Questions tagged [tunneling]
The tunneling tag has no usage guidance.
168
questions
1
vote
0
answers
29
views
Anyone know of a TCP-based tunnel protocol linux will support?
I have a lossy (1%) 10gig link between geographic locations which supports legacy systems that have non-tuneable TCP stacks. They have horrible throughput across the link because their TCP stacks ...
- 21
0
votes
0
answers
8
views
How do I find out what is stopping a sit tunnel routing?
In my town, IPv6 does not exist with any provider. I own 2001:67c:2284::/48 which I announce with Vultr.
I am trying to set up a SIT tunnel to use 2001:67c:2284:1::/64 from my office using nmcli but I'...
1
vote
1
answer
35
views
Check whether a given host can be reached via a given interface (`tun0`, created by OpenVPN)
I have multiple network interfaces on my Linux system. Some physical (eth0 etc), other virtual (tun0 etc, created by OpenVPN).
Is it possible to check whether a given host (IP address) can be reached ...
- 125
0
votes
0
answers
21
views
Switching between tun interfaces without affecting session
I have two tun interfaces tun1 and tun2 with IP addresses 10.0.0.1 and 10.0.0.2 respectively.
I can make applications use these interfaces by binding them to the IP. For example, I can make iperf3 use ...
- 109
0
votes
0
answers
31
views
Fallback to alternative jumphost address upon primary jumphost disconnection
I have a subset of servers that I can only reach via a jumphost connection, for which I have two independent addresses to utilize. Normally, this is straightforward and either of the two jumphosts can ...
- 1
1
vote
1
answer
2k
views
Wireguard over TCP tunnel at 443 port, blocked ports bypassing, solution for OpenWRT
I'm facing a problem - I would like to connect many embedded devices with OpenWRT to my Wireguard server, but all the ports except 80, 443 and some others are blocked. Moreover only TCP is allowed in ...
- 11
0
votes
2
answers
42
views
Any way to redirect/tunnel HTTP stream from LAN1 to LAN2 through Raspberry?
I have a usual local (192.168.1.x) network with multiple devices and the router with internet connection.
One of the devices is a Raspberry (192.168.1.2) connected via WiFi. It also connected to the ...
- 1
0
votes
0
answers
262
views
/var/log/auth.log is flooded with error: connect_to 127.0.0.1 port 7300 error
I am using SSH Direct with napsternetv on my phone (iPhone and android) which sets Udpgw port 7300. This lead to flooding server /var/log/auth.log with the following error message:
[date] [time] root ...
- 1
1
vote
0
answers
42
views
Change tap device gateway
I have vps server, install softether on it , softether use tap device name tap_se with
subnet 192.168.24.0/21 netmask 255.255.248.0 broadcast 192.168.31.259,
clients connect with openvpn or l2tp to ...
- 11
0
votes
1
answer
90
views
why is proxied TCP traffic much faster than routed/VPNed TCP traffic
I have a VPS which can download a file from Server X at 2gbps.
I have a home internet connection which can download a file from the VPS at 1gbps, but from Server X at only 100mbps.
If I use a SOCKS ...
- 1
0
votes
1
answer
761
views
Check whether SOCKS5 proxy server support UDP
Suppose I have UDP server that listen incoming message on 192.168.43.1:1234 and SOCKS5 proxy server that listen on 192.168.43.2:9999.
How do I check whether SOCKS5 proxy server support UDP when ...
0
votes
0
answers
42
views
How handle linux Tap device to receive packets in program
I'm trying to relay packets of a TAP device
I created the device and it has IP address
83: tap1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc fq_codel state UNKNOWN group default qlen 1000
...
- 1
2
votes
1
answer
176
views
How do I get the interface name created with `ip tuntap add mode tap`
I want to create a tap with sudo, and then attach the user space program (ssh) to it.
I don't want to hard code the interface name, as multiple users will be using it, so I want the interface name to ...
- 1,630
1
vote
1
answer
113
views
socat tunnel traffic drops after some time
I have two Linux machines, I want to create a tunnel between them using socat, this is my workaround:
Machine1:
socat -d -d UDP-LISTEN:4711,reuseaddr TUN:10.50.50.1/24,iff-up,iff-broadcast,iff-...
- 11
0
votes
1
answer
745
views
Route all traffic from one interface (default gateway) through OpenVPN / tun0 - policy based routing, dependent on source address/interface
I have a Debian Linux VPN router myvpnserver with 2 interfaces, eno1 and eno2:
eno1 is connected to a LAN and an internet router. On this interface with static IP address, myvpnserver has its default ...
- 103
1
vote
0
answers
86
views
Configure SuSEfirewall2 in SLES12 SP5 to allow multicast via `sit`
I'm experimenting with multicasts in our Intranet, but it seems the Intranet does not support multicast routing.
Anyway, I set up an IP-IP tunnel (sit1) between two machines in different subnets, and ...
