Networking

Search…
Networking
​Mesh​
​Build - 802.11s​
​Roaming - 802.11k/r/v​
​Open Source Software for Routing​
​BGP​
​Private AS​
​Virtual networking modes​
​Tools for Windows​
​Tools for All platforms​
​Router OSes​
​NAT Hairpin + DDNS​
​Mikrotik​
​OSPF​
​Mikrotik​
​MPLS​
​Mikrotik​
​VPLS​
​Mikrotik​
​OpenBSD​
​Linux​
​L7 filters​
​Subnet Helper​
​MAC addresss <-> Vender​
​Tuning​
​TCP congestion control​
​BBR​
​Introspectable tunnels to localhost​
​Multi WAN​
​Load Balancing​
​Transparent Proxy​
​mitmproxy​
​V2Ray - Go​
​redsocks - C​
​Tinyproxy - C​
​moproxy - Rust​
​Any Proxy - Go​
​avege - Go port of redsocks​
​NetFlow Software​
​IPV6​
​Guide​
Mesh
Build - 802.11s
​https://en.wikipedia.org/wiki/IEEE_802.11s
extends the IEEE 802.11 MAC standard
​https://en.wikipedia.org/wiki/Hybrid_Wireless_Mesh_Protocol
Hybrid Wireless Mesh Protocol (HWMP) defined in IEEE 802.11s, is a basic routing protocol for a wireless mesh network.
Roaming - 802.11k/r/v
​https://support.apple.com/en-us/HT202628​
802.11r - Fast Basic Service Set Transition (FT) to authenticate PSK/802.1X more quickly
802.11k - search APs; creating an optimized list of channels
802.11v - exchange network topology
BSS transition management + Disassociation Imminent => influence client roaming behavior by providing it the load information of nearby access points.
Directed Multicast Service (DMS): optimizes multicast
BSS Max Idle Service: how long to remain associated when no traffic
Open Source Software for Routing
​https://conference.apnic.net/__data/assets/pdf_file/0020/50681/osr_apnic34_1346044930.pdf​
BGP
​https://github.com/Exa-Networks/exabgp implement SDN by transforming BGP messages into friendly plain text or JSON
​http://bird.network.cz/ http://www.openbgpd.org/ftp.html​
​https://github.com/openstack/networking-bagpipe BGP-based VPNs as a backend for Neutron
Private AS
​https://tools.ietf.org/html/rfc6996#section-5​
64512 - 65534
4200000000 - 4294967294
Virtual networking modes
​https://thenewstack.io/hackers-guide-kubernetes-networking/
​
Tools for Windows
Microsoft Message Analyzer: https://www.microsoft.com/en-us/download/details.aspx?id=44226
Microsoft Network Monitor(2010): https://www.microsoft.com/en-us/download/details.aspx?id=4865
BTest: https://mikrotik.com/download/btest.exe
Force socks: https://www.socksproxychecker.com/sockscap.html​
Tools for All platforms
Wireshark: https://www.wireshark.org/download.html​
Router OSes
​https://wiki.vyos.net/wiki/User_Guide
https://mikrotik.com/download
https://www.clearos.com/clearfoundation/software/clearos-7-community
https://docs.cumulusnetworks.com/display/ROH/Configuring+Cumulus+Quagga​
NAT Hairpin + DDNS
Mikrotik
​https://youtu.be/_kw_bQyX-3U?t=174​
1
dst-address-type=local and also dst-address=!192.168.0.0/16
Copied!
OSPF
Mikrotik
1
/routing ospf instance
2
set [ find default=yes ] redistribute-connected=as-type-1
3
/routing ospf network
4
add area=backbone network=192.168.1.0/24
Copied!
MPLS
Mikrotik
​https://wiki.mikrotik.com/wiki/Manual:MPLSVPLS
Targeted LDP session is session that is established between two routers that are not direct neighbors.
​https://tools.ietf.org/html/rfc3031 Multiprotocol Label Switching Architecture https://tools.ietf.org/html/rfc5036 / Obsoletes: 3036 LDP Specification
VPLS
​https://en.wikipedia.org/wiki/Pseudo-wire​
Mikrotik
​https://tools.ietf.org/html/rfc4761 VPLS Using BGP for Auto-Discovery and Signaling
https://tools.ietf.org/html/rfc4762 VPLS Using LDP Signaling
https://tools.ietf.org/html/rfc4447 (cisco-style Signaling)
https://tools.ietf.org/html/rfc4623 PWE3 Fragmentation and Reassembly
OpenBSD
​https://github.com/rwestphal/openbsd-ldpd/wiki/VPLS-basic-test-setup https://github.com/openbsd/src/blob/master/usr.sbin/ldpd/l2vpn.c​
1
RFC4447:
2
- Section 6.2: control word negotiation
3
- Section 5.4.3: pseudowire status negotiation
4
- PWid group wildcard
Copied!
