Questions tagged [tunneling]
The tunneling tag has no usage guidance.
153
questions
0
votes
0
answers
13
views
What is the use case difference between GRE and GRETAP?
What is the difference use case between GRE nad GRETAP? I understand that GRETAP is layer 2"Ethernet" tunnel.
But when to use GRE and when to use GRETAP? Can you give me specific example for ...
- 1
1
vote
1
answer
62
views
GRE IP to virtual machine (Proxmox) - Traceroute showing full route
88.198.49.xxx = Hetzner (will run virtual machines on this)
141.94.176.xxx = OVH (contains block below)
164.132.xxx.0/28 = IP block to use on Hetzner as virtual machines
To get GRE set up I ran the ...
- 2,617
0
votes
0
answers
25
views
Permanent SSH tunnel through bastion host
I have the following command that I run locally on my mac to be able to access a DB server trough a bastion host:
ssh -L 9234:MYSERVERIP:5432 USER@MYBASTIONIP -i MyBastionPemKey.pem
that works just ...
- 101
2
votes
1
answer
27
views
Explain routing decision
On my linux server, I have the following routing table:
$ ip ro
default via 172.28.127.254 dev wlp0s20f3 proto dhcp metric 600
10.8.3.0/24 dev tun0 proto kernel scope link src 10.8.3.2
169.254.0.0/...
- 23
0
votes
0
answers
41
views
Create SSH tunneling with multiple hosts
I want to create an SSH tunneling from:
192.168.6.66 -> 172.17.6.2 -> 172.11.3.3 -> 192.168.1.23 -> 192.168.6.71
What I'm trying is:
On 192.168.1.23 to access to the last hop 192.168.6.71:...
- 3
0
votes
1
answer
23
views
reverse tunneling
for simplicity ill give my servers name, server-A, server-B
server-A - a simple server with public IP, this server is 1G ram, shared CPU
server-B - a more robust server with more ram, cpu cores etc......
- 115
0
votes
0
answers
21
views
Any way to accept a tcp connection with MSS based on incoming MSS
The MSS option in TCP used to specify the largest amount of data which a device can handle, in decades ago. But in modern network, almost every device can handle large packets. Now, the MSS is mainly ...
- 21
0
votes
0
answers
177
views
GRE tunnel & NAT port forwading
Scenario:
Server 1
Public IP: XXX.XXX.XXX.XXX (vmbr0)
Proxmox host
multiple LXC instances which are NATed
LXC containers in range 10.0.0.0/24 (vmbr2)
Each IP from private range has 50 ports on public ...
- 1
0
votes
0
answers
123
views
DSLite AFTR Implementation on Ubuntu
I am setting up DSLite using RPi(B4) and Ubuntu(AFTR). I can able to create tunnels on both ends but can't able to see traffic through the tunnels.
My setup looks like below
I am running dibbler ...
- 1
1
vote
2
answers
630
views
What is the difference between '0.0.0.0/1' and 'default'?
Crew, please take a look at the routing table below. Incoming ping requests from 172.17.4.x are accepted on dev ens160 and answered via dev tun0.
What is the difference between '0.0.0.0/1' and '...
- 11
0
votes
1
answer
69
views
How to rebuild a broken SSH session automatically from the remote site?
I use Reverse SSH Tunnel behind a Customer-Grade NATed GSM Modem. This sounds terrible but it is fine. I use the following instruction:
ssh -o ServerAliveInterval=60 -f -N -T -R12345:localhost:22 ...
- 1
0
votes
1
answer
64
views
Generic TCP connections over a proxy?
Is there any way to achieve this command:
APPX --listen=127.0.0.1:1111 --socks5=someproxy.com:2222 --connect=server.com:3333
Then, if I connect to 127.0.0.1:1111, it will be as if I connected to ...
- 143
0
votes
0
answers
30
views
ICMP replies captured but not considered by ping
There is a host with a tunnel interface tunint1 with an assigned IP address. When I'm trying to ping via this interface I cannot see any replies but there are ICMP packets (both requests and replies), ...
- 1
0
votes
0
answers
27
views
iptables rules to restrict IP with/without Tunnel Example
I have question about iptable:
Lets consider the following example from my book:
We have host IP 192.168.1.58 which is accessible through public network and we know the public IP of each user. Is it ...
- 1
0
votes
0
answers
33
views
Ubuntu Server tunneling
I have a Ubuntu server and a network device which i want to connect together via local ethernet. the device needs to access 3 endpoints on the server and gives me fixed ips. How do i set up the ubuntu ...
1
vote
1
answer
226
views
How to configure a GUE receive tunnel in Linux for IPv6
I am trying to configure a GUE tunnel to receive IPv6 packets that contain GUE encapped IPv4 packets but I am having trouble de-encapsulating the packets. The IPv6 packets have a GUE encapsulated ...
