Questions tagged [iproute2]

iproute2 (ip) is a tool used to manipulate network configurations.

The ip command is meant to replace ifconfig/route commands on Linux. This command lets you perform advanced configurations that were not possible with ifconfig/route.

See:

242 questions
3
votes
4 answers

Almost working: How to set up iptables and iproute2 rules on dual WAN linux server?

I have a Raspberry Pi (running Raspbian) with three network interfaces (one ethernet and two USB wifi nics). What I want to achieve is this: I have two WAN connections to the internet (DSL + Cable), and I want to set up the RasPi in such a way that…
Rob
  • 204
  • 2
  • 13
3
votes
3 answers

Linux policy routing - packets not coming back

i am trying to set up policy routing on my home server. My network looks like this: Host routed VPN gateway Internet link through VPN 192.168.0.35/24 ---> 192.168.0.5/24 ---> 192.168.0.1 DSL router …
Bugsik
  • 59
  • 1
  • 1
  • 5
3
votes
1 answer

NAT box load-balancing with iptables and 4 DHCP uplinks

I am trying to configure a router which provides Internet to a couple hundred users. This router has 4 basic cable uplinks at its disposition, which all use DHCP and have a capacity of around 10/1 Mbps. The router has 3 interfaces : eth0 connected…
Thomas
  • 131
  • 4
3
votes
3 answers

TC hashing filters - single rule deletion

For traffic shaping I'm currently using a setup that looks exactly like the setup from LARTC, on this page: http://lartc.org/howto/lartc.adv-filter.hashing.html I have a simple problem with that - everytime I want to modify something in the hash…
exa
  • 571
  • 4
  • 14
3
votes
3 answers

Advanced routing problem

I have 2 internet links using 2 ADSL routers and I need to give access to the Internet for the 192.168.0.0/24 network. I have to route outgoing traffic based on port number, protocol, … using iproute2 and iptables on a linux router. This is my…
yozapho yozapho
  • 131
  • 1
  • 7
3
votes
2 answers

ss -p output meaning

I use ss in iproute2 package to list sockets statistics. Using -p option can give me process information. Do you know what does the numbers shown mean? I can see that the first one is PID but not the last one. Sample output: ESTAB 0 0 …
Fish Monitor
  • 353
  • 3
  • 11
3
votes
1 answer

Linux port based routing : reponse packets discarded

I would like to use port-based routing on my Linux local gateway. Here is my network diagram : 192.168.42.148/24 192.168.42.1/24 192.168.44.2 192.168.44.1 +--------------------+ …
Xion345
  • 189
  • 1
  • 9
3
votes
1 answer

How do I disable multipath route caching in linux?

It seems that there used to be a config option to disable multipath ip route caching in linux, but has since been removed? Is there any workaround for this, or method of disabling this behavior?
SouthPawn
3
votes
0 answers

Routing only some local IPs through VPN on dd-wrt

Much similar to this entry: Using DD-WRT to connect to VPN and Forward all traffic of certain devices through VPN , I have set up my router with dd-wrt + OpenVPN to connect to a VPN. This works fine, and all traffic from behind the router goes…
user39412
  • 31
  • 1
  • 3
3
votes
2 answers

In Linux how to add a route to a prefix via a specific device with certain destinations in that prefix going via default route?

I'm currently dealing with a VPN which connection endpoint lies within the subnet which prefix shall be tunneled via that specific VPN. Essentially the problem thus boils down to match against a (larger) set of destination addresses (/16 mask),…
datenwolf
  • 289
  • 1
  • 11
3
votes
1 answer

Why I get "cache" in the output of `ip route get`?

I'm using kernel 5.11.0 and in the ip-route manual [1] it can be read: Starting with Linux kernel version 3.6, there is no routing cache for IPv4 anymore. Hence ip route show cached will never print any entries on systems with this or newer kernel…
mosquetero
  • 299
  • 2
  • 12
3
votes
1 answer

Linux: What causes static ARP entries to flush on link down

This is a question about a difference in networking behavior between Debian Buster (kernel 4.19.0-18) and Debian Bullseye (kernel 5.10.0-9). On Buster, proxy arp entries survive if the link on the interface goes down. On Bullseye they…
roelvanmeer
  • 1,764
  • 3
  • 13
  • 27
3
votes
1 answer

Reading back Linux gre[tap] local/remote address

With iproute2 on Linux, gre/gretap interfaces are setup with ip link add, which for GRE needs remote and optionally local attributes specifying the endpoints. However, I can't find any way to read back these attributes. ip link show doesn't show…
2
votes
1 answer

Response packet on the same interface as incoming in LAN

Currently, I'm struggling with the following scenario: I have a server with 2 interfaces in 2 separate LAN subnets. IF1, IF2 I have a laptop which has an IP address from the first subnet When I try to connect from this particular laptop to the…
2
votes
1 answer

Netplan: Route multiple parallel internet connections with port forwarding to a single server with 1 network port

Here's my network diagram: 56.56.56.56 192.168.0.1/24 MAC:AA:BB:CC:DD:EE:01 ___________ ---| Modem 1 |------- | ___________ | ___________ Internet ---| …