Live data from Hacker News

Ask HN: Isolated virtualized networking learning env?

news.ycombinator.com

1–10 of 10 posts

Ask HN: Isolated virtualized networking learning env?

#1
In order to do some detailed hands-on learning of networking, I'm considering putting together the following type of environment. I'm seeking feedback about whether such things exist, whether this is a good idea, or perhaps if others know betters ways about this. I'd also appreciate pointers about how to do it - like maybe websites that explain which software runs at every step, what the common choices are, etc.

Specifically: the goal would be to model a small "internet" that would fit in as many isolated small VMs as could fit on a single 64GB ubuntu box (say, 30-ish hosts maybe at I would build this up incrementally, starting from one host talking to its local dhcp, and adding hosts little by little. I imagine this can be done in a reasonably straightforward way with a bunch of qemu command-lines, apt installs and configuration of the various servers in the path.

PS: I can see that there are systems like mininet and gns3 out there, but it seems like they introduce a layer above all the actual systems beneath. Maybe that's worthwhile, it's hard for me to tell.

Re: Ask HN: Isolated virtualized networking learning env?

#2
I think a simple linux box with docker/kvm/proxmox would be quite sufficient to start with. You can just add bridges between VMs / Containers,... advance to SDN, setup your own Firewalls and LoadBalancing VMs... and for watching network traffic you can use wireshark/tcpdump.or whatever, you csn even plug in monitoring or tracing proxies in between. When using LXC containers with proxmox the system should be quite sleek.

I would recommend to stay as open source as you can. (using pfsense, nginx... not commercial firewalls), play around with wireguard,... also use a IaC configuration tool like ansible or pyinfra do configure your stuff from.the beginning (so you can easily reconfigure stuff and make changes in scale)

Have fun!

Re: Ask HN: Isolated virtualized networking learning env?

#6

I think a simple linux box with docker/kvm/proxmox would be quite sufficient to start with. You can just add bridges between VMs / Containers,... advance to SDN, setup your own Firewalls and LoadBalancing VMs... and for watching network traffic you can use wireshark/tcpdump.or whatever, you csn even plug in monitoring or tracing proxies in between. When using LXC containers with proxmox the system should be quite sle…

thanks! yes all OSS is the goal so that I can ideally hack/re-build any component in the path.