Questions tagged [network-namespace]
A network namespace is an isolated software implementation of a network stack with its own devices, routes and firewall rules within a Linux operating system.
80
questions
1
vote
0
answers
185
views
Unable to make bridge interface UP state
I am just learning networking, Pardon if my question does not give all details, I can provide if needed.
I am trying to learn network namespaces in Linux.
I have created two namespaces red and blue
ip ...
- 111
1
vote
0
answers
162
views
network namespace with veth bridge not working - ICMP sent but no reply
I'm attempting to achieve a somewhat standard bridged netns setup with a veth pair, with one end in the ns and the other on the bridge :
iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -...
- 35
0
votes
0
answers
113
views
Iptable traversal with docker chains
Using this as a reference and this previous post, I attempted at creating a iptable packet processing flowchart when docker containers on the bridge network are considered. The flowchart is shown ...
- 3
2
votes
1
answer
359
views
Use netns to bind programs to specific IP addresses
I have an IP address on my server, say, 192.168.0.3, I want to share in a net namespace, so to run apps there which will only be able to communicate to the internet using that 192.168.0.3.
I can "...
- 21
1
vote
1
answer
361
views
WireGuard & Network Namespaces
I am trying to set up a VPN gateway with two wireguard interfaces.
One being a gateway accessible from the init namespace, which can forward incoming local packets from eth0.
The second interface is ...
- 131
0
votes
1
answer
356
views
Ping to/from KVM QEMU VM running in another network namespace
I cannot ping to the default network namespace from a KVM QEMU VM running in a separate network namespace.
Here is my setup:
ip netns add test-ns
# Creating veth
ip link add if-in-ns type veth peer ...
- 1
1
vote
1
answer
544
views
Using socat to proxy abstract-namespace UNIX sockets across network namespaces
I have a system service that listens for commands on a UNIX domain socket in the abstract namespace. I now need to access this from a process in another network namespace. Because the socket is in ...
- 327
0
votes
0
answers
103
views
how to access host's tunnel interface from ipvlan interface inside namespace
+------------------------------+
| Host: |
| enp2s0 : 192.168.1.50/24 |
| wg0 : 172.31.0.6/24 |
| uservlan: 172.30.0.6/24 |
| +------------------------+ |
| |...
- 103
0
votes
0
answers
24
views
Is Hyper-V Internal Switch on a different namespace/VRF?
Query about Internal switch in Hyper-V:
Say, my host's LAN IP is 192.168.1.0/24 (physical NIC) and is in an office building. Now, say there was a 10.10.10.0/24 network reachable from my host on that ...
- 21
0
votes
0
answers
180
views
Create network namespace for tun0 and assign application
I'm new to linux and have set up my own Lubuntu 20.04 box. So far I've disabled IPV6, setup firewall rules, configured groups, users and sudoers file, mounted network shares and installed ssh, xrdp, ...
- 113
0
votes
0
answers
148
views
Why are veth peer interfaces getting created in the current namespace instead of the target namespaces?
I enter the commands below try to create a pair of network namespaces and a veth device pair to connect the namespaces.
$ sudo ip netns add netns_br0
$ sudo ip netns add netns_veth0
$ sudo ip link add ...
0
votes
1
answer
460
views
Ubuntu 22.04 netns with veth connected to bridge unable to ping gateway
Hey guys this is probably just something stupid I'm missing, but I'm having trouble setting up a net namespace to use for my VPN. The weird part is that this script/setup was working, and has suddenly ...
- 19
1
vote
2
answers
499
views
Linux - force different users to use different network interfaces
I have a linux machine set up with a one physical NIC, connected with a managed switch. The connection is a VLAN trunk. On the machine there are two vlan interfaces for which there are different IP ...
- 13
0
votes
0
answers
692
views
iptables -j MASQUERADE for a specific network interface: after connecting to a VPN and changing the default route, connection in the peer is lost
I use to forward traffic from my wireless card to network namespaces.
I create the network namespace, virtual ethernet interfaces and all the rest:
ip netns add nsx
ip link add vethx type veth peer ...
- 133
0
votes
0
answers
234
views
How can I set up a transparent proxy (TPROXY type) across network namespaces?
I want to setup a transparent proxy across network namespaces. I have two network namespaces, "nsx" and "nsy", each one has a veth pair, the pair of "nsx" is pointed to ...
- 133
1
vote
1
answer
337
views
Setting up a transparent proxy across network namespaces: failed to get target destination address
I'm trying to setup a transparent proxy across network namespaces.
First I create the network namespaces, virtual ethernet devices and enable forwarding inside one of the namespaces:
ip netns add nsx
...
