News for hackers. Stuff that matters.
Re:IP addresses and routing by Hello71 on Thursday July 26, 2018 @07:31AM (#17616590)
> a bunch of other stuff which I don’t understand that well (metric 600, scope link, proto kernel, etc). Not understanding what those things mean hasn’t hurt me yet.

These are pretty straightforward. metric 600 means that out of all the otherwise-identical routes, the kernel will prefer this one to one with a metric of 601 or greater. scope link means that this address is only valid on the local link (network interface). scope global means that (the kernel assumes) this address is valid on the wider Internet. proto kernel means that the kernel automatically installed this route for you because you used "ip address add x/y". Now, the "table x" part is actually really interesting, because Linux doesn't just support "a route table", it supports 256 routing tables. These are used in conjunction with policy routing in order to support source address routing, firewall mark based routing, and others. Firewall mark based routing is extremely powerful: for example: MARK all packets on port 53 whose (using BPF) first DNS query question is jvns.ca, and send those using eth1 instead of eth0. More mundanely, wg-quick from WireGuard uses this feature to bypass the VPN for the VPN packets, which allows the VPN to be used for the VPN gateway.

Re:IP addresses and routing by eximius on Thursday July 26, 2018 @10:34AM (#17617800)
Right, so you need to publish a networking textbook on this stuff, okay?

If that sounds too dreary, I'd take a suggestion for one.

Re:IP addresses and routing by cesarb on Thursday July 26, 2018 @10:52AM (#17617934)
Re:IP addresses and routing by Hello71 on Thursday July 26, 2018 @12:02PM (#17618487)
It's too bad that being 16 years old, lots of the suggestions are now outdated, like the complete absence of bufferbloat.