace!) a default route upon OpenVPN connection?

When I run sudo openvpn foo.conf I do not yet have a default gateway defined. Once the connection is established, I run sudo ip route add default via X.X.X.X, where X.X.X.X is the local IP of the ...
-1
votes
1answer
291 views

Linux route policy based on tos returning wrong gateway

I have a simulated ad-hoc network running on Docker, using Ubuntu 16.04 as a base. I have a number of routing tables. The table in question, table 102, appears as: root@b22e0eafe06d:~# ip route show ...
1
vote
0answers
420 views

iproute2 routing through multiple networks with rt_tables

This question is similar to many others I've consulted while seeking an answer, both on ServerFault and elsewhere, but I'm stuck because as far as I can see I've set this up correctly but I'm have no ...
0
votes
1answer
4k views

“ip rule to” works but “ip rule fwmark” fails - why?

I have a CentOS 6 (kernel 2.6.32) router with working OpenVPN client on it, and I want to redirect some traffic via VPN server. Client (192.168.60.159) sends request to router (192.168.60.6:1443), ...
1
vote
3answers
2k views

How to know a virtual NIC's type on Linux?

On a Linux box, I see there exists a lot of virtual NIC's. If I want to know what's the link type when created them using 'ip link add ... type ...', what do I do? Thanks, woody
2
votes
0answers
2k views

Route QEMU VM traffic through hosts VPN

tl;dr Host connects via VPN to the internet and a VM on this host doesn't go through this VPN (but it should). I think the network config isn't quite correct. The host The host (arch Linux) connects ...
0
votes
1answer
1k views

dump all routes of all tables with iproute2

I want to save all routes of all routing tables. I have this script: #!/bin/bash DUMP=dump.log for i in `seq 0 255`; do routes="`ip route show table ${i}`" if [ ! -z "${routes}" ];then ...
0
votes
1answer
4k views

Not able to add static IP with Netplan on Ubuntu 18.04

so I have the following problem. There is dedicated Ubuntu 18.04 host, that is supposed to be assigned a static ip address. There are two interfaces, eth0 and eth1. eth0 ist getting its address via ...
0
votes
1answer
671 views

How do I load balance outgoing connections with iptables and iproute2?

I have a server behind two public facing gateways INTERNET | | GW1 GW2 | | SERVER GW1's IP is 192.168.w.x, MAC aa:bb:cc:dd:ee:ff GW2's IP is 192.168.y.z, MAC ff:ee:dd:cc:bb:aa # note: w != y ...

1
2 3 4 5