LinuX Containers (LXC) for Apache2 BackEnd Web Server.
- Author : O.Romain.Jaillet-ramey (orj AT lab3w.fr)
- Server version: Apache/2.4.62 (Debian)
- Server built: 2024-10-04T15:21:08
- Date Created : 2025-04-12
Network IPv6 + IPv4
Network : 2a01:cb1d:0005:af00:0000:0000:0000:0000/56
Network range : 2a01:cb1d:0005:af00:0000:0000:0000:0000-2a01:cb1d:0005:afff:ffff:ffff:ffff:ffff
we1.fr.lab3w.com
Network : 2a01:cb1d:0005:af00:1ab3:0116:0042:0000/112
Network range : 2a01:cb1d:0005:af00:1ab3:0116:0042:0000-2a01:cb1d:0005:af00:1ab3:0116:0042:ffff
Ethernet interfaces :
root@srv-fr.h1.we1:~ $ lshw -C network
*-network
description: Ethernet controller
produit: Virtio network device
fabriquant: Red Hat, Inc.
identifiant matériel: 12
information bus: pci@0000:00:12.0
version: 00
bits: 64 bits
horloge: 33MHz
fonctionnalités: msix bus_master cap_list rom
configuration: driver=virtio-pci latency=0
ressources: irq:10 portE/S:f060(taille=32) mémoire:fea52000-fea52fff mémoire:fd604000-fd607fff mémoire:fea00000-fea3ffff
*-virtio1 NON-RÉCLAMÉ
description: Virtual I/O device
identifiant matériel: 0
information bus: virtio@1
configuration: driver=virtio_net
-
eth0 : 2a01:cb1d:0005:af00:1ab3:0116:0042:0010/112
fc01::10:116:42:10/124 (WE1) LOC 10GiG ⇆ (vHost1) LOC 10GiG ⇆ (SRV) SPF+ 10GiG ⇆ (GATE)
10.116.42.10/24
# /etc/sysctl.conf
net.ipv6.conf.eth0.forwarding = 0
net.ipv6.conf.eth0.autoconf = 0
net.ipv6.conf.eth0.accept_redirects = 1
net.ipv6.conf.eth0.accept_ra = 1
net.ipv6.conf.eth0.proxy_ndp = 0
net.ipv6.conf.eth0.accept_source_route = 0
net.ipv6.conf.eth0.use_tempaddr = 0
root@srv-fr.h1.we1:~ $ ip -6 route show
2a01:cb1d:5:af00:1ab3:116:42:0/112 dev eth0 proto kernel metric 256 pref medium
fc01::10:116:42:0/112 dev eth0 proto kernel metric 256 pref medium
fe80::/64 dev eth0 proto kernel metric 256 pref medium
default via fc01::10:116:42:ffff dev eth0 metric 1024 pref medium
root@srv-fr.h1.we1:~ $ ip -6 address show
1: lo: mtu 65536 state UNKNOWN qlen 1000
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0@if12: mtu 1500 state UP qlen 1000
inet6 fc01::10:116:42:10/112 scope global
valid_lft forever preferred_lft forever
inet6 2a01:cb1d:5:af00:1ab3:116:42:10/112 scope global
valid_lft forever preferred_lft forever
inet6 fe80::216:3eff:febd:bf1a/64 scope link
valid_lft forever preferred_lft forever
root@srv-fr.h1.we1:~ $ netstat -lantup | grep LISTEN
tcp 0 0 10.116.42.10:80 0.0.0.0:* LISTEN 75104/apache2
tcp 0 0 10.116.42.10:443 0.0.0.0:* LISTEN 75104/apache2
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 17633/sshd: /usr/sb
tcp 0 0 127.0.0.1:80 0.0.0.0:* LISTEN 75104/apache2
tcp 0 0 127.0.0.1:443 0.0.0.0:* LISTEN 75104/apache2
tcp6 0 0 2a01:cb1d:5:af00:1a:443 :::* LISTEN 75104/apache2
tcp6 0 0 2a01:cb1d:5:af00:1ab:80 :::* LISTEN 75104/apache2
tcp6 0 0 :::22 :::* LISTEN 17633/sshd: /usr/sb
tcp6 0 0 ::1:80 :::* LISTEN 75104/apache2
tcp6 0 0 ::1:443 :::* LISTEN 75104/apache2
tcp6 0 0 fc01::10:116:42:10:443 :::* LISTEN 75104/apache2
tcp6 0 0 fc01::10:116:42:10:80 :::* LISTEN 75104/apache2
SLAN IPv6 Domain Controller testing and GUA : SRV-FR ⇆ SRV-CA
- OK : Responding of NET → SRV-CA LinuX Container DC1
- OK : Responding of SLA → SRV-CA LinuX Container DC1
root@srv-fr.h1.we1:~ $ nmap -sS -Pn -p 445 -6 2607:5300:60:9389:15:1:a:dc1
Starting Nmap 7.93 ( https://nmap.org ) at 2025-04-16 12:30 CEST
Nmap scan report for dc1.lab3w.fr (2607:5300:60:9389:15:1:a:dc1)
Host is up (0.10s latency).
