4
votes
Accepted
Debian: Where does a bridge interface store its MAC address and how can I change it?
The overall behavior is caused by systemd, even if systemd isn't configured to manage the system's network.
A bridge interface on Linux has two "modes" with its MAC address:
the implicit ...
4
votes
Cannot get over 100k iops from storage on 10g network on 4k random blocks
You're saturating the PCIe bus with iowaits, don't look at CPU load.
40g or 100g would help a bit: your problem is latency.
You'll never come close to approaching sequential speeds over a NIC doing 4k ...
4
votes
No Wired Connections in Ubuntu
You need to install the driver for the X722. Go to: Intel and download the
Generic Linux driver. or you can use this Direct link to the driver for verion 2.23.17
You need to decompress the drive by ...
4
votes
Accepted
What does a CIDR mask mean in the context of "ip address add"?
ip address add dev wg0 192.168.2.1/24
That adds the IP address 192.168.2.1 to the indicated interface, with a subnet mask of /24 or 255.255.255.0. The possible IP addresses for wg clients are 192.168....
4
votes
I have a whole ipv6 range /32 for my application. I want to use all of it
You need a reality check and - cough - some RTFM.
The address block FE80 is link local. It is meant as a last resort. Every endpoint on an ethernet segment has an address there if it has IPv6 active. ...
4
votes
Accepted
Debian create persistent network bridge
You have to give an option so the bridge plugin that is provided as /etc/network/if-pre-up.d/bridge by installing the package bridge-utils activates. The main command it provides brctl is of no use (...
3
votes
Accepted
Is it possible to create a local SRV record in linux?
Linux does not have a built in method for that, you should look into dnsmasq and setup a lightweight DNS resolver, first install it
apk add dnsmasq
then we create a configuration file for example ...
3
votes
Accepted
Two ipv6 tunnels from different providers on the same host
A few remarks
For network configuration tools other than ifupdown, v4tunnel is really a layer 3 SIT tunnel which can be created depending on tools using the equivalent of ip tunnel add FOO mode sit ......
3
votes
How to make IpTable Rules immutable in linux
There is no way to do that. root can always change the ruleset, no matter what.
In addition to that, locking individual rules is pointless, since their order and other interference factors are ...
3
votes
Accepted
Is it possible to configure a Linux/Ubuntu computer to be network silent?
You can make your machine completly silent with one of following solutions:
drop any outgoing packets from firewall
don't configure any IP addresses on interfaces where you want it to be silent
You ...
3
votes
What does a CIDR mask mean in the context of "ip address add"?
You are right, this is the UNIX/Linux (and probably other operating systems) to define with one record IP address and netmask. The decoding is:
192.168.2.1/24
This is the IP address
192.168.2.1
This ...
3
votes
How to make sure installing updates using apt does not restart networking services?
A maybe different approach I would use a static ip for the VM, instead of dynamically let it get assigned. Not restarting the network daemon might cause other problems when running the playbook
Or you ...
3
votes
Accepted
How to make sure installing updates using apt does not restart networking services?
Separate the IP address change from the package transaction and the rest of the play.
First update packages and do whatever other things.
As the last things in this play, update the IP address for ...
3
votes
Can I use 127.0.0.2, 3, etc to map docker container ports to the same port but different loopback IP on my docker host?
Yes you can and for the whole /8 subnet if you want to do it
2
votes
Accepted
Unable to SSH into OpenVPN cloud connector machine over VPN IP
Just in case anyone gets into same trouble: this problem has nothing to do with firewall on your side as connection is dropped on cloud side. According to OpenVPN cloud idea you use "network ...
2
votes
Accepted
Network traffic detected on nethogs but not netstat
If there's nothing listening on your server's port (443), linux will still respond to incoming TCP SYN packet with a RST,ACK to say "nothing on this port, bugger off". That TCP response is ...
2
votes
Accepted
Google Cloud Engine - Network unreachable (with NAT)
As per the information provided, it is observed that the Compute Engine instance is in us-central1-c zone whereas Cloud NAT Gateway and Cloud Router are in northamerica-northeast1 region. It clearly ...
2
votes
Making all Linux network interface (bridged) in a qemu VM use dhcp
There's several ways of doing this.
You could
generate /etc/network/interfaces during the boot process, using the names assigned
disable the renaming of devices (initially assigned eth0, eth1 ... ...
2
votes
Accepted
iptable rule for an IP address with "any" subnet mask
I want to avoid adding individual 33 rules for each subnet mask.
It is very unlikely that you would ever need to that. And I think you don't quite understand what a subnet mask means or effects.
A ...
2
votes
Is 'sudoer' a must for 'ip' command? Anyway to get around it?
This is mostly comment (but not enough space in the coment box).
Is there a solution to running a command which requires elevated privileges without elevating privileges? - No
"I do not give such ...
2
votes
Accepted
Is 'sudoer' a must for 'ip' command? Anyway to get around it?
The HA scenario requires failing over a (virtual) IP-address and sending gratuitous arp requests to ensure that the LAN learns that an IP failover has occurred.
Making changes to a systems IP stack ...
2
votes
Getting "has no address records (A or AAAA)" error when running named-checkzone
It doesn't know what is primary.wallynet.local. Probably, the forward zone doesn't contain such name at all? Unfortunately, we never saw your forward zone so can't check. I am only convinced there ...
2
votes
Getting "has no address records (A or AAAA)" error when running named-checkzone
For starters: there is a line-break missing:
$TTL 86400 @ IN SOA primary.wallynet.local. root.wallynet.local. (
2011071001 ;Serial
should be:
$TTL 86400
@ IN SOA primary.wallynet.local. ...
2
votes
How ARP (address resolution protocol) works with ethernet bonding?
We use a dual network card server with bond in 802.3ad mode.
While LACP was first introduced in IEEE 802.3ad, it's since been moved to IEEE 802.1AX.
So I have questions about how the ARP protocol ...
2
votes
Accepted
Routing traffic between A and C using A-B wireguard's network
WireGuard is a layer 3 interface (the lowest layer is IPv4 (or IPv6) on this interface). That means there is no concept of gateway in the Linux routing stack for this interface. Any use of a gateway ...
2
votes
ipv6 : same /64 prefix across multiple physical subnets / interfaces - in Linux
Tell your ISP you need more /64s routed to you. At least a /56 is the convention for all sites with a router, including residential. More might be justified depending on your address plan.
If your ISP ...
2
votes
Accepted
Duplicate all outgoing IP packets
iptables -j TEE target is designed exactly to clone matched packets:
man iptables-extensions
TEE
The TEE target will clone a packet and redirect this clone to
another machine on the local network ...
2
votes
Pods in a specific node don't have internet access
Looks like the issue happened after the OS upgrade, so check CNI Plugin, CRI’s and Container Images of pods are up to date and compatible with the newer OS version 22.04.
The issue might happen ...
2
votes
2
votes
Pods in a specific node don't have internet access
Kubelet showing you 404 is expected since that URL doesn't exists.
try the following:
curl -k https://localhost:10250/healthz
I would start with ip_forward check on the faulty node
cat /proc/sys/net/...
Only top scored, non community-wiki answers of a minimum length are eligible
Related Tags
linux-networking × 3320linux × 1021
networking × 953
iptables × 453
ubuntu × 235
routing × 235
centos × 151
debian × 138
bridge × 127
firewall × 116
openvpn × 116
kvm-virtualization × 115
ipv6 × 114
vpn × 104
tcp × 89
ssh × 85
nat × 84
centos7 × 80
domain-name-system × 78
docker × 78
ip × 77
vlan × 76
linux-kernel × 71
dhcp × 66
redhat × 55