Skip to content

show-01: basic routing setup #197

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Apr 8, 2025
Merged

show-01: basic routing setup #197

merged 1 commit into from
Apr 8, 2025

Conversation

sorah
Copy link
Member

@sorah sorah commented Apr 8, 2025

https://scrapbox.io/rknet/show-01
#186

Flow: client netns -> main netns -> (backbone: cs -> (nat44> br, nat64 > br, or br) ) -> main netns -> server netns

main netns performs SNAT from client netns (IPv4 and IPv6 source address randomization) and connects to cs-01, and DNAT to server netns (IPv4 public address conversion and IPv6 destination address randomization).

rk@show-01-venue:~$ sudo ip netns exec showc ping 192.50.220.175
PING 192.50.220.175 (192.50.220.175) 56(84) bytes of data.
64 bytes from 192.50.220.175: icmp_seq=1 ttl=60 time=0.337 ms
^C
--- 192.50.220.175 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.337/0.337/0.337/0.000 ms
rk@show-01-venue:~$ sudo ip netns exec showc ping 2001:df0:8500:ca64:a9:8200:c032:dcaf
PING 2001:df0:8500:ca64:a9:8200:c032:dcaf (2001:df0:8500:ca64:a9:8200:c032:dcaf) 56 data bytes
64 bytes from 2001:df0:8500:ca64:a9:8200:c032:dcaf: icmp_seq=1 ttl=56 time=0.746 ms
^C
--- 2001:df0:8500:ca64:a9:8200:c032:dcaf ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.746/0.746/0.746/0.000 ms
rk@show-01-venue:~$ sudo ip netns exec showc ping 2001:df0:8500:ca5b:0::1234:abcd
PING 2001:df0:8500:ca5b:0::1234:abcd (2001:df0:8500:ca5b::1234:abcd) 56 data bytes
64 bytes from 2001:df0:8500:ca5b::1234:abcd: icmp_seq=1 ttl=60 time=0.431 ms
^C
--- 2001:df0:8500:ca5b:0::1234:abcd ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.431/0.431/0.431/0.000 ms
rk@show-01-venue:~$ sudo ip netns exec showc ping 2001:df0:8500:ca5b:0::abcd:1234
PING 2001:df0:8500:ca5b:0::abcd:1234 (2001:df0:8500:ca5b::abcd:1234) 56 data bytes
64 bytes from 2001:df0:8500:ca5b::abcd:1234: icmp_seq=1 ttl=60 time=0.341 ms
^C
--- 2001:df0:8500:ca5b:0::abcd:1234 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.341/0.341/0.341/0.000 ms
rk@show-01-venue:~$

https://scrapbox.io/rknet/show-01
#186

Flow: client netns -> main netns -> backbone -> main netns -> server netns

main netns performs SNAT from client netns (IPv4 and IPv6 source address
randomization) and connects to cs-01, and DNAT to server netns (IPv4
public address conversion and IPv6 destination address randomization).
@sorah sorah merged commit e04be0a into master Apr 8, 2025
@sorah sorah deleted the show-r branch April 8, 2025 23:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant