Pinboard (jm)
https://pinboard.in/u:jm/public/
recent bookmarks from jmSky Broadband Users Accidentally Blocked from UK NHS Website and App - ISPreview UK2026-06-26T11:37:05+00:00
https://www.ispreview.co.uk/index.php/2026/06/sky-broadband-users-accidentally-blocked-from-uk-nhs-website-and-app.html
jmcustomers of Sky Broadband reported that they were unable to access the main NHS website and app earlier in the week, seemingly after the internet provider accidentally managed to block it. But Sky has since suggested that the fault might have been with the NHS. The issue prevented people being able to access their medical data and manage appointments etc.
The problem appears to have occurred on Tuesday morning (23rd June 2026) and was reported across social media (X, Facebook etc.), including via threads on Reddit and Sky’s Community Forum. Customers initially thought the problem was with the NHS itself, but the health service instead pointed the finger of blame at the ISP (no other internet providers seem to have experienced the issue).
(via gwire, who notes that all DNS traffic for Sky customers is filtered...)]]>sky broadband isps uk networking via:gwire dnshttps://pinboard.in/https://pinboard.in/u:jm/b:6c756c58cb03/Best Practices for TCP Connection Management on EC22026-06-02T10:49:57+00:00
https://aws.amazon.com/blogs/networking-and-content-delivery/best-practices-for-tcp-connection-management-on-ec2/
jmnetworking protocols tcp idle-timeouts aws architecture nitro conntrack idle-connectionshttps://pinboard.in/https://pinboard.in/u:jm/b:d3963371f1ff/"Invisible" bend insensitive bidi fiber2026-05-05T09:19:23+00:00
https://www.reddit.com/r/homelab/comments/1sz9li4/invisible_bend_insensitive_bidi_fiber_is_amazing/
jm "invisible" bend insensitive fiber (G.657.A2 / G.657.B3). It's under a millimeter in diameter and basically vanishes into corners and base board crevices. From more than a meter away is't completely unnoticeable. Together with a pair of bidirectional SFP transceivers this makes an amazing retrofit option for locations where laying new runs is not an option. ]]>10gbps networking home fibre fiber wiring via:itchttps://pinboard.in/https://pinboard.in/u:jm/b:2cdebcc39bfd/New 10 GbE USB adapters are cooler, smaller, cheaper - Jeff Geerling2026-04-27T08:45:23+00:00
https://www.jeffgeerling.com/blog/2026/new-10-gbe-usb-adapters-cooler-smaller-cheaper/
jmethernet usb networking hardware via:hn reviews 10gbehttps://pinboard.in/https://pinboard.in/u:jm/b:14e53f7877ac/Iran is building a two-tier internet that locks 85 million citizens out of the global web2026-01-26T12:03:59+00:00
https://restofworld.org/2026/iran-blackout-tiered-internet/
jmGovernment spokesperson Fatemeh Mohajerani confirmed international access will not be restored until at least late March. Filterwatch, which monitors Iranian internet censorship from Texas, cited government sources, including Mohajerani, saying access will “never return to its previous form.”
The system is called Barracks Internet, according to confidential planning documents obtained by Filterwatch. Under this architecture, access to the global web will be granted only through a strict security whitelist.
The idea of tiered internet access is not new in Iran. Since at least 2013, the regime has quietly issued “white SIM cards,” giving unrestricted global internet access to approximately 16,000 people, while 85 million citizens remain cut off.
]]>barracks-internet iran censorship internet networkinghttps://pinboard.in/https://pinboard.in/u:jm/b:d680eaa84ade/censorship circumvention via VPN2025-09-02T15:25:29+00:00
https://news.ycombinator.com/item?id=45055604
jmcensorship vpns networking privacy politicshttps://pinboard.in/https://pinboard.in/u:jm/b:27c9c09d5677/Debugging Azure Networking for Elastic Cloud Serverless2025-06-10T08:46:06+00:00
https://www.elastic.co/observability-labs/blog/debugging-aks-packet-loss
jm
Elastic's Site Reliability Engineering team (SRE) observed unstable throughput and packet loss in Elastic Cloud Serverless running on Azure Kubernetes Service (AKS). After investigation, we identified the primary contributing factors to be RX ring buffer overflows and kernel input queue saturation on SR-IOV interfaces. To address this, we increased RX buffer sizes and adjusted the netdev backlog, which significantly improved network stability.
