New answers tagged

1

Yes, you can use Active Backup for Business over a WAN. You will need to open up port TCP/5510 to your NAS and use your public IP address as the destination. It should also be possible to do the same across a VPN.


0

Each device's NIC port has one or more TX (Transmit) pairs and one or more RX (Receive) pairs. For communication to take place, the TX on one end is physically wired to the RX on the other end. NIC ports on DTE (Data Terminal Equipment) devices (terminals, PCs, etc.) are wired one way and NIC ports on DCE (Data Communications Equipment) devices (modems, ...


1

The kernel part displaying such statistics in the /proc filesystem method is there: if (v == SEQ_START_TOKEN) { seq_puts(seq, "entries searched found new invalid ignore delete delete_list insert insert_failed drop early_drop icmp_error expect_new expect_create expect_delete search_restart\n"); return 0; } seq_printf(seq, "...


0

Eventually I spun up a bunch of VM's in a different cloud, and used https://locust.io to coordinate a script that tests the specific pages on my site that I want to test. Not sure it is entirely foolproof, but at least was able to confirm that I am able to send 5Gbps, which puts me at ease.


1

I am a CCIE, the answer to your question depends on the topology and your business parameters. In fact, where most people leverage HSRP or VRRP you can probably get away with just distributing multiple default gateways via DHCP. Failure can be a little more seamless via HSRP or VRRP and if any stateful devices in the path also happen to record or track the ...


0

well if you imagine that nobody knows the answer.. or at least don't want to share it without bitcoin transfer! https://ostechnix.com/how-to-assign-multiple-ip-addresses-to-single-network-card-in-linux/


1

One can connect to the container by using host A as the jump host. However, this requires a user-account on host A for this purpose. One can limit the jump host account so that there is no access to the server itself. The limitation can be done in host A sshd_config. Match user bob X11Forwarding no AllowTcpForwarding ForceCommand ssh bob@<...


0

Pick from your favorite threat intelligence database. Select some names and IPs that geolocate to, or have ASs operated by organizations in, the geo of interest. Check both what should definitely be allowed (domains you control, your ISPs ranges) and what probably should not be. Note that geolocation is error prone, eventually you will find incorrect data.


0

In case anyone else sees this because they need one, I found an IP out of Japan 54.238.181.35 from the following question on ServerFault Why is my amazon EC2 in asian pacific region having a US ip address?


1

While many end user ISPs will allocate a larger block than a /64, the majority of end users will only use one /64 from that block for their LAN. Their computer is likely move around within that /64 (thanks to privacy extensions) but is unlikely to move to a different /64 within the allocation from their ISP unless they replace their router (or are one of the ...


0

I know this is an old question, but I just want to post this here for anyone looking for a detailed answer. The accepted answer works, but does not explain how it works. A filter handle (e.g 2:a:800) has 3 parts being: the hashtable 2 the bucket a (inside hash table 2) the filter index 800 (inside bucket a) These 3 are all in hex. A hash table can have ...


0

We can't be sure, it can change. Each packet can have a different path, there is no guarantee here, it is a tool to help debugging, and not always a perfect truth. A packet can also take one path there, but a completely different path back. So what traceroute does tell you is at which router the packet "failed" with each step of increased TTL. To ...


2

The relevant required configuration needed to have conntrack available in /proc is CONFIG_NF_CONNTRACK_PROCFS: CONFIG_NF_CONNTRACK_PROCFS: Supply CT list in procfs (OBSOLETE) [...] Help text This option enables for the list of known conntrack entries to be shown in procfs under net/netfilter/nf_conntrack. This is considered obsolete in favor of using the ...


0

I've got also connectivity problem. I was able to establish connection but still was getting timeouts on all the connections that I had. On the web interface under admin -> Configuration -> VPN Settings -> under "Specify the private subnets to which all clients should be given access" I've got value which was equal to 10.0.16.0/20 (on of ...


0

The best way I feel is to list the contents in this directory : /sys/class/net/<bridge-name>/brif This helps you parse the output. brctl show and other commands will be difficult to parse


0

Yes, this is possible. It is handled by the switch, which assigns the proper VLAN depending on the MAC address. You need to have all VLANs configured on the switches that are involved. How this is configured depends on the hardware you are using, so you need to check the documentation of your switches. Note that this really more for convenience, since MAC ...


0

My mistake was in the routing tables from the 'Associations' subnets. I have 2 subnets, for one I did add the route for CIDR block of the 'App VPC' in the Route Table: Subnet 1 10.200.0.0/16 -> VPC peering(VPN to APP) 10.100.0.0/16 -> local 0.0.0.0/0 -> igw But I forgot to do it in the Route Table of the second Associated subnet. Subnet 2 10.100....