1
vote
1
answer
221
views
How to configure a transmit GUE tunnel using iproute2 for IPv6
I am trying add a transmit GUE tunnel with GRE as the header using IPV6 addresses in linux like this:
ip -6 link add name gue1 type ip6gre remote $REMOTE_IPV6 local $LOCAL_IPV6 dev eth0 encap gue ...
1
vote
1
answer
112
views
Subnets not ping eachother on strongswa vpn tunnel
AOA, I have two clients one remote and other is local but both on same LAN i.e (192.168.137.0/24), while the UBuntu servers in which strongswan is implemented are connected to each other with ethernet ...
0
votes
0
answers
45
views
How to get and use packets coming to a tunnel interface?
I have created a tunnel interface in Linux and assigned an IP for its local and remote addresses. Then, I have created a route for that interface. I want to get the packets coming to that interface ...
- 101
4
votes
1
answer
3k
views
What is this sit0 device?
I'm setting my computer (running Debian Buster) up for Hurricane Electric's IPv6 tunnel broker. They provide instructions for several configuration methods, but here's for iproute2, which I've been ...
- 685
0
votes
0
answers
27
views
Open VPN packets aren't going through tunnel
port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
tls-auth ta.key 0
key-direction 0
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-to-client
push &...
- 1
2
votes
1
answer
392
views
How can I get IPv6 when my ISP doesn't provide it?
I am trying to get IPv6 up and running on my network because I have heard about IPv6 tunnel brokers should be able to help with that.
I don't really understand how it is working, or why I need it, but ...
- 89
1
vote
1
answer
552
views
Reverse SSH works but not passwordless. Getting password prompt
I have two systems
Personal MacOS Laptop to be referred as system-Laptop having user laptopuser. It does not have "NAT"
Server Linux to be referred as system-Server having user serveruser ...
- 297
0
votes
1
answer
382
views
Forward network packets from host machine to QEMU image
I have got a locally built Yocto image with me running inside QEMU. I need to forward a single port from the host machine to localhost inside the QEMU image. The TAP connection I am using assigns 192....
- 11
0
votes
0
answers
163
views
How to use ssh with slirp to reach out Internet from a limited jump server?
Sorry that I might be wrong, yet I have some impressions from QEMU that SLIRP has the ability to do both ppp server and NAT stunt the same time.
The situation is, I'm under a very limited network ...
- 1
1
vote
0
answers
93
views
Tunnelling TCP to database (ms-Sql) through corporate proxy
What I know.
I have a ms sql in Internet, let say hostDB:1433
I have a corporate proxy ipProxy:8080
/bin/nc -z -v -w 1 -x ipProxy:8080 -X connect hostDB 1433
Connection to hostDB 1433 port [tcp/ms-...
- 121
1
vote
0
answers
66
views
How can I listen to port creation events on a network interface?
I would like to create a TUN interface (following this tutorial) that takes specific actions when a listening port is created on it. Those include logging the application that created the port, which ...
- 11
1
vote
0
answers
10
views
Provide a missing network via tunnel to a gateway having access to that network
I'm very new to tunneling, so I may either misunderstand the concepts, or I made some beginner's mistake:
Trying to add new SLES15 hosts to an existing infrastructure I tried to provide a connection ...
- 801
1
vote
1
answer
177
views
Share Telnet connection as a proxy
i have telnet connection to device behind firewall
(there is no SSH)
and i want to use this connection as a proxy to give local network access to Firefox for example
if is possible using Putty
...
1
vote
1
answer
628
views
Setting TCP MSS on a bridge port
I have a VXLAN tunnel between two Linux hosts. This tunnel is carried over an Ethernet link with an MTU of 1500 bytes. At each end, the VXLAN interface is slaved to a bridge, along with another ...
- 364
2
votes
1
answer
281
views
Bridge traffic not reaching some ports
I have a tunnel between two hosts that is carried over L2TPv3. Each end of the tunnel is slaved to a bridge, as are other interfaces. The remote bridge has a DHCP server attached to it while the ...
- 364
0
votes
1
answer
54
views
Stuck at GTP tunnel Creation
I'm building an application which communicates with a node called SGSN, using GTPv1 tunneling.
+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
SGSN -----(GTPv1)-----> (my_App)
+-+-+-+-+-+-+-...
- 101
0
votes
2
answers
2k
views
How to relay traffic from tun to internet?
I'm writing a program that sends data through a tun interface. I'm trying to send IP packets to the world. I have all the TCP/IP stack working: It creates a valid TCP/IP packet ready to be sent, I ...
