New answers tagged

0 votes

Accessing azure internal container app though P2S vpn connection

at a high level an internal container apps env uses an Azure Internal Load Balancer (ILB) with an IP taken from the related subnet and an Envoy Ingress controller as described here https://learn....
Ben Gimblett's user avatar
1 vote

Proxmox host and VM running on it see different machines on their network using the same connection

Solution: LOL, I found the answer... as noted in the switch config, the two ports where the problematic PVE host was connected were set to LACP mode on the switch while the bond I created on the PVE ...
heeeresjohnny's user avatar
0 votes

Change netmask subnet on server due to reduced IP range allocation

The only difference it would make to change the subnet mask would be the broadcast address, you can see it written after brd. Now you have the broadcast as 123.123.123.255, with a /28 it would be 123....
Giulio Pontiggia's user avatar
-1 votes

What causes the 'Connection Refused' message?

What causes the 'Connection Refused' message? Incorrect IP address or port number specified. The server application is not running to listen on that port. The server application is running but not ...
Yousha Aleayoub's user avatar
0 votes

403 from Google certificate endpoint when using IPv4

We are still running into this issue. Our bitbucket pipeline runners are hosted in a kubernetes on hetzner cloud and they dynamically scale up new nodes on demand. Sometimes it happens that builds ...
Thomas Einwaller's user avatar
1 vote

AWS NAT Instance Setup

After many tries, the configuration script which worked perfectly for me on the Amazon Linux 2023 (AMI like "al2023-ami-2023*") NAT instance was: sudo yum install iptables-services -y sudo ...
Romain Spinelli's user avatar
1 vote
Accepted

Port unreachable when wireguard is connected

Your routing tables are stateless, they don't have any information about a packet being an answer or your port being bound. So you can use the connection table to add a mark when a connection is made ...
setenforce 1's user avatar
  • 1,390
0 votes
Accepted

Knative On-Premise setup without external IP

I tried setting up network using Magic DNS explained here. I believe this is not provided in the official installation guide. # Install Magic DNS kubectl apply -f https://github.com/knative/serving/...
Waqar Alamgir's user avatar
0 votes

Could a faulty switch cause upload speeds for some to be slow?

A faulty switch can cause all sorts of problems - but as you wrote, it's not all too likely to fail in a weird way at that exact time. You can simply run a performance test between different nodes or ...
Zac67's user avatar
  • 11.5k
1 vote

Change netmask subnet on server due to reduced IP range allocation

That depends. To make sure you should ask the datacenter guys, they must know. If you've got a routed subnet of your own, then you might need to change the mask. Not doing so prevents your servers ...
Zac67's user avatar
  • 11.5k
1 vote
Accepted

MQ broker in private or public subnet?

My opinion is given you would have a security group the only allows specific IPs access to your MQ, there's little benefit adding a network load balancer. If it was on the public internet, the ...
Tim's user avatar
  • 32.7k
3 votes
Accepted

403 from Google certificate endpoint when using IPv4

Hetzner resolved the issue. It turned out that the IP of the server was falsify flagged as Iranian. (The server itself was located in Germany) Iran is currently under sanctions and blocked by Google. ...
Nikolai Jay Summers's user avatar
1 vote

Fetching Netcat Response

I would use postman to debug https://www.postman.com/ Industry leading tool for web debug #!/ #!/bin/bash # Set the variables for your collection and environment files COLLECTION_FILE="...
Guido's user avatar
  • 84
0 votes

Knative On-Premise setup without external IP

Implement IPv6, and your own domain name with "real DNS", to use Knative's phrase. Kubernetes supports IPv6, and those Knative docs provide a reference for several Kubernetes ingress options....
John Mahowald's user avatar
0 votes

Debian server unable to connect to network

Okay, so it's really strange after spending over 4 hours on the problem. I activated my WiFi card and there was the opposite issue: I could see everyone, but no one within the network could see me. ...
Su4p's user avatar
  • 119
0 votes
Accepted

Why is https communication not working with iptables?

The issue is that you don't have a rule to allow response packets from the internet to come through. That is, DNS request is sent to an internet host at UDP port 53, and its reply comes from internet ...
Tero Kilkanen's user avatar
0 votes

No DNS record or entry in Host file, but can still access IIS site?

It was a DNS Manager in a random VM... Sorry to waste everyone time lol
Michael Brown's user avatar
0 votes

Interpreting ethtool Coalesce output

I have found this: https://knowledge.informatica.com/s/article/80204?language=en_US If I'm not mistaken, rx-max-frames is the same with rx-frames, so wherever you see rx-max-frames, translate it to rx-...
Christoforos Seas's user avatar
1 vote

Netplan configuration for bridge and route setup

I believe the answer to your question can be found here: https://bugs.launchpad.net/netplan/+bug/1664847/comments/19 ...only he called his interface macvlan0 where yours is loop-to-lan.
Rayn0r42's user avatar
2 votes
Accepted

How to do VPN split tunneling for urls and IP addresses on Windows 11

You cannot get this behavior exactly. Forwarding packets is always based on IP addresses: The entity that forwards packets checks the destination IP address and selects outgoing interface based on ...
Tero Kilkanen's user avatar
1 vote

Testing UDP port connectivity

According to @Zakaria and @Koray answers. Here is what works for me: On Connected port, STATE value is open: $ sudo nmap -sU -pU:53 192.168.1.1 PORT STATE SERVICE 53/udp open domain ...
kholis's user avatar
  • 126
2 votes
Accepted

Why does MySQL server not respect bind_address?

The quote from the documentation you linked: If the address is *, the server accepts TCP/IP connections on all server host IPv4 interfaces, and, if the server host supports IPv6, on all IPv6 ...
AlexD's user avatar
  • 10.3k
0 votes

ath9k driver sees only some Wi-fi networks

Summary: /sbin/crda is no more part of Debian/Ubuntu installation. cat /sys/module/cfg80211/parameters/ieee80211_regdom shows region 00 iw reg get shows region 00 iw reg set EU or iw reg set CZ wont ...
ibre5041's user avatar
  • 287
0 votes

meaning of rx_queue_*_csum_err and rx_fifo_errors

As per the Linux kernel documentation: RX Queue Checksum errors are indicative of physical link errors. Where as RX Fifo errors are indicative of a FIFO overrun, as described by @Signal15 ...
Paul-K's user avatar
  • 527
2 votes
Accepted

Users cant nslookup my windows server 2019 domain

the first one is the one i want, i manually configured it on the control panel, but for some reason the mere existense of the second one is messing with my domain, the users cant nslookup my.domain ...
vidarlo's user avatar
  • 9,147
0 votes

Accessing host services from systemd-nspawn containers

Since there is still (as of Feb 2024) no proper solution for this, I found a rather elegant way to make this work by just a minimal customization inside the container. Add the following two lines to /...
ntninja's user avatar
  • 261
1 vote

AWS Network Firewall + Windows EC2 Instance - google.com is not blocked in browser but is blocked in the command line

It is more likely use of Encrypted Client Hello (ECH, formerly ESNI) with Server Name Indication (SNI) evasion. The AWS Network Firewall only looks at the client-settable TLS SNI (comparable to the ...
new23d's user avatar
  • 21

Top 50 recent answers are included