Day 11: Networking Stack: Interfaces, Routing, DNS & SSH

Day 11 · Lunch — Networking Stack: Interfaces, Routing, DNS & SSH

⚡ 60-Second Mental Model (Student Digest)

╔══════════════════════════════════════════════════════════════════════════════╗
║  ZOTHOS × 1NC0GN30 // PROCESS, KERNEL & NETWORK OPERATIONS PIPELINE          ║
╠══════════════════════════════════════════════════════════════════════════════╣
║                                                                              ║
║  ┌─────────────────┐    fork() / execve()    ┌────────────────────────────┐  ║
║  │  PID 1: systemd │ ──────────────────────► │  Active Daemons & Tasks    │  ║
║  └────────┬────────┘                         │  • nice / renice [-20..19] │  ║
║           │                                  │  • SIGTERM(15) / SIGKILL(9)│  ║
║           ▼                                  └─────────────┬──────────────┘  ║
║  ┌─────────────────┐    /proc & sysctl       ┌─────────────▼──────────────┐  ║
║  │ Kernel Modules  │ ◄─────────────────────► │ Network & Storage Stack    │  ║
║  │ lsmod / modprobe│                         │ ip route • ss • /etc/fstab │  ║
║  └─────────────────┘                         └────────────────────────────┘  ║
╚══════════════════════════════════════════════════════════════════════════════╝

---

Welcome to Day 11 Lunch! Today, we continue our deep dive into Advanced Network Configuration. This session is packed with practical lessons on advanced IP configurations, network bonding, DHCP, managing network services, performance optimization, and troubleshooting. By the end of this session, you’ll have a strong grasp of these topics and be able to apply them confidently in real-world scenarios.

Lessons

Lesson 1: Advanced IP Configuration

Topic: Advanced IP Configuration
Description:
In this lesson, you'll explore advanced IP configuration tasks, including setting up IP aliases, configuring network bridges, and managing multiple IP addresses on a single interface.

Commands:

To add an IP alias:

  sudo ip addr add 192.168.1.2/24 dev eth0

To set up a network bridge:

sudo ip link add name br0 type bridge
sudo ip link set dev br0 up

To add an interface to the bridge:

sudo ip link set dev eth0 master br0

Example: Use network bridges to combine multiple network interfaces into a single logical network.

Instructions:
Open a separate terminal and type the commands described above. Experiment with adding IP aliases and setting up network bridges. When ready, press Enter to continue.

Lesson 2: Configuring Bonding Interfaces

Topic: Configuring Bonding Interfaces
Description:
Learn about network bonding, which allows combining multiple network interfaces into a single virtual interface for redundancy or increased bandwidth.

Commands:

To configure bonding on Linux:
Edit /etc/network/interfaces or create a bonding configuration file:

auto bond0
iface bond0 inet static
  address 192.168.1.10
  netmask 255.255.255.0
  bond-slaves eth0 eth1
  bond-mode 802.3ad

To bring up the bonded interface:

sudo ifup bond0

Example: Use bonding to improve network reliability and throughput.

Instructions:
Try setting up a bonding interface by following the commands above. Ensure you understand how to edit the network configuration file. When done, press Enter to proceed.

Lesson 3: Advanced DHCP Configuration

Topic: Advanced DHCP Configuration
Description:
Dive into advanced DHCP configurations, including setting up DHCP relay agents and configuring DHCP options for various scenarios.

Commands:

To configure a DHCP relay agent:

sudo apt-get install isc-dhcp-relay

Edit /etc/default/isc-dhcp-relay to set the relay parameters.
To define custom DHCP options:
Edit /etc/dhcp/dhcpd.conf to include options like:

option domain-name-servers 8.8.8.8;

Example: Use DHCP relay agents to forward DHCP requests from clients in one subnet to a DHCP server in another subnet.

Instructions:
Follow the steps to set up a DHCP relay agent and configure custom DHCP options. Test these configurations in your environment. Press Enter when ready to continue.

Lesson 4: Managing Network Services

Topic: Managing Network Services
Description:
Learn how to manage essential network services such as DNS and NTP on Linux.

Commands:

To configure DNS settings:
Edit /etc/resolv.conf to add nameserver entries:

nameserver 8.8.8.8

To install and configure NTP:

sudo apt-get install ntp

Edit /etc/ntp.conf to set NTP servers.
To check NTP synchronization:

ntpq -p

Example: Configure DNS and NTP services to ensure network name resolution and accurate time synchronization.

