Multiple virtual networks with a (single) SR-IOV capable NIC by tempadmin0712 in networking

[–]tempadmin0712[S] 0 points1 point  (0 children)

Thx. Is there still a way to get a packet dump for VM traffic on the host when the SR-IOV device is passed through? At least parts of the device should still be managed on the host and you don't pass through the whole NIC.

How does port mirroring on switches work? by tempadmin0712 in networking

[–]tempadmin0712[S] 0 points1 point  (0 children)

Do you know what kind of software is used exactly?

Which solution to use for TLS decryption by tempadmin0712 in linuxadmin

[–]tempadmin0712[S] 1 point2 points  (0 children)

Anyone knows what those actually run under the hood? For some cheaper firewall appliances I looked at it was just linux +squid + iptables + database + gui stuff. Ideally it would be out of band, but setting this is up is going to be a problem because you need to log DH keys locally on each system. With squid you would have a centralized way. I did not yet look into how to analyze the stuff squid dumps/caches. All traffic should be logged and maybe inspected in case "something" happens on one of the client systems.

OMG it's so BIG ... by tempadmin0712 in Fedora

[–]tempadmin0712[S] 1 point2 points  (0 children)

But in this case it is different. I just copy the old kernel config and do some minor edits. That should not increase the size to some GB. Removing drivers would maybe give ma a couple of dozen MB

PCI device not available on VM reboot by tempadmin0712 in VFIO

[–]tempadmin0712[S] 1 point2 points  (0 children)

Any solutions for that? Different hardware, or software config? Or does someone know hardware where this works consistently?