- 1,104
0
votes
0
answers
456
views
Tunnel All trafic between To Linux Server
I have 2 Linux server Centos :
server-1 : 192.168.10.1 / server-2 : 192.168.20.1
i can only vpn to server-1
but i want All trafic send to server-2 and have ip server-2 with connect to server-1
my ...
0
votes
0
answers
21
views
Treatment of parameters %h:%p for switch -W in multi hop jumps in ssh
With
ssh -oProxyCommand="ssh -W %h:%p -oProxyCommand=\"ssh -W %%h:%%p -oProxyCommand=\\\"ssh -W %%h:%%p root@jmp1\\\" root@jmp2 \" root@jmp3" root@jmp4
you can do a ...
- 135
1
vote
1
answer
2k
views
Connect to host machine from WSL2
Problem
Can't connect to Windows X Server (VcXsrv) from WSL2 due firewall rules (sometimes it works, but sometimes it doesnt; it's very strange). Changing the firewall rules is not possible.
But any ...
- 133
0
votes
3
answers
72
views
How to determine next available network interface name and ip range?
I am working on an application which can create TUN/TAP interface on host machine. I can create such interfaces using:
sudo ip tuntap add tap0 mode tap
Now the thing is, tap0 is hardcoded here. It ...
- 3,793
0
votes
0
answers
2k
views
ERROR: Cannot open TUN/TAP dev /dev/net/tun: No such device (errno=19)
I'm helpless.
I uninstalled openvpn, I did a lot of things but nothing.
1
vote
0
answers
1k
views
What is the use case difference between GRE and GRETAP?
What is the difference use case between GRE nad GRETAP? I understand that GRETAP is layer 2"Ethernet" tunnel.
But when to use GRE and when to use GRETAP? Can you give me specific example for ...
- 21
1
vote
1
answer
616
views
GRE IP to virtual machine (Proxmox) - Traceroute showing full route
88.198.49.xxx = Hetzner (will run virtual machines on this)
141.94.176.xxx = OVH (contains block below)
164.132.xxx.0/28 = IP block to use on Hetzner as virtual machines
To get GRE set up I ran the ...
- 2,903
0
votes
0
answers
1k
views
Permanent SSH tunnel through bastion host
I have the following command that I run locally on my mac to be able to access a DB server trough a bastion host:
ssh -L 9234:MYSERVERIP:5432 USER@MYBASTIONIP -i MyBastionPemKey.pem
that works just ...
- 101
2
votes
1
answer
319
views
Explain routing decision
On my linux server, I have the following routing table:
$ ip ro
default via 172.28.127.254 dev wlp0s20f3 proto dhcp metric 600
10.8.3.0/24 dev tun0 proto kernel scope link src 10.8.3.2
169.254.0.0/...
- 23
0
votes
1
answer
60
views
reverse tunneling
for simplicity ill give my servers name, server-A, server-B
server-A - a simple server with public IP, this server is 1G ram, shared CPU
server-B - a more robust server with more ram, cpu cores etc......
- 115
1
vote
2
answers
4k
views
What is the difference between '0.0.0.0/1' and 'default'?
Crew, please take a look at the routing table below. Incoming ping requests from 172.17.4.x are accepted on dev ens160 and answered via dev tun0.
What is the difference between '0.0.0.0/1' and '...
- 11
0
votes
1
answer
458
views
How to rebuild a broken SSH session automatically from the remote site?
I use Reverse SSH Tunnel behind a Customer-Grade NATed GSM Modem. This sounds terrible but it is fine. I use the following instruction:
ssh -o ServerAliveInterval=60 -f -N -T -R12345:localhost:22 ...
- 66
0
votes
1
answer
480
views
Generic TCP connections over a proxy?
Is there any way to achieve this command:
APPX --listen=127.0.0.1:1111 --socks5=someproxy.com:2222 --connect=server.com:3333
Then, if I connect to 127.0.0.1:1111, it will be as if I connected to ...
- 173
0
votes
0
answers
168
views
ICMP replies captured but not considered by ping
There is a host with a tunnel interface tunint1 with an assigned IP address. When I'm trying to ping via this interface I cannot see any replies but there are ICMP packets (both requests and replies), ...
- 1
1
vote
1
answer
426
views
How to configure a GUE receive tunnel in Linux for IPv6
I am trying to configure a GUE tunnel to receive IPv6 packets that contain GUE encapped IPv4 packets but I am having trouble de-encapsulating the packets. The IPv6 packets have a GUE encapsulated ...
1
vote
1
answer
667
views
How to configure a transmit GUE tunnel using iproute2 for IPv6
I am trying add a transmit GUE tunnel with GRE as the header using IPV6 addresses in linux like this:
ip -6 link add name gue1 type ip6gre remote $REMOTE_IPV6 local $LOCAL_IPV6 dev eth0 encap gue ...