- 133
2
votes
3
answers
2k
views
Linux ping between 2 network namespaces
Quiet new to Linux networking and couldn't find an answer for it on similar questions
Trying to create 2 namespaces and ping between them
ip netns add red;
ip netns add blue;
ip link add dev v-red ...
- 125
1
vote
1
answer
1k
views
systemd-resolve resolves incorrectly inside a network namespace
I have an Ubuntu machine with a network namespace (ns1) connected to the host network namespace via veth. I created a MASQUERADE rule in iptables to access the internet and I can ping 8.8.8.8 from the ...
- 299
0
votes
0
answers
1k
views
Cannot connect macvlan to the internet
When I tried to connect macvlan to the internet and it was not successful.
I used namespace to accomplish that. I also checked the comments on this question - How to connect macvlan to the internet?
I ...
- 101
0
votes
1
answer
1k
views
Connect to internet through network connection inside network namespace without setting as a default route
I need to do a setup like this (with Linux):
I want to have a network namespace (let's say weth_ns) with a network interface connected to internet (weth0)
I want to have a different network interface ...
- 155
-2
votes
1
answer
1k
views
How can I run two docker containers in the same network namespace? [closed]
I want to run two docker containers in the same Linux network namespace.
My goal is to route all my torrent traffic through OpenVPN.
This script successfully creates a openvpn client container.
I can ...
- 147
3
votes
1
answer
485
views
After a while, /etc/resolv.conf stops using /etc/netns/X/resolv.conf
My setup:
/etc/ns-shared-resolv.conf is written to regularly with nameserver x.x.x.x, updated from a script
/etc/netns/ag2/resolv.conf is a symlink to the above (along with ag3, ag4).. for central ...
- 141
2
votes
1
answer
1k
views
How can I run docker container in existing network namespace?
I have an existing network namespace:
dewi@dewiserver:~$ ip netns list
dewinetns235 (id: 0)
How can I get a docker container to use and run inside this network namespace?
e.g. run something like
...
- 147
0
votes
1
answer
1k
views
Force new process to use the specific network interface (using netns/network namespaces)
I have a number of interfaces available on Ubuntu 20.04 machine. Among others enx0c5b8f279a64 and usb0 with the later being used as the default one. I want to make sure that a particular process ...
- 11
2
votes
2
answers
600
views
Can't chain more than one network namespace together
Problem Statement
With the below configuration a veth pair is created between the default/main net namespace and a netns called ns1.
The config also creates a second veth pair: veth2 is in netns ns1 ...
- 4,212
2
votes
1
answer
307
views
Can I change the default sysctl values in grub?
When using kernels older than 5.1, if a user creates a network namespace, it starts with the default sysctl values. Even if the root namespaces changed those values with sysctl, the new network ...
- 299
1
vote
1
answer
1k
views
How to set /proc/sys/net/ipv6/conf/all/forwarding to 1 by default in network namespaces?
By default, when I create a network namespace, I get:
/proc/sys/net/ipv6/conf/all/forwarding=0
Even if it is 1 in my root network namespace or in /etc/sysctl.conf. I was wondering where network ...
- 299
1
vote
0
answers
199
views
How to whitelist egress traffic with a NetworkPolicy that doesn't prevent Apache Ignite from starting up?
I have some more or less complex microservice architecture, where Apache Ignite is used as a stateless database / cache. The Ignite Pod is the only Pod in its Namespace and the architecture has to ...
- 131
0
votes
1
answer
435
views
How conntrack and network namespaces works together?
Is nf_conntrack respects network namespaces? Does it creates a separate table for each network namespace based on its sysctl limits, or does it share memory (and limits) between different network ...
- 296
0
votes
1
answer
564
views
iptables NETMAP not reliably adjusting source address of multicast UDP packets
In an embedded/IoT use case, I have a management host running Linux that needs to be able to talk to multiple networks that each use a common set of static IP addresses.
This mostly works fine, ...
- 183
1
vote
1
answer
633
views
Why are my packets refusing to be routed?
I'm setting up a rather unusual network configuration meant to afford some additional protection to certain containers running on a host. There are some external requirements that are beyond the ...
- 36
1
vote
0
answers
2k
views
How to connect macvlan to the internet?
I want to connect macvlan to the internet, but i can't.
I added macvlan to the network namespace, what to do next?
I am using VPS server (Cloud VPS), OS Debian 10
My default gateway, outside the ...
- 111
0
votes
1
answer
221
views
Using netns to force Java application use specify IP
My VPS provider assigned 4 IPv4 to my vps. However, This assigned to single NIC, and VLAN not working(Maybe it is my configuration problem). If I try using VLAN, I can't get external network using ...
