Questions tagged [tunneling]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
1 vote
0 answers
29 views

Anyone know of a TCP-based tunnel protocol linux will support?

I have a lossy (1%) 10gig link between geographic locations which supports legacy systems that have non-tuneable TCP stacks. They have horrible throughput across the link because their TCP stacks ...
Colo Host's user avatar
0 votes
0 answers
8 views

How do I find out what is stopping a sit tunnel routing?

In my town, IPv6 does not exist with any provider. I own 2001:67c:2284::/48 which I announce with Vultr. I am trying to set up a SIT tunnel to use 2001:67c:2284:1::/64 from my office using nmcli but I'...
Entrepreneur AJ's user avatar
1 vote
1 answer
35 views

Check whether a given host can be reached via a given interface (`tun0`, created by OpenVPN)

I have multiple network interfaces on my Linux system. Some physical (eth0 etc), other virtual (tun0 etc, created by OpenVPN). Is it possible to check whether a given host (IP address) can be reached ...
Blue Nebula's user avatar
0 votes
0 answers
21 views

Switching between tun interfaces without affecting session

I have two tun interfaces tun1 and tun2 with IP addresses 10.0.0.1 and 10.0.0.2 respectively. I can make applications use these interfaces by binding them to the IP. For example, I can make iperf3 use ...
Niloy Saha's user avatar
0 votes
0 answers
31 views

Fallback to alternative jumphost address upon primary jumphost disconnection

I have a subset of servers that I can only reach via a jumphost connection, for which I have two independent addresses to utilize. Normally, this is straightforward and either of the two jumphosts can ...
Andrew's user avatar
  • 1
1 vote
1 answer
2k views

Wireguard over TCP tunnel at 443 port, blocked ports bypassing, solution for OpenWRT

I'm facing a problem - I would like to connect many embedded devices with OpenWRT to my Wireguard server, but all the ports except 80, 443 and some others are blocked. Moreover only TCP is allowed in ...
Sink's user avatar
  • 11
0 votes
2 answers
42 views

Any way to redirect/tunnel HTTP stream from LAN1 to LAN2 through Raspberry?

I have a usual local (192.168.1.x) network with multiple devices and the router with internet connection. One of the devices is a Raspberry (192.168.1.2) connected via WiFi. It also connected to the ...
djoker16's user avatar
0 votes
0 answers
262 views

/var/log/auth.log is flooded with error: connect_to 127.0.0.1 port 7300 error

I am using SSH Direct with napsternetv on my phone (iPhone and android) which sets Udpgw port 7300. This lead to flooding server /var/log/auth.log with the following error message: [date] [time] root ...
Qernel's user avatar
  • 1
1 vote
0 answers
42 views

Change tap device gateway

I have vps server, install softether on it , softether use tap device name tap_se with subnet 192.168.24.0/21 netmask 255.255.248.0 broadcast 192.168.31.259, clients connect with openvpn or l2tp to ...
Arman Kabir's user avatar
0 votes
1 answer
90 views

why is proxied TCP traffic much faster than routed/VPNed TCP traffic

I have a VPS which can download a file from Server X at 2gbps. I have a home internet connection which can download a file from the VPS at 1gbps, but from Server X at only 100mbps. If I use a SOCKS ...
Mir's user avatar
  • 1
0 votes
1 answer
761 views

Check whether SOCKS5 proxy server support UDP

Suppose I have UDP server that listen incoming message on 192.168.43.1:1234 and SOCKS5 proxy server that listen on 192.168.43.2:9999. How do I check whether SOCKS5 proxy server support UDP when ...
Muhammad Ikhwan Perwira's user avatar
0 votes
0 answers
42 views

How handle linux Tap device to receive packets in program

I'm trying to relay packets of a TAP device I created the device and it has IP address 83: tap1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 1000 ...
AQA's user avatar
  • 1
2 votes
1 answer
176 views

