teamd tips — authorized teamd / runner literacy
teamd helps authorized labs sample activebackup / lacp / loadbalance / broadcast runner literacy on hosts they own. Pair with bond-tips, bridge-tips, veth-tips, macvlan-tips, ip-link-tips. Prefer lab VMs — never rewrite foreign team configs without permission. Distinct from bond-tips (teamd runners ≠ classic bonding modes).
Snapshot
| Field | Value |
|---|---|
| Surface | teamd tip checklist (teamdctl / runner / ports) |
| Job | Authorized teamd / runner literacy |
| Peer | bond-tips |
| Peer | bridge-tips |
| Peer | veth-tips |
| Peer | ip-link-tips |
Tip checklist (authorized only)
- Confirm you may list/change teamd on the lab host (syllabus box you own; needs CAP_NET_ADMIN).
- Prefer documenting who / why / ticket before any
teamd -d -f— never rewrite production teams without change control. - Record short factual notes; quote short Evidence (team name + runner + port labels — never secrets).
- Optional: bond peer → bond-tips when the syllabus zooms on classic bonding vs teamd runners.
- Optional: bridge/veth peer → bridge-tips / veth-tips when the syllabus zooms on L2 topology vs team aggregation.
- Prefer disposable lab interfaces for drills; quote non-secret labels afterward as Evidence.
- Prefer
teamdctl <lab-team> state/ip -d link show type teamread-back — refuse unauthorized foreign-host cookbooks. - Stop at literacy — no attack or unauthorized network-bypass cookbooks.
Allowed framing
- Classroom labs reviewing teamd runners on disposable hosts.
- Binding short factual notes as Evidence (runner + ports — no secrets).
- Documenting expected vs observed activebackup / lacp / loadbalance / broadcast runners for authorized notes.
- Comparing teamd ↔ bond / bridge / veth / macvlan / ip-link peer tip pages under one binder.
- Testing syllabus-approved lab teams only when change control authorizes that drill on lab resources.
Scope we will not cover
- No crack/pirate/keygen via teamd.
- No intentional unauthorized team rewrite against foreign switches.
- No secret-theft or credential harvesting from teamd dumps.
- No cookbooks that use teamd as an attack step against production without authorization.
- No teamd framed as a network-bypass against systems you do not own.
Beginner path (authorized only)
- Obtain one syllabus-approved disposable lab host with teamd available.
- Prefer a throwaway lab interface (ip-link-tips, veth-tips) before touching real NICs.
- With authorization, list lab teams; quote selected runner/port labels as Evidence.
- Optional: peer tip pages above when the syllabus asks.
- Stop at literacy — no attack or unauthorized network-bypass cookbooks.
Practical notes for authorized labs
- teamd runners are the zoom here — keep Evidence labels distinct from bond-tips (teamd ≠ bond).
- Pair with bridge-tips when the syllabus zooms on team-as-bridge-port vs standalone aggregation.
teamdctl <lab-team> state viewis a great read-back drill — document selected runners without dumping unrelated privileged state.- Prefer documenting team names, runners, and port labels the syllabus authorized.
- Never commit teamd dumps with secrets or proprietary host inventories to git — even for labs.
FAQ-aligned refusals (quick)
- Foreign-host teamd → refuse.
- Unauthorized network-bypass / hostile-teaming attack cookbooks → refuse.
- Attack/credential-theft framing → refuse.
- Prefer authorized, redacted, secret-free Evidence.
- Use bond / bridge / veth / macvlan / ip-link peer tip pages when the syllabus asks.
- No crack or unauthorized-access framing.
For legal, authorized and educational use only.
FAQ
What is a "teamd tip" page in BinBench framing?
A checklist for authorized teamd Evidence (teamdctl / runner / ports on lab hosts) on hosts you own or were given syllabus access to — not a cookbook for rewriting foreign team configs without permission.
How does this relate to bond-tips / bridge-tips / veth-tips / macvlan-tips / ip-link-tips?
bond-tips covers classic bonding; bridge-tips covers bridge FDB/ports; veth-tips covers pairs; macvlan-tips covers MACVLAN; ip-link-tips covers link admin. This page zooms on a teamd runner tip checklist — it does not overwrite those pages.
Can I change teamd on networks I do not own?
No. Authorization first. BinBench will not publish unauthorized teamd drills against foreign switches or unlicensed uplinks.
Does this teach attack or network-bypass PoCs via teamd?
No. Mentions of attack/bypass appear only as refusals. Authorized literacy only — prefer lab VMs and redacted team/port labels. Never teach hostile teaming as an attack step.
Does this teach secret theft via teamd?
No. Never paste teamd dumps with secrets, foreign host inventories, or credential-bearing paths into notes. Prefer documenting team names, runners, and port labels only.