4 votes
Accepted

Debian: Where does a bridge interface store its MAC address and how can I change it?

The overall behavior is caused by systemd, even if systemd isn't configured to manage the system's network. A bridge interface on Linux has two "modes" with its MAC address: the implicit ...
A.B's user avatar
  • 12.7k
4 votes

Cannot get over 100k iops from storage on 10g network on 4k random blocks

You're saturating the PCIe bus with iowaits, don't look at CPU load. 40g or 100g would help a bit: your problem is latency. You'll never come close to approaching sequential speeds over a NIC doing 4k ...
user2045916's user avatar
4 votes

No Wired Connections in Ubuntu

You need to install the driver for the X722. Go to: Intel and download the Generic Linux driver. or you can use this Direct link to the driver for verion 2.23.17 You need to decompress the drive by ...
Luke Attard's user avatar
4 votes
Accepted

What does a CIDR mask mean in the context of "ip address add"?

ip address add dev wg0 192.168.2.1/24 That adds the IP address 192.168.2.1 to the indicated interface, with a subnet mask of /24 or 255.255.255.0. The possible IP addresses for wg clients are 192.168....
Zac67's user avatar
  • 11.5k
4 votes

I have a whole ipv6 range /32 for my application. I want to use all of it

You need a reality check and - cough - some RTFM. The address block FE80 is link local. It is meant as a last resort. Every endpoint on an ethernet segment has an address there if it has IPv6 active. ...
TomTom's user avatar
  • 51.9k
4 votes
Accepted

Debian create persistent network bridge

You have to give an option so the bridge plugin that is provided as /etc/network/if-pre-up.d/bridge by installing the package bridge-utils activates. The main command it provides brctl is of no use (...
A.B's user avatar
  • 12.7k
3 votes
Accepted

Is it possible to create a local SRV record in linux?

Linux does not have a built in method for that, you should look into dnsmasq and setup a lightweight DNS resolver, first install it apk add dnsmasq then we create a configuration file for example ...
Saxtheowl's user avatar
  • 1,172
3 votes
Accepted

Two ipv6 tunnels from different providers on the same host

A few remarks For network configuration tools other than ifupdown, v4tunnel is really a layer 3 SIT tunnel which can be created depending on tools using the equivalent of ip tunnel add FOO mode sit ......
A.B's user avatar
  • 12.7k
3 votes

How to make IpTable Rules immutable in linux

There is no way to do that. root can always change the ruleset, no matter what. In addition to that, locking individual rules is pointless, since their order and other interference factors are ...
Nikita Kipriyanov's user avatar
3 votes
Accepted

Is it possible to configure a Linux/Ubuntu computer to be network silent?

You can make your machine completly silent with one of following solutions: drop any outgoing packets from firewall don't configure any IP addresses on interfaces where you want it to be silent You ...
Mircea Vutcovici's user avatar
3 votes

What does a CIDR mask mean in the context of "ip address add"?

You are right, this is the UNIX/Linux (and probably other operating systems) to define with one record IP address and netmask. The decoding is: 192.168.2.1/24 This is the IP address 192.168.2.1 This ...
Romeo Ninov's user avatar
  • 5,932
3 votes

How to make sure installing updates using apt does not restart networking services?

A maybe different approach I would use a static ip for the VM, instead of dynamically let it get assigned. Not restarting the network daemon might cause other problems when running the playbook Or you ...
Turdie's user avatar
  • 2,554
3 votes
Accepted

How to make sure installing updates using apt does not restart networking services?

Separate the IP address change from the package transaction and the rest of the play. First update packages and do whatever other things. As the last things in this play, update the IP address for ...
John Mahowald's user avatar
3 votes

Can I use 127.0.0.2, 3, etc to map docker container ports to the same port but different loopback IP on my docker host?

