home.social

#linuxnetworking — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #linuxnetworking, aggregated by home.social.

fetched live
  1. Today I removed some netns with various virtual interfaces. In one of the netns there was a wireguard tunnel and it looks like it is still alive.

    The peer gets handshakes while I cannot find the wg in any named netns. But the "lsns --type=net" shows three namespaces without a pid and without a mount… and I assume that there is a #FrankenGuard hiding in one of them. 🧟 🧟 🧟

    Any idea how I could get into these anonymous netns to remove the wg interface?

    #linuxnetworking #netns #wireguard

  2. Today I removed some netns with various virtual interfaces. In one of the netns there was a wireguard tunnel and it looks like it is still alive.

    The peer gets handshakes while I cannot find the wg in any named netns. But the "lsns --type=net" shows three namespaces without a pid and without a mount… and I assume that there is a #FrankenGuard hiding in one of them. 🧟 🧟 🧟

    Any idea how I could get into these anonymous netns to remove the wg interface?

    #linuxnetworking #netns #wireguard

  3. …a ping to the management ip got a dest unreachable. 🤯

    *WTF*

    Need to crash it just another time to have a serial console logging ready: tpaste.us/VnYv

    It initial happened on 6.18.33 with 1Gbps/140k pps forwarding traffic, but also on 6.18.35 with some lower throughput. 😭

    The XDP program can be found at codeberg.org/routerkit/fragg-o - it might crash your machine 🤷

    What a day!

    (2/2)

    #linuxnetworking #xdp #ebpf

  4. …a ping to the management ip got a dest unreachable. 🤯

    *WTF*

    Need to crash it just another time to have a serial console logging ready: tpaste.us/VnYv

    It initial happened on 6.18.33 with 1Gbps/140k pps forwarding traffic, but also on 6.18.35 with some lower throughput. 😭

    The XDP program can be found at codeberg.org/routerkit/fragg-o - it might crash your machine 🤷

    What a day!

    (2/2)

    #linuxnetworking #xdp #ebpf

  5. Last week I participated #SaltSprint to discuss declarative network configuration in #NixOS. I got the feedback, that replacing scripted networking with #ifstate of a full blown frr-based EVPN setup is possible and did just work. 💪

    This feedback makes me really happy 🤗 #WorksAsIntended

    In return, ifstate got a larger pull request improving its python packaging and CI tooling. And there is a commitment for further contributions. ❤️ ❤️ ❤️

    github.com/NixOS/nixpkgs/issue

    #linuxnetworking #nix

  6. Last week I participated #SaltSprint to discuss declarative network configuration in #NixOS. I got the feedback, that replacing scripted networking with #ifstate of a full blown frr-based EVPN setup is possible and did just work. 💪

    This feedback makes me really happy 🤗 #WorksAsIntended

    In return, ifstate got a larger pull request improving its python packaging and CI tooling. And there is a commitment for further contributions. ❤️ ❤️ ❤️

    github.com/NixOS/nixpkgs/issue

    #linuxnetworking #nix

  7. Learn how to install and configure ProxyChains on Linux. Set up chain types, enable DNS proxying, and route curl, nmap, and SSH through Tor in minutes.

    Full guide here: ostechnix.com/install-configur

    #Proxychains #Proxy #DNS #Tor #Socks5 #LinuxNetworking #Linuxhowto

  8. Learn how to install and configure ProxyChains on Linux. Set up chain types, enable DNS proxying, and route curl, nmap, and SSH through Tor in minutes.

    Full guide here: ostechnix.com/install-configur

    #Proxychains #Proxy #DNS #Tor #Socks5 #LinuxNetworking #Linuxhowto

  9. ifstate 2.4.1 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/routerkit/ifstate

    This release primarily fixes bugs just discovered by users upgrading to the 2.4 release. It is already available in Alpine Linux 3.24.

    #ifstate #linuxnetworking #AlpineLinux

  10. ifstate 2.4.1 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/routerkit/ifstate

    This release primarily fixes bugs just discovered by users upgrading to the 2.4 release. It is already available in Alpine Linux 3.24.

    #ifstate #linuxnetworking #AlpineLinux

  11. 2) IPv6 tokenized interface identifier support was added to allow to configure the IPv6 interface identifier for interfaces doing SLAAC: ifstate.net/schema/2.4/#interf

    This was specified in datatracker.ietf.org/doc/html/ and is implemented in the Linux kernel. Ifstate provides the same functionality as the ip-token(8) command from iproute2.

