Bryan at 05:14, 15 May 2023

2023-05-15T05:14:21Z

Bryan at 05:13, 15 May 2023

2023-05-15T05:13:06Z

Bryan: Created page with "This is an absolutely stupid use of a /24. I've seen this done before but it was routing back and forth between two cisco routers. This is hosted on a single Linux host and..."

2023-05-15T05:08:52Z

Created page with "This is an absolutely stupid use of a /24. I've seen this done before but it was routing back and forth between two cisco routers. This is hosted on a single Linux host and..."

New page

This is an absolutely stupid use of a /24.

I've seen this done before but it was routing back and forth between two cisco routers. This is hosted on a single Linux host and self contained.

My first testing was using VRF's on Linux, but they are not true VRF's, ICMP will fail inside on them, and in general not an easy way to do it.

Second try was using GRE interfaces into VRF's across the loopback interface, but that didn't work for some reason. I did a bit of testing and saw them making it across the interface, but just dropping for some reason.

I then stumbled on the [https://en.wikipedia.org/wiki/User-mode_Linux user mode linux] and found [https://en.wikipedia.org/wiki/Linux_namespaces Linux namespaces]. This appeared to be the way to do it and I configured 10 by hand just to get a feel for it. I knew I'd have to write a script to generate the config as it was way to lengthy to do by hand.

= Config =

The basic concept was to have a chain of tunnels or name spaces with a left and right interface. Each interface would be connected to the next with a /31, so we can scale this to 127 name spaces for a /24. This makes efficient use of a limited resource for a stupid application.

= Code Generator=
This is a small python program to generate the config.

<pre>
#!/usr/local/bin/python3
# subnetmaker
# Build /31 network interfaces and name space config
# Copyright Bryan Fields, 2023
# bryan@bryanfields.net
# Licensed under the AGPL 3
#
import sys
import ipaddress
#set the base namespace
base_namespace = 'vnet'
basesubnet = ipaddress.ip_network('192.77.144.0/24')
net_array = list(basesubnet.subnets(new_prefix=31))

n=0
#setup the 000 interface
#ip link add veth001-L type veth peer name veth000-R
#ip addr add 192.77.144.0/31 dev veth000-L
#ip link set veth000-R up
#ip route add 192.77.144.0/24 via 192.77.144.1
network=str(net_array[0])
hosts=list(net_array[0].hosts())
nextHosts=list(net_array[0].hosts())
prefixlen=str(net_array[0].prefixlen)
host1=str(hosts[0])+"/"+prefixlen
host2=str(hosts[1])+"/"+prefixlen
thisNetdevL="veth""{:03d}".format(n)+ "-L"
thisNetdevR="veth""{:03d}".format(n)+ "-R"
nextNetdevL="veth""{:03d}".format(n+1)+ "-L"
nextNetdevR="veth""{:03d}".format(n+1)+ "-R"
nextHostL =str(hosts[1])

print ("ip link add "+nextNetdevL+" type veth peer name "+thisNetdevR)
print ("ip addr add "+ host1 +" dev " + thisNetdevR)
print ("ip link set "+thisNetdevR+" up")
print ("ip route add "+str(basesubnet)+" via "+nextHostL)
print ("#end of hostnet")

n=1
for n in range(1,128):
thisNameSpace="vnet""{:03d}".format(n)
network=str(net_array[n])
hostsL = list(net_array[n-1].hosts())
hostsR = list(net_array[n].hosts())
prefixlen=str(net_array[n].prefixlen)
hostL=str(hostsL[1])+"/"+prefixlen
hostR=str(hostsR[0])+"/"+prefixlen
thisNetdevL="veth""{:03d}".format(n)+ "-L"
thisNetdevR="veth""{:03d}".format(n)+ "-R"
nextNetdevL="veth""{:03d}".format(n+1)+ "-L"
nextNetdevR="veth""{:03d}".format(n+1)+ "-R"
nextHostR =str(hostsR[1])
nextHostL =str(hostsL[0])
print ("ip netns add "+thisNameSpace)
print ("ip link add "+nextNetdevL+" type veth peer name "+thisNetdevR)
print ("ip link set "+thisNetdevL+" netns "+thisNameSpace)
print ("ip link set "+thisNetdevR+" netns "+thisNameSpace)
print ("ip -n "+thisNameSpace+" link set "+thisNetdevL+" up")
print ("ip -n "+thisNameSpace+" link set "+thisNetdevR+" up")
print ("ip -n "+thisNameSpace+" link set lo up")
print ("ip -n "+thisNameSpace+" addr add "+hostL+" dev "+thisNetdevL)
print ("ip -n "+thisNameSpace+" addr add "+hostR+" dev "+thisNetdevR)
print ("#Linux Sys settings")
print ("ip netns exec "+thisNameSpace+" sysctl -w net.ipv4.ip_forward=1")
print ("ip netns exec "+thisNameSpace+" sysctl -w net.ipv4.ip_default_ttl=255")
print ("#Default Route Left")
print ("ip -n "+thisNameSpace+" route add 0/0 via "+nextHostL)
print ("#.0 Route Left")
print ("ip -n "+thisNameSpace+" route add "+str(net_array[0])+" via "+nextHostL)
print ("#Subnet /24 Right")
print ("ip -n "+thisNameSpace+" route add "+str(basesubnet)+" via "+nextHostR)
exit
</pre>

@@ Line 1: / Line 1: @@
 This is an absolutely stupid use of a /24.
-traceroute -m255 becky.keekles.org
+On linux/osx/bsd use traceroute -m255 becky.keekles.org
 <pre>
 traceroute to becky.keekles.org (192.77.144.221), 255 hops max, 60 byte packets

← Older revision		Revision as of 05:13, 15 May 2023
Line 1:		Line 1:
	This is an absolutely stupid use of a /24.		This is an absolutely stupid use of a /24.
		+
		+	traceroute -m255 becky.keekles.org
		+	<pre>
		+	traceroute to becky.keekles.org (192.77.144.221), 255 hops max, 60 byte packets
		+	1 router.129.keekles.org (199.47.174.129) 1.021 ms 1.042 ms 1.003 ms
		+	2 flowman.tampa.coop (23.149.104.3) 0.550 ms 0.524 ms 0.585 ms
		+	3 Oh.my.god.Becky.look.at.her.butt (192.77.144.1) 0.586 ms 0.592 ms 0.567 ms
		+	4 It.is.so.big (192.77.144.3) 0.582 ms 0.518 ms 0.465 ms
		+	5 She.looks.like.one.of.those.rap.guys.girlfriends (192.77.144.5) 0.496 ms 0.412 ms 0.555 ms
		+	6 Who.understands.those.rap.guys (192.77.144.7) 0.605 ms 0.512 ms 0.440 ms
		+	<snip>
		+	111 Little.in.the.middle.but.she.got.much.back (192.77.144.217) 4.012 ms 3.935 ms 3.904 ms
		+	112 . (192.77.144.219) 3.853 ms 1.753 ms 1.722 ms
		+	113 routed.by.bryanfields.net (192.77.144.221) 1.698 ms 1.675 ms 3.585 ms
		+	</pre>

	I've seen this done before but it was routing back and forth between two cisco routers. This is hosted on a single Linux host and self contained.		I've seen this done before but it was routing back and forth between two cisco routers. This is hosted on a single Linux host and self contained.

Linux Network Namespace - Revision history

Bryan at 05:14, 15 May 2023

Bryan at 05:13, 15 May 2023

Bryan: Created page with "This is an absolutely stupid use of a /24. I've seen this done before but it was routing back and forth between two cisco routers. This is hosted on a single Linux host and..."