- 113
2
votes
3
answers
2k
views
How to use ss in specific network namespace
Whilst investigating some TCP network issues in containers I tried to use ss to peek into container network TCP stack.
We are running Amazon Linux in AWS:
# uname -a
Linux 4.14.173-137.229.amzn2....
- 1,828
0
votes
1
answer
1k
views
Unable to ping container from outside
I've to connect to a service running inside a runc container, I've written the below script and is able to ping the container from the host and can connect to the internet from inside the container.
...
- 121
2
votes
1
answer
1k
views
Alpine linux veth network/bridge has no internet
I have been trying to follow multiple guides to setup a veth-pair for 2 namespaces which can communicate with each other on alpine linux. So far I have communication between namespaces working but ...
- 123
0
votes
0
answers
1k
views
Error: Connection activation failed: Failed to find a compatible device for this connection
Hi linux newbie here pardon any mistakes.
I have configured a network namespace local-routeTable and have brought up interface eth3 inside the namespace:
# ip netns exec local-routeTable ifconfig
eth3:...
- 3
0
votes
1
answer
443
views
Issues resolving queries using bind and linux namespaces
I have been wracking my brain trying to resolve an issue using bind for DNS resolution in centos
The setup I have is not typical (this was inherited).
Basically on the server there is a namespace ...
- 31
1
vote
2
answers
643
views
Bonding 2 interfaces inside a linux network namespace
I'd like to be able to bond/aggregate 2 interfaces inside a Linux network namespace.
The configuration I'm working with is the following:
On the root linux net stack I have two physical ethernet ...
3
votes
1
answer
3k
views
Run docker in an existing network namespace?
Would it be possible to run a docker container inside an existing namespace ?
I created a namespace using:
ip netns add client
Now I want to run a container (with a bridge or host network, whatever is ...
- 41
3
votes
2
answers
3k
views
Inter-Guest Network in KVM without a Bridge
I would like to have a psuedo-wire between two guests in KVM. I cannot use a bridge of any type as the guest VMs are actually virtual switches themselves.
Conceptually, it seems that a veth-pair is ...
- 31
11
votes
1
answer
2k
views
Windows equivalent of Linux Network Namespace
Does windows have an equivalent of the Linux Network Namespace?
I want to create a new interface and have that interface only accessible to specific applications, that interface would not be ...
- 211
0
votes
1
answer
217
views
Weird issue with linux network namespace switching
I'm writing a small prometheus exporter in Go to publish network metrics for docker containers.
There is a goroutine which gathers the values in the following way:
1. Get all docker containers using ...
- 11
2
votes
2
answers
783
views
Unable to reach network namespace through master
I'm trying to create an isolated lab using network namespaces.
It works correctly, that is, only the machines in the network namespace can talk.
But now I want reach the machines by localhost using v-...
- 133
0
votes
1
answer
411
views
ping server in namespace from remote machine
If I run web server in default namespace of SERVER machine I can curl it from REMOTE machine doing that:
curl http://SERVER:80/
Now I put web server in namespace nested with providing veth peered ...
- 103
0
votes
1
answer
884
views
How to access the files present inside namespace to the outside in Linux Machine?
I have linux system where i created network namespace "BLUE_NAME", requirement to access the /var/tmp files present in the BLUE_NAME network space to outside of the name space (Host Machine).Request ...
9
votes
1
answer
8k
views
Cannot create nested network namespace
Is seems that one is not able to create a network namespace from a network namespace. It results in "Error: Peer netns reference is invalid.".
Is this a bug or is there some kind of limitation that I ...
- 193
1
vote
1
answer
2k
views
Ping not working in network namespace
If I do:
sudo ip link add l4 type veth
sudo ip addr add "7.7.7.7/24" dev l4
ping 7.7.7.7
PING 7.7.7.7 (7.7.7.7) 56(84) bytes of data.
64 bytes from 7.7.7.7: icmp_seq=1 ttl=64 time=0.023 ms
64 bytes ...
- 11
3
votes
1
answer
5k
views
Netstat and ss doesn't see connection
I'm trying to find which application running on Kubernetes cluster is using a specific port to communicate with RabbitMQ cluster. On RabbitMQ I see that connection is coming from 192.168.1.10:34226. ...
- 653
4
votes
2
answers
11k
views
How to run a command in another process's network namespace?
There is a process running in its own network namespace. I would like to telnet to the machine and run a command in this process network namespace, something like that (17543 is the pid of the process ...
- 141