Questions tagged [networking]
Networking refers to the technologies and techniques that enable the interconnection of devices and applications allowing them to communicate electronically.
15,666
questions
0
votes
0
answers
53
views
IP6tables does not apply ACCEPT rules
My server is an IPv6 only server, I'm trying to write firewall rules using ip6tables and it looks something like this
Chain INPUT (policy ACCEPT)
num target prot opt source ...
0
votes
1
answer
45
views
IP redirect Lets encrypt
Here is Lets encrypt documentation regarding http validation:
"Our implementation of the HTTP-01 challenge follows redirects, up to 10 redirects deep. It only accepts redirects to “http:” or “...
0
votes
1
answer
57
views
kubeProxy unable to get node ip
I currently running a k8s cluster setup where I have 3 master nodes and 3 worker nodes installed with Kubeadm. Each one of the master nodes is responsible for managing a worker node. In one of my ...
-1
votes
1
answer
71
views
Weekly reboot of network switches [closed]
Seeking opinions on a perplexing IT practice: a company regularly reboots customers' switches weekly. This seems counterintuitive and could lead to issues, especially with multiple connected devices.
...
0
votes
1
answer
86
views
RHEL + how to know the limit of concurrent connections number per port?
how to know the number of concurrent connections per port on RHEL 7.x machines
for instance, let say we connect to port 9080 with XXXX concurrent connections.
wget http://server_mngmnt.jupiter.com:...
2
votes
1
answer
318
views
How to set iptables to block incoming requests to the server but still have internet connectivity
I have multiple services that are running on my server. But I do not want them to be exposed to internet. My input chain rules look something like this
-P INPUT ACCEPT
-P FORWARD DROP
-P OUTPUT ACCEPT
...
2
votes
1
answer
182
views
What is the difference between Loopback Interface and Dummy Interface in Ubuntu 20.04
I would like to know whats the differences between loopback and dummy interfaces in Ubuntu and how they behave.
Because when I assign /24 IP address on Loopback interface and route this range in my ...
-1
votes
0
answers
36
views
Routing all traffic via VPN except SSH tunnel
I have the following idea.
I route all my Windows PC traffic via SSH Tunnel (Dynamic) to my Server.
Then I set up a VPN connection to a remote VPN server.
What I want to achieve is to route all trafic ...
0
votes
0
answers
47
views
Can I run a DHCP server using Docker Swarm?
I am using PiHole inside Docker as my DNS server, I want to enable the DHCP server functionality but I am running in Docker Swarm and I am not certain if it can handle broadcast requests at least it's ...
0
votes
0
answers
47
views
How can I change the cipher suite on wpa_supplicant
I started to use wpa_supplicant to configure a MacSec connection with another computer, the problem is that there are several options that I do not find in the template of wpa_supplicant.
https://w1....
0
votes
0
answers
51
views
2nd network with 10G NIC on vSphere Cluster
I am installing Vsphere 8.0U2 Essential Plus on 3 Dell servers, each having 2x32C AMD CPU, 256GB RAM, 2x1G ethernet port, 2x10G dual port NIC along with 1xME5012 iSCSI storage with direct connectivity....
0
votes
0
answers
22
views
Netplan not changing active port when arp ip target is not reachable
I am trying to configure Ubuntu server 20.0.4 with netplan and use dual copper lan port and optical convertors to achieve redundancy.
in my config I have bond created of two interfaces
bond-lan:
...
0
votes
1
answer
93
views
iperf3 download and upload test simultaniously giving abnormal results
I have a server (Lenovo using Ubuntu) and 2 clients (both Mac). The server is connected with a Wi-Fi router over Eth interface. The two clients are connected with Wi-Fi router over WLAN interface. All ...
0
votes
0
answers
31
views
Can a FortiGate's "software switch" defined as FortiLink be also used with 3rd-party devices?
I need to connect a couple of FortiSwitches to a FortiGate HA pair over FortiLink.
I'm thinking to define a "software switch" object as FortiLink, rather than LAG or concrete port - for ...
0
votes
1
answer
26
views
RateLimit is doing weird maths and wrong numbers on kernel
I'm trying to apply a set of rate limit within iptables, and it's doing some weird maths that i'm not able to see on the kernel why this is happen.
I tried to execute same code on my local machine, ...
3
votes
2
answers
446
views
Debian create persistent network bridge
I need to create a persistent network bridge for Virtual machines (libvirt)
So this bridge does not need any physical ports, connections will be routed for this bridge.
If I set this up manually, it ...
