Upgrade to Pro — share decks privately, control downloads, hide ads and more …

An Overview of Linux Networking Options

An Overview of Linux Networking Options

This presentation provides some basics on Linux networking options, including network namespaces, VLAN interfaces, MACVLAN interfaces, and virtual Ethernet (veth) interfaces.

Scott Lowe

March 14, 2016
Tweet

More Decks by Scott Lowe

Other Decks in Technology

Transcript

  1. Scott Lowe Author, Blogger, Geek http://blog.scottlowe.org / Twitter: @scott_lowe Colossians

    3:17 NIV An Overview of Linux Networking Options DevOps Networking Forum 2016
  2. Who is this guy? • Husband, father, Jeeper, geek •

    Blogger (11 years at http://blog.scottlowe.org) • Author (7 books so far, 8th book in the works) • Speaker (VMworld, Interop, OpenStack Summits, other events worldwide) • Podcaster (The Full Stack Journey podcast) • Engineering Architect at VMware, Inc. • Jack of all trades, master of none
  3. Agenda • VLAN interfaces • Network namespaces • Virtual Ethernet

    (veth) interfaces • MACVLAN interfaces • Other cool stuff not covered here • Q&A
  4. VLAN interfaces: overview • Allows you to have logical interfaces

    on multiple VLANs via a single physical interface • Physical interface acts like a VLAN trunk (and must be connected to an appropriately configured switch port) • Can place VLAN interfaces in a separate network namespace, if desired, to support unique IP routing tables per VLAN
  5. VLAN interfaces: commands involved • ip link add link <dev>

    <name> type vlan id <ID> - Adds a VLAN interface • ip link list - Lists interfaces • ip link set <if> up/down - Configure a VLAN interface • ip addr add <addr> dev <if> - Configure IP addressing on a VLAN interface
  6. Network namespaces: overview • Allows you to approximate VRF instances

    on Linux • Scopes (limits) interfaces, routing tables, etc. • Used extensively by Linux containers (naturally)
  7. Network namespaces: commands involved • ip netns list - Shows

    the network namespaces • ip netns add <name> - Adds a network namespace • ip netns del <name> - Removes a network namespace • ip link set <if> netns <name> - Puts an interface into a network namespace • ip netns exec <cmd> - Executes a command in the context of a specific network namespace
  8. Virtual Ethernet (veth) interfaces: overview • Virtual Ethernet (veth) interfaces

    are pairs of logical interfaces • Traffic ingressing one veth interface egresses the peer interface • Can be used to connect network namespaces together
  9. Virtual Ethernet (veth) interfaces: commands involved • ip link add

    <name> type veth peer name <name> - Create a veth pair • ip link list - List interfaces • ip link set <if> up/down - Configure a veth interface (peers managed independently) • ip addr add <addr> dev <if> - Configure IP addressing on a veth interface (peers managed independently)
  10. MACVLAN interfaces: overview • Allows you to host multiple logical

    interfaces on a single interface • These logical interfaces are differentiated by MAC address • Can host macvlan interfaces on physical interfaces or VLAN interfaces • Can place macvlan interfaces in a separate network namespace, if desired • Can use with KVM guest domains (macvtap)
  11. MACVLAN interfaces: commands involved • ip link add link <dev>

    <name> type macvlan mode <mode> - Add a macvlan interface • ip link list - List interfaces • ip link set <if> up/down - Configure a macvlan interface • ip addr add <addr> dev <if> - Configure IP addressing on a macvlan interface
  12. Other cool stuff not covered • IPVLAN interfaces • L2

    is very similar to MACVLAN interfaces • L3 is a different beast entirely • Open vSwitch (OVS) • Highly programmable, multilayer virtual switch • Kernel module is part of upstream Linux kernel (since 3.3) • Can be used in conjunction with some of things discussed here (veth interfaces, as one example)