0

It was an IP address conflict, as indicated by the system event log on the Windows Server 2019 instance. We have some additional Linux servers running OpenVPN clients (different from the Linux client that I mentioned in the question). Each of these Linux servers has a bridge set up with the IP address 10.8.0.2. This bridge connects the tap0 interface of the ...


0

your issue is that you have configured a gateway on both interfaces, as shown by: default via 192.168.1.1 dev eno1 proto dhcp src 192.168.1.211 metric 100 default via 192.168.3.1 dev eno2 proto dhcp src 192.168.3.201 metric 100 Both have the same metric so the system has to choose one. How this choice is made depends on the operating system used. Whatever ...


0

I had a similar problem: ssh connection remained ESTABLISHED terminal freezes and un-freezes repeatedly packets are visible in SEND-Q while terminal freezes freeze time about 2-4 minutes un-frozen for about 30 seconds Turns out the firmware of my router was outdated! fixed issue with firmware update


0

VLAN trunking should be used and only let one Dnsmasq instance to manage the DHCP for both the router and AP.


1

High level tools like NetworkManager usually remove address and route on "linkdown" links (ie: with the NO-CARRIER flag displayed on the interface). So if the interface is managed by such tool, one can expect for its route to appear and disappear when plugged and unplugged. I understand using NetworkManager might be too intrusive with a dynamic ...


3

If all the physical links show 1000 Mbit/s pretty much the only things left are: the ESXi port group the VMkernel adapter(?) attaches to has a traffic limit set the switch the traffic runs through has some kind of QoS limit/traffic policing set up By the way, the advertised modes of a NIC/switch port don't matter. The negotiated mode does. Also, Broadcom ...


0

Not sure about the other tools you used, but mtr, when using TCP sends a TCP SYN packet to the destination and incrementing the TTL from 1 until it reaches the destination. So the routers in the path still send back an ICMP type 11 - Time-to-live exceeded, when they are the ones where the packet reaches TTL 0. This could potentially account for the perceived ...


0

Well, it turns out that the problem stems from the fact that I'm using Docker for my internal ports. In order to simplify the process of getting containers to talk to the world and each other, Docker made the choice to take a large amount of control over your firewalls/networking. This means that if you don't want your containers to be publicly accessible ...


0

Hy @rdowell, To fix this issue, the main route table needs to be added on your Android Device: ip rule add from all lookup main pref 1


1

Genreal: After a two days search I did around the issue, I found like Michael Hampton and Peter Zhabin that there is no existing solution which shows a kernel process id via a listening port. In addition during those two days i searched also for some commands combinations that can bring the wanted answer, and found none simple or convenient way to do this. ...


0

This is because on the server there is a single file source, and multiple file sinks (TCP connections, forked). The first client consumes all the file, leaving the file position at EOF (end of file). Any subsequent TCP clients find themselves with nothing to read as they are all using the same file source. This is more of a design aspect of socat than a bug....


1

A number of reasons may be the cause of that. Without proper insight to your cluster and network architecture this won't be solved, however, here are some ideas: Check if there are any NetworkPolicies applied by executing kubectl -n <namespace> get netpol. NetworkPolicies can restrict the communication within and to the outside of the cluster. Let a ...


1

When the internal machine initiates an outbound connection, its IP is NATed as the gateway's main address, not the address I'm trying to give it. This should be solved with: iptables -t nat -I POSTROUTING 1 -s 10.125.0.2 -o eth0 -j SNAT --to-source <FORWARD_IP> It is added into the front, so it'll fire first, detect that packet is from this system ...


2

Here is ready to go simple shell deploy commands for your case, you can change directories, name, description of service or script and so on, description is below: Make directory and script itself mkdir /usr/src/python-socket -p cat > /usr/src/python-socket/python-socket.py << 'EOL' import socket host = '127.0.0.1' port = 9999 BUFFER_SIZE = 1024 ...


1

Solved! All I had to do was to enable the websocket module using sudo a2enmod proxy_wstunnel.


1

I finally resolved an issue. It was related with netplan. I changed configuration file /etc/netplan/ .conf network: version: 2 renderer: networkd ethernets: enp5s0: dhcp4: true dhcp6: true Then type netplan apply to apply changes. In some cases enp5s0 can be different for example eth0. It is ethernet name.


3

ICMPv6, which is a protocol over IPv6, implements the link layer resolution using multicast and unicast. Dropping ICMPv6 means there is no resolution available anymore: nodes can't find other nodes in the same LAN. This includes the upstream IPv6 router which can't communicate with the Linux system using IPv6 if ICMPv6 is dropped. By contrast IPv4 relies on ...


