2022 Developer Survey is open! Take survey.

Questions tagged [tunneling]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
13 views

What is the use case difference between GRE and GRETAP?

What is the difference use case between GRE nad GRETAP? I understand that GRETAP is layer 2"Ethernet" tunnel. But when to use GRE and when to use GRETAP? Can you give me specific example for ...
user avatar
1 vote
1 answer
62 views

GRE IP to virtual machine (Proxmox) - Traceroute showing full route

88.198.49.xxx = Hetzner (will run virtual machines on this) 141.94.176.xxx = OVH (contains block below) 164.132.xxx.0/28 = IP block to use on Hetzner as virtual machines To get GRE set up I ran the ...
user avatar
  • 2,617
0 votes
0 answers
25 views

Permanent SSH tunnel through bastion host

I have the following command that I run locally on my mac to be able to access a DB server trough a bastion host: ssh -L 9234:MYSERVERIP:5432 USER@MYBASTIONIP -i MyBastionPemKey.pem that works just ...
user avatar
  • 101
2 votes
1 answer
27 views

Explain routing decision

On my linux server, I have the following routing table: $ ip ro default via 172.28.127.254 dev wlp0s20f3 proto dhcp metric 600 10.8.3.0/24 dev tun0 proto kernel scope link src 10.8.3.2 169.254.0.0/...
user avatar
0 votes
0 answers
41 views

Create SSH tunneling with multiple hosts

I want to create an SSH tunneling from: 192.168.6.66 -> 172.17.6.2 -> 172.11.3.3 -> 192.168.1.23 -> 192.168.6.71 What I'm trying is: On 192.168.1.23 to access to the last hop 192.168.6.71:...
user avatar
  • 3
0 votes
1 answer
23 views

reverse tunneling

for simplicity ill give my servers name, server-A, server-B server-A - a simple server with public IP, this server is 1G ram, shared CPU server-B - a more robust server with more ram, cpu cores etc......
user avatar
  • 115
0 votes
0 answers
21 views

Any way to accept a tcp connection with MSS based on incoming MSS

The MSS option in TCP used to specify the largest amount of data which a device can handle, in decades ago. But in modern network, almost every device can handle large packets. Now, the MSS is mainly ...
user avatar
0 votes
0 answers
177 views

GRE tunnel & NAT port forwading

Scenario: Server 1 Public IP: XXX.XXX.XXX.XXX (vmbr0) Proxmox host multiple LXC instances which are NATed LXC containers in range 10.0.0.0/24 (vmbr2) Each IP from private range has 50 ports on public ...
user avatar
  • 1
0 votes
0 answers
123 views

DSLite AFTR Implementation on Ubuntu

I am setting up DSLite using RPi(B4) and Ubuntu(AFTR). I can able to create tunnels on both ends but can't able to see traffic through the tunnels. My setup looks like below I am running dibbler ...
user avatar
  • 1
1 vote
2 answers
630 views

What is the difference between '0.0.0.0/1' and 'default'?

Crew, please take a look at the routing table below. Incoming ping requests from 172.17.4.x are accepted on dev ens160 and answered via dev tun0. What is the difference between '0.0.0.0/1' and '...
user avatar
0 votes
1 answer
69 views

How to rebuild a broken SSH session automatically from the remote site?

I use Reverse SSH Tunnel behind a Customer-Grade NATed GSM Modem. This sounds terrible but it is fine. I use the following instruction: ssh -o ServerAliveInterval=60 -f -N -T -R12345:localhost:22 ...
user avatar
0 votes
1 answer
64 views

Generic TCP connections over a proxy?

Is there any way to achieve this command: APPX --listen=127.0.0.1:1111 --socks5=someproxy.com:2222 --connect=server.com:3333 Then, if I connect to 127.0.0.1:1111, it will be as if I connected to ...
user avatar
  • 143
0 votes
0 answers
30 views

ICMP replies captured but not considered by ping

There is a host with a tunnel interface tunint1 with an assigned IP address. When I'm trying to ping via this interface I cannot see any replies but there are ICMP packets (both requests and replies), ...
user avatar
  • 1
0 votes
0 answers
27 views

iptables rules to restrict IP with/without Tunnel Example

I have question about iptable: Lets consider the following example from my book: We have host IP 192.168.1.58 which is accessible through public network and we know the public IP of each user. Is it ...
user avatar
  • 1
0 votes
0 answers
33 views

Ubuntu Server tunneling

I have a Ubuntu server and a network device which i want to connect together via local ethernet. the device needs to access 3 endpoints on the server and gives me fixed ips. How do i set up the ubuntu ...
user avatar
1 vote
1 answer
226 views

How to configure a GUE receive tunnel in Linux for IPv6

I am trying to configure a GUE tunnel to receive IPv6 packets that contain GUE encapped IPv4 packets but I am having trouble de-encapsulating the packets. The IPv6 packets have a GUE encapsulated ...
user avatar
1 vote
1 answer
221 views