How do I get the interface name created with `ip tuntap add mode tap`

I want to create a tap with sudo, and then attach the user space program (ssh) to it. I don't want to hard code the interface name, as multiple users will be using it, so I want the interface name to ...
Gary van der Merwe's user avatar
1 vote
1 answer
113 views

socat tunnel traffic drops after some time

I have two Linux machines, I want to create a tunnel between them using socat, this is my workaround: Machine1: socat -d -d UDP-LISTEN:4711,reuseaddr TUN:10.50.50.1/24,iff-up,iff-broadcast,iff-...
abexamir's user avatar
0 votes
1 answer
745 views

Route all traffic from one interface (default gateway) through OpenVPN / tun0 - policy based routing, dependent on source address/interface

I have a Debian Linux VPN router myvpnserver with 2 interfaces, eno1 and eno2: eno1 is connected to a LAN and an internet router. On this interface with static IP address, myvpnserver has its default ...
MrSnrub's user avatar
  • 103
1 vote
0 answers
86 views

Configure SuSEfirewall2 in SLES12 SP5 to allow multicast via `sit`

I'm experimenting with multicasts in our Intranet, but it seems the Intranet does not support multicast routing. Anyway, I set up an IP-IP tunnel (sit1) between two machines in different subnets, and ...
U. Windl's user avatar
  • 1,104
0 votes
0 answers
456 views

Tunnel All trafic between To Linux Server

I have 2 Linux server Centos : server-1 : 192.168.10.1 / server-2 : 192.168.20.1 i can only vpn to server-1 but i want All trafic send to server-2 and have ip server-2 with connect to server-1 my ...
collegian Linux's user avatar
0 votes
0 answers
21 views

Treatment of parameters %h:%p for switch -W in multi hop jumps in ssh

With ssh -oProxyCommand="ssh -W %h:%p -oProxyCommand=\"ssh -W %%h:%%p -oProxyCommand=\\\"ssh -W %%h:%%p root@jmp1\\\" root@jmp2 \" root@jmp3" root@jmp4 you can do a ...
Matthias Altmann's user avatar
1 vote
1 answer
2k views

Connect to host machine from WSL2

Problem Can't connect to Windows X Server (VcXsrv) from WSL2 due firewall rules (sometimes it works, but sometimes it doesnt; it's very strange). Changing the firewall rules is not possible. But any ...
Arber's user avatar
  • 133
0 votes
3 answers
72 views

How to determine next available network interface name and ip range?

I am working on an application which can create TUN/TAP interface on host machine. I can create such interfaces using: sudo ip tuntap add tap0 mode tap Now the thing is, tap0 is hardcoded here. It ...
Santosh Kumar's user avatar
0 votes
0 answers
2k views

ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such device (errno=19)

I'm helpless. I uninstalled openvpn, I did a lot of things but nothing.
Danie Danie's user avatar
1 vote
0 answers
1k views

What is the use case difference between GRE and GRETAP?

What is the difference use case between GRE nad GRETAP? I understand that GRETAP is layer 2"Ethernet" tunnel. But when to use GRE and when to use GRETAP? Can you give me specific example for ...
Finaria's user avatar
  • 21
1 vote
1 answer
616 views

GRE IP to virtual machine (Proxmox) - Traceroute showing full route

88.198.49.xxx = Hetzner (will run virtual machines on this) 141.94.176.xxx = OVH (contains block below) 164.132.xxx.0/28 = IP block to use on Hetzner as virtual machines To get GRE set up I ran the ...
Teddy77's user avatar
  • 2,903
0 votes
0 answers
1k views

Permanent SSH tunnel through bastion host

I have the following command that I run locally on my mac to be able to access a DB server trough a bastion host: ssh -L 9234:MYSERVERIP:5432 USER@MYBASTIONIP -i MyBastionPemKey.pem that works just ...
Diego's user avatar
  • 101
2 votes
1 answer
319 views

Explain routing decision

On my linux server, I have the following routing table: $ ip ro default via 172.28.127.254 dev wlp0s20f3 proto dhcp metric 600 10.8.3.0/24 dev tun0 proto kernel scope link src 10.8.3.2 169.254.0.0/...
Sergei Fomin's user avatar
0 votes
1 answer
60 views

reverse tunneling

for simplicity ill give my servers name, server-A, server-B server-A - a simple server with public IP, this server is 1G ram, shared CPU server-B - a more robust server with more ram, cpu cores etc......
dsal3389's user avatar
  • 115
1 vote
2 answers
4k views

What is the difference between '0.0.0.0/1' and 'default'?

