bk99.de entertain the web since 1997

The Linux network stack as a map

Summary

The Linux networking diagram arranges packet paths, protocols and kernel components into a navigable system map. Zenodo archives the map permanently with a citable record identifier. The diagram connects user space, kernel protocols, Netfilter, traffic control and drivers.

Ideas

  • A packet follows different paths for receiving, forwarding and local output.
  • Netfilter hooks sit at defined transitions of the network stack.
  • Sockets connect application calls with transport protocols and kernel buffers.
  • Routing decides whether packets end locally or are forwarded.
  • Drivers and queueing form the bridge between kernel and network hardware.

Insights

  • Diagrams speed up troubleshooting when several subsystems affect the same packets.
  • The observation point determines which version of a packet a tool shows.
  • Firewall problems are often path problems rather than faulty individual rules.

Facts

  • Incoming and outgoing packets do not pass all components in the same order.

Recommendations

  • Before every analysis, mark the source, destination, namespace and expected packet path.
  • Place tcpdump captures specifically before and after suspected transformations.

References

Read the original article

Search the Web Archive