Yes you can and for the whole /8 subnet if you want to do it
djdomi's user avatar
  • 2,007
2 votes
Accepted

Unable to SSH into OpenVPN cloud connector machine over VPN IP

Just in case anyone gets into same trouble: this problem has nothing to do with firewall on your side as connection is dropped on cloud side. According to OpenVPN cloud idea you use "network ...
Anton  Lantcevich's user avatar
2 votes
Accepted

Network traffic detected on nethogs but not netstat

If there's nothing listening on your server's port (443), linux will still respond to incoming TCP SYN packet with a RST,ACK to say "nothing on this port, bugger off". That TCP response is ...
JeffT's user avatar
  • 36
2 votes
Accepted

Google Cloud Engine - Network unreachable (with NAT)

As per the information provided, it is observed that the Compute Engine instance is in us-central1-c zone whereas Cloud NAT Gateway and Cloud Router are in northamerica-northeast1 region. It clearly ...
Kiran Kotturi's user avatar
2 votes

Making all Linux network interface (bridged) in a qemu VM use dhcp

There's several ways of doing this. You could generate /etc/network/interfaces during the boot process, using the names assigned disable the renaming of devices (initially assigned eth0, eth1 ... ...
symcbean's user avatar
  • 22.4k
2 votes
Accepted

iptable rule for an IP address with "any" subnet mask

I want to avoid adding individual 33 rules for each subnet mask. It is very unlikely that you would ever need to that. And I think you don't quite understand what a subnet mask means or effects. A ...
HBruijn's user avatar
  • 80.3k
2 votes

Is 'sudoer' a must for 'ip' command? Anyway to get around it?

This is mostly comment (but not enough space in the coment box). Is there a solution to running a command which requires elevated privileges without elevating privileges? - No "I do not give such ...
symcbean's user avatar
  • 22.4k
2 votes
Accepted

Is 'sudoer' a must for 'ip' command? Anyway to get around it?

The HA scenario requires failing over a (virtual) IP-address and sending gratuitous arp requests to ensure that the LAN learns that an IP failover has occurred. Making changes to a systems IP stack ...
HBruijn's user avatar
  • 80.3k
2 votes

Getting "has no address records (A or AAAA)" error when running named-checkzone

It doesn't know what is primary.wallynet.local. Probably, the forward zone doesn't contain such name at all? Unfortunately, we never saw your forward zone so can't check. I am only convinced there ...
Nikita Kipriyanov's user avatar
2 votes

Getting "has no address records (A or AAAA)" error when running named-checkzone

For starters: there is a line-break missing: $TTL 86400 @ IN SOA primary.wallynet.local. root.wallynet.local. ( 2011071001 ;Serial should be: $TTL 86400 @ IN SOA primary.wallynet.local. ...
HBruijn's user avatar
  • 80.3k
2 votes

How ARP (address resolution protocol) works with ethernet bonding?

We use a dual network card server with bond in 802.3ad mode. While LACP was first introduced in IEEE 802.3ad, it's since been moved to IEEE 802.1AX. So I have questions about how the ARP protocol ...
Zac67's user avatar
  • 11.5k
2 votes
Accepted

Routing traffic between A and C using A-B wireguard's network

WireGuard is a layer 3 interface (the lowest layer is IPv4 (or IPv6) on this interface). That means there is no concept of gateway in the Linux routing stack for this interface. Any use of a gateway ...
A.B's user avatar
  • 12.7k
2 votes

ipv6 : same /64 prefix across multiple physical subnets / interfaces - in Linux

Tell your ISP you need more /64s routed to you. At least a /56 is the convention for all sites with a router, including residential. More might be justified depending on your address plan. If your ISP ...
John Mahowald's user avatar
2 votes
Accepted

Duplicate all outgoing IP packets

iptables -j TEE target is designed exactly to clone matched packets: man iptables-extensions TEE The TEE target will clone a packet and redirect this clone to another machine on the local network ...
Nikita Kipriyanov's user avatar
2 votes

Pods in a specific node don't have internet access

Looks like the issue happened after the OS upgrade, so check CNI Plugin, CRI’s and Container Images of pods are up to date and compatible with the newer OS version 22.04. The issue might happen ...
Veera Nagireddy's user avatar
2 votes

Pods in a specific node don't have internet access

Solution was to restart the server ...
Melardev's user avatar
  • 131
2 votes

Pods in a specific node don't have internet access

Kubelet showing you 404 is expected since that URL doesn't exists. try the following: curl -k https://localhost:10250/healthz I would start with ip_forward check on the faulty node cat /proc/sys/net/...
iCE's user avatar
  • 51

Only top scored, non community-wiki answers of a minimum length are eligible