IPAM: Driver: Default config:-subnet: 172.16.238.0/24 PID: 'host' # process space (PID) of the shared host) ports # establishes the port ing between the host and container. Ports supports two syntax formats:-"3000" # expose port 3000 of the container, the host machine port is randomly mapped to an unused port by docker-"3000-3005" # expose ports 3000 to 3005 of the container, the host machine port is randomly mapped to the unused port by docker-"8000
Spectre Meltdown vulnerability patch repair security tips
Spectre/Meltdown events seem to have entered the second stage-various vendors have released their own repair solutions. However, it does not seem as smooth as imagined. The industrial control system vendor Wonderware said that the Meltdown patch affected the stability of the industrial control system, while the SolarWinds found that the patch caused a soaring CPU usage.
Meltdown patch causes
Routing encapsulation (GRE) tunneling, and new features of existing technologies, including IP address management (IPAM), Dns,dhcp.
For more information about the new technologies available for these networks: GRE tunnels in Windows Server Technology Preview. This preview release introduces a new feature that enables Universal Routing Encapsulation (GRE) for Windows Server gateways.
What is the Windows Server Technology Preview for
After your server is hosted and shelved in the data center, it will officially provide external services for 7x24 hours. The incoming and outgoing data packets in the server have a certain amount of traffic, and the data center will also monitor and control the traffic on your server. When traffic on your server is abnormal, they will immediately control the traffic.Common traffic monitoring software include DU Meter, MRTG, PRTG, and SolarWinds. Curre
of the network to bring complexity and loss of performance, because when we have a large business cluster, these complexity and performance loss can not be ignored. The plugin principle is as follows :1. creating a Docker custom networkDocker Network Create--opt=com.docker.network.bridge.enable_icc=true--opt=com.docker.network.bridge.enable_ip_masquerade=false--opt=com.docker.network.bridge.host_binding_ipv4=0.0.0.0--opt=com.docker.network.bridge.name=br0--opt=com.docker.network.driver.mtu=1500
In many cases within the enterprise, you will encounter the following events:
1. Need to track the use of the overall IP address space;
2. Need to be urgently aware of which address is idle for quick allocation to a new device or a DNS SRV record;
3. When the address range of the DHCP server is exhausted, it is expected to have an emergency address space;
4. If you change some of the parameter options on the DHCP server (such as proxy server), I hope to be able to apply it to all servers as
Network Browser is a tool in the SolarWinds Network management software set. It can be used to scan Network devices in an IP segment.
So I run IP Network Browser and enter 210. 224. *. 1 ~~~ 210. 224. *. 254 network segment scan, the scan results are not as expected, the IP address is 210. 224. *. the device of 1 is a vro and cisco. It is found that the permission of Community String is private, that is, full permission.
Here, we have to talk about a
Tool Name:Solarwinds engineer Edition
Www.solarwinds.net
Recommendation reason: Some readers said: "in less than an hour, I downloaded and installed the Authorized Version of solarwinds from the website. Soon, I will be able to prepare a line usage report, and the line usage and basic response time functions are very good. In addition, the data will be saved, this allows me to view data for one week, one month, or one year."
Tool Name:NetwatchKit
Comp
sniffing tool. It can display the packet header of the matching rule. You can use this tool to find network problems or to monitor the situation on the network. WinDump is a ported version of Tcpdump on the Windows platform.--------------------------------------------------------------------------------Tools: Hping2 (network probing tool like Ping)Website: http://www.hping.org/Category: Open sourcePlatform: Linux/bsd/unixSummary: Hping2 can send a custom icmp/udp/tcp package to the destination
. 1.3.6.1.2.1.25.6.3.1.2 List Installed Software
Snmputil walk peer ip public. 1.3.6.1.2.1.1 list system information
3. Recommended tools
Snmputil is enough to scan network hosts, just because it is a tool under the command line.
Furthermore, super-normal oid identifiers are not that easy to input.
Here I recommend two very good network management tools, of course, their other role is snmp spying.
IP Network Browser of SolarWinds 2001
IP Network B
In project implementation and network device debugging, we often need to find the subnet mask and default gateway of the device so as to correctly configure devices such as routers, switches, and firewalls.
Obtained through web query
Here is a tip: You can visit the MISCOMP site and query through Web pages.The specific URL is:Http://fncdug1.fnal.gov/misnet/systemName.htmlAfter logging on to this page, the following figure is displayed:
498) this. style. width = 498; "border = 0>
products. In addition, large companies must have their own public IP segments.
Based on the above considerations, I decided to use the IP Network Browser tool for the range of 210. 224. *. 1 ~~~ 210. 224. *. 254 IP segment scan to check whether a network device of a Cisco router or vswitch is used. It must be noted that IP Network Browser is a tool in the SolarWinds Network management software set. It can be used to scan Network devices in an IP segm
Free IP address tracker-you can view which IP addresses are used and which tools are not used in a CIDR block.
Download this free desktop tool from solarwinds and get a uniied view of your IP address space. IP address Tracker shows you which IP addresses are in use-and which are not while eliminating manual errors and ensuring that IP addresses are listed in the right place. download this free tool from solarwind
appears on the ARP information, the information will certainly contain the interface, and then check these interfaces, and finally determine. It is recommended to use the last one.Technical Support:1. If the access layer has a loop, such as the hub is short, it is bound to reflect the distribution layer switch, resulting in the distribution layer switch CPU high, this is positive. :Command:#show Processes CPU History2. It is recommended to use the SolarWind
official website: https://docker.github.io/engine/userguide/networking/#/the-default-bridge-network-in-detailYou can also refer to some examples in this chapter, most of which are also from the network, as follows:
One, specify the network bridgeI. 1.1 Creating a Network Bridge
[Root@linuxea ~]# Docker Network Create linuxea.comaf4526e387772f33b053ff2ab47e601ddf9618bc2d444770775723d76d3a1010[Root@linuxea ~]# Docker Network lsNetwork ID NAME DRIVER SCOPE3EBF99E55DB8 Bridge Bridge7eb855581296 H
application container IP fixed (reference online information)The convenience of Docker 1.9 to support Contiv Netplugin,contiv is that users can access it directly from the instance IP.The Docker 1.10 version supports the designation of IP boot containers, and it is necessary to study the design of the container IP fixed scheme because some database applications have a need for instance IP pinning.In the default kubernetes + contiv network environment, the container pod IP network connection is
--network= Wordpress_net--ip=172.18.0.2 mysql:5.7
da497e56bd4b0f3434dd4f81534096574d167354dc508b657ceb390ba8e63771
docker:error response from Daemon:user specified IP address are supported only if connecting to networks with User Configured subnets.
Prompted an error, to configure IP, you need to assign a subnet to the network. So get a new network.
Docker Network create--driver bridge--subnet 172.25.0.0/16 wordpress_net [Root@vultrvpn conf.d]# Docker-network
INS Pect wordpress_ne
Network Configuration
Install Docker automatically create three networks by default:
$ docker Network LS
network ID NAME DRIVER
7fca4eb8c647 Bridge bridge
9f904ee27bf5 none null
CF03EE007FB4 host Host1 2 3 4 5 6 1 2 3 4 5-6
The Docker container runs on the bridge network by default. The default bridge does not support automatic service discovery, so the container name or the expected/etc/hosts ping will fail, but the custom Br
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.