New answers tagged networking
0
votes
Accessing azure internal container app though P2S vpn connection
at a high level an internal container apps env uses an Azure Internal Load Balancer (ILB) with an IP taken from the related subnet and an Envoy Ingress controller as described here https://learn....
1
vote
Proxmox host and VM running on it see different machines on their network using the same connection
Solution:
LOL, I found the answer...
as noted in the switch config, the two ports where the problematic PVE host was connected were set to LACP mode on the switch while the bond I created on the PVE ...
0
votes
Change netmask subnet on server due to reduced IP range allocation
The only difference it would make to change the subnet mask would be the broadcast address, you can see it written after brd.
Now you have the broadcast as 123.123.123.255, with a /28 it would be 123....
-1
votes
What causes the 'Connection Refused' message?
What causes the 'Connection Refused' message?
Incorrect IP address or port number specified.
The server application is not running to listen on that port.
The server application is running but not ...
0
votes
403 from Google certificate endpoint when using IPv4
We are still running into this issue.
Our bitbucket pipeline runners are hosted in a kubernetes on hetzner cloud and they dynamically scale up new nodes on demand. Sometimes it happens that builds ...
1
vote
AWS NAT Instance Setup
After many tries, the configuration script which worked perfectly for me on the Amazon Linux 2023 (AMI like "al2023-ami-2023*") NAT instance was:
sudo yum install iptables-services -y
sudo ...
1
vote
Accepted
Port unreachable when wireguard is connected
Your routing tables are stateless, they don't have any information about a packet being an answer or your port being bound.
So you can use the connection table to add a mark when a connection is made ...
0
votes
Accepted
Knative On-Premise setup without external IP
I tried setting up network using Magic DNS explained here. I believe this is not provided in the official installation guide.
# Install Magic DNS
kubectl apply -f https://github.com/knative/serving/...
0
votes
Could a faulty switch cause upload speeds for some to be slow?
A faulty switch can cause all sorts of problems - but as you wrote, it's not all too likely to fail in a weird way at that exact time.
You can simply run a performance test between different nodes or ...
1
vote
Change netmask subnet on server due to reduced IP range allocation
That depends. To make sure you should ask the datacenter guys, they must know.
If you've got a routed subnet of your own, then you might need to change the mask. Not doing so prevents your servers ...
1
vote
Accepted
MQ broker in private or public subnet?
My opinion is given you would have a security group the only allows specific IPs access to your MQ, there's little benefit adding a network load balancer.
If it was on the public internet, the ...
3
votes
Accepted
403 from Google certificate endpoint when using IPv4
Hetzner resolved the issue. It turned out that the IP of the server was falsify flagged as Iranian. (The server itself was located in Germany) Iran is currently under sanctions and blocked by Google.
...
1
vote
Fetching Netcat Response
I would use postman to debug
https://www.postman.com/
Industry leading tool for web debug
#!/
#!/bin/bash
# Set the variables for your collection and environment files
COLLECTION_FILE="...
0
votes
Knative On-Premise setup without external IP
Implement IPv6, and your own domain name with "real DNS", to use Knative's phrase.
Kubernetes supports IPv6, and those Knative docs provide a reference for several Kubernetes ingress options....
0
votes
Debian server unable to connect to network
Okay, so it's really strange after spending over 4 hours on the problem.
I activated my WiFi card and there was the opposite issue: I could see everyone, but no one within the network could see me. ...
0
votes
Accepted
Why is https communication not working with iptables?
The issue is that you don't have a rule to allow response packets from the internet to come through.
That is, DNS request is sent to an internet host at UDP port 53, and its reply comes from internet ...
0
votes
No DNS record or entry in Host file, but can still access IIS site?
It was a DNS Manager in a random VM... Sorry to waste everyone time lol
0
votes
Interpreting ethtool Coalesce output
I have found this:
https://knowledge.informatica.com/s/article/80204?language=en_US
If I'm not mistaken, rx-max-frames is the same with rx-frames, so wherever you see rx-max-frames, translate it to rx-...
1
vote
Netplan configuration for bridge and route setup
I believe the answer to your question can be found here:
https://bugs.launchpad.net/netplan/+bug/1664847/comments/19
...only he called his interface macvlan0 where yours is loop-to-lan.
2
votes
Accepted
How to do VPN split tunneling for urls and IP addresses on Windows 11
You cannot get this behavior exactly. Forwarding packets is always based on IP addresses: The entity that forwards packets checks the destination IP address and selects outgoing interface based on ...
1
vote
Testing UDP port connectivity
According to @Zakaria and @Koray answers. Here is what works for me:
On Connected port, STATE value is open:
$ sudo nmap -sU -pU:53 192.168.1.1
PORT STATE SERVICE
53/udp open domain
...
2
votes
Accepted
Why does MySQL server not respect bind_address?
The quote from the documentation you linked:
If the address is *, the server accepts TCP/IP connections on all server host IPv4 interfaces, and, if the server host supports IPv6, on all IPv6 ...
0
votes
ath9k driver sees only some Wi-fi networks
Summary:
/sbin/crda is no more part of Debian/Ubuntu installation.
cat /sys/module/cfg80211/parameters/ieee80211_regdom shows region 00
iw reg get shows region 00
iw reg set EU or iw reg set CZ wont ...
0
votes
meaning of rx_queue_*_csum_err and rx_fifo_errors
As per the Linux kernel documentation:
RX Queue Checksum errors are indicative of physical link errors. Where as
RX Fifo errors are indicative of a FIFO overrun, as described by @Signal15
...
2
votes
Accepted
Users cant nslookup my windows server 2019 domain
the first one is the one i want, i manually configured it on the control panel, but for some reason the mere existense of the second one is messing with my domain, the users cant nslookup my.domain ...
0
votes
Accessing host services from systemd-nspawn containers
Since there is still (as of Feb 2024) no proper solution for this, I found a rather elegant way to make this work by just a minimal customization inside the container.
Add the following two lines to /...
1
vote
AWS Network Firewall + Windows EC2 Instance - google.com is not blocked in browser but is blocked in the command line
It is more likely use of Encrypted Client Hello (ECH, formerly ESNI) with Server Name Indication (SNI) evasion.
The AWS Network Firewall only looks at the client-settable TLS SNI (comparable to the ...
Top 50 recent answers are included
Related Tags
networking × 15665linux × 2681
windows × 1124
routing × 1067
linux-networking × 953
ubuntu × 851
iptables × 820
vpn × 716
ip × 640
domain-name-system × 621
firewall × 581
router × 571
switch × 569
cisco × 528
debian × 422
openvpn × 412
centos × 403
vlan × 400
security × 399
tcp × 395
nat × 375
wifi × 369
dhcp × 355
windows-server-2008 × 349
bridge × 331