Ferro's Gitbook
  • README
  • DevOps
    • Grafana_Cloud
  • OpenWrt
    • DHCP_DNS
    • GLiNet
    • boot
    • captive_portal
    • luci
    • mwan3
    • radius
    • theme
    • wireless
  • apps
    • web
  • BSD
    • Mac
  • Cloud
    • aws
    • azure
    • cf
    • gcp
    • github
    • ibm_bluemix
    • Pricing
  • container
    • docker
    • Kubernetes
    • podman
  • db
    • InfluxDB
    • loki
    • MySQL & MariaDB
    • Oracle
    • PostgreSQL
  • dev
    • AHK
    • BI
    • LBS
    • ML
    • android
    • editor
    • flutter_web
    • git
    • go
    • HTML5/BS
    • j2ee
    • js
    • js_grid
    • js_vue
    • jupyter
    • ocaml
    • powershell
    • py
    • py_GUI
    • Django
    • shell
    • snippets
    • uni
    • vba
    • wechat.zh
    • wechat_mp.zh
  • elec
    • 3D Printing
    • AC
    • MOSFET
    • battery
    • boost
    • bulk
    • metal
    • simulator
  • hw
    • GPU
    • PCI
    • arduino
    • Bluetooth
    • ent
    • Pinout
    • x86_AMD
    • x86_intel
  • linux
    • Test System
    • X
    • arch
    • fs
    • kernel
    • Memory
    • nw
    • Linux Services
    • Systemd
    • text
  • ms
    • vscode
    • windows
    • wsl
  • multimedia
    • Blender
    • audio
    • blender
    • graphics
    • home
  • nw
    • L3
    • L3_IPv6
    • SDN
    • VPN
    • dns
    • hw
    • Low Level
    • mikrotik
    • mwan
    • Openflow
    • OVS
    • pfsense
    • ppp
    • proxy
    • tsocks
    • pxe
    • Security
    • TCP
  • phone
    • Mi
    • android
  • Storage(SW)
  • vt
    • Intel GVT-g
    • PVE
    • QEMU
    • VDI
    • hyper-v
    • kube
    • libvirt
    • OpenStack
  • Web
    • IBM_MQ
    • IBM_Websphere
    • SSL
    • Apache/IBM_IHS
    • blockchain
    • caddy
    • j2ee
    • nginx
    • static_site
Powered by GitBook
On this page
  • Mesh
  • Build - 802.11s
  • Roaming - 802.11k/r/v
  • Open Source Software for Routing
  • BGP
  • Private AS
  • Virtual networking modes
  • Tools for Windows
  • Tools for All platforms
  • Router OSes
  • NAT
  • NAT Hairpin + DDNS
  • Mikrotik
  • OSPF
  • Mikrotik
  • MPLS
  • Mikrotik
  • VPLS
  • Mikrotik
  • OpenBSD
  • Linux
  • L7 filters
  • Subnet Helper
  • MAC addresss <-> Vendor
  • Tuning
  • TCP congestion control
  • BBR
  • Introspectable tunnels to localhost
  • Load Balancing
  • Transparent Proxy
  • mitmproxy
  • V2Ray - Go
  • redsocks - C
  • Tinyproxy - C
  • moproxy - Rust
  • Any Proxy - Go
  • avege - Go port of redsocks
  • NetFlow Software
  • Private
  • IPV6
  • Guide
  • Monitoring
  • mikrotik
  • datadoghq

Was this helpful?

Edit on Git

nw

PrevioushomeNextL3

Last updated 1 year ago

Was this helpful?

Mesh

Build - 802.11s

https://en.wikipedia.org/wiki/IEEE_802.11s extends the IEEE 802.11 MAC standard

https://en.wikipedia.org/wiki/Hybrid_Wireless_Mesh_Protocol Hybrid Wireless Mesh Protocol (HWMP) defined in IEEE 802.11s, is a basic routing protocol for a wireless mesh network.

Roaming - 802.11k/r/v

https://support.apple.com/en-us/HT202628

  • 802.11r - Fast Basic Service Set Transition (FT) to authenticate PSK/802.1X more quickly

  • 802.11k - search APs; creating an optimized list of channels

  • 802.11v - exchange network topology

    • BSS transition management + Disassociation Imminent => influence client roaming behavior by providing it the load information of nearby access points.

