Questions tagged [networking]
The networking tag has no usage guidance.
97
questions
0
votes
0
answers
32
views
How are dev servers for testing working and available outside of VPN?
I'm a web developer and at work we have different servers (we call them stands) for testing our deployed app.
In order to deploy our app we connect via ssh to one certain server and start a process in ...
- 101
0
votes
1
answer
25
views
Why does php-fpm show nginx's IP while they are on different containers?
I am trying to set up an Nginx server for the purpose of load balancing between 4 Php-fpm servers. You can access my docker configuration files from this Github repository.
My containers' network ...
- 3
0
votes
0
answers
13
views
EKS: kubectl exec does not respect streamingConnectionIdleTimeout
Using EKS with Kubernetes 1.21, managed nodegroups in a private subnet. I'm trying to set the cluster up so that kubectl exec times out after inactivity regardless of the workload being execed into, ...
0
votes
1
answer
16
views
How do I disable ICMP echo responses within a Docker container?
I want to be able to change the /proc/sys/net/ipv4/icmp_echo_ignore_all file from within my Docker container, but I get the bash: /proc/sys/net/ipv4/icmp_echo_ignore_all: Read-only file system error ...
- 1
0
votes
0
answers
13
views
How are containers secured with MACVLAN networks?
Containers cannot be connected both to an internal bridge and to the host network at the same time, according to this question. However, this is what I need; I want a set of containers to be connected ...
- 1
1
vote
0
answers
18
views
How to create a VPN Connection to Azure VNet to use the VNet's Public IP Address for internet traffic
I have a number of developers working remotely that need to access external services that require a static IP address.
We created an Azure Virtual Network with a public IP that we wanted to use for ...
- 111
0
votes
0
answers
16
views
Allowing going trafic with Egress and Denying it with Ingress in NetworkPolicy in Kubernetes
I hope you're all doing well and being safe.
I have two pods A and B in two different namespaces.
I wish that pod A in namespace-a has access to every pod on other namespaces so I ve deployed this ...
0
votes
0
answers
18
views
Launch EKS without aws-node
EKS seems to launch aws-node daemon on every new cluster. How can I prevent this?
Context - I'd like to start a cluster with Cilium out of the box, running aws-node prevents this.
- 111
2
votes
1
answer
41
views
Kubernetes container networking between pods
So I have a few services running using nodejs, in more than one kubernetes pod.
These services obviously need to talk to each other, and be able to find the database included in this kubernetes ...
- 125
0
votes
0
answers
12
views
port forward azure VM to internal pod/service
I've got an azure VM running, say on public ip 20.20.20.20
On the VM a local kubernetes cluster is running with "kind".
An nginx pod + service is running on 172.18.0.2:32000 and is ...
- 233
0
votes
0
answers
138
views
How in docker-compose do I bind a specific host IP address to a docker service for outgoing requests?
How in docker-compose do I bind a specific host IP address to a docker service if I want to send any http/https request from the docker service from that selected IP?
For example host server has eth0, ...
- 101
0
votes
0
answers
34
views
How do we use napalm library with ttp module at the same time?
How can i parse the data after getting it with napalm ? First I was using "get_network_driver". I want to use TTP pars method under interface.
Library
from napalm import get_network_driver
...
- 111
0
votes
0
answers
21
views
How to securely connect Azure Kubernetes to on premise services?
I have a couple of linux servers in different physical locations (countries) and all these servers host the same application. I want to be able to safely reach these servers from my kubernetes ...
- 1
0
votes
0
answers
39
views
Disable public DNS for EKS with private API server
When EKS API server endpoint access is set to 'Private', as per the docs:
The cluster's API server endpoint is resolved by public DNS servers to a private IP address from the VPC. In the past, the ...
- 101
0
votes
1
answer
12
views
How can I find out what ml2 extension drivers are enabled?
According to this document on "The Networking service internal DNS resolution", a feature I need requires the dns extension driver in OpenStack,
[ml2]
extension_drivers = port_security,dns
...
- 379
0
votes
1
answer
29
views
How do you enable the DNS extension to ml2 in OpenStack?
In one doc it says,
To enable the internal DNS resolution, the neutron-server service must be configured with the dns_domain config option set to a value other than openstacklocal in neutron.conf ...
- 379
0
votes
1
answer
21
views
Can I see the values set in `ml2_conf.ini` as a regular OpenStack user (non-admin)?
