<?xml version="1.0" encoding="UTF-8"?>
 <rdf:RDF xmlns="http://purl.org/rss/1.0/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:cc="http://web.resource.org/cc/" xmlns:syn="http://purl.org/rss/1.0/modules/syndication/" xmlns:admin="http://webns.net/mvcb/">
  <channel rdf:about="http://pinboard.in">
    <title>Pinboard (jm)</title>
    <link>https://pinboard.in/u:jm/public/</link>
    <description>recent bookmarks from jm</description>
    <items>
      <rdf:Seq>	<rdf:li rdf:resource="https://jimmysong.io/en/blog/sidecar-injection-iptables-and-traffic-routing/"/>
	<rdf:li rdf:resource="https://github.com/tylertreat/Comcast"/>
	<rdf:li rdf:resource="http://www.reddit.com/r/technology/comments/13kmvd/have_time_warner_internet_but_can_barely_stream/c750w8x"/>
	<rdf:li rdf:resource="https://github.com/mk-fg/graphite-metrics"/>
	<rdf:li rdf:resource="https://grepular.com/Punching_through_The_Great_Firewall_of_TMobile"/>
      </rdf:Seq>
    </items>
  </channel><item rdf:about="https://jimmysong.io/en/blog/sidecar-injection-iptables-and-traffic-routing/">
    <title>Sidecar injection and transparent traffic hijacking process in Istio explained in detail · Jimmy Song</title>
    <dc:date>2021-04-29T13:11:00+00:00</dc:date>
    <link>https://jimmysong.io/en/blog/sidecar-injection-iptables-and-traffic-routing/</link>
    <dc:creator>jm</dc:creator><description><![CDATA[A solid explanation of Istio's traffic-hijacking mode using iptables and its sidecar pattern]]></description>
<dc:subject>kubernetes iptables sidecars istio service-mesh networking k8s eks routing</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:jm/b:3b0dfec4d9d9/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:kubernetes"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:iptables"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:sidecars"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:istio"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:service-mesh"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:networking"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:k8s"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:eks"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:routing"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://github.com/tylertreat/Comcast">
    <title>Comcast</title>
    <dc:date>2015-01-27T16:15:05+00:00</dc:date>
    <link>https://github.com/tylertreat/Comcast</link>
    <dc:creator>jm</dc:creator><description><![CDATA[Nice wrapper for 'tc' and 'netem', for network latency/packet loss emulation]]></description>
<dc:subject>networking testing linux tc netem latency packet-loss iptables</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:jm/b:99e8ef481d50/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:networking"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:testing"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:linux"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:tc"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:netem"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:latency"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:packet-loss"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:iptables"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="http://www.reddit.com/r/technology/comments/13kmvd/have_time_warner_internet_but_can_barely_stream/c750w8x">
    <title>How to avoid crappy ISP caches when viewing YouTube video</title>
    <dc:date>2013-08-21T11:53:18+00:00</dc:date>
    <link>http://www.reddit.com/r/technology/comments/13kmvd/have_time_warner_internet_but_can_barely_stream/c750w8x</link>
    <dc:creator>jm</dc:creator><description><![CDATA[Must give this a try when I get home -- I frequently have latency problems watching YT on my UPC connection, and I bet they have a crappily-managed, overloaded cache box on their network.]]></description>
<dc:subject>streaming youtube caching isps caches firewalls iptables hacks video networking</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:jm/b:26bea514dd34/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:streaming"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:youtube"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:caching"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:isps"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:caches"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:firewalls"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:iptables"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:hacks"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:video"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:networking"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://github.com/mk-fg/graphite-metrics">
    <title>graphite-metrics</title>
    <dc:date>2013-06-14T10:39:37+00:00</dc:date>
    <link>https://github.com/mk-fg/graphite-metrics</link>
    <dc:creator>jm</dc:creator><description><![CDATA[<blockquote>metric collectors for various stuff not (or poorly) handled by other monitoring daemons

Core of the project is a simple daemon (harvestd), which collects metric values and sends them to graphite carbon daemon (and/or other configured destinations) once per interval. Includes separate data collection components ("collectors") for processing of:

/proc/slabinfo for useful-to-watch values, not everything (configurable).
/proc/vmstat and /proc/meminfo in a consistent way.
/proc/stat for irq, softirq, forks.
/proc/buddyinfo and /proc/pagetypeinfo (memory fragmentation).
/proc/interrupts and /proc/softirqs.
Cron log to produce start/finish events and duration for each job into a separate metrics, adapts jobs to metric names with regexes.
Per-system-service accounting using systemd and it's cgroups.
sysstat data from sadc logs (use something like sadc -F -L -S DISK -S XDISK -S POWER 60 to have more stuff logged there) via sadf binary and it's json export (sadf -j, supported since sysstat-10.0.something, iirc).
iptables rule "hits" packet and byte counters, taken from ip{,6}tables-save, mapped via separate "table chain_name rule_no metric_name" file, which should be generated along with firewall rules (I use this script to do that).</blockquote>

Pretty exhaustive list of system metrics -- could have some interesting ideas for Linux OS-level metrics to monitor in future.]]></description>
<dc:subject>graphite monitoring metrics unix linux ops vm iptables sysadmin</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:jm/b:800442dc36d1/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:graphite"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:monitoring"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:metrics"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:unix"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:linux"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:ops"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:vm"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:iptables"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:sysadmin"/>
</rdf:Bag></taxo:topics>
</item>
<item rdf:about="https://grepular.com/Punching_through_The_Great_Firewall_of_TMobile">
    <title>Punching through The Great Firewall of T-Mobile</title>
    <dc:date>2012-01-05T22:41:48+00:00</dc:date>
    <link>https://grepular.com/Punching_through_The_Great_Firewall_of_TMobile</link>
    <dc:creator>jm</dc:creator><description><![CDATA[well, this is bizarre -- it seems T-Mobile UK are blocking encrypted email submission and OpenVPN traffic in their mobile internet access products.  Why?  Who knows -- but at least filtering RST packets evades the block, as in the Great Firewall of China]]></description>
<dc:subject>china filtering rst internet iptables t-mobile uk payg mobile-internet</dc:subject>
<dc:source>https://pinboard.in/</dc:source>
<dc:identifier>https://pinboard.in/u:jm/b:c53894cccffc/</dc:identifier>
<taxo:topics><rdf:Bag>	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:china"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:filtering"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:rst"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:internet"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:iptables"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:t-mobile"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:uk"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:payg"/>
	<rdf:li rdf:resource="https://pinboard.in/u:jm/t:mobile-internet"/>
</rdf:Bag></taxo:topics>
</item>
</rdf:RDF>