linux 归档 - 夜莺博客

标签：linux

Docker IPvlan L2 vs L3 Network Driver Configuration

Docker IPvlan L2 vs L3 Network Driver Configuration

Docker IPvlan L2, L3 and l3s modes compared: when to use each, network create examples, dual-stack VLAN parents and failure modes.

admin admin 2026-10-09
0 0 0
Open vSwitch DPDK vHost-User and Multiqueue Guide

Open vSwitch DPDK vHost-User and Multiqueue Guide

Configure Open vSwitch with DPDK: netdev datapath, hugepages, PMD CPU masks, vhost-user-client ports and multiqueue verification.

admin admin 2026-10-09
0 0 0
nftables NAT: Masquerade and Port Forwarding Guide

nftables NAT: Masquerade and Port Forwarding Guide

Configure nftables NAT with masquerade, SNAT and DNAT port forwarding rules, plus verification and persistence on RHEL and Debian.

admin admin 2026-10-09
0 0 0
Linux XFRM IPsec Site-to-Site Tunnel Configuration

Linux XFRM IPsec Site-to-Site Tunnel Configuration

Build a route-based Linux IPsec site-to-site tunnel with XFRM interfaces, strongSwan swanctl config and ip route verification steps.

admin admin 2026-10-09
0 0 0
DPDK testpmd: Packet Generator and Forwarding Modes

DPDK testpmd: Packet Generator and Forwarding Modes

Use DPDK testpmd to benchmark and validate NICs: command-line options, core and port masks, interactive forwarding modes and tx-first traffic generati

admin admin 2026-10-08
0 0 0
nftables Stateful Firewall with Connection Tracking

nftables Stateful Firewall with Connection Tracking

Build a stateful nftables firewall using ct state: allow established and related traffic, drop invalid packets, and open specific ports per chain.

admin admin 2026-10-08
0 0 0
Linux IRQ Affinity, RSS, RPS and XPS Tuning

Linux IRQ Affinity, RSS, RPS and XPS Tuning

Tune the Linux network receive path: RSS queue counts, IRQ SMP affinity, RPS and RFS CPU maps, XPS transmit steering and how to verify softirq distrib

admin admin 2026-10-07
0 0 0
NIC Offloads: TSO, GSO, GRO and Checksum Tuning

NIC Offloads: TSO, GSO, GRO and Checksum Tuning

Understand and tune NIC offloads with ethtool -K: TSO, GSO, GRO, LRO and checksum offload, when to disable them for capture or bridging, and how to pe

admin admin 2026-10-07
0 0 0
OpenSSH Server Hardening: sshd_config Guide

OpenSSH Server Hardening: sshd_config Guide

Harden an OpenSSH server with a single drop-in config: key-only authentication, no root login, AllowUsers allowlists, modern ciphers and a tested, rev

admin admin 2026-10-07
0 0 0
Linux softnet_stat, RPS and netdev_max_backlog Tuning

Linux softnet_stat, RPS and netdev_max_backlog Tuning

Diagnose dropped packets in /proc/net/softnet_stat and tune netdev_max_backlog, RPS, RFS and flow limits to fix receive-side drops on Linux servers.

admin admin 2026-10-06
0 0 0
1 2 3 … 19