inside Inside device 3 wireguard-vpn-site2site Site-to-site 3 wireguard-vpn-defaultgw Default gateway 3 wireguard-vpn-other-tasks Other tasks 3 wireguard-vpn-security Security tips 3 wireguard-vpn-troubleshooting WireGuard VPN Introduction Peer to site Introduction On router Inside device Site to site Default gateway Other tasks Security tips Troubleshooting Virtualization Virtual machines (VMs) QEMU Create VMs * dhcp: for automatic IP configuration static dhcp (default 'dhcp'): static ip: 10.222.111.24 gateway (default 10.222.111.1): . dns (default .): vlan id (optional): http://cdimage.ubuntu.com/ubuntu/releases/20

Selects packages needed for an OpenSSH server. • PostgreSQL database: This task selects client and server packages for the PostgreSQL database. • Print server: This task sets up your system to be a print effect, so use with caution. • Update the Package Index: The APT package index is essentially a database of available packages from the repositories defined in the /etc/apt/sources.list file and in the The following section describes the process of configuring your systems IP address and default gateway needed for communicating on a local area network and the Internet. 1.2.1. Temporary IP Address Assignment

255.255.255.0 { range 192.168.1.200 192.168.1.253; option broadcast-address 192.168.1.255; # the gateway address which can be different # (access to the internet for instance) option routers 192.168.1 network setup in turn asks you a number of questions about your network, notably IP address, Netmask, Gateway, Name server addresses, and a Hostname. Moreover, if you have a wireless network interface, you will of your system’s IP address with the bitwise negation of the net- mask. It will also guess your gateway. If you can’t find any of these an- swers, use the offered defaults —if necessary, you can change

Intrusion Detection  (AIDE preinstalled without pre- defined monitoring database)  (AIDE with security monitoring database pre-defined) Intrusion Prevention  (Fail2ban)  (Fail2ban) Network interface. The options are: • WAN - When set to WAN, this interface will be added to the default gateway list and allow MCM to apply automatic keep-alive and failover/failback control over it • LAN - only network attributes defined in Profile-1. MCM will not set these interfaces as the default gateway nor apply connection keep-alive and failover/failback control over it. • None - MCM will not

/home/kdas/code/git/ansible/lib/ansible/modules/system/firewalld.py ... long output You can update the search database by using updatedb command as root. $ sudo updatedb This may take some time as it will index all configuration, since apt-utils is not installed Selecting previously unselected package htop. (Reading database ... 6677 files and directories currently installed.) Preparing to unpack .../htop_2.2.0-1+b1_amd64 1s (379 kB/s) debconf: delaying package configuration, since apt-utils is not installed (Reading database ... 6677 files and directories currently installed.) Preparing to unpack .../libsystemd0_241-7~deb10u8_amd64

/home/kdas/code/git/ansible/lib/ansible/modules/system/firewalld.py ... long output You can update the search database by using updatedb command as root. $ sudo updatedb This may take some time as it will index all configuration, since apt-utils is not installed Selecting previously unselected package htop. (Reading database ... 6677 files and directories currently installed.) Preparing to unpack .../htop_2.2.0-1+b1_amd64 1s (379 kB/s) debconf: delaying package configuration, since apt-utils is not installed (Reading database ... 6677 files and directories currently installed.) Preparing to unpack .../libsystemd0_241-7~deb10u8_amd64

Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies Kata Containers with Cilium Configuring IPAM modes Local Redirect Policy (beta) BGP (beta) Egress Gateway (beta) Cluster Mesh Setting up Cluster Mesh Load-balancing & Service Discovery Network Policy Setting Policy Enforcement Locking down external access with DNS-based policies How to Secure a Cassandra Database Securing a Kafka cluster Installation using Rancher Pre-Requisites Rancher Version 2.x [https://rancher

Kafka cluster How to secure gRPC Getting Started Securing Elasticsearch How to Secure a Cassandra Database Getting Started Securing Memcached Locking down external access using AWS metadata Creating policies Kata Containers with Cilium Configuring IPAM modes Local Redirect Policy (beta) BGP (beta) Egress Gateway (beta) CiliumEndpointSlice (beta) Cluster Mesh Setting up Cluster Mesh Load-balancing & Service Policy Enforcement Locking down external access with DNS-based policies How to Secure a Cassandra Database Securing a Kafka cluster Installation using Rancher Pre-Requisites Rancher Version 2.x [https://rancher

所以啰，此时你就会被骂说：『怎么都不懂还想要管理我们家网络』…那时不是很糗吗？所以 要学好一些嘛！ 这部份就很复杂了，包括 TCP/IP, Network IP, Netmask IP, Broadcast IP, Gateway, DNS IP 等等，都需要理解喔！ 了解了这些原理之后，你才能够进行除错 (debug) 的工作，否则，错误一出，你可能就会被骂的臭头的！ 最常见 的错误中，举例来说，如果你的主机明明就可以使用 个节点的一种形态，这就是一种拓朴。 2.1.2 计算机网络组成组件 4.1. 2.1 网络是个什么玩意儿 - 42 - 本文档使用 书栈(BookStack.CN) 构建 网关 (route) 或通讯闸 (gateway)：具有两个以上的网络接口， 可以连接两个以上不同的网段的设备，例 如 IP 分享器就是一个常见的网关设备。那上面的 ADSL 调制解调器算不算网关呢？ 其实不太能算，因为调 制解调器通常视 (Internet Group Management Protocol) 3 GGP (Gateway-to-Gateway Protocol) 4 IP (IP in IP encapsulation) 6 TCP (Transmission Control Protocol) 8 EGP (Exterior Gateway Protocol) 17 UDP (User Datagram Protocol)

Ethernet hardware address for the client is listed in the “ethers”database (either in the /etc/ethers file, or via NIS/NIS+) and in the“hosts”database. Then you need to start the RARP daemon. Issue the command server> setenv dnsip setenv gatewayip gateway> 如果您愿意，可以运行 saveenv 命令，保存这些设置。之后，您需要将映像（内核/初始化内存盘/dtb）加载到内存中。这可以通过 tftpboot 命令来完成，但该命令必须提供内存地 败，您可以换成手动网络设置方式。 6.3.1.5.2 手动网络配置 手动配置网络会依次询问一些网络问题，特别是 IP 地址 (IP address)、网络掩码 (Netmask)、网 关 (Gateway)、域名服务器地址 (Name server addresses)，以及主机名 (Hostname)。另外， 如果您有无线网卡，会被要求提供 Wireless ESSID (“无线网络名”) 和