2

The problem is you didn't tell your router where to send the packets, to which device that has access to that network. You used the IP you have on the same host that can't access the 192.168.2.0/24 network so you are basically telling him to use himself as router for that network, it then sends ARP through the NIC that has the local IP you specified, trying ...


1

I thikn I found the answer. In general, network namespaces inherit the parameters of the root namespace. This is controlled by devconf-inherit-init-net settings as explained here: https://www.kernel.org/doc/html/latest/admin-guide/sysctl/net.html#devconf-inherit-init-net By default all ipv4 parameters are inherited but not ipv6


1

No, Azure policy cannot see inside a storage account, it can only see the fact that a storage account exists.


7

Your domain is not configured correctly, see https://dnsviz.net/d/www2.agenciatributaria.gob.es/YVHoZA/dnssec/ You can ignore the DS warnings on es and gob.es as you won't be able to do anything about those and they won't block resolution. However do read the warning about the NS set mismatch which means you are in a lame delegation situation. This has the ...


2

For direct RDP, you may want to look at some sort of jump host in Azure or AWS. These companies have relatively reliable low-latency networks between datacenters. So, you RDP to a host in SE Asia region, which RDPs to a host in France, which RDPs to your host at home. While the RTT of such a connection is still big (about 300ms), it is probably better then ...


2

Your local resolver is configured to forward DNS queries to 213.186.33.99, DNS server that OVH provides to its customers. Querying this server directly reveals that it is reporting a failure. $ host www2.agenciatributaria.gob.es 213.186.33.99 Using domain server: Name: 213.186.33.99 Address: 213.186.33.99#53 Aliases: Host www2.agenciatributaria.gob.es not ...


19

Previous attempts have been proven unstable with varied results throughout the day - from flawless, to terrible connections. You do need a reliable Internet connection, with no or very low packet loss. Less than 0.1% is OK, less than 1% should be still usable, more than 1% is terrible. ping time is the most crucial element in such connections No, a low ...


5

With that latency? No. It will be a miserable user experience with lags and disconnects. I've supported remote desktop environments with similar latency and even with the better providers and clean links, it's miserable. There are some tweaks such as disabling audio but no magic bullet. https://www.consoleconnect.com/locations/athens/ Athens <-> ...


7

Are there other ISP's that you can use? Are they any better than your current ISP? At the end of the day, no matter what you might try, your connection is dependent upon the network ISP/provider/carrier that you're using. VPN's and other mechanisms can't avoid traversing your ISP. You're just adding additional network overhead.


7

Network Uplink is almost certainly related to the physical network port your rack or equipment would be connected to. A 1Gbps port would be capable of carrying up to 1Gbps of network traffic. Transfer is almost certainly related to the volume of sustained network traffic you're paying for. 10 Mbps would mean you're paying for up to 10Mbps of sustained ...


0

My use case: I was trying to access MariaDB v10 on the Synology NAS using MySQL Workbench. Summary of the resolution: I found this to be a simple access grant issue to the user. Note: Please substitute the users as necessary Step 1: Login to MySQL mysql -u root -p Step 2: GRANT Remote Access GRANT ALL PRIVILEGES ON *.* TO 'root'@'192.168.1.%' IDENTIFIED ...


0

I wasn't able to find a way to make wireguard itself connect through a specific interface, so I eventually settled on simply routing traffic destined to ens2 by adding a new route to appserver's routing tables: ip route add $GATEWAY_ESN2_ADDR/32 via $APPSERVER_ESN2_ADDR_GW metric 50 APPSERVER_ESN2_ADDR_GW is the adddress of appserver's gateway router. While ...


3

None of the devices needs to be reached from outside (WAN). Yet. Some day you merge with a different company, who also uses the 10.0.1.0/24 block, and they want to integrate your network with theirs. Things turn ugly, and everyone asks why RFC1918-addresses were used. The IPv6 ULA is big enough that you can pick a range, and be reasonably sure that noone ...


1

In your case, there is no practical benefit to use IPV6. IPV4 will serve all your requirements. However, if you want to be ready for future ahead of time, you can play with IPV6. But it may be another decade or two when IPV6 becomes more prevalent.


1

Finally I have found the answer. Let's see what I have: pfSense is being used as a router/firewall on my LAN. I got Global Unicast IPv6 address from my ISP on my WAN interface. (GUIPv6 is routable on Internet.) pfSense need to be configured properly to get Global Unicast IPv6 address from the ISP on the LAN interface. Interfaces --> WAN --> DHCP6 ...


2

Disconnect the computers from the physical network. If the domain user credentials have been cached on the computers this will allow the user to log in with those cached credentials. You can then take whatever steps are needed to reconfigure the computers. Additionally, contact Dell support again and ask them if there is a way to disable or override the BIOS ...


Top 50 recent answers are included