← Feed

Posts

• View post

  Put some information about my Autonomous System, connectivity and peering policy on my website: https://hofstede.it/as201379.html #internetrouting #networking #routing #bgp #sovereignty #freebsd #ipv6

• View post

  Part 2 of the FreeBSD Foundationals series is out! "ZFS - The Last Filesystem You'll Ever Need." We go from the philosophy of silent data corruption to practical, battle-tested data management. Covers pools, datasets, why you shouldn't blindly add L2ARC, native encryption, and using sanoid/syncoid to turn backups into a solved problem. If you've ever lost data and decided "never again," this is for you. :freebsd: https://blog.hofste...

• View post

  Put some information about my Autonomous System, connectivity and peering policy on my website: https://hofstede.it/as201379.html #internetrouting #networking #routing #bgp #sovereignty #freebsd

• View post

  You just provisioned a fresh Linux server. Within minutes, the SSH brute-force bots will arrive. There are too many ways to build a firewall in Linux. I wrote a practical guide to the four major tools: iptables, nftables, firewalld, and ufw, including their mental models and deployable configs. Also includes a deep dive into the "Docker Trap" (why Docker silently bypasses your default-deny rules) and how to fix it. (And yes, I still spend the intro and conclusion reminding e...

• View post

  Our Mastodon instance "burningboard.net" now internally **ONLY** uses the Internet Protocol in Version 6. I did successfully migrate away from any RFC1918 addresses in any of the internal infrastructure connections. Nginx -> Mastodon: IPv6 Mastodon -> PostgreSQL: IPv6 Mastodon -> Opensearch: IPv6 Mastodon -> Sidekiq: IPv6 Mastodon -> Loki: IPv6 Sidekiq -> PostgreSQL: IPv6 Prometheus -> Mastodon: IPv6 All using globally routed unique addresses and proper routing a...

• View post

  @FiLiS@mastodon.social Never tried that. I don't use any classic jails anymore as they're not as easy to firewall with pf and are generally less flexible.

• View post

  @FiLiS@mastodon.social Yes, I run nginx inside a VNET Jail. root@burningboard:/home/chofstede # jexec nginx pkg info | grep nginx nginx-1.28.2_11,3 Robust and small WWW server root@burningboard:/home/chofstede # jexec nginx cat /usr/local/etc/nginx/vhosts/mastodon.conf | grep -E 'quic|h3=' listen 443 quic reuseport; listen [::]:443 quic reuseport; add_header Alt-Svc 'h3=":443"; ma=86400' always;

• View post

  Samstags zu IKEA, weil die Dame des Hauses unbedingt Zimmerpflanzen und Lampen von dort möchte… Am liebsten würde ich mich ja im Smållland abgeben lassen und ins Bällebad hüpfen. Drückt mir die Daumen, dass wir aus dem überfüllten Labyrinth wieder raus finden werden 😂 #ikea #samstag

• View post

  @foxhkron@cybre.club ich kaufe Hefeflocken inzwischen in 5kg Beuteln 😅😂

• View post

  @effken_von_nebenan@mastodon.social @Carsten_O@neander.social Es reduziert immer noch den Netzbezug

• View post

  Ich habe hier jetzt mehrfach sinngemäß gelesen, "wer noch mit Öl/Gas heizt, sei ja selbst schuld". Das blendet nur eben die Lebensrealität der Mehrheit der Leute schlicht und ergreifend aus. Mehr als die Hälfte (53 % laut Statistischem Bundesamt) der Menschen in Deutschland wohnt in einem Mietverhältnis und hat eben keinen Einfluss auf die Art der Wärmeversorgung. Rund drei Viertel (ca. 72 %) der Wohnungen in Deutschland werden laut Daten des Zensus 2022 und des BDEW mit Öl...

• View post

  @subnetspider@mastodon.bsd.cafe Yep, classic jails. I mentioned them briefly and in the comparisson table of the article :-)

• View post

  New series: FreeBSD Foundationals Part 1 is about Jails - specifically VNET Jails. What epair interfaces actually are (virtual ethernet cables), how bridges tie them together, why the host is basically a router for your jails, and what devfs rulesets control. Covers the full lifecycle from jail.conf through pf firewalling with NAT/RDR for IPv4 and direct routing for IPv6. Plus the gotchas that'll cost you hours if nobody warns you. Not a beginner tutorial, hardcore details. The useful mid...

• View post

  @benjamineskola@hachyderm.io Yeah, that image was AI generated. had not put much thought about it. I replaced it with a screenshot now.

• View post

  New post: Neovim Crash Course for Sysadmins Not a beginner's guide. This covers the things you still get wrong after years of Vim - efficient navigation, why your paste lands in the wrong place (and the one-key fix), YAML indentation workflows, quick macros, and what Neovim's LSP actually gives you for infrastructure work. Written for people who edit configs and playbooks all day. https://blog.hofstede.it/neovim-crash-course-for-sysadmins-the-20-that-solve-80-of-the-pain/ #neovim #vi...