]]>sr-iov linux networking bugs azure debugging ops sre drivershttps://pinboard.in/https://pinboard.in/u:jm/b:aac45eb89c4b/How "Residential Proxies" work2025-06-10T08:33:30+00:00
https://jan.wildeboer.net/2025/04/Web-is-Broken-Botnet-Part-2/
jmscraping apps mobile networking residential-proxies proxies botnetshttps://pinboard.in/https://pinboard.in/u:jm/b:351f8a81655f/GL-MT60002025-03-15T20:46:43+00:00
https://store-eu.gl-inet.com/products/flint-2-gl-mt6000-wi-fi-6-high-performance-home-router
jmopenwrt devices hardware routers ap networking wireguardhttps://pinboard.in/https://pinboard.in/u:jm/b:b4a69fb44930/AWS WAF adds JA4 fingerprinting2025-03-07T09:52:47+00:00
https://aws.amazon.com/about-aws/whats-new/2025/03/aws-waf-ja4-fingerprinting-aggregation-ja3-ja4-fingerprints-rate-based-rules/
jmA JA4 TLS client fingerprint contains a 36-character long fingerprint of the TLS Client Hello which is used to initiate a secure connection from clients. The fingerprint can be used to build a database of known good and bad actors to apply when inspecting HTTP[S] requests. These new features enhance your ability to identify and mitigate sophisticated attacks by creating more precise rules based on client behavior patterns. By leveraging both JA4 and JA3 fingerprinting capabilities, you can implement robust protection against automated threats while maintaining legitimate traffic flow to your applications.
]]>fingerprinting http https tls ja3 ja4 inspection networking firewalls waf webhttps://pinboard.in/https://pinboard.in/u:jm/b:383a5952e2e9/DeepSeek’s smallpond2025-03-03T10:36:11+00:00
https://mehdio.substack.com/p/duckdb-goes-distributed-deepseeks
jm
DeepSeek is introducing smallpond, a lightweight open-source framework, leveraging DuckDB to process terabyte-scale datasets in a distributed manner. Their benchmark states: “Sorted 110.5TiB of data in 30 minutes and 14 seconds, achieving an average throughput of 3.66TiB/min.”
The benchmark on 100TB mentioned is actually using the custom DeepSeek 3FS framework: Fire-Flyer File System is a high-performance distributed file system designed to address the challenges of AI training and inference workloads. [...] compared to AWS S3, 3FS is built for speed, not just storage. While S3 is a reliable and scalable object store, it comes with higher latency and eventual consistency [...] 3FS, on the other hand, is a high-performance distributed file system that leverages SSDs and RDMA networks to deliver low-latency, high-throughput storage. It supports random access to training data, efficient checkpointing, and strong consistency.
So -- this is very impressive. However!
1. RDMA (remote direct memory access) networking for a large-scale storage system! That is absolutely bananas. I wonder how much that benchmark cluster cost to run... still, this is a very interesting technology for massive-scale super-low-latency storage. https://www.definite.app/blog/smallpond also notes "3FS achieves a remarkable read throughput of 6.6 TiB/s on a 180-node cluster, which is significantly higher than many traditional distributed file systems."
2. it seems smallpond operates strictly with partition-level parallelism, so if your data isn't partitioned in exactly the right way, you may still find your query bottlenecked:
Smallpond’s distribution leverages Ray Core at the Python level, using partitions for scalability. Partitioning can be done manually, and Smallpond supports:
- Hash partitioning (based on column values);
- Even partitioning (by files or row counts);
- Random shuffle partitioning
As I understand it, Trino has a better idea of how to scale out queries across worker nodes even without careful pre-partitioning, which is handy.]]>data-lakes deepseek duckdb rdma networking 3fs smallpond trino rayhttps://pinboard.in/https://pinboard.in/u:jm/b:694c7fc28aa3/tsdproxy2025-02-24T11:24:41+00:00
https://github.com/almeidapaulopt/tsdproxy
jm[Tailscale Docker Proxy] simplifies the process of securely exposing services and Docker containers to your Tailscale network by automatically creating Tailscale machines for each tagged container. This allows services to be accessible via unique, secure URLs without the need for complex configurations or additional Tailscale containers.
]]>docker tailscale containers home networkinghttps://pinboard.in/https://pinboard.in/u:jm/b:3ab6b36864bf/Bufferbloat Test2025-01-10T10:48:08+00:00
https://www.waveform.com/tools/bufferbloat
jmbufferbloat internet networking optimisation performance testing toolshttps://pinboard.in/https://pinboard.in/u:jm/b:93a6fb532124/Ridding my home network of IP addresses2024-12-04T12:25:50+00:00
https://gist.github.com/jmason/aabd9d3acc86d9098654e8559e93b707
jmhttps caddy home-network networking lan reverse-proxies lets-encrypt tailscale dns tls cloudflare ops hacks homehttps://pinboard.in/https://pinboard.in/u:jm/b:8361601e79d4/[pdf] Sky UK on their IPv6/IPv4 gateways2024-11-19T15:13:17+00:00
https://ripe89.ripe.net/presentations/34-Sky-UK-MAP-T-RIPE89.pdf
jmipv4 ipv6 networking home sky isps ripe map-t nat iphttps://pinboard.in/https://pinboard.in/u:jm/b:72c4404ac7c4/Obituary for Ward Christensen2024-10-15T10:52:12+00:00
https://arstechnica.com/gadgets/2024/10/ward-christensen-bbs-inventor-and-architect-of-our-online-age-dies-at-age-78/
jm
On Friday, Ward Christensen, co-inventor of the computer bulletin board system (BBS), died at age 78 in Rolling Meadows, Illinois. Christensen, along with Randy Suess, created the first BBS in Chicago in 1978, leading to an important cultural era of digital community-building that presaged much of our online world today.
Prior to creating the first BBS, Christensen invented XMODEM, a 1977 file transfer protocol that made much of the later BBS world possible by breaking binary files into packets and ensuring that each packet was safely delivered over sometimes unstable and noisy analog telephone lines. It inspired other file transfer protocols that allowed ad-hoc online file sharing to flourish.
While Christensen himself was always humble about his role in creating the first BBS, his contributions to the field did not go unrecognized. In 1992, Christensen received two Dvorak Awards, including a lifetime achievement award for "outstanding contributions to PC telecommunications." The following year, the Electronic Frontier Foundation honored him with the Pioneer Award.
]]>bbses history computing ward-christensen xmodem networking filesharinghttps://pinboard.in/https://pinboard.in/u:jm/b:875da72f2890/Evading wireless tether speed caps2024-10-07T10:45:36+00:00
https://infosec.exchange/@briankrebs/111434534909543769
jmtethering mobile wireless networking ttl via:brian-krebs networkshttps://pinboard.in/https://pinboard.in/u:jm/b:fe45e554de45/Retries, illustrated2024-07-10T22:46:42+00:00
https://encore.dev/blog/retries
jmretries retrying backoff jitter networking soa services interactive demoshttps://pinboard.in/https://pinboard.in/u:jm/b:25d687fb2382/How did Ethernet get its 1500-byte MTU?2024-04-29T15:58:08+00:00
https://exple.tive.org/blarg/2024/04/24/magic-numbers/
jm1500 bytes is a bit out there as numbers go, or at least it seems that way if you touch computers for a living. It’s not a power of two or anywhere close, it’s suspiciously base-ten-round, and computers don’t care all that much about base ten, so how did we get here?
