Files
felhom.eu/documentation/audits/line-test-2026-10-24/ep0-install.txt
T

46 lines
2.0 KiB
Plaintext

# ep0 iperf3 install, 2026-10-24 ~06:12Z (CC, attended release run; operator ruling 07:26)
Sat Oct 24 06:25:34 AM UTC 2026
ii iperf3 3.18-2+deb13u2 amd64 Internet Protocol bandwidth measuring tool
disabled
enabled
active
RuntimeMaxUSec=1d
CPUQuotaPerSecUSec=500ms
MemoryMax=134217728
TasksMax=16
User=felhom-iperf3
LISTEN 0 4096 10.77.0.1:5201 0.0.0.0:* users:(("iperf3",pid=3011910,fd=3))
table inet filter {
chain input { # handle 1
type filter hook input priority filter; policy drop;
ct state established,related accept # handle 3
iif "lo" accept # handle 4
tcp dport 22 accept # handle 5
udp dport 443 accept # handle 6
tcp dport 8007 iifname "wg0" accept # handle 7
tcp dport 5201 iifname "wg0" ip saddr 10.77.0.0/24 accept # handle 13
ip protocol icmp accept # handle 8
meta l4proto ipv6-icmp accept # handle 9
}
}
10a11
> tcp dport 5201 iifname "wg0" ip saddr 10.77.0.0/24 accept # R-1247: felhom-iperf3 line test, tunnel only
# Reachability, 2026-10-24 ~06:20Z (bash /dev/tcp connect, 5-8 s timeout)
From DooPlex over the internet (its public address 37.191.56.x) to 167.233.158.164:
22 open (positive control: the method sees an open port)
5201 no answer
8007 no answer
From demo-hp's host (10.77.0.3) through wg-felhom to 10.77.0.1:
5201 open
8007 open (PBS, the existing tunnel service)
route: 10.77.0.1 dev wg-felhom src 10.77.0.3
# Protocol proof, 2026-10-24 ~06:31Z: a throwaway probe built from felhom-agent internal/linetest (Client, 4 streams,
# 10 s), copied to demo-hp's host /tmp, run against 10.77.0.1:5201 through wg-felhom, then deleted.
took 10.4s err=<nil> mbps=90.7 server_bytes=114032640 client_bytes=116046000 server_s=10.05
# Two at once (the second started 2 s later):
took 0.1s err=iperf3 server busy mbps=0.0 server_bytes=0 client_bytes=0 server_s=0.00
took 10.4s err=<nil> mbps=90.6 server_bytes=113901568 client_bytes=116629300 server_s=10.06
# After: 0 ltprobe processes; /tmp/ltprobe removed.