← Feed

Posts

• Post #686196

  Put some information about my Autonomous System, connectivity and peering policy on my website: https://hofstede.it/as201379.html #internetrouting #networking #routing #bgp #sovereignty #freebsd #ipv6

• Post #683628

  Part 2 of the FreeBSD Foundationals series is out! "ZFS - The Last Filesystem You'll Ever Need." We go from the philosophy of silent data corruption to practical, battle-tested data management. Covers pools, datasets, why you shouldn't blindly add L2ARC, native encryption, and using sanoid/syncoid to turn backups into a solved problem. If you've ever lost data and decided "never again," this is for you. :freebsd: https://blog.hofste...

• Post #681009

  Put some information about my Autonomous System, connectivity and peering policy on my website: https://hofstede.it/as201379.html #internetrouting #networking #routing #bgp #sovereignty #freebsd

• Post #671557

  You just provisioned a fresh Linux server. Within minutes, the SSH brute-force bots will arrive. There are too many ways to build a firewall in Linux. I wrote a practical guide to the four major tools: iptables, nftables, firewalld, and ufw, including their mental models and deployable configs. Also includes a deep dive into the "Docker Trap" (why Docker silently bypasses your default-deny rules) and how to fix it. (And yes, I still spend the intro and conclusion reminding e...

• Post #600816

  Our Mastodon instance "burningboard.net" now internally **ONLY** uses the Internet Protocol in Version 6. I did successfully migrate away from any RFC1918 addresses in any of the internal infrastructure connections. Nginx -> Mastodon: IPv6 Mastodon -> PostgreSQL: IPv6 Mastodon -> Opensearch: IPv6 Mastodon -> Sidekiq: IPv6 Mastodon -> Loki: IPv6 Sidekiq -> PostgreSQL: IPv6 Prometheus -> Mastodon: IPv6 All using globally routed unique addresses and proper routing a...

• Post #598035

  @FiLiS@mastodon.social Never tried that. I don't use any classic jails anymore as they're not as easy to firewall with pf and are generally less flexible.

• Post #597957

  @FiLiS@mastodon.social Yes, I run nginx inside a VNET Jail. root@burningboard:/home/chofstede # jexec nginx pkg info | grep nginx nginx-1.28.2_11,3 Robust and small WWW server root@burningboard:/home/chofstede # jexec nginx cat /usr/local/etc/nginx/vhosts/mastodon.conf | grep -E 'quic|h3=' listen 443 quic reuseport; listen [::]:443 quic reuseport; add_header Alt-Svc 'h3=":443"; ma=86400' always;

• Post #567875

  Samstags zu IKEA, weil die Dame des Hauses unbedingt Zimmerpflanzen und Lampen von dort möchte… Am liebsten würde ich mich ja im Smållland abgeben lassen und ins Bällebad hüpfen. Drückt mir die Daumen, dass wir aus dem überfüllten Labyrinth wieder raus finden werden 😂 #ikea #samstag

• Post #567781

  @foxhkron@cybre.club ich kaufe Hefeflocken inzwischen in 5kg Beuteln 😅😂

• Post #521302

  @effken_von_nebenan@mastodon.social @Carsten_O@neander.social Es reduziert immer noch den Netzbezug

• Post #514588

  Ich habe hier jetzt mehrfach sinngemäß gelesen, "wer noch mit Öl/Gas heizt, sei ja selbst schuld". Das blendet nur eben die Lebensrealität der Mehrheit der Leute schlicht und ergreifend aus. Mehr als die Hälfte (53 % laut Statistischem Bundesamt) der Menschen in Deutschland wohnt in einem Mietverhältnis und hat eben keinen Einfluss auf die Art der Wärmeversorgung. Rund drei Viertel (ca. 72 %) der Wohnungen in Deutschland werden laut Daten des Zensus 2022 und des BDEW mit Öl...

• Post #493538

  @subnetspider@mastodon.bsd.cafe Yep, classic jails. I mentioned them briefly and in the comparisson table of the article :-)

• Post #491451

  New series: FreeBSD Foundationals Part 1 is about Jails - specifically VNET Jails. What epair interfaces actually are (virtual ethernet cables), how bridges tie them together, why the host is basically a router for your jails, and what devfs rulesets control. Covers the full lifecycle from jail.conf through pf firewalling with NAT/RDR for IPv4 and direct routing for IPv6. Plus the gotchas that'll cost you hours if nobody warns you. Not a beginner tutorial, hardcore details. The useful mid...

• Post #437089

  @benjamineskola@hachyderm.io Yeah, that image was AI generated. had not put much thought about it. I replaced it with a screenshot now.