PORT STATE SERVICE
445/tcp open microsoft-ds
Nmap done: 1 IP address (1 host up) scanned in 0.64 seconds
root@srv-fr.h1.we1:~ $ nmap -sS -Pn -p 445 -6 fc00:5300:60:9389:15:1:a:dc1
Starting Nmap 7.93 ( https://nmap.org ) at 2025-04-16 12:27 CEST
Nmap scan report for fc00:5300:60:9389:15:1:a:dc1
Host is up (0.11s latency).
PORT STATE SERVICE
445/tcp open microsoft-ds
Nmap done: 1 IP address (1 host up) scanned in 0.18 seconds
root@srv-fr.h1.we1:~ $ traceroute6 fc00:5300:60:9389:15:1:a:dc1
traceroute to fc00:5300:60:9389:15:1:a:dc1 (fc00:5300:60:9389:15:1:a:dc1), 30 hops max, 80 byte packets
1 fc01::10:116:42:ffff (fc01::10:116:42:ffff) 0.037 ms 0.012 ms *
2 fc01::10:116:0:252 (fc01::10:116:0:252) 0.165 ms * *
3 fc01::10:106:0:254 (fc01::10:106:0:254) 0.149 ms * *
4 fec0::1 (fec0::1) 108.057 ms 108.042 ms 107.947 ms
5 fc00:5300:60:9389:15:1:0:1 (fc00:5300:60:9389:15:1:0:1) 108.197 ms * *
6 fc00:5300:60:9389:15:1:a:dc1 (fc00:5300:60:9389:15:1:a:dc1) 108.371 ms * *
Tests from the local area :
C:\Users\ORJ>ipconfig
Configuration IP de Windows
Carte Ethernet Ethernet 2 :
Suffixe DNS propre à la connexion. . . :
Adresse IPv6. . . . . . . . . . . . . .: fc01::172:16:0:142
Adresse IPv6 de liaison locale. . . . .: fe80::e238:42f3:86f9:e949%4
Adresse IPv4. . . . . . . . . . . . . .: 172.16.0.142
Masque de sous-réseau. . . . . . . . . : 255.255.255.0
Passerelle par défaut. . . . . . . . . : fc01::172:16:0:254
172.16.0.254
C:\Users\ORJ>tracert 2a01:cb1d:5:af00:1ab3:116:42:10
Détermination de l’itinéraire vers 2a01:cb1d:5:af00:1ab3:116:42:10 avec un maximum de 30 sauts.
1 <1 ms <1 ms <1 ms fc01::172:16:0:254
2 <1 ms <1 ms <1 ms 2a01:cb1d:5:af00:1ab3:116:0:1
3 <1 ms * <1 ms 2a01:cb1d:5:af00:1ab3:116:42:10
Itinéraire déterminé.
C:\Users\ORJ>ping -6 2a01:cb1d:5:af00:1ab3:116:42:10
Envoi d’une requête 'Ping' 2a01:cb1d:5:af00:1ab3:116:42:10 avec 32 octets de données :
Réponse de 2a01:cb1d:5:af00:1ab3:116:42:10 : temps<1ms
Réponse de 2a01:cb1d:5:af00:1ab3:116:42:10 : temps<1ms
Réponse de 2a01:cb1d:5:af00:1ab3:116:42:10 : temps<1ms
Réponse de 2a01:cb1d:5:af00:1ab3:116:42:10 : temps<1ms
Statistiques Ping pour 2a01:cb1d:5:af00:1ab3:116:42:10:
Paquets : envoyés = 4, reçus = 4, perdus = 0 (perte 0%),
Durée approximative des boucles en millisecondes :
Minimum = 0ms, Maximum = 0ms, Moyenne = 0ms
C:\Users\ORJ>
IPv6 BackEnd Web Services Available :
Not to joke, because you never know with all this information, I'm adding the files /.well-known/security.txt to the default WebServers directory ; hoping you're not too mean.