0
votes
2
answers
209
views
Test-ComputerSecureChannel - Logon failure: unknown user name or bad password
I restored a Win7 image that I know will be out of date. I then run as administrator powershell from an account that is a member of the local machine administrator group.
All I get is:
Test-...
0
votes
1
answer
83
views
Is it possible to push out a Flutter app over Intune without going through the Google Play Store?
I made a flutter app and our team wants to push it out using Intune to a company owned Honeywell scanner. This scanner is running Android 11. If this works, we will be pushing this out to around 50 ...
0
votes
1
answer
127
views
Digital Ocean Firewall Prevent VPN Client Connectivity
Info: I have the below setup, connecting my digital ocean environment to my local network. Using strongswan on the Network A gateway I've made a site to site VPN connection with my meraki on Network B....
0
votes
0
answers
46
views
Access to Metallb IPs is not possible
I have a k8s cluster with 3 masters and 7 workers. I have many services on it and I want to expose some of them. I used Metallb for this task and with layer 2 configuration I can get IPs from IP pool ...
-1
votes
1
answer
127
views
Detect DHCP poisoning with cheap hardware
DHCP snooping is a feature that allow switches to prevent DHCP starvation and DHCP poisoning (MITM attacks on LAN).
But these features are not available on cheaper, domestic equipment such as entry-...
0
votes
0
answers
41
views
Kernel TLS Socket Redirect
Suppose both the client as well as the server are on the same machine and they want to do mTLS. They both choose to offload the TLS to Kernel (kTLS). Now when the key exchange happens, given the ...
0
votes
1
answer
59
views
Ideal method to virtually connect two ports transparently in a switch [duplicate]
I have an Aruba 2930F 48G PoE+ 4SFP+ switch. It has mostly default configurations, therefore all ports act as if it is transparent.
The router is a Belkin RT1800 running OpenWRT 23.05.2.
The internet ...
0
votes
0
answers
46
views
Benefits of extra DNS config for Google Cloud Private Google Access
Setup:
VM running in a subnet with public NAT enabled.
VM has only internal IP address.
VM needs to connect to Google APIs and services without traversing public internet.
Enabling NAT automatically ...
0
votes
0
answers
79
views
Ubuntu machine occasionally looses network connection until restarted
We have migrated our services to a new dedicated server, everything works well except one very strange problem. Somewhere once in a 3-4 weeks server gets offline. Our investigation shows that the ...
0
votes
0
answers
30
views
L2TP over IPSec VPN established successfully on main router/firewall, how to access second layer router and its devices?
I apologize if the question doesn't make a lot of sense. Let me explain.
I have two routers with a setup like this:
ISP-provided modem configured as bridge mode, connected to a TP-Link router TL-...
0
votes
0
answers
15
views
Access and restrict organization pages in client network
Im working on a sonarqube project for .net code which needs to be built to run the scan. However due to dependency issues, I'm planning to have the sonarqube set up (which runs on my organization VPN) ...
0
votes
1
answer
129
views
OpenVPN client cant communication with LAN
I am running FreshTomato 2023.5 and attempting to setup an OpenVPN server. I can generate the client config and get my iPhone to connect using the openvpn client. I can then ping the FastTomato ...
-1
votes
1
answer
139
views
My Hyper-V vm doesn't have internet connectivity after installing NordVPN
Like the title says, after I installed nordvpn my VMs don't connect to the internet. I tried disabling NordVPN completely and restarting my machine but the problem still persists. My VM is connected ...
0
votes
1
answer
47
views
Explaining why setting up a WiFi connection that interfaces with a virtual bridge in Linux is problematic
Just like you can bridge two wired ethernet interfaces, you can bridge between an ethernet interface and a wireless interface. However, most Access Points (APs) will reject frames that have a source ...
2
votes
2
answers
233
views
bridge for virtualisation stays in state DOWN - unable to get it up
Running Rocky 9.3, attempting to get a bridge for a public Range of IPs for use with Virtual machines.
Same hardware used to run Centos 7.8 machine with it all working, am now trying to set it up the ...
0
votes
0
answers
32
views
AWS: access private API from public web application
I have:
Private API running on an ECS cluster behind an internal load balancer. This API is used by other services inside the VPC.
A public Next.js web application.
What I need:
Give private API ...
0
votes
1
answer
30
views
Debugging Lambda Connectivity to EC2
I have a simple Lambda deployed into my VPC that is making a call to an EC2 host in the same VPC (and subnet). They both share an SG and I've used the Reachability Analyzer (from the Lambda ENI to ...
