1
vote
Accepted
Local WireGuard responing to a SSH TCP SYN to a wrong interface
The solution was the question was:
# Mark incoming SYN packets and save the mark in the connection
iptables -t mangle -A PREROUTING -p tcp --syn -j CONNMARK --set-mark 1
# Restore the mark to outgoing ...
- 21
1
vote
Do I need to do anything to manage many outgoing connections to an outside service from a kubernetes cluster?
In order to manage a large number of outbound connections to an external service from your K8s cluster, you may need to improve your setup. Each node (30) has a large number of small pods connected to ...
1
vote
Can I capture full TCP packet content with haproxy without knowing length of the packet?
I know this is old, but for anyone who comes after:
req.payload(0,0) will capture the whole packet. The parameters to payload are an offset and a length; setting the length to zero means to capture ...
- 337
1
vote
Accepted
How to see actual size of tcp send and receive buffers?
Direct answer to this question: run ss -im dst destination.ipv4.address.here and check skmem rb value (full receive buffer size) and rcv_space value (receiving window). The application buffer size is ...
- 331
Only top scored, non community-wiki answers of a minimum length are eligible