Hacker Newsnew | past | comments | ask | show | jobs | submit | brynx97's commentslogin

We have many BGP workarounds to avoid interconnection points with some of our tier 1 providers and DT because as our providers tell us, discussions with DT to add capacity are a non-starter. We've been relatively stable through a tier 2 provider through Lumen to DT though... for now. Very similar to Cogent in some regions.


I had challenges with split-DNS in my homelab k3s cluster trying to do this. I ended up just putting the apps in docker-compose on a VM that has static routes for my local homelab networks. I looked at tailscale to solve this since it has a kubernetes operator, but tailscale doesn't fit my use cases or work well with all of my devices.


> I had challenges with split-DNS in my homelab k3s cluster trying to do this. I ended up just putting the apps in docker-compose on a VM that has static routes for my local homelab networks. I looked at tailscale to solve this since it has a kubernetes operator, but tailscale doesn't fit my use cases or work well with all of my devices.

I don't need tails scale for this, seems like overkill.

I would like to better understand why my combination of marked packets and SOCK5 proxy are not fully working for certain UDP traffic. I also need to investigate if disabling ipv6 will help.

Using a VM or docker compose when I have k3s feels like admitting defeat with out understanding why.


To each their own. I mostly figured out why, and I did not want to create too much tech debt in my homelab with brittle split-DNS and PostUp/PostUp wireguard configurations. I already had ansible and templates setup to move back to the VM and docker-compose. I did learn a fair bit on CoreDNS, so that was a worthwhile experiment.


I didn't mean for you, I meant for me. I have truenas providing storage to my cluster but can easily just run a VM there.

I think you're approach is absolutely valid and didn't mean to seem like I was dismissive. Apologies.


> I would like to better understand why my combination of marked packets and SOCK5 proxy are not fully working for certain UDP traffic

I think UDP support for SOCKS5 proxies and clients is very spotty, especially beyond DNS. Probably some bugs out there. That might go for UDP in more or less esoteric container networking setups too...

If everything else fails, I've had the least hassle with socat, as well as just chucking workloads in full vm (if in container with --network=host) and using ip routes and policies.


Google gave a presentation on this that I think is helpful context for "why": https://nanog.org/events/nanog-94/content/5452/


Direct YouTube link: https://youtu.be/Yg-qV6Fktjw


https://support.mozilla.org/en-US/kb/firefox-dns-over-https

By extension, any application or device could rely on DoH instead of OS-provided or network-provider DNS servers. It is controversial, since it both helps individuals combat ISP or government censorship and also helps bad actors do bad things [1].

[1]https://en.wikipedia.org/wiki/DNS_over_HTTPS#Analysis_of_DNS...


DoH in Firefox is off by default (at least in every FF I've ever installed). And it's not hardcoded to any specific DNS server, you can use whichever provider you like.


My "status pages" are manually updated. It's a challenge to get updates out and troubleshoot, especially depending on org size and the underlying event.


What can't TrueNAS do that was listed in the parent comment?

I'd rather have the flexibility offered by TrueNAS, in addition to the robust community. Yes, Synology hardware is convienent in some use cases, but you can generally build yourself a more powerful and versatile home server with TrueNAS Scale. There is a learning curve, so it is not for everyone.


And for the learning curve folks there’s HexOS


DoH is possible on pihole using cloudflared-- https://docs.pi-hole.net/guides/dns/cloudflared/.

> The cloudflared binary will also work with other DoH providers.


Except these federal workers have a pension. It's complicated, and if this were done under previous administrations, something like this might be more well received. The current chaos just makes any rational decision making very difficult.


> these federal workers have a pension

Do they keep the pension if they take the buyout?


It is not a buyout. The memo and resignation template do not state buyout.

It is administrative leave with pay and benefits, but this leave only starts after your agency HR processes it from what I understand. It's more like a severance package.

https://www.opm.gov/fork


I wouldn't consider it an inconvenience in my kitchen. I'm highly interested in this. However, $700 is a lot. So, like others mentioned, I'd first like to see a demo video at the very least of it in action.

Different teas require different and specific temperatures for optimal results. A hot water tap cannot do this. I love the minimalism in the product design for this!


As an American living in Krakow for the last 15 months, Poland has near universal respect for pedestrian right of way. If there is even the possibility that a pedestrian needs to cross at a cross-walk, cars will slow and stop. In the US, this would never happen. When new Americans come through, we have to tell them very plainly they must stop for pedestrians everywhere, it is sacred that you let them cross. There are a lot of other related things, but in general, Poland in my mind places people above cars, so pedestrians are much safer walking around. The US could benefit greatly with this change in attitude, but I feel there is too much road rage and selfishness to accomodate this mindset on the road.


Just fyi, this is a very recent change of behaviour. As recently as ~10 years ago no one would ever stop for you in front of a pedestrian crossing in Poland. The law required you to stop but only if a pedestrian was already on the crossing - someone waiting on the side? That's their problem.

The law was changed to say that if someone is waiting in front of the crossing you have to stop(with fines for not doing so) and the behaviour has changed to what it is now - you are right, most Polish drivers will stop for you if you even look like you want to cross - but it wasn't like this not long ago.

It also caused a massive uproar across drivers, as if the sky was going to fall down if they have to stop for pedestrians - and yet, it's all fine.

So you know, maybe in US it also isn't a lost cause, maybe it could change for the better.


That must depends on location heavily.

While I have not visited the US extensively, I was very surprised when in California at how respectful drivers were with pedestrians, not just stopping for them, but stopping a few meters before the crossings.

Krakow was good as well, but not to that extent. In France, overall the rural part is pretty respectful, and the bigger the city, the worst it is (in Paris and Marseille, it's not great).

The absolute worst city I've been to in that regard was Naples, were motorists will not stop at crossings unless you actively step in their way.

So yeah, a lot of answers are going to vary drastically depending on what's the driving culture there. Universally motorists will stop at lights, because of that harsh possible consequences of running a light (getting T-boned), but stopping for pedestrians at crossings vary widly.


In the US this also happens, if, like in Krakow, you happen to try it in an actual old and dense city, like NYC.

It of course cannot happen in car-oriented suburbs, where you a driver can't even expect pedestrians to exist.


Suburbs in Poland still have pedestrians tho.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: