It is 2024, and IPv6 is an optional feature

Based on my metrics and logs, around 1 am on the 15th of May, 2023, my (cable modem-based) internet provider just stopped providing IPv6 addressing to me. According to the logs, the first indication of trouble was 03:34 or so, when odhcpd started logging messages about no default route being present (IPv6 one) and my home network hosts lost IPv6 connectivity subsequently. Then I looked at stored netflows: mstenber@fw ~>nfdump -R /flows/2024/05/ -t 2024/05/15.00:00:00 ipv6 2>&1 | egrep -v '(fe80|fd42|ff02):' Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows ... 2024-05-15 01:20:45.525 00:00:00.000 TCP 2001:14..79:115c.60513 -> 2a01:b7..01::2:4.443 1 84 1 The last failed attempt to even use IPv6 was apparently around 1:20. So it most likely broke two, three hours earlier than what was shown in the logs, and just the default route lifetime expired at the point when odhcpd started being unhappy. ...

22.5.2024 · 3 min · 579 words · Markus Stenberg

Securing Terraform, or, OpenTofu for the win?

Disclaimer: Sorry, still not related to my home network infrastructure, although I have one or two posts I want to write about later.. I have been thinking recently about how to deal with some personal resources I have in the cloud - mainly in Oracle Cloud thanks to their generous free tier. So far I’ve dealt with them manually doing click-ops in their GUI, but I have been trying to up my personal infra game so I started to think about how to make this not manual. ...

17.5.2024 · 4 min · 851 words · Markus Stenberg

Initial software setup of 2023 home router

As discussed in earlier post, the hardware choice was ultimately simple given the requirements. Even top-level software choice (Linux running Debian) did not seem particularly hard, but then started the hard part: coming up with reasonable design for what to run there. The requirements (2023 November) As I had 2,5GB ethernet ports (finally), my main Mac and NAS had to be directly connected to the box I used to have separate 2,5GB point-to-point between the two, but using simply one port in each instead of two made management slightly simpler and less error prone ’Internet-facing’ part would need to be relatively static and not touching Debian directly at all (instead, something bit more hardened would be the first ingress point) Both rootful and rootless containers would be nice to have The more containers the merrier - at this point I foresaw about half dozen useful containers something firewall/router-y facing internet DNS ad blocker (e.g. adguard, or pi-hole) reverse proxy to handle HTTPS (from both inside home, as well as from the internet) using proper certificates (e.g. caddy, traefik) home assistant (for home visibility and automation) jellyfin (for media) Infrastructure as Code (IaC from now on) What I did not choose to use Proxmox ( https://www.proxmox.com/en/ ) seems like the toy of the hour in the enthusiast circles. I am not quite sure why; perhaps it is the GUI. But the combination of GUI driven material (mostly), as well as not particularly good IaC (no first-party Terraform support - at the time there is third-party one in Proxmox Provider - Terraform Registry) did not make it particularly tempting for me. And besides, I was mostly planning to use pyinfra anyway. ...

3.5.2024 · 5 min · 854 words · Markus Stenberg

Playing with local LLMs

I have been somewhat interested about LLM performance for years, and it used to be that playing with them was quite painful (e.g. conda ecosystem in general sucks and it used to be that GPU was mandatory), but now with ollama ( https://ollama.com/ ) they’re quite trivial to benchmark across different devices without need for setting up complex stack. So this morning I indulged.. I have not yet gotten around to checking the numbers on a real GPU card, but here’s what I found out at my home (without starting gaming PC). ...

25.4.2024 · 3 min · 634 words · Markus Stenberg

Great times with home service security

Background I have not yet gotten around to writing a proper description of what I am running at home these days, but now I am having a brief unscheduled interlude to rant about how modern software is configured and deployed, and how it applies to hobbyist or not so enterprise setups. Example software of note in my home This list isn’t comprehensive, but I am trying to get to a point by picking few examples from my home setup, roughly in the order of appearance to the environment. ...

19.4.2024 · 5 min · 965 words · Markus Stenberg

The new (2023) home router hardware

Background and requirements I have been considering x86 based solutions for years. Ever since the 12th generation of Intel CPUs ( Alder Lake ) came out in 2021 I started to consider it seriously, but at least as of 2022 there was nothing on the market that fulfilled following requirements: enough CPU/GPU power to transcode 4k video if need be I wanted to get rid of separate HTPC cool enough to be passively cooled noise is not fun and I have ~fanless setup in my office (with exception of NAS and gaming PC, neither of which is most of the time running) at least 4x 2,5 gigabit ethernet ports I wanted to upgrade my home infra default from gigabit to 2,5 gigabit ports (and extra switch seemed unappealing at the time) At the time, the best possible option I could find out was Alder Lake-N based Intel N100 boxes, but they didn’t quite have the oomph (just 4 CPU cores) I wanted, and they were also reported to be quite hot. So I left the idea parked in 2022. The Chosen One is chosen (early October, 2023) We had some casual discussion on Aiven Slack channel sometime after summer of 2023 about home routers, and N305 cropped up. There had been large number of relatively recent (released within year) network devices using it, and it motivated me to go looking around the Amazon website for candidates after having read some reviews which stated that the devices were bit cooler than N100 based earlier models. ...

18.4.2024 · 5 min · 857 words · Markus Stenberg

Home networking and infrastructure evolution

I have had some sort of computers for a long time. Those are not particularly interesting, and I do not see myself bothering to write anything about them. However, the actual networking and infrastructure part is interesting as I have had to deal with computer infrastructure in various workplaces over the years, and reflecting on how I have set up my home over time brings up some lessons I have learned. ...

22.3.2024 · 6 min · 1097 words · Markus Stenberg

bhugo evaluation and fork choice

Thoughts This was originally a test of Zach-Johnson/bhugo: A tool to transform Bear notes into Hugo-compatible markdown files. It looks promising, as I don’t really want to write (much or any?) markdown by hand and if this lets me not do that, great. If not, I’ll nuke it from orbit. Here’s test embedded image: Another at default size: Missing features It is mildly unfortunate that the tool does not handle tags in other places of the text. However, I guess I can deal with that - there’ll be some (garbage) tags at end of the posts, unless I clean them up. I guess the random things in the end do not really matter, though, so this is ‘fine’. ...

15.3.2024 · 2 min · 305 words · Markus Stenberg

Yet another start of a blog - third time will be surely different

Please see my about page for more information about me, if interested. This first entry has been written by hand, but in I plan to make the blogging part of my journaling workflow in the future. I will also update this post (if I remember to) if my current journaling approach changes. I have written two other blogs in the past (first one about travel, and second one about bureaucracy in Finland) but I chose to keep those anonymous so no links will be provided (nor will they be updated, it has been years since I did anything to them). ...

15.3.2024 · 6 min · 1173 words · Markus Stenberg