Questions tagged [networking]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
32 views

How are dev servers for testing working and available outside of VPN?

I'm a web developer and at work we have different servers (we call them stands) for testing our deployed app. In order to deploy our app we connect via ssh to one certain server and start a process in ...
user avatar
  • 101
0 votes
1 answer
25 views

Why does php-fpm show nginx's IP while they are on different containers?

I am trying to set up an Nginx server for the purpose of load balancing between 4 Php-fpm servers. You can access my docker configuration files from this Github repository. My containers' network ...
user avatar
0 votes
0 answers
13 views

EKS: kubectl exec does not respect streamingConnectionIdleTimeout

Using EKS with Kubernetes 1.21, managed nodegroups in a private subnet. I'm trying to set the cluster up so that kubectl exec times out after inactivity regardless of the workload being execed into, ...
user avatar
0 votes
1 answer
16 views

How do I disable ICMP echo responses within a Docker container?

I want to be able to change the /proc/sys/net/ipv4/icmp_echo_ignore_all file from within my Docker container, but I get the bash: /proc/sys/net/ipv4/icmp_echo_ignore_all: Read-only file system error ...
user avatar
  • 1
0 votes
0 answers
13 views

How are containers secured with MACVLAN networks?

Containers cannot be connected both to an internal bridge and to the host network at the same time, according to this question. However, this is what I need; I want a set of containers to be connected ...
user avatar
  • 1
1 vote
0 answers
18 views

How to create a VPN Connection to Azure VNet to use the VNet's Public IP Address for internet traffic

I have a number of developers working remotely that need to access external services that require a static IP address. We created an Azure Virtual Network with a public IP that we wanted to use for ...
user avatar
0 votes
0 answers
16 views

Allowing going trafic with Egress and Denying it with Ingress in NetworkPolicy in Kubernetes

I hope you're all doing well and being safe. I have two pods A and B in two different namespaces. I wish that pod A in namespace-a has access to every pod on other namespaces so I ve deployed this ...
user avatar
0 votes
0 answers
18 views

Launch EKS without aws-node

EKS seems to launch aws-node daemon on every new cluster. How can I prevent this? Context - I'd like to start a cluster with Cilium out of the box, running aws-node prevents this.
user avatar
  • 111
2 votes
1 answer
41 views

Kubernetes container networking between pods

So I have a few services running using nodejs, in more than one kubernetes pod. These services obviously need to talk to each other, and be able to find the database included in this kubernetes ...
user avatar
  • 125
0 votes
0 answers
12 views

port forward azure VM to internal pod/service

I've got an azure VM running, say on public ip 20.20.20.20 On the VM a local kubernetes cluster is running with "kind". An nginx pod + service is running on 172.18.0.2:32000 and is ...
user avatar
0 votes
0 answers
138 views

How in docker-compose do I bind a specific host IP address to a docker service for outgoing requests?

How in docker-compose do I bind a specific host IP address to a docker service if I want to send any http/https request from the docker service from that selected IP? For example host server has eth0, ...
user avatar
0 votes
0 answers
34 views

How do we use napalm library with ttp module at the same time?

How can i parse the data after getting it with napalm ? First I was using "get_network_driver". I want to use TTP pars method under interface. Library from napalm import get_network_driver ...
user avatar
0 votes
0 answers
21 views

How to securely connect Azure Kubernetes to on premise services?

I have a couple of linux servers in different physical locations (countries) and all these servers host the same application. I want to be able to safely reach these servers from my kubernetes ...
user avatar
0 votes
0 answers
39 views

Disable public DNS for EKS with private API server

When EKS API server endpoint access is set to 'Private', as per the docs: The cluster's API server endpoint is resolved by public DNS servers to a private IP address from the VPC. In the past, the ...
user avatar
  • 101
0 votes
1 answer
12 views

How can I find out what ml2 extension drivers are enabled?

According to this document on "The Networking service internal DNS resolution", a feature I need requires the dns extension driver in OpenStack, [ml2] extension_drivers = port_security,dns ...
user avatar
0 votes
1 answer
29 views

How do you enable the DNS extension to ml2 in OpenStack?

In one doc it says, To enable the internal DNS resolution, the neutron-server service must be configured with the dns_domain config option set to a value other than openstacklocal in neutron.conf ...
user avatar
0 votes
1 answer
21 views

Can I see the values set in `ml2_conf.ini` as a regular OpenStack user (non-admin)?

My company uses a managed instance of OpenStack. I am NOT an administrator on this instance. There is functionality that OpenStack offers behind the enable-ml2-dns configuration options, this is set ...
user avatar
1 vote
1 answer
190 views

How to access a container/service port in swarm without publishing the port to the outside world?

It is possible to docker-compose to forward a port to the container from localhost only, by writing the desired ports configure in docker-compose.yml, e.g. 127.0.0.1:8080:80. In docker swarm this does ...
user avatar
0 votes
1 answer
8 views

ansible network automation: log commands all commandes from mutiple plays

Trying to write a script to publish basic configurations for any futur new devices. Also assert compliancy of basic configuration for devices in production. Trying to gather all the lines executed, on ...
user avatar
  • 51
0 votes
0 answers
20 views

ansible network automation: log commands in checkmode, mutiple plays

Trying to write a script to publish basic configurations for any futur new devices. Also assert compliancy of basic configuration for devices in production. Trying to gather all the lines executed, ...
user avatar
  • 51
0 votes
1 answer
13 views

Random delay in port binding for distributed_virtual_router and router_centralized_snat in openstack neutron

I have created a private network called "Private_Network" in the range of 192.168.220.0/24 plus a virtual router called "Virtual_Router" inside openstack which is connected to the ...
user avatar
0 votes
1 answer
157 views

Why do I get "Connection Refused" when attempting to connect to IPFS API using HTTP?

Created a Digital Ocean Ubuntu 20.04 droplet and setup an IPFS server node in it based on this tutorial. If I run the following command in the server ipfs swarm peers I get the expected results In ...
user avatar
0 votes
0 answers
6 views

Stream data fast and in real time from a gateway device & store the data for heavier processing later

I am mainly trying to get data streamed as fast as possible to a screen. I will just mention what is the current situation, write my own solution/speculation to resolve it. I'm not a DevOps. I'm a dev ...
user avatar
  • 113
1 vote
1 answer
123 views

How to migrate away from `docker-machine create`?

I have an old script that uses docker-machine create to create an number of Hyper-V VMs and run a server application inside each one, using docker. It was done this way because the application ...
user avatar
  • 111
0 votes
0 answers
16 views

K8s using Calico or VPC-cni to isolate namespaces on EKS

I need to isolate k8s namespaces on EKS (not Fargate), The only container that need to send requests to my server is ingress and communication between the same namespace.
user avatar
0 votes
0 answers
8 views

How Public facing haproxy node can see on premise haproxy container?

I have internet facing node running haproxy and openvpn server which is connected to a container which is running openvpn client and to that container I have connected another container running ...
user avatar
0 votes
0 answers
65 views

Install cilium as network plugin for K8s

ITNOA I install K8s control plane node with kubeadm init with custom IP for control plane endpoint address and custom IP for API server address I try to install cilium as network plugin for K8s I run ...
user avatar
2 votes
1 answer
61 views

What parts of Kubernetes can have IP addresses?

Our network team says there an IP address in a subnet is being claimed and released seemingly at random. They are wondering if Kubernetes could be doing it. I know that Pods, Services and Nodes can ...
user avatar
  • 172
3 votes
1 answer
165 views

Point docker container DNS to specific port?

I was wondering if it was possible to assign the DNS server a docker container is querying (via docker run --dns, or otherwise) to be on a specific port, something other than 53? I had built a custom ...
user avatar
  • 31
2 votes
1 answer
619 views

What do skipped, rescued, and ignored results mean in ANSIBLE playbook execution?

What do skipped, rescued, and ignored results mean in an Ansible playbook execution? What would be a possible scenario where these results would be different from 0? PLAY RECAP ************************...
user avatar
1 vote
1 answer
223 views

Ansible cli_command loop register issues

I can't seem to get the register to works with cli_command and looping of multiples commands. Any suggestions? - name: Run show commands hosts: - all connection: network_cli gather_facts: ...
user avatar
  • 11
0 votes
2 answers
135 views

Reaching a Docker environment running in VMware from LAN

Here is my setup: I have a Ubuntu 20.04.2 LTS machine running in VMware (vSphere client). On this machine, I have a local Drupal website running in Docker using Wodby Docker4Drupal https://github.com/...
user avatar
0 votes
2 answers
90 views

Limit throughput between Jenkins and Jenkins Agent

I am trying to find a way to throttle the thruput on the request of our Network folks. They want me to not exceed 5.5Mb/sec. Is there a way to do this within Jenkins. Looking at the config files under ...
user avatar
  • 115
0 votes
2 answers
60 views

Service to service communication - through proxy or direct?

A common scenario is two or more services behind a reverse proxy, typically each deployed in a container: | service 1 | | service 2 | \ / \ / ...
user avatar
  • 101
1 vote
1 answer
103 views

How to create a local network mapping in linux

I'm deploying nextcloud via docker, however the way the configuration is set up, it creates a subnetwork at 10.10.10.0/24 on the system it's running on instead of running it on 127.0.0.1. Then the ...
user avatar
  • 21
1 vote
1 answer
50 views

AWS Inspector "High Risk" : port open to the internet with IP whitelisting

We use AWS Inspector to identify risks with our AWS assets. Today I received a finding, with a "high" severity. The finding said that the FTP port was open to the internet. However, after ...
user avatar
  • 123
1 vote
1 answer
446 views

Isolate service networks with Docker Compose

I have two containerised services, A and B, with which I wish to isolate network communications with docker compose. There is also a shared service C which is not isolated from A or B and is free to ...
user avatar
-1 votes
1 answer
1k views

Cannot resolve services with service name inside a kubernetes pod

I cannot access a pod from another pod with its service name. Getting error as cannot resolve host svcname When i try to view the information of /etc/resolv.conf, i do see ec2.internal as searches ...
user avatar
4 votes
1 answer
146 views

K8s cluster in peered VPC can't reach RDS cluster

I have two K8s clusters in the same VPC that I want to connect to an MySQL Aurora RDS cluster. One of the clusters can reach the RDS cluster just fine. The other, however, cannot. I'll call these eks-...
user avatar
0 votes
1 answer
35 views

iptables rules to permit GitHub Actions from breaking (chains default to DROP)

Assuming my iptables rules default to DROP on the INPUT and OUTPUT chains, what is the bare minimum set of rules that I must add to my chains to prevent a script running in GitHub Actions from ...
user avatar
1 vote
0 answers
44 views

How to execute a "hello redis" sample python script on a container from the host?

How do I execute this "Hello Redis!!!" sample from the host? root@mordor:~# root@mordor:~# docker container ls CONTAINER ID IMAGE COMMAND CREATED ...
user avatar
0 votes
1 answer
62 views

why is "docker run" used to connect to redis?

Trying to understand what's happening here: root@mordor:~# root@mordor:~# docker ps -a CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS ...
user avatar
0 votes
1 answer
2k views

how to connect to a MySQL database in a docker container?

starting up the default mysql server: root $ root $ docker run --name mysql -d -p 3306:3306 -e MYSQL_ROOT_PASSWORD=password mysql/mysql-server:latest ...
user avatar
0 votes
2 answers
648 views

How do I make a redis container accessible through bridge networking from the host?

I'd like to be able to connect directly to the redis container below: root $ root $ docker images redis REPOSITORY TAG IMAGE ID CREATED SIZE redis ...
user avatar
1 vote
1 answer
2k views

docker-compose up: Error starting userland proxy: listen tcp 0.0.0.0:443: bind: address already in use

specific error: ERROR: for traefik Cannot start service traefik: driver failed programming external connectivity on endpoint frappe_docker_traefik_1 (...
user avatar
1 vote
1 answer
51 views

How can I access port 80 of another container, when port 80 is already exposed?

I have a docker file that runs some integration tests between two containers. It looks a bit like this: version: '3' services: test_client: image: client:latest depends_on: ...
user avatar
  • 145
0 votes
2 answers
393 views

Minecraft docker-container refuses connection

So I have this Dockerfile: FROM openjdk:8u212-jre-alpine LABEL maintainer "cowboy_patrick" RUN apk add --no-cache -U \ openssl \ imagemagick \ lsof \ su-exec \ shadow \ bash \ ...
user avatar
0 votes
2 answers
608 views

How to Save and Restore the Iptables rule and configuration from file?

I want to save the current iptables configuration to a file and restore it from a file. I have a lot of rules and modifying the rules really hard for me. So, how can i do that?!
user avatar
  • 171
1 vote
1 answer
96 views

Sending HTTP requests to private EC2 DNS from other EC2 host works, but not from container on EC2 host

I want to make a container hosted on one EC2 host communicate with another container hosted on another EC2 host. Currently, if I send an HTTP request from host A to host B using host B's private DNS ...
user avatar
  • 123
1 vote
1 answer
37 views

How to create a second IP just for dockers

Problem: my server is already using port 80 and I would like launch another service that uses port 80 on another address (I don't want to remember ports or force my wife to use non-default ports). I'...
user avatar