Well, today I learned that if you add the Ethernet header – 36 bytes – then an MTU of 1500 plus that header is 1536 bytes, which is 12288 bits, which takes 2^12 microseconds to transmit at 3Mb/second, and because the Xerox Alto computer for which Ethernet was invented had an internal data path that ran at 3Mhz, then you could just write the bits into the Alto’s memory at the precise speed at which they arrived, saving the very-expensive-then cost of extra silicon for an interface or any buffering hardware.
Now, “we need to pick just the right magic number here so we can take data straight off the wire and blow it directly into the memory of this specific machine over there” is, to any modern sensibilities, lunacy. It’s obviously, dangerously insane, there are far too many computers and bad people with computers in the world for that. But back when the idea of network security didn’t exist because computers barely existed, networks mostly didn’t exist and unvetted and unsanctioned access to those networks definitely didn’t exist, I bet it seemed like a very reasonable tradeoff.
It really is amazing how many of the things we sort of ambiently accept as standards today, if we even realize we’re making that decision at all, are what they are only because some now-esoteric property of the now-esoteric hardware on which the tech was first invented let the inventors save a few bucks.
]]>ethernet networking magic-numbers via:itc hardware history xerox altohttps://pinboard.in/https://pinboard.in/u:jm/b:74dd2f82839b/Italy's "Piracy Shield" blocked Cloudflare2024-03-04T10:16:03+00:00
https://torrentfreak.com/piracy-shield-cloudflare-disaster-blocks-countless-sites-fires-up-opposition-240226/
jmcloudflare ip-blocks blocking piracy anti-pezzoto agcom fail filtering false-positives networkinghttps://pinboard.in/https://pinboard.in/u:jm/b:986c513a9105/louislam/uptime-kuma2024-02-26T12:11:22+00:00
https://github.com/louislam/uptime-kuma
jmmonitoring uptime network-monitoring networking ops via:itc via:tristamhttps://pinboard.in/https://pinboard.in/u:jm/b:01d82b0fa274/AWS ALB returns 503 for Istio enabled pods2023-10-25T10:38:31+00:00
https://domagalski-j.medium.com/aws-alb-returns-503-for-istio-enabled-pods-a6942383143c
jmistio aws alb bugs networking tcp fail k8shttps://pinboard.in/https://pinboard.in/u:jm/b:2e144dfcee66/AWS JSON 1.0 protocol - Smithy 2.02023-07-28T20:07:47+00:00
https://smithy.io/2.0/aws/protocols/aws-json-1_0-protocol.html
jmaws json protocols wire sqs networkinghttps://pinboard.in/https://pinboard.in/u:jm/b:aed717e73f79/eldadru/ksniff2023-07-12T13:58:22+00:00
https://github.com/eldadru/ksniff
jmdebugging kubernetes network networking packet-captures tcpdump wireshark ops k8s eks sniffing kubectlhttps://pinboard.in/https://pinboard.in/u:jm/b:f25141e7690f/Istio: 503's with UC's and TCP Fun Times2023-07-12T13:54:04+00:00
https://karlstoney.com/2019/05/31/istio-503s-ucs-and-tcp-fun-times/
jmistio kubernetes k8s eks http tcp timeouts connection-pools networkinghttps://pinboard.in/https://pinboard.in/u:jm/b:3e01e8a914df/Calling time on DNSSEC - Matt Brown2023-06-26T16:34:35+00:00
https://www.mattb.nz/w/2023/06/02/calling-time-on-dnssec/
jmDNSSEC is complex and risky to deploy. Choosing to sign your zone will almost inevitably mean that you will experience lower availability for your domain over time than if you leave it unsigned. Even if you have a team of DNS experts maintaining your zone and DNS infrastructure, the risk of routine operational tasks triggering a loss of availability (unrelated to any attempted attacks that DNSSEC may thwart) is very high - almost guaranteed to occur. Worse, because of the nature of DNS and DNSSEC these incidents will tend to be prolonged and out of your control to remediate in a timely fashion.