How to configure a transmit GUE tunnel using iproute2 for IPv6

I am trying add a transmit GUE tunnel with GRE as the header using IPV6 addresses in linux like this: ip -6 link add name gue1 type ip6gre remote $REMOTE_IPV6 local $LOCAL_IPV6 dev eth0 encap gue ...
user avatar
1 vote
1 answer
112 views

Subnets not ping eachother on strongswa vpn tunnel

AOA, I have two clients one remote and other is local but both on same LAN i.e (192.168.137.0/24), while the UBuntu servers in which strongswan is implemented are connected to each other with ethernet ...
user avatar
0 votes
0 answers
45 views

How to get and use packets coming to a tunnel interface?

I have created a tunnel interface in Linux and assigned an IP for its local and remote addresses. Then, I have created a route for that interface. I want to get the packets coming to that interface ...
user avatar
  • 101
4 votes
1 answer
3k views

What is this sit0 device?

I'm setting my computer (running Debian Buster) up for Hurricane Electric's IPv6 tunnel broker. They provide instructions for several configuration methods, but here's for iproute2, which I've been ...
user avatar
0 votes
0 answers
27 views

Open VPN packets aren't going through tunnel

port 1194 proto udp dev tun ca ca.crt cert server.crt key server.key dh dh2048.pem tls-auth ta.key 0 key-direction 0 server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt client-to-client push &...
user avatar
2 votes
1 answer
392 views

How can I get IPv6 when my ISP doesn't provide it?

I am trying to get IPv6 up and running on my network because I have heard about IPv6 tunnel brokers should be able to help with that. I don't really understand how it is working, or why I need it, but ...
user avatar
  • 89
1 vote
1 answer
552 views

Reverse SSH works but not passwordless. Getting password prompt

I have two systems Personal MacOS Laptop to be referred as system-Laptop having user laptopuser. It does not have "NAT" Server Linux to be referred as system-Server having user serveruser ...
user avatar
  • 297
0 votes
1 answer
382 views

Forward network packets from host machine to QEMU image

I have got a locally built Yocto image with me running inside QEMU. I need to forward a single port from the host machine to localhost inside the QEMU image. The TAP connection I am using assigns 192....
user avatar
  • 11
0 votes
0 answers
163 views

How to use ssh with slirp to reach out Internet from a limited jump server?

Sorry that I might be wrong, yet I have some impressions from QEMU that SLIRP has the ability to do both ppp server and NAT stunt the same time. The situation is, I'm under a very limited network ...
user avatar
1 vote
0 answers
93 views

Tunnelling TCP to database (ms-Sql) through corporate proxy

What I know. I have a ms sql in Internet, let say hostDB:1433 I have a corporate proxy ipProxy:8080 /bin/nc -z -v -w 1 -x ipProxy:8080 -X connect hostDB 1433 Connection to hostDB 1433 port [tcp/ms-...
user avatar
1 vote
0 answers
66 views

How can I listen to port creation events on a network interface?

I would like to create a TUN interface (following this tutorial) that takes specific actions when a listening port is created on it. Those include logging the application that created the port, which ...
user avatar
1 vote
0 answers
10 views

Provide a missing network via tunnel to a gateway having access to that network

I'm very new to tunneling, so I may either misunderstand the concepts, or I made some beginner's mistake: Trying to add new SLES15 hosts to an existing infrastructure I tried to provide a connection ...
user avatar
  • 801
1 vote
1 answer
177 views

Share Telnet connection as a proxy

i have telnet connection to device behind firewall (there is no SSH) and i want to use this connection as a proxy to give local network access to Firefox for example if is possible using Putty ...
user avatar
1 vote
1 answer
628 views

Setting TCP MSS on a bridge port

I have a VXLAN tunnel between two Linux hosts. This tunnel is carried over an Ethernet link with an MTU of 1500 bytes. At each end, the VXLAN interface is slaved to a bridge, along with another ...
user avatar
  • 364
2 votes
1 answer
281 views

Bridge traffic not reaching some ports

I have a tunnel between two hosts that is carried over L2TPv3. Each end of the tunnel is slaved to a bridge, as are other interfaces. The remote bridge has a DHCP server attached to it while the ...
user avatar
  • 364
0 votes
1 answer
54 views

Stuck at GTP tunnel Creation

I'm building an application which communicates with a node called SGSN, using GTPv1 tunneling. +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ SGSN -----(GTPv1)-----> (my_App) +-+-+-+-+-+-+-...
user avatar
0 votes
2 answers
2k views

How to relay traffic from tun to internet?