    • Directed Multicast Service (DMS): optimizes multicast

    • BSS Max Idle Service: how long to remain associated when no traffic

https://www.adrian.idv.hk/2022-11-27-80211r/

  • needs both the AP and the station to support

  • ESS = all BSSID(MAC) of same SSID

  • mobility domain = subset of ESS that allows station to roam around

    • R0KH: controller as the PMK-R0 key holder

    • R1KH: APs as the PMK-R1 key holder

    • S0KH and S1KH, S for supplicant: station are the PMK-S0 key holder and PMK-S1 key holder

Open Source Software for Routing

https://conference.apnic.net/__data/assets/pdf_file/0020/50681/osr_apnic34_1346044930.pdf

BGP

https://github.com/Exa-Networks/exabgp implement SDN by transforming BGP messages into friendly plain text or JSON

http://bird.network.cz/ http://www.openbgpd.org/ftp.html

https://github.com/openstack/networking-bagpipe BGP-based VPNs as a backend for Neutron

Private AS

https://tools.ietf.org/html/rfc6996#section-5

  • 64512 - 65534

  • 4200000000 - 4294967294

Virtual networking modes

Tools for Windows

Microsoft Message Analyzer: https://www.microsoft.com/en-us/download/details.aspx?id=44226 Microsoft Network Monitor(2010): https://www.microsoft.com/en-us/download/details.aspx?id=4865 BTest: https://mikrotik.com/download/btest.exe Force socks: https://www.socksproxychecker.com/sockscap.html

Tools for All platforms

Wireshark: https://www.wireshark.org/download.html

Router OSes

https://wiki.vyos.net/wiki/User_Guide https://mikrotik.com/download https://www.clearos.com/clearfoundation/software/clearos-7-community https://docs.cumulusnetworks.com/display/ROH/Configuring+Cumulus+Quagga

NAT

https://www.quora.com/What-is-a-full-cone-NAT

https://openwrt.org/docs/guide-user/network/integrating-openwrt-introduction

https://openwrt.org/docs/guide-user/network/switch_router_gateway_and_nat

https://oldwiki.archive.openwrt.org/doc/howto/port.forwarding

NAT Hairpin + DDNS

Mikrotik

/ip firewall address-list
add address=192.168.88.0/24 comment=Management list=LANs
add address=10.0.0.0/8 comment=Lab list=LANs
add address=my.ddns.domain list=WANs
add address=192.168.1.0/24 list=WANs

/ip firewall nat
add action=dst-nat chain=dstnat dst-address-list=WANs dst-port=4430-4431 protocol=tcp to-addresses=192.168.88.19

ref: https://forum.mikrotik.com/viewtopic.php?t=172380

OSPF

Mikrotik

v6:

/routing ospf instance
set [ find default=yes ] redistribute-connected=as-type-1
/routing ospf network
add area=backbone network=192.168.1.0/24

v7: https://help.mikrotik.com/docs/display/ROS/Moving+from+ROSv6+to+v7+with+examples

/routing ospf instance
add disabled=no name=ospf-instance-1 redistribute=connected
/routing ospf interface-template
add area=ospf-area-1 disabled=no interfaces=br-wan
/routing ospf area
add area-id=192.168.99.0 disabled=no instance=ospf-instance-1 name=ospf-area-1

MPLS

Mikrotik

https://wiki.mikrotik.com/wiki/Manual:MPLSVPLS Targeted LDP session is session that is established between two routers that are not direct neighbors.

https://tools.ietf.org/html/rfc3031 Multiprotocol Label Switching Architecture https://tools.ietf.org/html/rfc5036 / Obsoletes: 3036 LDP Specification

VPLS

https://en.wikipedia.org/wiki/Pseudo-wire

Mikrotik

https://tools.ietf.org/html/rfc4761 VPLS Using BGP for Auto-Discovery and Signaling https://tools.ietf.org/html/rfc4762 VPLS Using LDP Signaling https://tools.ietf.org/html/rfc4447 (cisco-style Signaling) https://tools.ietf.org/html/rfc4623 PWE3 Fragmentation and Reassembly

OpenBSD

https://github.com/rwestphal/openbsd-ldpd/wiki/VPLS-basic-test-setup https://github.com/openbsd/src/blob/master/usr.sbin/ldpd/l2vpn.c

RFC4447:
- Section 6.2: control word negotiation
- Section 5.4.3: pseudowire status negotiation
- PWid group wildcard

Linux

https://github.com/rwestphal/quagga-ldpd/wiki/ldpd-basic-test-setup

https://lwn.net/Articles/730526/ https://github.com/6WIND/iproute2/commits/master/ip/iplink_vpls.c TODO:https://tools.ietf.org/html/rfc4385 PWE3 Control Word for Use over an MPLS PSN (diff with 4623?)

https://github.com/eqvinox/vpls-iproute2/commits/vpls

https://wiki.vyos.net/wiki/Proposed_enhancements

L7 filters

http://l7-filter.sourceforge.net/protocols

Subnet Helper

http://www.balticnetworkstraining.com/subnet-calculator/ http://www.mikrotik.com/img/netaddresses2.pdf E.g.: .96-127/27: #2^5 .0-127/25: #2^7