    The new release is already available in Alpine Linux edge and will be part of Alpine Linux 3.24 🥳

    #ifstate #linuxnetworking #AlpineLinux

  12. 2) IPv6 tokenized interface identifier support was added to allow to configure the IPv6 interface identifier for interfaces doing SLAAC: ifstate.net/schema/2.4/#interf

    This was specified in datatracker.ietf.org/doc/html/ and is implemented in the Linux kernel. Ifstate provides the same functionality as the ip-token(8) command from iproute2.

    The new release is already available in Alpine Linux edge and will be part of Alpine Linux 3.24 🥳

    #ifstate #linuxnetworking #AlpineLinux

  13. In case you bother why I'm looking at MAC address handling for various link types of the Linux kernel: I'm working on a new ifstate feature to get reproducible mac addresses for virtual interfaces and reset the mac address of physical links to their permanent mac address by default.

    codeberg.org/routerkit/ifstate

    The reproducible MAC addresses are based on SHAKE256 with an input build from the host (machine-id), netns and interface (link) name.

    #ifstate #linuxnetworking

  14. In case you bother why I'm looking at MAC address handling for various link types of the Linux kernel: I'm working on a new ifstate feature to get reproducible mac addresses for virtual interfaces and reset the mac address of physical links to their permanent mac address by default.

    codeberg.org/routerkit/ifstate

    The reproducible MAC addresses are based on SHAKE256 with an input build from the host (machine-id), netns and interface (link) name.

    #ifstate #linuxnetworking

  15. #TIL One could change the mac address of the lo interface, but one cannot revert it to 00:00:00:00:00:00. When the kernel boots or a netns is created, the lo interface spawns with the initial mac address 00:00:00:00:00:00. It can be changed afterwards, but it seems to be impossible to change it back to it's initial value 00:00:00:00:00:00. Fascinating. 🤷

    #linuxnetworking

  16. #TIL One could change the mac address of the lo interface, but one cannot revert it to 00:00:00:00:00:00. When the kernel boots or a netns is created, the lo interface spawns with the initial mac address 00:00:00:00:00:00. It can be changed afterwards, but it seems to be impossible to change it back to it's initial value 00:00:00:00:00:00. Fascinating. 🤷

    #linuxnetworking

  17. The JSON schema and it's description were missing for ifstate 2.3. It has now been published at ifstate.net/schema/2.3/

    For your convenience the JSON Schema Store catalog entry has also been updated: github.com/SchemaStore/schemas

    #ifstate #linuxnetworking #schemastore

  18. The JSON schema and it's description were missing for ifstate 2.3. It has now been published at ifstate.net/schema/2.3/

    For your convenience the JSON Schema Store catalog entry has also been updated: github.com/SchemaStore/schemas

    #ifstate #linuxnetworking #schemastore

  19. ifstate 2.3.0 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/routerkit/ifstate

    This is release contains various new features like:
    - bridge: VLAN membership for bridge ports
    - link: support external created veth ifaces
    - routing: ignore routes by ifname regex
    - tc: add vlan action (allows remapping); improve change detection

    The new release is already available in #AlpineLinux and in the RouterKit Debian package repository.

    #linuxnetworking #ifstate #RouterKit

  20. ifstate 2.3.0 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/routerkit/ifstate

    This is release contains various new features like:
    - bridge: VLAN membership for bridge ports
    - link: support external created veth ifaces
    - routing: ignore routes by ifname regex
    - tc: add vlan action (allows remapping); improve change detection

    The new release is already available in #AlpineLinux and in the RouterKit Debian package repository.

    #linuxnetworking #ifstate #RouterKit

  21. ifstate 2.2.6 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/routerkit/ifstate

    This is a bug-fix only release:
    - fix MTU configuration for newly created tun links
    - fix exception if wireguard sockets cannot be opened (i.e. due to missing kernel modules)

    The new release is already available in #AlpineLinux and in the RouterKit Debian package repository.

    #linuxnetworking #ifstate #RouterKit

  22. ifstate 2.2.6 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/routerkit/ifstate

    This is a bug-fix only release:
    - fix MTU configuration for newly created tun links
    - fix exception if wireguard sockets cannot be opened (i.e. due to missing kernel modules)

    The new release is already available in #AlpineLinux and in the RouterKit Debian package repository.

