New answers tagged networking
1
vote
Make knockd listen to a specific IP address
knockd works on the interface level, so there's no need or way to bind it to a specific IP address.
It listens to all traffic on an ethernet (or PPP) interface, looking
for special "knock" ...
- 10.6k
0
votes
Accepted
How can I set up a local DNS or proxy that uses OpenNIC for OpenNIC domains/TLDs, and Cloudflare (or any other) DNS for the rest?
Technically what you ask for is of course entirely feasible and for example already supported in the versatile dnsmasq tool with the --server=/domain/nameserver options:
S, --local, --server=[/[<...
- 78.7k
0
votes
VPN setup multi-user multi-network topology
I believe using WireGuard is an excellent way to approach this problem.
As you suggested, you could use Host A as a central hub for your network (or set up a dedicated hub on some other host with a ...
- 1,386
0
votes
Debian: Vlan interface does not come up
I was missing auto ens18.263 to the interface file.
0
votes
DHCP reservations by hostname and router lease
anyone who physically connects to one of our sockets can go on the internet (even without dhcp, by knowing the gateway's IP)
802.1x. Authenticate who can connect to your network. Anything else is ...
- 8,144
1
vote
Multipath routing for backup gateway
You will need to write and run some script as a system-level service to detect Internet connectivity and dynamically switch default gateway if the current one fails. Using a single routing table is ...
- 111
0
votes
How is it possible to connect multiple devices using the same IP to a machine with multiple interfaces and have them all work?
You might look into bonding ports together. It might be necessary for switch support to make this work as you desire.
- 11.9k
1
vote
Accepted
Access host's wireguard from Docker containers
you can create a custom bridge network in Docker and then connect your containers to this network.
1.
docker network create --driver=bridge --subnet=192.168.60.0/24 mynetwork
docker run --network=...
- 1,363
0
votes
Looking for Firmware for Oracle Dual 40 Gb Ethernet Adapter
Try the non-free firmware of Debian for example
Set this in your /etc/apt/sources.list
deb http://deb.debian.org/debian bookworm main contrib non-free non-free-firmware
deb-src http://deb.debian.org/...
- 1,363
0
votes
How is it possible to connect multiple devices using the same IP to a machine with multiple interfaces and have them all work?
For each device that has a mac address you need to assign a seperate ip. Or setup simple dhcp server and assign the ips dynamically. You can't assign the same ip to two different devices,that will ...
- 1,363
2
votes
Accepted
What is the meaning/cause of this extra entry in the output of `ip address` when another device connects to the network?
The likely cause of the observed symptom: a new IPv6 address appears on a node (which happens to be running microk8s) in the LAN after booting an IPv6 router on the same LAN is that the router sent ...
- 11.6k
2
votes
Accepted
Cannot access deb.debian.org from VM after port forwarding using /etc/libvirt/hooks/qemu
The DNAT rules don't filter what they will apply to: so they apply to everything: Internet-initiated traffic as well as VM-initiated traffic. Anything using ports 80 or 443 always get redirected to ...
- 11.6k
0
votes
Is there an easy command line tool for packet sniffing a single command on linux?
The ptrace method used by tracedump was my initial idea, but it has some drawbacks. If it does what you need, stick with it. If not, there’s another approach you can consider
The problem with using ...
- 111
7
votes
tcpdump -vvv is not verbose enough
The details from tcpdump -vvv -i interface are less than the details that are being put into the pcap file using tcpdump -i interface -w output.
That is correct.
With -w the full raw packet gets ...
- 78.7k
0
votes
405 Error - Handling CONNECT requests with GCP Load Balancer
I encountered a similar problem earlier.
I discovered that my paths were set to /api instead of /api/*. This exact error occurred. To fix the issue, check the load balancer settings or possibly the ...
- 1
1
vote
Windows DNS Lag and Timeouts
Apparently this was caused by a bug in Nutanix VirtIO drivers.
https://portal.nutanix.com/page/documents/kbs/details?targetId=kA07V000000LYCqSAO
- 83
0
votes
How can I add an additional working IP to a VM?
I found the problem. On Hetzer if you config the "Bridged Network" you have:
IP addresses from additional subnets can only be used on the host system or on a single VM with a single IP
The ...
- 1
0
votes
Established TCP Communication terminates without any clue
What is the network layout between the 2 machines?
Your wireshark captures indicate problems - either with the ACKs getting through - or with the capture of ACKs.
- 36
0
votes
poor docker / nginx throughput when running with bridge network on ubuntu
Do you need PHP - and PHP-FPM? Your question speaks about profiling using a static HTML file. The response will clearly be different for static vs dynamic PHP.