1
vote
1
answer
480
views
Subnets not ping eachother on strongswa vpn tunnel
AOA, I have two clients one remote and other is local but both on same LAN i.e (192.168.137.0/24), while the UBuntu servers in which strongswan is implemented are connected to each other with ethernet ...
0
votes
0
answers
267
views
How to get and use packets coming to a tunnel interface?
I have created a tunnel interface in Linux and assigned an IP for its local and remote addresses. Then, I have created a route for that interface. I want to get the packets coming to that interface ...
- 101
7
votes
1
answer
8k
views
What is this sit0 device?
I'm setting my computer (running Debian Buster) up for Hurricane Electric's IPv6 tunnel broker. They provide instructions for several configuration methods, but here's for iproute2, which I've been ...
- 805
0
votes
0
answers
33
views
Open VPN packets aren't going through tunnel
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
tls-auth ta.key 0
key-direction 0
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-to-client
push &...
- 1
2
votes
1
answer
1k
views
How can I get IPv6 when my ISP doesn't provide it?
I am trying to get IPv6 up and running on my network because I have heard about IPv6 tunnel brokers should be able to help with that.
I don't really understand how it is working, or why I need it, but ...
- 89
1
vote
1
answer
1k
views
Reverse SSH works but not passwordless. Getting password prompt
I have two systems
Personal MacOS Laptop to be referred as system-Laptop having user laptopuser. It does not have "NAT"
Server Linux to be referred as system-Server having user serveruser ...
- 459
0
votes
1
answer
1k
views
Forward network packets from host machine to QEMU image
I have got a locally built Yocto image with me running inside QEMU. I need to forward a single port from the host machine to localhost inside the QEMU image. The TAP connection I am using assigns 192....
- 11
0
votes
0
answers
406
views
How to use ssh with slirp to reach out Internet from a limited jump server?
Sorry that I might be wrong, yet I have some impressions from QEMU that SLIRP has the ability to do both ppp server and NAT stunt the same time.
The situation is, I'm under a very limited network ...
- 1
1
vote
0
answers
170
views
Tunnelling TCP to database (ms-Sql) through corporate proxy
What I know.
I have a ms sql in Internet, let say hostDB:1433
I have a corporate proxy ipProxy:8080
/bin/nc -z -v -w 1 -x ipProxy:8080 -X connect hostDB 1433
Connection to hostDB 1433 port [tcp/ms-...
- 131
1
vote
0
answers
236
views
How can I listen to port creation events on a network interface?
I would like to create a TUN interface (following this tutorial) that takes specific actions when a listening port is created on it. Those include logging the application that created the port, which ...
- 11
1
vote
0
answers
23
views
Provide a missing network via tunnel to a gateway having access to that network
I'm very new to tunneling, so I may either misunderstand the concepts, or I made some beginner's mistake:
Trying to add new SLES15 hosts to an existing infrastructure I tried to provide a connection ...
- 1,104
1
vote
1
answer
472
views
Share Telnet connection as a proxy
i have telnet connection to device behind firewall
(there is no SSH)
and i want to use this connection as a proxy to give local network access to Firefox for example
if is possible using Putty
...
1
vote
1
answer
1k
views
Setting TCP MSS on a bridge port
I have a VXLAN tunnel between two Linux hosts. This tunnel is carried over an Ethernet link with an MTU of 1500 bytes. At each end, the VXLAN interface is slaved to a bridge, along with another ...
- 464
1
vote
1
answer
504
views
Bridge traffic not reaching some ports
I have a tunnel between two hosts that is carried over L2TPv3. Each end of the tunnel is slaved to a bridge, as are other interfaces. The remote bridge has a DHCP server attached to it while the ...
- 464
0
votes
1
answer
90
views
Stuck at GTP tunnel Creation
I'm building an application which communicates with a node called SGSN, using GTPv1 tunneling.
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
SGSN -----(GTPv1)-----> (my_App)
+-+-+-+-+-+-+-...
- 101
1
vote
2
answers
3k
views
How to relay traffic from tun to internet?
I'm writing a program that sends data through a tun interface. I'm trying to send IP packets to the world. I have all the TCP/IP stack working: It creates a valid TCP/IP packet ready to be sent, I ...
- 109
2
votes
0
answers
521
views
better nftable config for NAT of IPv4 over IPv6 by MAP-E (RFC 7597)
I am configuring nftable (/usr/sbin/nft) for IPv4 over IPv6 tunneling. There are several standards for tunneling IPv4 packets encapsulated in IPv6 packets. One of popular methods is MAP-E (RFC 7597). ...
1
vote
0
answers
58
views
Tunnelling IP Multicast traffic between two residential networks or machines
The Ableton Link music synchronization service operates by broadcasting and receiving messages via an IPv4 multicast group in the "Ad-Hoc 2" address block.
In order to use the protocol to synchronize ...
- 111