    #linuxnetworking #ifstate #RouterKit

  23. Building Ubuntu LTS packages for #ifstate has been enabled in git HEAD. There are pre-release builds available for Ubuntu noble and jammy.

    codeberg.org/routerkit/-/packa

    Please be aware that the next (pre-)release packages will get a conflicts to netplan.

    /cc @bebehei

    #ifstate #linuxnetworking

  24. Building Ubuntu LTS packages for #ifstate has been enabled in git HEAD. There are pre-release builds available for Ubuntu noble and jammy.

    codeberg.org/routerkit/-/packa

    Please be aware that the next (pre-)release packages will get a conflicts to netplan.

    /cc @bebehei

    #ifstate #linuxnetworking

  25. ifstate 2.2.5 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/routerkit/ifstate

    The 76th release includes various fixes & improvements like:
    - fixing address scope handling
    - fixing non-wireless interfaces handled as wireless interfaces when moving them between netns
    - make parsing route table files more compatible to iproute2

    I am very grateful for the growing number of contributors. 🙏

    #linuxnetworking #ifstate #RouterKit

  26. ifstate 2.2.5 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/routerkit/ifstate

    The 76th release includes various fixes & improvements like:
    - fixing address scope handling
    - fixing non-wireless interfaces handled as wireless interfaces when moving them between netns
    - make parsing route table files more compatible to iproute2

    I am very grateful for the growing number of contributors. 🙏

    #linuxnetworking #ifstate #RouterKit

  27. Okay, this is weird.

    I am seeing `tailscaled` spiking up to 250% CPU usage every other minute, with up to 60 MBit/s outgoing traffic on the `tailscale0` interface... and on the `wg0` interface I see the same amount of traffic during that period.

    I now disabled wireguard and the issue is gone.

    But I have absolutely NO idea why this is happening, what causes it, and why it (seemingly) suddenly started - I did not have this issue earlier today. All I did in between was update the unstable channel, but all packages involved here (tailscale, wireguard) are from stable. So... 🤔 I am at loss...

    #tailscale #wireguard #linux #linuxnetworking #networking #sysadmin #nixos

  28. Okay, this is weird.

    I am seeing `tailscaled` spiking up to 250% CPU usage every other minute, with up to 60 MBit/s outgoing traffic on the `tailscale0` interface... and on the `wg0` interface I see the same amount of traffic during that period.

    I now disabled wireguard and the issue is gone.

    But I have absolutely NO idea why this is happening, what causes it, and why it (seemingly) suddenly started - I did not have this issue earlier today. All I did in between was update the unstable channel, but all packages involved here (tailscale, wireguard) are from stable. So... 🤔 I am at loss...

    #tailscale #wireguard #linux #linuxnetworking #networking #sysadmin #nixos

  29. Unser @dd_ix Workshop zum Thema BGP Routing wurde auf den @clt_news angenommen 💪 . Für alle die meine Vorträge der letzten Jahre über Alpine Linux, ifstate oder Linux Router interessant fanden bietet sich hier die Möglichkeit für praktische Erfahrungen und Austausch.

    chemnitzer.linux-tage.de/2026/

    #CLT2026 #DDIX #ifstate #RouterKit #linuxnetworking

  30. Unser @dd_ix Workshop zum Thema BGP Routing wurde auf den @clt_news angenommen 💪 . Für alle die meine Vorträge der letzten Jahre über Alpine Linux, ifstate oder Linux Router interessant fanden bietet sich hier die Möglichkeit für praktische Erfahrungen und Austausch.

    chemnitzer.linux-tage.de/2026/

    #CLT2026 #DDIX #ifstate #RouterKit #linuxnetworking

  31. ifstate 2.2.4 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/liske/ifstate/rel

    The 75th release includes various fixes & improvements like:
    - make stable-privacy IPv6 addresses work
    - resolve wireguard endpoints *after* configuring the network stack so that DNS resolution could work

    This is the first release with published Debian packages: ifstate.net/2.2/docs/install/#

    #linuxnetworking #Debian #ifstate #wireguard

  32. ifstate 2.2.4 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/liske/ifstate/rel

    The 75th release includes various fixes & improvements like:
    - make stable-privacy IPv6 addresses work
    - resolve wireguard endpoints *after* configuring the network stack so that DNS resolution could work

    This is the first release with published Debian packages: ifstate.net/2.2/docs/install/#

    #linuxnetworking #Debian #ifstate #wireguard

  33. The ifstate git repository on #Codeberg has been moved from my personal account into the RouterKit project at codeberg.org/routerkit/ifstate

    With moving the project it gains access to CI/CD runners and the first step is to use them to provide #Debian packages from the upcoming 2.2.4 release 🥳
    codeberg.org/routerkit/-/packa

    I already use it in prod for haproxy setups on Debian trixie using different network namespaces for listeners and server access.