1
vote
0
answers
289
views
better nftable config for NAT of IPv4 over IPv6 by MAP-E (RFC 7597)
I am configuring nftable (/usr/sbin/nft) for IPv4 over IPv6 tunneling. There are several standards for tunneling IPv4 packets encapsulated in IPv6 packets. One of popular methods is MAP-E (RFC 7597). ...
1
vote
0
answers
24
views
Tunnelling IP Multicast traffic between two residential networks or machines
The Ableton Link music synchronization service operates by broadcasting and receiving messages via an IPv4 multicast group in the "Ad-Hoc 2" address block.
In order to use the protocol to synchronize ...
- 111
0
votes
1
answer
26
views
Access NATed remote system through an existing ssh connection
There is a machine RemoteA that is behind a NAT somewhere on the internet. It can connect to an ssh server.
There is another machine called RemoteB that also has a connection to the same ssh server. ...
- 101
0
votes
0
answers
111
views
Communicating to a device on another LAN port on a different subnet
I'm trying to telnet to a device (DEVICE T) via tcp ip with a Linux device in between. I'm not sure if this is feasible but here is what I'm trying to experiment with.
Windows OS with telnet ...
0
votes
2
answers
204
views
Dyamic tunnel troubleshooting
Goal: Configure Ubuntu and Firefox to SSH into a remote Asus router and access the remote router's configuration GUI via Firefox.
top from the remote router returns:
PID PPID USER STAT VSZ %...
- 1,104
0
votes
1
answer
488
views
Tunnel on remote MS-windows port 443
I need to create a tunnel in a remote MS-windows, so the port 443 in MS-windows is redirected to a remote target on port 443.
What I'm trying to do is this, from my remote server:
ssh -N -R 443:...
- 21
0
votes
1
answer
338
views
Clarifications for SSH tunnels over HTTP (or HTTPS)
I noticed that when I create a tunnel locally from my PC to the remote one, for some devices (generally routers), the connection via http or https does not take place. I get a pop-up that says:
The '...
1
vote
0
answers
52
views
Backward ssh connection via Forward https connection (https-tunnel)
I need a construction that make possible to tunnel backward SSH via forward HTTPS. I tried to draw on a picture what I have to get. The picture shows 4 steps that explain what and how I want to make.
...
- 11
1
vote
1
answer
388
views
Adding IP6 link local address to gretap interface
I've created a GRETAP interface which is working:
$ ip link show t104016114
15: t104016114@NONE: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1242 qdisc fq_codel state UNKNOWN mode DEFAULT group ...
- 364
0
votes
0
answers
34
views
Make https request with HAProxy without explicitly mentioning certificates?
Why?
Some app started making annoying authentication verification that work with the region. Every time I travel, and I login from another country, I have to go through a very annoying process of ...
2
votes
0
answers
515
views
ssh set up gre tunnel
I'm trying to create a GRE tunnel between a local Linux Mint 18.3 VM ("ServerA") running in my VirtualBox, and a remote Ubuntu 18.04 server ("ServerB") running in another location. A firewall is in ...
- 181
0
votes
2
answers
224
views
Getting access to remote machines through remote server behind the NAT
I want to have access to remote machines that connected to remote server behind the nat (actually it's just another computer with linux). Here you can see scheme.
I'm using logmein hamachi to create ...
- 109
0
votes
1
answer
256
views
OpenVPN/SSH tunnel to see client's other interfaces
Using OpenVPN or SSH tunneling (or a combination), how could I connect 2 LAN networks together?
Here is a better (more detailed) explaination with OpenVPN as an example:
One OpenVPN client (we will ...
- 103
2
votes
0
answers
586
views
strongSwan lan to lan / PKI RSA self CA - tunnel (0 up, 1 connecting), just the RSA tunnel without using of the self CA works fine
I am trying to create an x.509 based tunnel by using a self-signed CA certificate.
I am creating the solution at the AWS, and VPN gateways are Debian Stretch machines version Linux ip-10-0-0-208 4....
- 41
0
votes
1
answer
30
views
SSH Tunneling, have some problems [closed]
I have a computer and host A, B. Host A has internet connection and host B placed in host's A local network. Host B has Web Interface at port 8080. I need to forward port on host A. And then i want to ...
- 3
0
votes
1
answer
383
views
How do I create a persistent tunnel device in sles15 (with or without wicked xml config)
I'm trying to simplify some of my configs for sles15, pushing out tunnel configs to my machines via ansible. Currently whenever I configure a tunnel, I do it on the fly using ssh from the machine ...
- 1,474
4
votes
0
answers
1k
views
Multiqueue tun/tap interface
I am trying to understand how Multiqueue tuntap interface works. Following the instructions provided at: https://www.kernel.org/doc/Documentation/networking/tuntap.txt
I was able to create multiple ...
- 41