• View post

  @AlienJay@burningboard.net @tux@burningboard.net My next article is going to be something simpler. A practical guide on the vim editor with nice tipps and tricks for yaml editing and efficient text manipulation 🙂

• View post

  I just published a new guide on evolving a single BGP router into a multi-homed, two-PoP network using FreeBSD, FRR, and PF. - Native peering on Vultr + 3 GRE transits - Tying it together with iBGP - Why stateful firewalls break asymmetric transit (and how to fix it) All for ~€18/mo. Read it here: https://blog.hofstede.it/running-your-own-as-going-multi-homed-with-ibgp-and-three-transits/ #FreeBSD #BGP #IPv6 #Networking #Sysadmin #FRR #Homelab

• View post

  @jwildeboer@social.wildeboer.net Danke für dein Engagement!!

• View post

  Got my AS201379 (2a06:9801:1c::/48) well connected to European networks. RIPE Atlas measurements are pretty satisfying now 🙂 My website (hofstede.it / blog.hofstede.it) is reachable in 48hrs and reasonable ingress and egress paths 🙂 Very, VERY pleased with the result! Next stop: Own NAT64 setup 🙂 Big thanks to @UnderEu@mas.to , @tschaefer@ipv6.social and @Hypopheralcus@det.social for giving me the Atlas credits for Measurements! Highly appreciated! #ipv6 #networking #it #ripe #bgp

• View post

  @Hypopheralcus@det.social Vielen Dank!! :-)

• View post

  Any chance that someone might have a leftover RIPE ATLAS credits? I currently do some experiments with the IPv6 routing of my AS201379 and being able to do measurements on Atlas would be sooooo helpful right now. #fedihelp #ripe #ripencc #ripeatlas #ipv6 #networking

• View post

  @jamesog@mastodon.social the newer http2; directive

• View post

  @jamesog@mastodon.social http2 is enabled as well on all http vhosts.

• View post

  Frustrierender Talk heute Morgen mit als migrantisch gelesener Nachbarin zur RLPWahl: Die rechtsextreme #fckAfd macht ihr zwar „Bauchschmerzen“ sei aber wegen Wirtschafts/Existenzängsten „notwendig“. Angebliche grüne Wirtschaftspolitik würde uns alle in die Armut stürzen. Im weiteren Verlauf kamen dann 1:1 die klassischen Talking Points des fossilen Rollbacks: Erhalt von Gasheizungen, Sorge um die BASF in Ludwigshafen und der Ruf nach Pipelines nach Russland. Es tut weh, live mitzuerleben, wi...

• View post

  Spent way too long getting HTTP/3 working on FreeBSD with nginx, so I wrote it all up. The highlights: stock OpenSSL silently breaks QUIC at the HTTP/3 framing layer (the TLS handshake succeeds, so openssl s_client lies to you). eBPF worker routing doesn't exist on FreeBSD. And if nginx is in a jail with IPv4 NAT, a pass rule for UDP 443 is useless without a matching rdr. New post: https://blog.hofstede.it/http3-on-freebsd-getting-quic-working-with-nginx-in-a-bastille-jail/ #FreeBSD #ngin...

• View post

  Our Mastodon instance burningboard.net now supports HTTP/3 (QUIC). HTTP/3 replaces TCP with UDP as its transport protocol, offering lower latency and better performance, especially on lossy or low-bandwidth networks. If you encounter any unexpected issues, feel free to drop me a message 🙂 #mastodon #mastoadmin #http3 #quic

• View post

  @CptCheesyCrust@mastodon.social Ok, bei mir ist es ein Neueinzug .. Bin mal gespannt, sie haben mir geschrieben, dass die Versorgung am 03.03. beginnen soll.

• View post

  Ich bin letzte Woche umgezogen. Falls jemand im Raum 67 (Ludwigshafen am Rhein) oder 68 (Mannheim) in der nächsten Zeit gut erhaltene Umzugskartons 📦 brauchen kann, ich habe etwa 30-40 gut erhaltene in 3 Größen (Book, L und XL) im Keller, die ich verschenken würde. #fedigive #umzug #verschenken #mannheim #ludwigshafen

• View post

  The landing page of our Mastodon instance burningboard.net is now bilingual, offering not only German but also English for our international visitors. It features introductions to Mastodon and the Fediverse, helpful information for newcomers and people coming from the "birdsite" as well as information about our philosophy, rules and more. See it here: https://meta.burningboard.net #mastodon #fediverse #mastoadmin #website #international #burningboard

• View post

  @satobi@burningboard.net @tux@burningboard.net Falls das Problem weiter besteht: Welche iOS für Mastodon Version nutzt du denn? Gibt es evtl. ein Update (aktuell wäre 2026.1). Es gibt bekannte Bugs in älteren Versionen bezüglich Feed-Pagination und Refresh Was auch helfen kann: App vollständig abmelden, aus dem iOS-Multitasking entfernen, neu starten, neu anmelden. Das setzt den lokalen App-State zurück. Falls das nicht hilft: In den iOS-Einstellungen unter der App den gespeicherten Speicher...