    #ifstate #RouterKit #haproxy #linuxnetworking #Debian

  34. The ifstate git repository on #Codeberg has been moved from my personal account into the RouterKit project at codeberg.org/routerkit/ifstate

    With moving the project it gains access to CI/CD runners and the first step is to use them to provide #Debian packages from the upcoming 2.2.4 release 🥳
    codeberg.org/routerkit/-/packa

    I already use it in prod for haproxy setups on Debian trixie using different network namespaces for listeners and server access.

    #ifstate #RouterKit #haproxy #linuxnetworking #Debian

  35. I don't like to maintain packaging upstream, but… I required netns configuration support on Debian for using network namespaces with haproxy!

    Sadly I had to use dh_virtualenv because pyroute2 in Debian sid+stable is to old to have all required netns related features.

    Haproxy has namespace support for listeners and servers which allows one to easily build multi-tenant load-balancing setups. 😎

    codeberg.org/liske/ifstate/src

    #linuxnetworking #ifstate #haproxy #pyroute2 #Debian

  36. I don't like to maintain packaging upstream, but… I required netns configuration support on Debian for using network namespaces with haproxy!

    Sadly I had to use dh_virtualenv because pyroute2 in Debian sid+stable is to old to have all required netns related features.

    Haproxy has namespace support for listeners and servers which allows one to easily build multi-tenant load-balancing setups. 😎

    codeberg.org/liske/ifstate/src

    #linuxnetworking #ifstate #haproxy #pyroute2 #Debian

  37. hank you, 2025 — what a year for RELIANOID.

    From continuous product evolution and strong focus on security and performance, to supporting the Linux networking community and collaborating with partners worldwide — this year has been about growth, trust, and shared progress.

    Huge thanks to our team, partners, and customers for being part of the journey.
    Onwards to 2026 🚀

  38. The ifstate 2.2 release - a tool for declarative network configuration for Linux - is available in the most recent stable releases of Alpine Linux 3.23 and NixOS 25.11. 🥳

    Fun fact: this is the first NixOS release where you can use a declarative network configuration out of the box 😉

    ifstate.net/2.2/docs/install/#

    #AlpineLinux #ifstate #linuxnetworking #nixos #nixpkgs

  39. The ifstate 2.2 release - a tool for declarative network configuration for Linux - is available in the most recent stable releases of Alpine Linux 3.23 and NixOS 25.11. 🥳

    Fun fact: this is the first NixOS release where you can use a declarative network configuration out of the box 😉

    ifstate.net/2.2/docs/install/#

    #AlpineLinux #ifstate #linuxnetworking #nixos #nixpkgs

  40. #ifstate 2.2.[01] - a tool for declarative network configuration for Linux - was released:
    codeberg.org/liske/ifstate/rel
    codeberg.org/liske/ifstate/rel

    This release includes:
    - support for vlan_flags (loose_binding, …)
    - the wgnlpy python dependency has been dropped

    …and it also contains several fixes, the most import is a regression: interface defaults were not applied since ifstate 2.0

    (already available in @alpinelinux edge + v3.23 and #nixpkgs unstable + 25.11)

    #linuxnetworking

  41. #ifstate 2.2.[01] - a tool for declarative network configuration for Linux - was released:
    codeberg.org/liske/ifstate/rel
    codeberg.org/liske/ifstate/rel

    This release includes:
    - support for vlan_flags (loose_binding, …)
    - the wgnlpy python dependency has been dropped

    …and it also contains several fixes, the most import is a regression: interface defaults were not applied since ifstate 2.0

    (already available in @alpinelinux edge + v3.23 and #nixpkgs unstable + 25.11)