MAC addresss <-> Vendor

http://aruljohn.com/mac.pl

Tuning

https://fasterdata.es.net/assets/Papers-and-Publications/100G-Tuning-TechEx2016.tierney.pdf

TCP congestion control

https://en.wikipedia.org/wiki/TCP_congestion_control#Algorithms

BBR

https://www.ietf.org/proceedings/97/slides/slides-97-iccrg-bbr-congestion-control-02.pdf http://www.thequilt.net/wp-content/uploads/BBR-TCP-Opportunities.pdf http://queue.acm.org/detail.cfm?id=3022184 http://netdevconf.org/1.2/slides/oct5/04_Making_Linux_TCP_Fast_netdev_1.2_final.pdf

Introspectable tunnels to localhost

https://github.com/inconshreveable/ngrok https://github.com/lovedboy/gortcp

last update @ 2021 Oct : https://github.com/ehang-io/nps

  • https://ehang-io.github.io/nps/#/example?id=p2p%e6%9c%8d%e5%8a%a1

    ./npc nat # p2p will not work if server/client both Symmetric Nat

    source /dev/stdin ehang-io/nps <<< "$(curl -fsSL https://raw.githubusercontent.com/fzinfz/scripts/master/github--repo.sh)" | grep linux | grep amd64

    openssl genrsa -out server.key 2048 openssl rsa -in server.key -outform PEM -pubout -out server.pem

https://github.com/fatedier/frp ( Jan 12 2020: p2p/xtcp under dev)

Load Balancing

  • https://wiki.koumbit.net/LoadBalancingService/SoftwareComparison

    Reverse proxying (AKA Layer-7 switching) Varnish Cache Nginx Squid Apache mod_proxy Relayd TCP connection redirection (AKA Layer-4 switching) IPVS, part of the LVS suite Ha-proxy Relayd

Transparent Proxy

mitmproxy

https://docs.mitmproxy.org/stable/howto-transparent/

V2Ray - Go

https://www.v2ray.com/chapter_02/protocols/dokodemo.html

"inboundDetour": [ {
    "protocol": "dokodemo-door",
    "port": 20088,
    "settings": {
        "network": "tcp,udp",   // TPROXY required for UDP
        "timeout": 10,
        "followRedirect": true  // Linux support only
    }
} ],

redsocks - C

https://github.com/darkk/redsocks Linux/iptables, OpenBSD/pf and FreeBSD/ipfw are supported.

Use on Mac: http://lucumr.pocoo.org/2013/1/6/osx-wifi-proxy/

Tinyproxy - C

https://github.com/tinyproxy/tinyproxy

moproxy - Rust

https://github.com/sorz/moproxy

Any Proxy - Go

https://github.com/ryanchapman/go-any-proxy TCP CONNECTION

./any_proxy -l :7777 -p "proxy_ip:1080"

avege - Go port of redsocks

https://github.com/avege/avege

NetFlow Software

https://www.cisco.com/c/en/us/products/ios-nx-os-software/ios-netflow/networking_solutions_products_genericcontent0900aecd805ff72b.html

  • https://www.linkedin.com/pulse/wtflow-you-really-still-paying-commercial-solutions-collect-cowart

Private

  • RFC1918 private range for IPv4 networks

    • 10.0.0.0/8

    • 172.16.0.0/12: 172.16.0.0 - 172.31.255.255 255.240.0.0 qty:1048576

    • 192.168.0.0/16

  • RFC4193 range for IPv6 networks (fd00/8).

IPV6

https://tunnelbroker.net/

Guide

https://e.huawei.com/en/eblog/enterprise-networking/wifi6/What-the-difference-between-corporate-Wi-Fi-and-home-Wi-Fi

Monitoring

mikrotik

dude server : https://mikrotik.com/thedude

datadoghq

Network Device Monitoring | $7+/m : https://www.datadoghq.com/pricing/?product=network-monitoring#network-monitoring

https://thenewstack.io/hackers-guide-kubernetes-networking/

mwan
Mesh
Build - 802.11s
Roaming - 802.11k/r/v
Open Source Software for Routing
BGP
Private AS
Virtual networking modes
Tools for Windows
Tools for All platforms
Router OSes
NAT
NAT Hairpin + DDNS
Mikrotik
OSPF
Mikrotik
MPLS
Mikrotik
VPLS
Mikrotik
OpenBSD
Linux
L7 filters
Subnet Helper
MAC addresss <-> Vendor
Tuning
TCP congestion control
BBR
Introspectable tunnels to localhost
Load Balancing
Transparent Proxy
mitmproxy
V2Ray - Go
redsocks - C
Tinyproxy - C
moproxy - Rust
Any Proxy - Go
avege - Go port of redsocks
NetFlow Software
Private
IPV6
Guide
Monitoring
mikrotik
datadoghq
openwrt.md