• Post #436779

  New post: Neovim Crash Course for Sysadmins Not a beginner's guide. This covers the things you still get wrong after years of Vim - efficient navigation, why your paste lands in the wrong place (and the one-key fix), YAML indentation workflows, quick macros, and what Neovim's LSP actually gives you for infrastructure work. Written for people who edit configs and playbooks all day. https://blog.hofstede.it/neovim-crash-course-for-sysadmins-the-20-that-solve-80-of-the-pain/ #neovim #vi...

• Post #423596

  @AlienJay@burningboard.net @tux@burningboard.net My next article is going to be something simpler. A practical guide on the vim editor with nice tipps and tricks for yaml editing and efficient text manipulation 🙂

• Post #421762

  I just published a new guide on evolving a single BGP router into a multi-homed, two-PoP network using FreeBSD, FRR, and PF. - Native peering on Vultr + 3 GRE transits - Tying it together with iBGP - Why stateful firewalls break asymmetric transit (and how to fix it) All for ~€18/mo. Read it here: https://blog.hofstede.it/running-your-own-as-going-multi-homed-with-ibgp-and-three-transits/ #FreeBSD #BGP #IPv6 #Networking #Sysadmin #FRR #Homelab

• Post #417132

  @justincrozer@fosstodon.org Better to avoid closed ecosystems entirely and just "keep your options open" 🙂 #opensource

• Post #411796

  @jwildeboer@social.wildeboer.net Danke für dein Engagement!!

• Post #404228

  Got my AS201379 (2a06:9801:1c::/48) well connected to European networks. RIPE Atlas measurements are pretty satisfying now 🙂 My website (hofstede.it / blog.hofstede.it) is reachable in 48hrs and reasonable ingress and egress paths 🙂 Very, VERY pleased with the result! Next stop: Own NAT64 setup 🙂 Big thanks to @UnderEu@mas.to , @tschaefer@ipv6.social and @Hypopheralcus@det.social for giving me the Atlas credits for Measurements! Highly appreciated! #ipv6 #networking #it #ripe #bgp

• Post #379503

  @tschaefer@ipv6.social Ne, passt. Aber danke für dein Angebot! Ich habe alle meine Measurements durchführen können und genau die Erkentnisse daraus erlangen können, die ich brauchte. Muss meinen Router in Ashburn noch mal treten für das Routing auf der anderen Seite des großen Wassers :-)

• Post #379214

  @Hypopheralcus@det.social Vielen Dank!! :-)

• Post #379213

  @bitstacker@23.social Thanks A LOT!! 🙂

• Post #379116

  @Hypopheralcus@det.social 10k? Das würde mir schon echt weiter helfen. Ripe Acct. ist christian@hofstede.it

• Post #379019

  Any chance that someone might have a leftover RIPE ATLAS credits? I currently do some experiments with the IPv6 routing of my AS201379 and being able to do measurements on Atlas would be sooooo helpful right now. #fedihelp #ripe #ripencc #ripeatlas #ipv6 #networking

• Post #361196

  @jamesog@mastodon.social the newer http2; directive

• Post #361185

  @jamesog@mastodon.social http2 is enabled as well on all http vhosts.

• Post #361132

  Frustrierender Talk heute Morgen mit als migrantisch gelesener Nachbarin zur RLPWahl: Die rechtsextreme #fckAfd macht ihr zwar „Bauchschmerzen“ sei aber wegen Wirtschafts/Existenzängsten „notwendig“. Angebliche grüne Wirtschaftspolitik würde uns alle in die Armut stürzen. Im weiteren Verlauf kamen dann 1:1 die klassischen Talking Points des fossilen Rollbacks: Erhalt von Gasheizungen, Sorge um die BASF in Ludwigshafen und der Ruf nach Pipelines nach Russland. Es tut weh, live mitzuerleben, wi...

• Post #350798

  Spent way too long getting HTTP/3 working on FreeBSD with nginx, so I wrote it all up. The highlights: stock OpenSSL silently breaks QUIC at the HTTP/3 framing layer (the TLS handshake succeeds, so openssl s_client lies to you). eBPF worker routing doesn't exist on FreeBSD. And if nginx is in a jail with IPv4 NAT, a pass rule for UDP 443 is useless without a matching rdr. New post: https://blog.hofstede.it/http3-on-freebsd-getting-quic-working-with-nginx-in-a-bastille-jail/ #FreeBSD #ngin...

• Post #348871

  Our Mastodon instance burningboard.net now supports HTTP/3 (QUIC). HTTP/3 replaces TCP with UDP as its transport protocol, offering lower latency and better performance, especially on lossy or low-bandwidth networks. If you encounter any unexpected issues, feel free to drop me a message 🙂 #mastodon #mastoadmin #http3 #quic