Questions tagged [networking]
The networking tag has no usage guidance.
74
questions
1
vote
1answer
43 views
How to migrate away from `docker-machine create`?
I have an old script that uses docker-machine create to create an number of Hyper-V VMs and run a server application inside each one, using docker. It was done this way because the application ...
0
votes
0answers
6 views
K8s using Calico or VPC-cni to isolate namespaces on EKS
I need to isolate k8s namespaces on EKS (not Fargate),
The only container that need to send requests to my server is ingress and communication between the same namespace.
0
votes
0answers
7 views
How Public facing haproxy node can see on premise haproxy container?
I have internet facing node running haproxy and openvpn server which is connected to a container which is running openvpn client and to that container I have connected another container running ...
0
votes
0answers
18 views
Install cilium as network plugin for K8s
ITNOA
I install K8s control plane node with kubeadm init with custom IP for control plane endpoint address and custom IP for API server address
I try to install cilium as network plugin for K8s
I run ...
2
votes
1answer
35 views
What parts of Kubernetes can have IP addresses?
Our network team says there an IP address in a subnet is being claimed and released seemingly at random. They are wondering if Kubernetes could be doing it.
I know that Pods, Services and Nodes can ...
3
votes
1answer
45 views
Point docker container DNS to specific port?
I was wondering if it was possible to assign the DNS server a docker container is querying (via docker run --dns, or otherwise) to be on a specific port, something other than 53? I had built a custom ...
2
votes
1answer
124 views
What do skipped, rescued, and ignored results mean in ANSIBLE playbook execution?
What do skipped, rescued, and ignored results mean in an Ansible playbook execution?
What would be a possible scenario where these results would be different from 0?
PLAY RECAP ************************...
1
vote
1answer
85 views
Ansible cli_command loop register issues
I can't seem to get the register to works with cli_command and looping of multiples commands. Any suggestions?
-
name: Run show commands
hosts:
- all
connection: network_cli
gather_facts: ...
0
votes
2answers
92 views
Reaching a Docker environment running in VMware from LAN
Here is my setup:
I have a Ubuntu 20.04.2 LTS machine running in VMware (vSphere client).
On this machine, I have a local Drupal website running in Docker using Wodby Docker4Drupal https://github.com/...
0
votes
2answers
42 views
Limit throughput between Jenkins and Jenkins Agent
I am trying to find a way to throttle the thruput on the request of our Network folks. They want me to not exceed 5.5Mb/sec. Is there a way to do this within Jenkins. Looking at the config files under
...
0
votes
2answers
39 views
Service to service communication - through proxy or direct?
A common scenario is two or more services behind a reverse proxy, typically each deployed in a container:
| service 1 | | service 2 |
\ /
\ /
...
1
vote
1answer
70 views
How to create a local network mapping in linux
I'm deploying nextcloud via docker, however the way the configuration is set up, it creates a subnetwork at 10.10.10.0/24 on the system it's running on instead of running it on 127.0.0.1. Then the ...
1
vote
1answer
35 views
AWS Inspector "High Risk" : port open to the internet with IP whitelisting
We use AWS Inspector to identify risks with our AWS assets. Today I received a finding, with a "high" severity. The finding said that the FTP port was open to the internet. However, after ...
0
votes
1answer
187 views
Isolate service networks with Docker Compose
I have two containerised services, A and B, with which I wish to isolate network communications with docker compose. There is also a shared service C which is not isolated from A or B and is free to ...
-1
votes
1answer
457 views
Cannot resolve services with service name inside a kubernetes pod
I cannot access a pod from another pod with its service name. Getting error as
cannot resolve host svcname
When i try to view the information of /etc/resolv.conf, i do see ec2.internal as searches ...
4
votes
1answer
88 views
K8s cluster in peered VPC can't reach RDS cluster
I have two K8s clusters in the same VPC that I want to connect to an MySQL
Aurora RDS cluster. One of the clusters can reach the RDS cluster just fine.
The other, however, cannot. I'll call these eks-...
0
votes
1answer
23 views
iptables rules to permit GitHub Actions from breaking (chains default to DROP)
Assuming my iptables rules default to DROP on the INPUT and OUTPUT chains, what is the bare minimum set of rules that I must add to my chains to prevent a script running in GitHub Actions from ...
1
vote
0answers
40 views
How to execute a "hello redis" sample python script on a container from the host?
How do I execute this "Hello Redis!!!" sample from the host?
root@mordor:~#
root@mordor:~# docker container ls
CONTAINER ID IMAGE COMMAND CREATED ...
0
votes
1answer
51 views
why is "docker run" used to connect to redis?
Trying to understand what's happening here:
root@mordor:~#
root@mordor:~# docker ps -a
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS ...
0
votes
1answer
1k views
how to connect to a MySQL database in a docker container?
starting up the default mysql server:
root $
root $ docker run --name mysql -d -p 3306:3306 -e MYSQL_ROOT_PASSWORD=password mysql/mysql-server:latest
...
0
votes
2answers
309 views
How do I make a redis container accessible through bridge networking from the host?
I'd like to be able to connect directly to the redis container below:
root $
root $ docker images redis
REPOSITORY TAG IMAGE ID CREATED SIZE
redis ...
1
vote
1answer
1k views
docker-compose up: Error starting userland proxy: listen tcp 0.0.0.0:443: bind: address already in use
specific error:
ERROR: for traefik Cannot start service traefik: driver failed programming external connectivity on endpoint frappe_docker_traefik_1 (...
1
vote
1answer
45 views
How can I access port 80 of another container, when port 80 is already exposed?
I have a docker file that runs some integration tests between two containers. It looks a bit like this:
version: '3'
services:
test_client:
image: client:latest
depends_on:
...
0
votes
2answers
210 views
Minecraft docker-container refuses connection
So I have this Dockerfile:
FROM openjdk:8u212-jre-alpine
LABEL maintainer "cowboy_patrick"
RUN apk add --no-cache -U \
openssl \
imagemagick \
lsof \
su-exec \
shadow \
bash \
...
0
votes
2answers
396 views
How to Save and Restore the Iptables rule and configuration from file?
I want to save the current iptables configuration to a file and restore it from a file.
I have a lot of rules and modifying the rules really hard for me.
So, how can i do that?!
1
vote
1answer
57 views
Sending HTTP requests to private EC2 DNS from other EC2 host works, but not from container on EC2 host
I want to make a container hosted on one EC2 host communicate with another container hosted on another EC2 host.
Currently, if I send an HTTP request from host A to host B using host B's private DNS ...
1
vote
1answer
33 views
How to create a second IP just for dockers
Problem: my server is already using port 80 and I would like launch another service that uses port 80 on another address (I don't want to remember ports or force my wife to use non-default ports).
I'...
2
votes
1answer
44 views
Why I cannot access k3s service from pod in rasbian?
I have installed K3S kubernetes on rasbian, and created a following mysql deployment on it:
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: mysql-data
spec:
accessModes:
- ...
0
votes
1answer
273 views
Blacklist network ranges Docker is allowed to use for its containers (swarm mode)
Basically I need to blacklist an IP range (and maybe multiple ranges) so that Docker can use any other IPs for its containers BUT IPs in this range.
Assume I have my docker nodes in a swarm of n ...
1
vote
1answer
70 views
How do I setup an OpenShift route that will allow both 80 and 443 traffic to my app?
I'd like to setup a route that will pass both 80 and 443 traffic to the same service in OpenShift. When I try to create a second route it errors out. I want this to be in a yaml like would be used ...
1
vote
1answer
79 views
Mapping Outbound IPs to 1 IP in Azure App Services
I have 3 components of my architecture running in 3 separate Azure App Services. Each app service has 4 outbound IPs. So whenever I have to deploy my app onto the client's premise, I have to whitelist ...
2
votes
2answers
184 views
Does Kubernetes internal networking keep traffic to co-located Pods where possible?
In Kubernetes, if I run a Service Foo on every Node, and also Service Bar on every Node, i.e. with DaemonSets. If a Pod from Service Foo needs to make a request to Service Bar, does Kubernetes ...
1
vote
1answer
46 views
Kubernetes: How to expose a Pod/Deployment to the Nodes Network
Ok, let's assume I've got the following theoretical setup:
I want to somehow assign IP-Addresses accessible by the PCs on the left to my pods. I can set routes etc. as I need since this setup is ...
2
votes
2answers
276 views
localhost Pod to Pod communication k8s
I am trying to transfer an old legacy system to k8s.
I have a custom server that client apps connect to in order to communicate with one another. Both the server and clients were originally created ...
2
votes
0answers
20 views
Connecting to MySQL Remotely on Azure VM
I am having trouble connecting remotely to my MySql install that runs on an Azure VM.
Here is what I did:
Ubuntu VM with MySql 5.7 installed
Bind Address set to 0.0.0.0
User granted rights with ...
0
votes
1answer
582 views
How to connect to postgres container from a node container using docker-compose?
I'm trying to connect from a node app container to a postgresql container using docker-compose but I'm not able to do it.
This is my docker-compose.yml file:
version: '3.7'
services:
db:
image: ...
1
vote
1answer
433 views
Kubelet config file -- > clusterDNS
clusterDNS:
- "10.32.0.10"
The above is a flag passed to the kubelet file, i dont know what it refers to clsuter DNS ? Is it refers to VPC CIDR or any subnet CIDR ?
4
votes
1answer
1k views
Bridged network adapter for Packer + VirtualBox?
So,
I load an .ova image with packer of a minimal ubuntu linux installation.
I realized after everything went through (Provisioners etc) and it successfully exported the output file. However, when ...
2
votes
1answer
191 views
Check connectivity of 5000 + servers from ansible and get list of hosts which are connectable and which are not
I need to check connectivity of hosts on port 43. I can manually login and check connectivity by:
nc -v `hostname` 43
nc -v `hostname_1` 43
Is there any ansible script that goes through all the ...
1
vote
1answer
51 views
Docker container and their IPs on overlay (swarm) networks
I have a Docker overlay network which includes 2 containers and the loadbalancer for this network:
"Containers": {
"0ece6b958aa6b451478b5004ba1b1681ec91b718b99a0c2c88b79d5e8e135a66": {
...
1
vote
1answer
269 views
Docker bridge network Configuration for containers
I have an Angular application deployed in the container . If I log in to the container I can curl to the port 4200.
I have mapped to port 9001 to connect from my host .
But I can't curl from my host ...
1
vote
1answer
466 views
IOS_Command Module - Delayed Prompt Issue (Cisco 3850 - IOS XE)
I'm new to the Ansible world, so I'll do my best to explain everything. If I leave something out or need to clarify, just let me know.
So, I've been working on upgrades for various Cisco switches/...
1
vote
1answer
529 views
aws - Connect two private subnets?
I'm testing some cloudformation infrastructure templates, and I noticed that most of the examples include routing tables to connect private subnets to public subnets, but my question then is:
if two ...
1
vote
1answer
190 views
How to perform low-level inspecting of a Docker network traffic?
I'm currently in a scenario that requires Docker container C to be able to intercept communication between docker containers A and B, without their knowledge. I am basically attempting to do a ...
0
votes
1answer
197 views
Is there a way to map ports two docker container
Let's consider two docker conatiner named app and mysql.
I am looking for a way, where I can map app and mysql ports, so that if I try to connect to mysql from web, using localhost:3306 it can connect....
6
votes
2answers
124 views
Securing communication between cloud VMs without private networks. Any strategy besides building own VPN? Spiped?
I am working on an application that requires a number of different services (web application + database + worker queues, XMPP server for messaging, redis, central authentication via LDAP, etc). For my ...
1
vote
1answer
6k views
External access to internet from Kubernetes Pods
I'm having troubles with network access from pods. I had installed new Kubernetes cluster with flannel-network plugin,
Checking the health of server - good.
I tried to check network via busybox: ...
0
votes
1answer
33 views
Dockerized MySql slower in Wifi than ethernet
When I try to connect to a MySQL server that runs in a docker container(in System A) through my application(Running in system B) via wifi, it takes at least 4X amount of time than it would when both ...
1
vote
1answer
33 views
How to attach two (or more) networks to a container so they are available when the container starts?
I noticed if you try to attach a container to two networks, the following syntax does not cause an error, but effectively attach the container only on the network specified by the last --network:
...
1
vote
1answer
22 views
What are the benefits of spreading the various services of a multi-tiers application over several user-define bridges?
I have a simple system made of a database backend, several instances of a web application and a load balancer. Each service is running in its own Docker container, all of them being hosted on the same ...