My company uses a managed instance of OpenStack. I am NOT an administrator on this instance. There is functionality that OpenStack offers behind the enable-ml2-dns configuration options, this is set ...
- 379
1
vote
1
answer
190
views
How to access a container/service port in swarm without publishing the port to the outside world?
It is possible to docker-compose to forward a port to the container from localhost only, by writing the desired ports configure in docker-compose.yml, e.g. 127.0.0.1:8080:80.
In docker swarm this does ...
- 11
0
votes
1
answer
8
views
ansible network automation: log commands all commandes from mutiple plays
Trying to write a script to publish basic configurations for any futur new devices. Also assert compliancy of basic configuration for devices in production.
Trying to gather all the lines executed, on ...
- 51
0
votes
0
answers
20
views
ansible network automation: log commands in checkmode, mutiple plays
Trying to write a script to publish basic configurations for any futur new devices. Also assert compliancy of basic configuration for devices in production.
Trying to gather all the lines executed, ...
- 51
0
votes
1
answer
13
views
Random delay in port binding for distributed_virtual_router and router_centralized_snat in openstack neutron
I have created a private network called "Private_Network" in the range of 192.168.220.0/24 plus a virtual router called "Virtual_Router" inside openstack which is connected to the ...
- 1
0
votes
1
answer
157
views
Why do I get "Connection Refused" when attempting to connect to IPFS API using HTTP?
Created a Digital Ocean Ubuntu 20.04 droplet and setup an IPFS server node in it based on this tutorial.
If I run the following command in the server
ipfs swarm peers
I get the expected results
In ...
0
votes
0
answers
6
views
Stream data fast and in real time from a gateway device & store the data for heavier processing later
I am mainly trying to get data streamed as fast as possible to a screen. I will just mention what is the current situation, write my own solution/speculation to resolve it.
I'm not a DevOps. I'm a dev ...
- 113
1
vote
1
answer
123
views
How to migrate away from `docker-machine create`?
I have an old script that uses docker-machine create to create an number of Hyper-V VMs and run a server application inside each one, using docker. It was done this way because the application ...
- 111
0
votes
0
answers
16
views
K8s using Calico or VPC-cni to isolate namespaces on EKS
I need to isolate k8s namespaces on EKS (not Fargate),
The only container that need to send requests to my server is ingress and communication between the same namespace.
- 101
0
votes
0
answers
8
views
How Public facing haproxy node can see on premise haproxy container?
I have internet facing node running haproxy and openvpn server which is connected to a container which is running openvpn client and to that container I have connected another container running ...
- 133
0
votes
0
answers
65
views
Install cilium as network plugin for K8s
ITNOA
I install K8s control plane node with kubeadm init with custom IP for control plane endpoint address and custom IP for API server address
I try to install cilium as network plugin for K8s
I run ...
- 101
2
votes
1
answer
61
views
What parts of Kubernetes can have IP addresses?
Our network team says there an IP address in a subnet is being claimed and released seemingly at random. They are wondering if Kubernetes could be doing it.
I know that Pods, Services and Nodes can ...
- 172
3
votes
1
answer
165
views
Point docker container DNS to specific port?
I was wondering if it was possible to assign the DNS server a docker container is querying (via docker run --dns, or otherwise) to be on a specific port, something other than 53? I had built a custom ...
- 31
2
votes
1
answer
619
views
What do skipped, rescued, and ignored results mean in ANSIBLE playbook execution?
What do skipped, rescued, and ignored results mean in an Ansible playbook execution?
What would be a possible scenario where these results would be different from 0?
PLAY RECAP ************************...
1
vote
1
answer
223
views
Ansible cli_command loop register issues
I can't seem to get the register to works with cli_command and looping of multiples commands. Any suggestions?
-
name: Run show commands
hosts:
- all
connection: network_cli
gather_facts: ...
- 11
0
votes
2
answers
135
views
Reaching a Docker environment running in VMware from LAN
Here is my setup:
I have a Ubuntu 20.04.2 LTS machine running in VMware (vSphere client).
On this machine, I have a local Drupal website running in Docker using Wodby Docker4Drupal https://github.com/...
- 51
0
votes
2
answers
90
views
Limit throughput between Jenkins and Jenkins Agent
I am trying to find a way to throttle the thruput on the request of our Network folks. They want me to not exceed 5.5Mb/sec. Is there a way to do this within Jenkins. Looking at the config files under
...