0
votes
1
answer
55
views
One computer cannot access port from another on the same same network
I have two servers with relatively fresh installs of CentOS 9 Stream on the same network. I can ping and ssh between them so can prove basic connectivity. serverA AFAIK has port 1883 (mqtt) open and ...
1
vote
1
answer
131
views
Create and assign separate subnet to each namespace
I have one master and one worker and 10 namespaces in k8s. I want to create and assign subnet to each namespace using by pods. for example I want to create and assign 10.0.0.0/24 to namespace 1, ...
0
votes
0
answers
162
views
Double IPv6 Static Addresses, is it possible?
I have two ISP, and I want to have two static IPv6 [::200].
It happens to work only one of them, if ISP 1 has the static one IPS 2 doesn't have static and uses 4 radom block ==> [:abcd:1111:3333:...
0
votes
0
answers
16
views
Issue with passing OpenVPN connection from Raspberry Pi device to only one particular device in subnet
I'm trying to figure out, how to pass OpenVPN connection to device from Raspberry Pi
There is openVPN connection set up on Raspberry Pi. Also pi-hole is set up for the whole network via main gateway (...
0
votes
1
answer
149
views
How to run a batch script completely and automatically on event such as sleep/hibernate and shutdown event using task scheduler?
I have written a batch script to perform some folder synchronizing task. I have scheduled the script to execute using task scheduler on events such as sleep/hibernate(kernel power event id 42) and ...
0
votes
2
answers
174
views
How to assign IP address for MS SQL AG Listener?
Sorry folks this is maybe a stupid question but I'm struggling.
All manuals like this just say "Click to add to add a static IP address to a selected subnet..." and nothing more.
I don't ...
0
votes
1
answer
52
views
Automatically change gateway based on internet connection
I have 2 connections to different internet providers in my Debian 11 system, I need to set the eth0 as the default and if it loses internet for any reason, change to eth1. After that if eth0 gets ...
0
votes
2
answers
60
views
Is it problematic to have packet loss on a specific node but not on subsequent nodes in the route?
Here is the result of two mtr reports on ipv4 and ipv6 to google.com
I had very consistent lag spikes when ipv6 was enabled. I disabled ipv6 and all my lag spikes disappeared. I concluded the problem ...
1
vote
1
answer
72
views
Assist me to understand the ethtool output
We have two servers that connect to a third party platform. One server has constant communication issues, the other does not.
I validated using the 'route' command that both servers use 'eth0'
When I ...
0
votes
0
answers
77
views
Global Server Load Balancing for OpenVPN over OpenVPN with DSR
Ok, so...I am in no sense a pro when it comes to networks, load balancing, tunneling or VPN connections BUT I tried a few things to get this theoretical concept to work - obviously without success.
...
1
vote
0
answers
57
views
Squid to allow src ip address
I have a squid proxy running on a docker on linux with ip say a.b.c.d
Squid proxy is configured to allow only certain domains (dst) and block everything else. There is also a parent proxy configured ...
0
votes
1
answer
38
views
Is SLAAC generation affected by non 64 bit size network prefix?
I have enabled all the parameters needed for the generation of SLAAC, and I am obtaining router advertisement, but the network prefix in the router advertisement is /52 and not /64. The system is not ...
-1
votes
1
answer
31
views
How do I point my SQL Server VM to my SCCM Server VM?
WMI Provider Error: Access is denied. [0x80070005]
I cannot connect the SQL Server to the SCCM Server with two seperate VM's.
I have two VM's on my ESXI Host. I am trying to point one VM to another. ...
0
votes
0
answers
22
views
Unable to access switch management interface
On one of my sites, I have a Netgear network ecosystem. This is typically managed by the Netgear insight cloud portal. One of my switches is unreachable from the cloud portal, it also can not be ...
-2
votes
2
answers
155
views
I have a whole ipv6 range /32 for my application. I want to use all of it [closed]
The Problem
I know how to add block to interface. But I really don't know how to use specific address dynamically.
What I want
For example:
I have a block fe80::/32 for my application.
I will let my ...
0
votes
1
answer
72
views
How can I force web request to resolve to external DNS
We are using a split DNS for traffic for our primary domain - external traffic goes to Cloudflare, and internal traffic goes to our windows server DNS, for security reasons. However, for our primary ...
0
votes
2
answers
83
views
Way to keep over 65k TCP connect to a server
As a programmer and a newcomer to network and infrastructure,
I've developed a server program capable of handling over 100,000 connections concurrently.
During testing in a local network with 20,000 ...