    #linuxnetworking

  42. 🐧💻 "Escape the Linux Networking Stack" – because understanding it makes it vanish! Poof! 💨 The author attempts to unravel the mystery, but spoiler alert: nobody truly escapes, not even Cloudflare's blog notifications. 🐟🔍
    blog.cloudflare.com/so-long-an #LinuxNetworking #EscapeTheStack #Cloudflare #TechMystery #NetworkingInsights #HackerNews #ngated

  43. 🐧💻 "Escape the Linux Networking Stack" – because understanding it makes it vanish! Poof! 💨 The author attempts to unravel the mystery, but spoiler alert: nobody truly escapes, not even Cloudflare's blog notifications. 🐟🔍
    blog.cloudflare.com/so-long-an #LinuxNetworking #EscapeTheStack #Cloudflare #TechMystery #NetworkingInsights #HackerNews #ngated

  44. #ifstate 2.1.0 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/liske/ifstate/rel

    This release includes:
    - support for IP address IFA (local, proto, …)
    - support for PtP link IP addressing
    - wireguard: auto generation of peer routes from allowsips
    - improved handling of LLA

    …and it also contains some bugfixes 😉

    (already available in @alpinelinux edge, the #nixpkgs unstable PR is still pending github.com/NixOS/nixpkgs/pull/ )

    #ifstate #linuxnetworking

  45. #ifstate 2.1.0 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/liske/ifstate/rel

    This release includes:
    - support for IP address IFA (local, proto, …)
    - support for PtP link IP addressing
    - wireguard: auto generation of peer routes from allowsips
    - improved handling of LLA

    …and it also contains some bugfixes 😉

    (already available in @alpinelinux edge, the #nixpkgs unstable PR is still pending github.com/NixOS/nixpkgs/pull/ )

    #ifstate #linuxnetworking

  46. #TIL that there is a nice tool to determine the encapsulation overhead, the Visual packet size calculator by @dmbaturin

    baturin.org/tools/encapcalc/

    #linuxnetworking #TIL #networking

  47. #TIL that there is a nice tool to determine the encapsulation overhead, the Visual packet size calculator by @dmbaturin

    baturin.org/tools/encapcalc/

    #linuxnetworking #TIL #networking

  48. #ifstate 1.13.9 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/liske/ifstate/rel

    This maintenance release for the old 1.x branch fixes an exception when reconfiguring tc filters when using pyroute2 0.9.1+

    (already available in @alpinelinux 3.22 + 3.21 + 3.20 + 3.19)

    2/2

    #linuxnetworking #AlpineLinux

  49. #ifstate 1.13.9 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/liske/ifstate/rel

    This maintenance release for the old 1.x branch fixes an exception when reconfiguring tc filters when using pyroute2 0.9.1+

    (already available in @alpinelinux 3.22 + 3.21 + 3.20 + 3.19)

    2/2

    #linuxnetworking #AlpineLinux

  50. #ifstate 2.0.2 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/liske/ifstate/rel

    This maintenance release contains mostly fixes for traffic control (TC) settings:
    - fixes a regression breaking cshaper configurations
    - fixes exceptions when reconfiguring tc filters when using pyroute2 0.9.1+

    1/2

    #linuxnetworking

  51. #ifstate 2.0.2 - a tool for declarative network configuration for Linux - was released:
    codeberg.org/liske/ifstate/rel

    This maintenance release contains mostly fixes for traffic control (TC) settings:
    - fixes a regression breaking cshaper configurations
    - fixes exceptions when reconfiguring tc filters when using pyroute2 0.9.1+

    1/2

    #linuxnetworking

  52. #ifstate 2.0 - a tool to for declarative network configuration for Linux - was released:
    codeberg.org/liske/ifstate/rel
    codeberg.org/liske/ifstate/rel

    The new major release contains various breaking changes and the config file schema has been refactored to better match the requirements. The new documentation contains a overview on the breaking changes when upgrading from ifstate 1.x: ifstate.net/2.0/docs/upgrades/

    This thread will highlight some of the most important changes!

    1/4

    #linuxnetworking

  53. #ifstate 2.0 - a tool to for declarative network configuration for Linux - was released:
    codeberg.org/liske/ifstate/rel
    codeberg.org/liske/ifstate/rel

    The new major release contains various breaking changes and the config file schema has been refactored to better match the requirements. The new documentation contains a overview on the breaking changes when upgrading from ifstate 1.x: ifstate.net/2.0/docs/upgrades/

    This thread will highlight some of the most important changes!

    1/4

    #linuxnetworking