https://wiki.kptree.net/ 2026-09-21T18:30:10+00:00 https://wiki.kptree.net/ https://wiki.kptree.net/_media/wiki:dokuwiki.svg text/html 2025-05-24T13:09:25+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:wireguard?rev=1748092165&do=diff linux router vpn wireguard docker qr_code qr Wireguard VPN access from WAN to LAN I use a Docker instance for my Wireguard server now. I use 2 forms of vpn (virtual private network) on my home server. * VPN to gain remote secure private access to my home LAN from the WAN (internet). This is the one I am describing here. text/html 2025-03-02T07:31:20+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:nftables?rev=1740900680&do=diff linux router nftables firewall NFTables Configuration The best reference for nftables is at the dedicated wiki wiki nftables. Some other references I found nftables router. The reference at stosb is good, but not for a router Explaining My Configs: nftables. Nftables Cheatsheet After a lot of experimenting the following is my NFTables router configuration file. Create the following file called: text/html 2025-11-30T10:55:19+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:network?rev=1764500119&do=diff linux debian ubuntu router network netplan interface vlan ipv6 ip Debian Server Network Setup Debian Network - Server Interface Setup As of Debian 10 (Buster) Debian still by default uses this interface Setup. It can be setup to use netplan inface. Ubuntu (as of version 14.04) defaults to Predictable Network Interface Names, also see Systemd Docs. I have no problem with this. In any case, you should always check dev names and not assume names, such as text/html 2025-10-14T05:59:15+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:misc?rev=1760421555&do=diff linux router monitor links darkstat glances ntopng iftop nethogs Router Miscellaneous Monitoring There are a number of linux monitoring packages available. See these links for more examples see, 13 Linux Performance Monitoring Tools – Part 2, and 30 Linux System Monitoring Tools Every SysAdmin Should Know. Below are a few that I have tried and use. iftop iftop - display bandwidth usage on an interface by host Use text/html 2024-06-23T01:11:37+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:netfilter?rev=1719105097&do=diff linux router mtu netfilter Basic Netfilter Function Block Diagram Both NFTables and IPTables use the Netfilter framework provided in the Linux kernal. NFtables was implemented to supersede IPTables, which due to the widespread use of IPTables, will probably take a long time. The following is a basic block diagram of the Netfilter Filter and NAT (Network Address Translation) functions, which are the basic requirements for router. Incoming Packets | ┌────────────… text/html 2025-05-22T08:07:33+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:ubuntu?rev=1747901253&do=diff linux router router_configuration setup debian ubuntu snap snaps switch network Router Configuration, Switch & Server Setup Router Configuration [DRAFT] A router performs the following key features: * A gateway between different network areas * Restrict network traffic * Forward Network traffic * Track network traffic, allows traffic incoming only if response to out going (one way traffic) This is primary firewall action and primary security action! This is often confused with NAT… text/html 2022-01-16T03:37:00+00:00 Anonymous (anonymous@undisclosed.example.com) https://wiki.kptree.net/linux_router:nftables_control?rev=1642304220&do=diff linux nft nftables nmap NFTables IP Control I primarily set this feature up to act as a form of parental control on my home internet access. Disable Range of IP addresses, with count-down timer The DHCP assigned addresses in the range 100 - 254 were to be disabled (dropped) in the evening. The addresses below 100 were assigned a specific IP address in the DHCP based upon MAC.