- 115
0
votes
2
answers
60
views
Service to service communication - through proxy or direct?
A common scenario is two or more services behind a reverse proxy, typically each deployed in a container:
| service 1 | | service 2 |
\ /
\ /
...
- 101
1
vote
1
answer
103
views
How to create a local network mapping in linux
I'm deploying nextcloud via docker, however the way the configuration is set up, it creates a subnetwork at 10.10.10.0/24 on the system it's running on instead of running it on 127.0.0.1. Then the ...
- 21
1
vote
1
answer
50
views
AWS Inspector "High Risk" : port open to the internet with IP whitelisting
We use AWS Inspector to identify risks with our AWS assets. Today I received a finding, with a "high" severity. The finding said that the FTP port was open to the internet. However, after ...
- 123
1
vote
1
answer
446
views
Isolate service networks with Docker Compose
I have two containerised services, A and B, with which I wish to isolate network communications with docker compose. There is also a shared service C which is not isolated from A or B and is free to ...
- 13
-1
votes
1
answer
1k
views
Cannot resolve services with service name inside a kubernetes pod
I cannot access a pod from another pod with its service name. Getting error as
cannot resolve host svcname
When i try to view the information of /etc/resolv.conf, i do see ec2.internal as searches ...
4
votes
1
answer
146
views
K8s cluster in peered VPC can't reach RDS cluster
I have two K8s clusters in the same VPC that I want to connect to an MySQL
Aurora RDS cluster. One of the clusters can reach the RDS cluster just fine.
The other, however, cannot. I'll call these eks-...
0
votes
1
answer
35
views
iptables rules to permit GitHub Actions from breaking (chains default to DROP)
Assuming my iptables rules default to DROP on the INPUT and OUTPUT chains, what is the bare minimum set of rules that I must add to my chains to prevent a script running in GitHub Actions from ...
- 193
1
vote
0
answers
44
views
How to execute a "hello redis" sample python script on a container from the host?
How do I execute this "Hello Redis!!!" sample from the host?
root@mordor:~#
root@mordor:~# docker container ls
CONTAINER ID IMAGE COMMAND CREATED ...
0
votes
1
answer
62
views
why is "docker run" used to connect to redis?
Trying to understand what's happening here:
root@mordor:~#
root@mordor:~# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS ...
0
votes
1
answer
2k
views
how to connect to a MySQL database in a docker container?
starting up the default mysql server:
root $
root $ docker run --name mysql -d -p 3306:3306 -e MYSQL_ROOT_PASSWORD=password mysql/mysql-server:latest
...
0
votes
2
answers
648
views
How do I make a redis container accessible through bridge networking from the host?
I'd like to be able to connect directly to the redis container below:
root $
root $ docker images redis
REPOSITORY TAG IMAGE ID CREATED SIZE
redis ...
1
vote
1
answer
2k
views
docker-compose up: Error starting userland proxy: listen tcp 0.0.0.0:443: bind: address already in use
specific error:
ERROR: for traefik Cannot start service traefik: driver failed programming external connectivity on endpoint frappe_docker_traefik_1 (...
1
vote
1
answer
51
views
How can I access port 80 of another container, when port 80 is already exposed?
I have a docker file that runs some integration tests between two containers. It looks a bit like this:
version: '3'
services:
test_client:
image: client:latest
depends_on:
...
- 145
0
votes
2
answers
393
views
Minecraft docker-container refuses connection
So I have this Dockerfile:
FROM openjdk:8u212-jre-alpine
LABEL maintainer "cowboy_patrick"
RUN apk add --no-cache -U \
openssl \
imagemagick \
lsof \
su-exec \
shadow \
bash \
...
0
votes
2
answers
608
views
How to Save and Restore the Iptables rule and configuration from file?
I want to save the current iptables configuration to a file and restore it from a file.
I have a lot of rules and modifying the rules really hard for me.
So, how can i do that?!
- 171
1
vote
1
answer
96
views
Sending HTTP requests to private EC2 DNS from other EC2 host works, but not from container on EC2 host
I want to make a container hosted on one EC2 host communicate with another container hosted on another EC2 host.
Currently, if I send an HTTP request from host A to host B using host B's private DNS ...
- 123
1
vote
1
answer
37
views
How to create a second IP just for dockers
Problem: my server is already using port 80 and I would like launch another service that uses port 80 on another address (I don't want to remember ports or force my wife to use non-default ports).
I'...
- 11