I'm writing a program that sends data through a tun interface. I'm trying to send IP packets to the world. I have all the TCP/IP stack working: It creates a valid TCP/IP packet ready to be sent, I ...
user avatar
1 vote
0 answers
289 views

better nftable config for NAT of IPv4 over IPv6 by MAP-E (RFC 7597)

I am configuring nftable (/usr/sbin/nft) for IPv4 over IPv6 tunneling. There are several standards for tunneling IPv4 packets encapsulated in IPv6 packets. One of popular methods is MAP-E (RFC 7597). ...
user avatar
1 vote
0 answers
24 views

Tunnelling IP Multicast traffic between two residential networks or machines

The Ableton Link music synchronization service operates by broadcasting and receiving messages via an IPv4 multicast group in the "Ad-Hoc 2" address block. In order to use the protocol to synchronize ...
user avatar
  • 111
0 votes
1 answer
26 views

Access NATed remote system through an existing ssh connection

There is a machine RemoteA that is behind a NAT somewhere on the internet. It can connect to an ssh server. There is another machine called RemoteB that also has a connection to the same ssh server. ...
user avatar
  • 101
0 votes
0 answers
111 views

Communicating to a device on another LAN port on a different subnet

I'm trying to telnet to a device (DEVICE T) via tcp ip with a Linux device in between. I'm not sure if this is feasible but here is what I'm trying to experiment with. Windows OS with telnet ...
user avatar
0 votes
2 answers
204 views

Dyamic tunnel troubleshooting

Goal: Configure Ubuntu and Firefox to SSH into a remote Asus router and access the remote router's configuration GUI via Firefox. top from the remote router returns: PID PPID USER STAT VSZ %...
user avatar
  • 1,104
0 votes
1 answer
488 views

Tunnel on remote MS-windows port 443

I need to create a tunnel in a remote MS-windows, so the port 443 in MS-windows is redirected to a remote target on port 443. What I'm trying to do is this, from my remote server: ssh -N -R 443:...
user avatar
0 votes
1 answer
338 views

Clarifications for SSH tunnels over HTTP (or HTTPS)

I noticed that when I create a tunnel locally from my PC to the remote one, for some devices (generally routers), the connection via http or https does not take place. I get a pop-up that says: The '...
user avatar
1 vote
0 answers
52 views

Backward ssh connection via Forward https connection (https-tunnel)

I need a construction that make possible to tunnel backward SSH via forward HTTPS. I tried to draw on a picture what I have to get. The picture shows 4 steps that explain what and how I want to make. ...
user avatar
1 vote
1 answer
388 views

Adding IP6 link local address to gretap interface

I've created a GRETAP interface which is working: $ ip link show t104016114 15: t104016114@NONE: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1242 qdisc fq_codel state UNKNOWN mode DEFAULT group ...
user avatar
  • 364
0 votes
0 answers
34 views

Make https request with HAProxy without explicitly mentioning certificates?

Why? Some app started making annoying authentication verification that work with the region. Every time I travel, and I login from another country, I have to go through a very annoying process of ...
user avatar
2 votes
0 answers
515 views

ssh set up gre tunnel

I'm trying to create a GRE tunnel between a local Linux Mint 18.3 VM ("ServerA") running in my VirtualBox, and a remote Ubuntu 18.04 server ("ServerB") running in another location. A firewall is in ...
user avatar
0 votes
2 answers
224 views

Getting access to remote machines through remote server behind the NAT

I want to have access to remote machines that connected to remote server behind the nat (actually it's just another computer with linux). Here you can see scheme. I'm using logmein hamachi to create ...
user avatar
  • 109
0 votes
1 answer
256 views

OpenVPN/SSH tunnel to see client's other interfaces

Using OpenVPN or SSH tunneling (or a combination), how could I connect 2 LAN networks together? Here is a better (more detailed) explaination with OpenVPN as an example: One OpenVPN client (we will ...
user avatar
2 votes
0 answers
586 views

strongSwan lan to lan / PKI RSA self CA - tunnel (0 up, 1 connecting), just the RSA tunnel without using of the self CA works fine

I am trying to create an x.509 based tunnel by using a self-signed CA certificate. I am creating the solution at the AWS, and VPN gateways are Debian Stretch machines version Linux ip-10-0-0-208 4....
user avatar
  • 41
0 votes
1 answer
30 views

SSH Tunneling, have some problems [closed]

I have a computer and host A, B. Host A has internet connection and host B placed in host's A local network. Host B has Web Interface at port 8080. I need to forward port on host A. And then i want to ...
user avatar
  • 3
0 votes
1 answer
383 views

How do I create a persistent tunnel device in sles15 (with or without wicked xml config)

I'm trying to simplify some of my configs for sles15, pushing out tunnel configs to my machines via ansible. Currently whenever I configure a tunnel, I do it on the fly using ssh from the machine ...
user avatar
  • 1,474
4 votes
0 answers
1k views

Multiqueue tun/tap interface

I am trying to understand how Multiqueue tuntap interface works. Following the instructions provided at: https://www.kernel.org/doc/Documentation/networking/tuntap.txt I was able to create multiple ...
user avatar