Crew, please take a look at the routing table below. Incoming ping requests from 172.17.4.x are accepted on dev ens160 and answered via dev tun0. What is the difference between '0.0.0.0/1' and '...
sandmouse's user avatar
0 votes
1 answer
458 views

How to rebuild a broken SSH session automatically from the remote site?

I use Reverse SSH Tunnel behind a Customer-Grade NATed GSM Modem. This sounds terrible but it is fine. I use the following instruction: ssh -o ServerAliveInterval=60 -f -N -T -R12345:localhost:22 ...
supi007's user avatar
  • 66
0 votes
1 answer
480 views

Generic TCP connections over a proxy?

Is there any way to achieve this command: APPX --listen=127.0.0.1:1111 --socks5=someproxy.com:2222 --connect=server.com:3333 Then, if I connect to 127.0.0.1:1111, it will be as if I connected to ...
caveman's user avatar
  • 173
0 votes
0 answers
168 views

ICMP replies captured but not considered by ping

There is a host with a tunnel interface tunint1 with an assigned IP address. When I'm trying to ping via this interface I cannot see any replies but there are ICMP packets (both requests and replies), ...
resaix's user avatar
  • 1
1 vote
1 answer
426 views

How to configure a GUE receive tunnel in Linux for IPv6

I am trying to configure a GUE tunnel to receive IPv6 packets that contain GUE encapped IPv4 packets but I am having trouble de-encapsulating the packets. The IPv6 packets have a GUE encapsulated ...
Dikshant Adhikari's user avatar
1 vote
1 answer
667 views

How to configure a transmit GUE tunnel using iproute2 for IPv6

I am trying add a transmit GUE tunnel with GRE as the header using IPV6 addresses in linux like this: ip -6 link add name gue1 type ip6gre remote $REMOTE_IPV6 local $LOCAL_IPV6 dev eth0 encap gue ...
Dikshant Adhikari's user avatar
1 vote
1 answer
480 views

Subnets not ping eachother on strongswa vpn tunnel

AOA, I have two clients one remote and other is local but both on same LAN i.e (192.168.137.0/24), while the UBuntu servers in which strongswan is implemented are connected to each other with ethernet ...
MUHAMMAD KASHIF's user avatar
0 votes
0 answers
267 views

How to get and use packets coming to a tunnel interface?

I have created a tunnel interface in Linux and assigned an IP for its local and remote addresses. Then, I have created a route for that interface. I want to get the packets coming to that interface ...
D. Jones's user avatar
  • 101
7 votes
1 answer
8k views

What is this sit0 device?

I'm setting my computer (running Debian Buster) up for Hurricane Electric's IPv6 tunnel broker. They provide instructions for several configuration methods, but here's for iproute2, which I've been ...
Dominick Pastore's user avatar
0 votes
0 answers
33 views

Open VPN packets aren't going through tunnel

port 1194 proto udp dev tun ca ca.crt cert server.crt key server.key dh dh2048.pem tls-auth ta.key 0 key-direction 0 server 10.8.0.0 255.255.255.0 ifconfig-pool-persist ipp.txt client-to-client push &...
user7386's user avatar
2 votes
1 answer
1k views

How can I get IPv6 when my ISP doesn't provide it?

