iptables - is a command that displays, adds, and deletes entries from Netfilter,
the Linux kernel's packet filtering and manipulating subsystem. It handles NAT.
(iptables utility is included in the netfilter)
route - is a command that displays, adds and deletes entries from
the kernel's TCP/IP routing table (aka "Forwarding Information Base").
iproute2 -
ipfwadm (kernel prior 2.2.x)
ipchains (kernal from 2.2.x)
netfilter (kernel more 2.3.15)
The iptables command is used to configure both
IP filtering and
Network Address Translation.
Five built-in chains .
INPUT
FORWARD
PREROUTING
POSTROUTING
OUTPUT
tables that iptables provides:
filter -
nat -
raw -
security -
network namespace - Generally speaking,
an installation of Linux shares a single set of network interfaces
and routing table entries across the entire OS.
With network namespaces, you can have different and separate instances of network interfaces
and routing tables that operate independent of each other.
virtual bridge -
network interface -
physical interfaces -
veth (virtual ethernet interfaces) - they always come in pairs,
and they are connected like a tube -
whatever comes in one veth interface
will come out the other peer veth interface.
ip link list - show network device list
ip netns list - show all of the named network namespaces
ip netns exec [ NAME ] cmd - Run cmd in the named network namespace
nsenter
brctl show - show list of virtual bridge
brctl - предназначенной для настройки модуля bridge ядра Linux,
виртуального ethernet-моста Linux Bridge.
What is linux network interface?
What is linux network devices?
What is linux standard Linux bridge?