Instructions:
Configure DNS and NTP settings using the commands above. Verify the changes and test NTP synchronization. Press Enter to proceed to the next lesson.

Lesson 5: Network Performance Optimization

Topic: Network Performance Optimization
Description:
Explore techniques for optimizing network performance, including adjusting network buffers and tuning kernel parameters.

Commands:

To adjust network buffer sizes:

sudo sysctl -w net.core.rmem_max=16777216
sudo sysctl -w net.core.wmem_max=16777216

To tune kernel parameters for network performance:

sudo sysctl -w net.ipv4.tcp_fin_timeout=30

Example: Optimize network performance by tuning kernel parameters to handle high throughput or latency-sensitive applications.

Instructions:
Experiment with adjusting network buffer sizes and tuning kernel parameters. Observe the effects of these changes. When ready, press Enter to continue.

Lesson 6: Network Troubleshooting Tools

Topic: Network Troubleshooting Tools
Description:
Review advanced network troubleshooting tools and techniques for diagnosing complex network issues.

Commands:

To use traceroute with options:

traceroute -n <destination_ip>

To capture and analyze packets:

sudo wireshark

To perform network performance testing:

iperf3 -s  # Server
iperf3 -c <server_ip>  # Client

Example: Use wireshark to capture and analyze network traffic for detailed troubleshooting and performance testing.

Instructions:
Try using the tools above to troubleshoot network issues. Capture and analyze packets using wireshark and test network performance with iperf3. When finished, press Enter to proceed to the questions.

Knowledge Check

Now let's test your knowledge with some questions. Answer the following to the best of your ability.

#### What command is used to add an IP alias on Linux?

Correct Answer: ip addr add

#### How do you set up a network bridge on Linux?

Correct Answer: ip link add name br0 type bridge

#### What is the purpose of network bonding?

Correct Answer: To combine multiple interfaces for redundancy or increased bandwidth

#### Which configuration file is used to set up bonding on Linux?

Correct Answer: /etc/network/interfaces

#### How do you configure a DHCP relay agent on Linux?

Correct Answer: Install and configure isc-dhcp-relay

#### Where do you define custom DHCP options?

Correct Answer: /etc/dhcp/dhcpd.conf

#### What command adjusts the maximum network buffer size?

Correct Answer: sysctl -w net.core.rmem_max

#### How do you check NTP synchronization?

Correct Answer: ntpq -p

#### Which tool is used for network performance testing?

Correct Answer: iperf3

#### What command shows the current network routing table?

Correct Answer: ip route show

Conclusion

In this session, you have learned advanced techniques for configuring and managing Linux network interfaces. The lessons covered complex tasks such as IP configuration, bonding, DHCP, and more. These skills are crucial for optimizing and troubleshooting networks in a professional environment. Make sure to practice these commands and understand the underlying principles to solidify your knowledge. Continue exploring and experimenting with these tools to become proficient in network configuration and management on Linux.

Day 11 · Dinner — Networking Stack: Interfaces, Routing, DNS & SSH

⚡ 60-Second Mental Model (Student Digest)

╔══════════════════════════════════════════════════════════════════════════════╗
║  ZOTHOS × 1NC0GN30 // PROCESS, KERNEL & NETWORK OPERATIONS PIPELINE          ║
╠══════════════════════════════════════════════════════════════════════════════╣
║                                                                              ║
║  ┌─────────────────┐    fork() / execve()    ┌────────────────────────────┐  ║
║  │  PID 1: systemd │ ──────────────────────► │  Active Daemons & Tasks    │  ║
║  └────────┬────────┘                         │  • nice / renice [-20..19] │  ║
║           │                                  │  • SIGTERM(15) / SIGKILL(9)│  ║
║           ▼                                  └─────────────┬──────────────┘  ║
║  ┌─────────────────┐    /proc & sysctl       ┌─────────────▼──────────────┐  ║
║  │ Kernel Modules  │ ◄─────────────────────► │ Network & Storage Stack    │  ║
║  │ lsmod / modprobe│                         │ ip route • ss • /etc/fstab │  ║
║  └─────────────────┘                         └────────────────────────────┘  ║
╚══════════════════════════════════════════════════════════════════════════════╝

---

Welcome to Day 11 Dinner! In this session, we'll dive into advanced network configuration topics. We'll cover IPsec, load balancing, high availability, performance analysis, and security best practices. Prepare to enhance your skills and deepen your understanding of these critical network concepts.

