TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Ask HN: Isolated virtualized networking learning env?

8 点作者 dbglog11 个月前
In order to do some detailed hands-on learning of networking, I&#x27;m considering putting together the following type of environment. I&#x27;m seeking feedback about whether such things exist, whether this is a good idea, or perhaps if others know betters ways about this. I&#x27;d also appreciate pointers about <i>how</i> to do it - like maybe websites that explain which software runs at every step, what the common choices are, etc.<p>Specifically: the goal would be to model a small &quot;internet&quot; that would fit in as many isolated small VMs as could fit on a single 64GB ubuntu box (say, 30-ish hosts maybe at &lt;2GB&#x2F;host). The model would start with a single machine running a browser + mail-client on a small home network, the border router, the link to the ISP, the backbone, and all the way to a cloud operator running a web server. If space permits, model another home network, to see what one would ordinarily observe when VPN-ing home from another site. Include all the major server types (dhcp at home, firewalls, dns, ntp, vpn, mail, web&#x2F;socks proxies, load balancers, etc). The idea would be to have a &quot;god view&quot; of this little internet and be able to observe packet flow and understand where traffic originates, where it goes, what paths it follows, where it&#x27;s blocked, how it&#x27;s routed, etc. The learning objective would be to understand all the basic tools like tcpdump, wireshark, nmap, traceroute, kernel networking settings, kernel networking-related modules, etc without the accidental complexities and access limitations of a real network.<p>I would build this up incrementally, starting from one host talking to its local dhcp, and adding hosts little by little. I imagine this can be done in a reasonably straightforward way with a bunch of qemu command-lines, apt installs and configuration of the various servers in the path.<p>PS: I can see that there are systems like mininet and gns3 out there, but it seems like they introduce a layer above all the actual systems beneath. Maybe that&#x27;s worthwhile, it&#x27;s hard for me to tell.

4 条评论

fefferkorn11 个月前
I think a simple linux box with docker&#x2F;kvm&#x2F;proxmox would be quite sufficient to start with. You can just add bridges between VMs &#x2F; Containers,... advance to SDN, setup your own Firewalls and LoadBalancing VMs... and for watching network traffic you can use wireshark&#x2F;tcpdump.or whatever, you csn even plug in monitoring or tracing proxies in between. When using LXC containers with proxmox the system should be quite sleek.<p>I would recommend to stay as open source as you can. (using pfsense, nginx... not commercial firewalls), play around with wireguard,... also use a IaC configuration tool like ansible or pyinfra do configure your stuff from.the beginning (so you can easily reconfigure stuff and make changes in scale)<p>Have fun!
评论 #40888493 未加载
rohitpaulk11 个月前
Not exactly what you described, but <a href="https:&#x2F;&#x2F;labs.iximiuz.com&#x2F;" rel="nofollow">https:&#x2F;&#x2F;labs.iximiuz.com&#x2F;</a> is similar
评论 #40888489 未加载
评论 #40888491 未加载
wmf10 个月前
<a href="https:&#x2F;&#x2F;netlab.tools&#x2F;" rel="nofollow">https:&#x2F;&#x2F;netlab.tools&#x2F;</a><p><a href="https:&#x2F;&#x2F;containerlab.dev&#x2F;" rel="nofollow">https:&#x2F;&#x2F;containerlab.dev&#x2F;</a>
评论 #40895647 未加载
oh_fiddlesticks10 个月前
GNS3