The Stack Overflow podcast is back! Listen to an interview with our new CEO.

Questions tagged [iproute2]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
15 views

nftables or iproute2 (traffic redirect)

To myself: ubuntu 18.04, nginx 1.14 with php-fpm 7.2, nftables 0.8.2 / iproute2. About the problem: there are two virtual network cards implemented by proxmox 5.2 with different ip addresses (gray ...
1
vote
0answers
11 views

The bucket size in TC-HTB

I study the behavior of tc-HTB. I did a tc setting like the below. After reading The bucket in tbf, I expect its burst size will be rate / HZ. sudo /sbin/tc qdisc del dev s1-eth1 root sudo /sbin/tc ...
0
votes
0answers
54 views

Packets not replying from Docker to OpenVPN Tun0

I have 2 server, lets say server A and server B. Server A have OpenVPN installed and Server B have a web application running in port 80. Server A WANIP 1.2.3.4/32 OpenVPN 172.16.0.0/24, 172.16.0.1 ...
0
votes
0answers
60 views

Forward traffic in server to its VPN Client on different network

Suppose I have two systems, A and B. System A is a local server(port 80) with IP address 172.x.x.x and has interface enp0s3. It also has a OpenVPN Server installed with IP address 10.8.0.1 and ...
1
vote
1answer
77 views

Creating Network Bridge in ArchLinux stops internet connectivity

I tried to add a new bridge interface in ArchLinux. I followed the instructions from the wiki but after assigning the bridge to the real interface I cannot connect anymore to other IPs from outside (...
0
votes
0answers
150 views

How do I chain VPNs using Wireguard

I have 3 machines: A (behind a NAT) B (has a public IP) C (behind a NAT) I am able to connect A to B via wireguard. I am also able to connect C to B via wireguard. This also makes it seamless for me ...
0
votes
0answers
32 views

Having issues with setting remote endpoint as any IP

I am trying to set the remote address to any, although I am having problems with the syntax. The MAN page suggests this is possible: NAME: = STRING ADDR := { IP_ADDRESS | any } PORT := { 0..65535 } ...
0
votes
1answer
844 views

What does “scope” do in ip route and why it is necessary to setup static route in Linux?

If I want to replace default dhcp route rules with static ones, I have to add a rule ip route add scope link dev eth0. Or I will get an error: “Nexthop has a invalid gateway”. Here are my ...
3
votes
1answer
390 views

How does iproute2's `ip link show` determine link state?

I have a network interface that ip link show reports like this: 3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN mode DEFAULT group default link/ether 02:...
1
vote
0answers
109 views

How to setup iproute2 to share Internet connection from one interface (eth1) to another (eth0)?

How can I give Internet access for Workstation ? I already did on RPi: echo "1" > /proc/sys/net/ipv4/ip_forward ip route add default via 192.168.8.1 iptables -t nat -A POSTROUTING -o eth1 -j ...
0
votes
2answers
234 views

Can I create three “veth” interfaces to build a virtual LAN in Linux?

In Linux with iproute2, I knew how to create two veth (Virtual Ethernet) NICs and separated them into two network namespaces, then I got two virtual NICs and virtual 'cable' connected them. Now I ...
0
votes
1answer
54 views

Getting second IP from Ethernet iface works, WiFi does not work

Physical interface: root@ubuntu:~# ip addr show enp1s0 2: enp1s0: <BROADCAST,MULTICAST,PROMISC,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000 link/ether 00:e0:4c:68:...
0
votes
1answer
855 views

ifconfig and ip link show display different interfaces

I've configured a eno2 interface by mistake on Debian Stretch, now I've deleted it from /etc/network/interfaces and now is like this: # The loopback network interface auto lo iface lo inet loopback #...
0
votes
0answers
59 views

Nicer output of 'bridge link'

The command brctl is being replaced by the ip and bridge commands. With brctl show or brctl show br0 it was possible to list all network devices that were connected to that bridge. % brctl show br0 ...
1
vote
0answers
56 views