Lessons

Lesson 1: Advanced Network Configuration with IPsec

Description:
Explore IPsec for securing IP communications by authenticating and encrypting each IP packet. Learn how to configure IPsec on Linux for secure communications.

Commands:

Install IPsec tools:

  sudo apt-get install strongswan

Configure IPsec:
Edit /etc/ipsec.conf:

conn myvpn
  authby=psk
  keyexchange=ikev2
  left=%any
  leftsubnet=0.0.0.0/0
  right=%any
  rightdns=8.8.8.8
  rightsourceip=10.0.0.0/24

Restart IPsec service:

sudo systemctl restart strongswan

Example: Use IPsec to establish a secure VPN connection.

Lesson 2: Load Balancing Techniques

Description:
Learn about load balancing to distribute network traffic across multiple servers or resources to improve performance and reliability.

Commands:

Configure load balancing with nginx:
Edit /etc/nginx/nginx.conf:

nginx
http {
  upstream backend {
    server 192.168.1.2;
    server 192.168.1.3;
  }
  server {
    location / {
      proxy_pass http://backend;
    }
  }
}

Restart nginx:

sudo systemctl restart nginx

Example: Use nginx to balance traffic between multiple web servers.

Lesson 3: High Availability Configuration

Description:
Explore high availability solutions to ensure that critical services remain available even in the event of hardware or software failures.

Commands:

Configure high availability with keepalived:
Install keepalived:

sudo apt-get install keepalived

Edit /etc/keepalived/keepalived.conf:

vrrp_instance VI_1 {
  state MASTER
  interface eth0
  virtual_router_id 51
  priority 101
  advert_int 1
  authentication {
    auth_type PASS
    auth_pass mypassword
  }
  virtual_ipaddress {
    192.168.1.100
  }
}

Restart keepalived:

sudo systemctl restart keepalived

Example: Use keepalived to provide a virtual IP address that can failover between multiple servers.

Lesson 4: Network Performance Analysis

Description:
Deep dive into tools and techniques for analyzing network performance and identifying bottlenecks.

Commands:

Monitor network traffic with nload:

sudo nload

Analyze network throughput with iperf:
Server:

iperf3 -s

Client:

iperf3 -c <server_ip>

Check network latency and packet loss:

ping -c 100 <destination_ip>

Example: Use iperf to test throughput and ping to check latency and packet loss.

Lesson 5: Security Best Practices for Network Configuration

Description:
Review security best practices for network configuration, including securing network services and implementing access controls.

Commands:

Secure SSH access with key-based authentication:
Generate a key pair:

ssh-keygen

Copy the public key to the server:

ssh-copy-id user@server

Disable password authentication in /etc/ssh/sshd_config:

PasswordAuthentication no
Restart SSH service:

sudo systemctl restart ssh

Example: Secure SSH access to prevent unauthorized logins.

Lesson 6: Network Service Troubleshooting

Description:
Explore troubleshooting techniques for network services to diagnose and resolve issues effectively.

Commands:

Check service status with systemctl:

sudo systemctl status <service>

View service logs with journalctl:

sudo journalctl -u <service>

Check network service connectivity with telnet:

telnet <hostname> <port>

Example: Use systemctl to check service status and telnet to test connectivity to a specific port.

#### Knowledge Check

Test your understanding of today's lessons with the following questions:

1. What command is used to install IPsec tools on Linux?

Answer: sudo apt-get install strongswan

2. How do you configure IPsec for a VPN on Linux?

Answer: Edit /etc/ipsec.conf

3. What is the purpose of load balancing?

Answer: To distribute network traffic across multiple servers

4. Which tool can be used for load balancing on Linux?

Answer: nginx

5. How do you configure high availability with keepalived?

Answer: Edit /etc/keepalived/keepalived.conf

6. What command shows network traffic in real-time?

Answer: nload

7. How do you secure SSH access with key-based authentication?

Answer: Generate a key pair and copy the public key

8. What is a common tool for analyzing network throughput?

Answer: iperf3

9. Which command helps to check the status of a service?

Answer: systemctl status

10. How can you test network service connectivity to a specific port?

Answer: telnet

Congratulations on completing Day 11 Dinner!

You've gained valuable insights into advanced network configuration topics. Continue to practice these concepts and commands to reinforce your knowledge. Stay tuned for more lessons as we advance further into network management and optimization.