I am trying to get IPv6 up and running on my network because I have heard about IPv6 tunnel brokers should be able to help with that. I don't really understand how it is working, or why I need it, but ...
mama's user avatar
  • 89
1 vote
1 answer
1k views

Reverse SSH works but not passwordless. Getting password prompt

I have two systems Personal MacOS Laptop to be referred as system-Laptop having user laptopuser. It does not have "NAT" Server Linux to be referred as system-Server having user serveruser ...
Ashar's user avatar
  • 459
0 votes
1 answer
1k views

Forward network packets from host machine to QEMU image

I have got a locally built Yocto image with me running inside QEMU. I need to forward a single port from the host machine to localhost inside the QEMU image. The TAP connection I am using assigns 192....
shodan's user avatar
  • 11
0 votes
0 answers
406 views

How to use ssh with slirp to reach out Internet from a limited jump server?

Sorry that I might be wrong, yet I have some impressions from QEMU that SLIRP has the ability to do both ppp server and NAT stunt the same time. The situation is, I'm under a very limited network ...
Ruinland's user avatar
1 vote
0 answers
170 views

Tunnelling TCP to database (ms-Sql) through corporate proxy

What I know. I have a ms sql in Internet, let say hostDB:1433 I have a corporate proxy ipProxy:8080 /bin/nc -z -v -w 1 -x ipProxy:8080 -X connect hostDB 1433 Connection to hostDB 1433 port [tcp/ms-...
Germán Faller's user avatar
1 vote
0 answers
236 views

How can I listen to port creation events on a network interface?

I would like to create a TUN interface (following this tutorial) that takes specific actions when a listening port is created on it. Those include logging the application that created the port, which ...
PoultryMan's user avatar
1 vote
0 answers
23 views

Provide a missing network via tunnel to a gateway having access to that network

I'm very new to tunneling, so I may either misunderstand the concepts, or I made some beginner's mistake: Trying to add new SLES15 hosts to an existing infrastructure I tried to provide a connection ...
U. Windl's user avatar
  • 1,104
1 vote
1 answer
472 views

Share Telnet connection as a proxy

i have telnet connection to device behind firewall (there is no SSH) and i want to use this connection as a proxy to give local network access to Firefox for example if is possible using Putty ...
Antonio Italiano's user avatar
1 vote
1 answer
1k views

Setting TCP MSS on a bridge port

I have a VXLAN tunnel between two Linux hosts. This tunnel is carried over an Ethernet link with an MTU of 1500 bytes. At each end, the VXLAN interface is slaved to a bridge, along with another ...
Tom's user avatar
  • 464
1 vote
1 answer
504 views

Bridge traffic not reaching some ports

I have a tunnel between two hosts that is carried over L2TPv3. Each end of the tunnel is slaved to a bridge, as are other interfaces. The remote bridge has a DHCP server attached to it while the ...
Tom's user avatar
  • 464
0 votes
1 answer
90 views

Stuck at GTP tunnel Creation

I'm building an application which communicates with a node called SGSN, using GTPv1 tunneling. +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ SGSN -----(GTPv1)-----> (my_App) +-+-+-+-+-+-+-...
Lova Andrian's user avatar
1 vote
2 answers
3k views

How to relay traffic from tun to internet?

I'm writing a program that sends data through a tun interface. I'm trying to send IP packets to the world. I have all the TCP/IP stack working: It creates a valid TCP/IP packet ready to be sent, I ...
Guerlando OCs's user avatar
2 votes
0 answers
521 views

better nftable config for NAT of IPv4 over IPv6 by MAP-E (RFC 7597)

I am configuring nftable (/usr/sbin/nft) for IPv4 over IPv6 tunneling. There are several standards for tunneling IPv4 packets encapsulated in IPv6 packets. One of popular methods is MAP-E (RFC 7597). ...
Ryutaroh Matsumoto's user avatar
1 vote
0 answers
58 views

Tunnelling IP Multicast traffic between two residential networks or machines

The Ableton Link music synchronization service operates by broadcasting and receiving messages via an IPv4 multicast group in the "Ad-Hoc 2" address block. In order to use the protocol to synchronize ...
s-ol's user avatar
  • 111