Bridging two interfaces while siphoning some traffic

Objective I'm looking to do something like this: Where the "mini router" is helping to control and secure a legacy system that cannot be updated for complex reasons and resides somewhere out "in the ...
0
votes
0answers
96 views

change BIND DNS response using iptables data

I have BIND DNS server configured with two views. both have different set of zone data. when end user querying the DNS server I need to dynamically route and change his request according to his needs. ...
0
votes
0answers
208 views

ip rule show command doesn't work

While executing ip rule show the command gives the following error # ip rule show RTNETLINK answers: Address family not supported by protocol Dump terminated How do I fix this issue. Is there any ...
0
votes
0answers
491 views

DD-WRT cannot add static routes

I am trying to configure static routes on my DD-WRT router. But unfortunately nothing happens after adding new routes. Here is an example: ip rule add fwmark 22 table 222 ip rule show all ip rule ...
1
vote
2answers
351 views

How to sniff a virsh virtual bridge from a virtual machine

So I want to sniff the traffic from a virtual bridge (virbr2) from a virtual machine. I can successfully sniff virbr2 directly from the host machine, but when setting that interface to the virtual ...
0
votes
1answer
485 views

How can I route a subnet to a different interface with iproute2?

so I am trying to setup routing with iproute, so a certain client subnet can access a firewalled internet uplink on another interface. The server has four interfaces: 2: enp2s0f0: <BROADCAST,...
3
votes
2answers
2k views

Which utility uses /etc/network/interfaces

I am attempting to setup a WiFi network with dnsmasq on ArchLinux where I have NetworkManager and iproute2 (not net-tools anymore in ArchLinux). As I am reading some tutorials they offen refer to /...
0
votes
0answers
386 views

How to add route to the same subnet via two interfaces simultaneously?

I am currently using GNU/Linux Have the following routing table: default via 192.168.1.1 dev eno1 proto static metric 100 10.0.0.0/8 dev enp1s0 scope link linkdown 169.254.0.0/16 dev virbr0 ...
1
vote
0answers
355 views

Routing over VPN by using default gateway

I have a small Ubuntu box that runs some services used on my local network and on the internet. The default gw on this box is clearly my cable modem and all works fine... the relevant port forwarding ...
2
votes
1answer
2k views

Policy routing for OpenVPN server & client on the same router?

PROBLEM An OpenVPN server instance (tun, udp, port 1194) is set up on a Linux-based router that also runs an OpenVPN client instance (tun, udp, port 1197) connecting it to a VPN provider. Both the ...
1
vote
2answers
2k views

How to bridge enp0s3 with a peer of veth?

My Lap: Ubuntu 15.10. And I have a wired NIC enp0s3. I want to create a veth pair veth0 and veth1 and bridge them with enp0s3, and set veth1 to a new netns ns1, so that processes in ns1 can access the ...
1
vote
1answer
344 views

Why does my ip-route-add fail silently?

I'm trying to configure host A to use a remote Linux server B as the router to Internet. A's eno50332208 has ip address 172.16.100.131. The interface used as gateway on B has address 172.16.100.128. ...
1
vote
1answer
1k views

Making custom routing changes permanent in CentOS 7

I need to make some custom routing commands be maintained whenever the main LAN network interface is restarted/system rebooted. I've been reading how to do this in CentOS 7 and accordingly to ...
1
vote
1answer
4k views

Squid 3.3 Transparent IPv4 and IPv6 Proxy with TPROXY

I'm attempting to change my Squid transparent setup from using generic NAT that's limited to IPv4 only and switching it to TPROXY, for IPv6 support. I'm having difficulties getting transparent clients ...
2
votes
1answer
604 views

Understanding “ip route” command

I'm trying to set up a backup route for my network as a safety net when the primary link fails; by adjusting the administrative distance with the ip route command. I have one router (cisco 1900 series)...
5
votes
1answer
3k views

What does the output of 'ss -s' mean?