Linux
​https://github.com/rwestphal/quagga-ldpd/wiki/ldpd-basic-test-setup​
​https://lwn.net/Articles/730526/ https://github.com/6WIND/iproute2/commits/master/ip/iplink_vpls.c TODO：https://tools.ietf.org/html/rfc4385 PWE3 Control Word for Use over an MPLS PSN （diff with 4623?）
​https://github.com/eqvinox/vpls-iproute2/commits/vpls​
​https://wiki.vyos.net/wiki/Proposed_enhancements​
L7 filters
​http://l7-filter.sourceforge.net/protocols​
Subnet Helper
​http://www.balticnetworkstraining.com/subnet-calculator/
http://www.mikrotik.com/img/netaddresses2.pdf E.g.: .96-127/27: #2^5 .0-127/25: #2^7
MAC addresss <-> Vender
​http://aruljohn.com/mac.pl​
Tuning
​https://fasterdata.es.net/assets/Papers-and-Publications/100G-Tuning-TechEx2016.tierney.pdf​
TCP congestion control
​https://en.wikipedia.org/wiki/TCP_congestion_control#Algorithms​
BBR
​https://www.ietf.org/proceedings/97/slides/slides-97-iccrg-bbr-congestion-control-02.pdf
http://www.thequilt.net/wp-content/uploads/BBR-TCP-Opportunities.pdf http://queue.acm.org/detail.cfm?id=3022184 http://netdevconf.org/1.2/slides/oct5/04_Making_Linux_TCP_Fast_netdev_1.2_final.pdf​
Introspectable tunnels to localhost
​https://github.com/inconshreveable/ngrok https://github.com/lovedboy/gortcp​
​https://github.com/ehang-io/nps
https://ehang-io.github.io/nps/#/example?id=p2p%e6%9c%8d%e5%8a%a1​
1
./npc nat # p2p will not work if server/client both Symmetric Nat
2
​
3
source /dev/stdin ehang-io/nps <<< "$(curl -fsSL https://raw.githubusercontent.com/fzinfz/scripts/master/github--repo.sh)" | grep linux | grep amd64
4
​
5
openssl genrsa -out server.key 2048
6
openssl rsa -in server.key -outform PEM -pubout -out server.pem
Copied!
​https://github.com/fatedier/frp ( Jan 12 2020: p2p/xtcp under dev)
Multi WAN
pfSense: https://www.cyberciti.biz/faq/howto-configure-dual-wan-load-balance-failover-pfsense-router/
VYOS: https://wiki.vyos.net/wiki/WAN_load_balancing
OpenBSD: https://www.openbsd.org/faq/pf/pools.html#outgoing
OpenWRT: https://wiki.openwrt.org/doc/howto/mwan3
ROS: https://mum.mikrotik.com/presentations/US12/tomas.pdf​
Load Balancing
​https://wiki.koumbit.net/LoadBalancingService/SoftwareComparison​
1
Reverse proxying (AKA Layer-7 switching)
2
    Varnish Cache
3
    Nginx
4
    Squid
5
    Apache mod_proxy
6
    Relayd
7
TCP connection redirection (AKA Layer-4 switching)
8
    IPVS, part of the LVS suite
9
    Ha-proxy
10
    Relayd
Copied!
Transparent Proxy
mitmproxy
​https://docs.mitmproxy.org/stable/howto-transparent/​
V2Ray - Go
​https://www.v2ray.com/chapter_02/protocols/dokodemo.html​
1
"inboundDetour": [ {
2
    "protocol": "dokodemo-door",
3
    "port": 20088,
4
    "settings": {
5
        "network": "tcp,udp",   // TPROXY required for UDP
6
        "timeout": 10,
7
        "followRedirect": true  // Linux support only
8
    }
9
} ],
Copied!
redsocks - C
​https://github.com/darkk/redsocks
Linux/iptables, OpenBSD/pf and FreeBSD/ipfw are supported.
Use on Mac: http://lucumr.pocoo.org/2013/1/6/osx-wifi-proxy/​
Tinyproxy - C
​https://github.com/tinyproxy/tinyproxy​
moproxy - Rust
​https://github.com/sorz/moproxy​
Any Proxy - Go
​https://github.com/ryanchapman/go-any-proxy
TCP CONNECTION
1
./any_proxy -l :7777 -p "proxy_ip:1080"
Copied!
avege - Go port of redsocks
​https://github.com/avege/avege​
NetFlow Software
​https://www.cisco.com/c/en/us/products/ios-nx-os-software/ios-netflow/networking_solutions_products_genericcontent0900aecd805ff72b.html​
​https://www.linkedin.com/pulse/wtflow-you-really-still-paying-commercial-solutions-collect-cowart​
IPV6
​https://tunnelbroker.net/​
Guide
​https://e.huawei.com/en/eblog/enterprise-networking/wifi6/What-the-difference-between-corporate-Wi-Fi-and-home-Wi-Fi​
Linux Networking
Proxy & VPN
Last modified 1yr ago