If you are only interested in static ...
- 36
0
votes
Understanding Kubernetes load balancing with ingress controller using self-hosted load balancer
I have a self hosted LB working.
I wound up going with metallb. The address pool doesn't need to be unallocated leased IPv4 addresses. It can be the private IPv4 address pool inside your kubernetes ...
- 36
4
votes
How to check for faulty device causing short outages in my LAN?
A broken device can sometime cause a network loop - received packets are just reflected back - leading to broadcast storming. In turn, these storming can deteriorate the entire network performance or ...
- 48.9k
-1
votes
Network stop working after adding bridge interface
This how-to worked for me (using NetworkManager CLI):
https://gist.github.com/plembo/f7abd2d9b6f76e7afdece02dae7e5097
The steps would be, as root:
> nmcli con show
Ethernet 1 e923bc3e-d77f-4f68-...
0
votes
How can I add an additional working IP to a VM?
When ping fails and you don’t know why, you should try traceroute next. From the Windows command prompt type “tracert” followed by a space and your desired IP address and the Enter key. You should see ...
- 173
0
votes
Accepted
Direct Access IPV6 Routing
To resolve this error message, add the client IPv6 route to the DirectAccess server’s routing table and publish it. This is accomplished by running the following PowerShell commands on the ...
- 1,363
1
vote
iptables drop to keep ports silent with no response
Ssh backets coming BACK from the ssh server have a DESTINATION port of 22, not a source port. Also, you can't probe other hosts if you can't send packets.
If this were my task, then I would be ...
- 21.9k
1
vote
Plug in multiple devices with the exact same IP to one Linux host
Get a couple of small routers. Put different IP's on the WAN interface of each router, and a NAT rule to 192.168.1.3 on the LAN side.
- 23.1k
0
votes
Can the Kubernetes master be geographically seperate from the nodes?
EKS (AWS Kubernetes Service) does in the way you described.
An EKS cluster consists of two VPCs:
An AWS-managed VPC that hosts the Kubernetes control plane. This VPC does not appear in the customer ...
- 118
1
vote
Accepted
Can't reach public IP or domain name of my server from within
If your VM cannot reach itself through an external connection, you can modify /etc/hosts to map one of the net adapter IP addresses (even localhost) to the DNS name of the machine. These ...
- 1,020
2
votes
iptables drop to keep ports silent with no response
A TCP connection uses one port on the server side, (22 in your case) and one on the client side that is not a well-known port but an ephemeral port (in Linux, above 32768). From the point of view of ...
- 1,020
0
votes
Aruba 1930 to build Lab Network separated from office network
Minimal config:
1930: Use two VLANs, one for 192.168.178.0/24, one for 10.10.0.0/16 (I wouldn't use something as large as /16).
1930: Configure IP addresses in both VLANs.
1930: Configure the port ...
- 10.6k
0
votes
Strongswan on host, docker container unable to pass through
That NAT rule is incorrect as that is basically what Docker already does anyway (NAT private Docker networks to the IP of the host).
Since the local traffic selector (leftsubnet) for the VPN is the ...
- 4,003
0
votes
Accepted
LACP between Ubuntu 22.04 and Open vSwitch: Ubuntu neither responding nor sending LACP PDU
I took another stab at this on another set of VM and it's now working!
The difference I can see is that I added the interfaces in netplan yml ie:
network:
ethernets:
ens1:
addresses:
...
- 31
0
votes
Docker networking: use the default bridge through a rootless container
Consider using networks other than default. In the following example, the nginx is accessed from 192.168.27.100 from whatsoever environment
version: "3"
services:
nginx:
image: nginx
...
- 1,020
0
votes
Intel e810 nic RSS logic on ESXI platform
Receive-side scaling is the NIC's ability to use multiple receive queues with separate interrupts and subsequently separate processing on different CPU cores. Interrupt generation is usually ...
- 10.6k
2
votes
How to access pfsense's LAN without vpn?
On pfsense1, add a static route to 10.0.0.0/8 via 192.168.1.46.
On pfsense1, use the WAN router ("modem") as default gateway.
On pfsense2 and workstation, use 192.168.1.1 as default route (0....
- 10.6k
1
vote
Failed to destroy network for sandbox + coredns pod not running Kubernetes
I re-installed tigera-operator.yaml and custom-resources.yaml and the network re-started again
- 155
0
votes
connect two interfaces and docker containers
I'm wondering why you want to do this in iptables. In particular because I suspect that a more fully developed solution will grow more "forwarding rules". For instance :
Would it grow to ...
- 36
Top 50 recent answers are included