I have a problem understanding the output of the Linux ss (socket statistics) command. I can not understand the meaning of the output of ss -s For example: [root@dls2304-1 ~]# ss -s Total: 973 (...
0
votes
1answer
253 views

iproute2: How do i connect one machine to the internet via another

I have the following setup: A > 169.254.8.125/16 <--(ad-hoc)--> 169.254.9.109/16 < B > 192.168.178.21/24 <--(wifi)--> 192.168.178.1/24 < AP/router > internet I want to connect A to the ...
7
votes
1answer
11k views

IPsec in the Linux Kernel

I have some issues (questions) related tot the Linux Kernel implementation of IPsec and it's user-space interface. The biggest question is which is the actual official project for the Linux Kernel ...
0
votes
1answer
511 views

Granular routing with iptables and iproute2 over VPN

On a host at my house I have a host for a VPN that I need for a couple of purposes. Living temporarily in Japan, it functions as a NAT for some devices so I can still use my NETFLIX and some other ...
2
votes
2answers
3k views

What is the second “state” in “ip link show” output

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 The UP between the brackets means my link ...
1
vote
1answer
1k views

split routing with two PPPoE connections

I have a debian wheezy box running, which is supposed to function as router / firewall / webserver / samba server [...]. I have two accounts from my ISP: acc1 with one static IP, and acc2 with dynamic ...
1
vote
0answers
66 views

Using TC from iproute, unable to match canid

I'm trying to use tc from iproute2 to prioritize packets sent to a canbus. Before doing so I read this guide about the issue: http://rtime.felk.cvut.cz/can/socketcan-qdisc-final.pdf Even using the ...
1
vote
1answer
891 views

Convert ifconfig command to iproute2

I am using this ifconfig command to set IP on a network interface ifconfig eth0 x.x.x.x netmask x.x.x.x mtu 1400 Now they say that ifconfig is deprecated and I should use iproute2. I converted that ...
0
votes
1answer
2k views

How to set route for multiple PPPOE Connection

Assume that I have 3 bridged network interface named br0 , br1 , br2 I set up 3 PPPoE connection on these interface named ppp0 , ppp1 , ppp2 Now I set up 3 another bridged network interface br3 , ...
1
vote
0answers
2k views

Simple source routing policy on dd-wrt router does not “stick”

Goal State: Have the traffic from one computer on my LAN use the VPN tunnel setup between my router and an OpenVPN provider, and leave all other traffic unaffected. Here's some relevant information ...
0
votes
1answer
610 views

ip route show src filed

I read the man page of ip and still do not understand what src is and I could not find much documentation. Please, if you can explain it thoroughly or point to some link it a good answer.
2
votes
1answer
1k views

Different routing rules for a particular user using firewall mark and ip rule

Running Ubuntu 12.10 on amd64. I'm trying to set up different routing rules for a particular user. I understand that the right way to do this is to create a firewall rule that marks the packets for ...
1
vote
1answer
989 views

Packets marked by iptables only sent to the correct routing table sometimes

I am trying to route packets generated by a specific user out over a VPN. I have this configuration: $ sudo iptables -S -t nat -P PREROUTING ACCEPT -P OUTPUT ACCEPT -P POSTROUTING ACCEPT -A ...
1
vote
1answer
5k views

Setting default route for tun1: RTNETLINK answers: No such process

I am currently trying to route all incoming and outgoing network traffic to/from applications listening on an OpenVPN tunnel tun1 through said tunnel. Here are my devices: tun0 is an OpenVPN server ...
4
votes
2answers
25k views

Create a virtual network interface using the iproute2 “ip link” command with a spoofed MAC address

How can I create a virtual interface similar to the following ifconfig command? $ sudo ifconfig eth1 hw ether 00:01:02:aa:bb:cc SIOCSIFHWADDR: No such device This does not work. I want to set ...
3
votes
1answer
1k views

Use Shorewall to port-forward requests based on the domain requested to different servers

How can I get my firewall to port forward traffic that is comming into different domain to different servers. So I have two web servers. Each one hosts different domains on different servers/IP: ...
8
votes
1answer
16k views

tc / iproute2, how to list the configuration

This is my first time using traffic shaping and I am wondering how I can list the rules I applied like you can with iptables? Walter
5
votes
1answer
33k views

iproute2 not functioning (“RTNETLINK answers: Operation not supported”)

The command and error message: gtwy ~ # ip rule add from 64.251.23.186 table t1 RTNETLINK answers: Operation not supported Older article of the same problem, but it did not help me: http://forums....