The only benefit you get in return for accepting this almost certain reduction in availability is trust in the integrity of the DNS data a subset of your users (those who validate DNSSEC) receive. Trusted DNS data that is then used to communicate across an untrusted network layer. An untrusted network layer which you are almost certainly protecting with TLS which provides a more comprehensive and trustworthy set of security guarantees than DNSSEC is capable of, and provides those guarantees to all your users regardless of whether they are validating DNSSEC or not.
In summary, in our modern world where TLS is ubiquitous, DNSSEC provides only a thin layer of redundant protection on top of the comprehensive guarantees provided by TLS, but adds significant operational complexity, cost and a high likelihood of lowered availability.
]]>dns dnssec security networking protocols tlshttps://pinboard.in/https://pinboard.in/u:jm/b:b813bb37b4ff/Dropbox testing HTTP32023-05-22T10:02:25+00:00
https://dropbox.tech/frontend/investigating-the-impact-of-http3-on-network-latency-for-search
jmdropbox http3 http2 http protocols udp networking ip testinghttps://pinboard.in/https://pinboard.in/u:jm/b:9d832e568456/Moca adapters2023-04-17T13:33:49+00:00
https://elk.zone/mastodon.ie/@danhon@dan.mastohon.com/110209358807929291
jmcoax ethernet networking wired moca cabling homehttps://pinboard.in/https://pinboard.in/u:jm/b:55552fad1374/Cat6a FTP Tool-Less Keystone Module2023-03-15T10:01:38+00:00
https://www.cablemonkey.ie/cat6a-modules-outlets/9215-cat6a-ftp-tool-less-keystone-module-5056045700332.html
jmcat6a wiring home networking cables via:itchttps://pinboard.in/https://pinboard.in/u:jm/b:a328cbd07414/AWS' proprietary SRD protocol2023-02-16T11:48:02+00:00
https://aws.amazon.com/about-aws/whats-new/2023/02/ena-express-15-new-ec2-instances/
jmsrd networking protocols ip ena-express aws amazon multi-pathing congestion-control nitrohttps://pinboard.in/https://pinboard.in/u:jm/b:adb42574c16a/Irish FTTH line checker2023-02-01T10:19:49+00:00
https://www.airwire.ie/index.php/avail/main/
jmvia:itc ftth broadband internet networking fibre siro openeirhttps://pinboard.in/https://pinboard.in/u:jm/b:f3d376b1b0c6/EC2 instance network error metrics2023-01-24T11:03:07+00:00
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/monitoring-network-performance-ena.html
jmmetrics ec2 ops drivers networking bandwidth errorshttps://pinboard.in/https://pinboard.in/u:jm/b:3176cdd6fec2/Keep Ukraine Connected2022-04-13T14:10:53+00:00
https://nogalliance.org/our-task-forces/keep-ukraine-connected/
jmWe are creating a platform so that we can collect what our colleagues in Ukraine need to keep the internet up and running. We will be the link between the tech community, manufacturers, whoever else wants to get involved and Ukraine. Where absolutely necessary we can even transport the required hardware from Europe to the Ukraine. The aim of the “Keep Ukraine Connected” task force is not only to mediate, but also to actively help the Ukrainian internet stay up.
]]>inog nogs networking internet ukrainehttps://pinboard.in/https://pinboard.in/u:jm/b:72791fb4d8fa/What Exactly are AWS VPC Endpoints2022-03-07T17:34:20+00:00
https://itnext.io/what-exactly-are-vpc-endpoints-and-why-they-need-real-inter-region-support-283a9987fe51
jmaws networking vpc vpc-endpoints architecture ops s3 dynamodb securityhttps://pinboard.in/https://pinboard.in/u:jm/b:ada6e9069db1/CableMonkey.ie2022-01-06T10:25:40+00:00
https://www.cablemonkey.ie/
jmcables networking networks ireland hardware shoppinghttps://pinboard.in/https://pinboard.in/u:jm/b:e4e7283f9aaf/Cache warming: Leveraging EBS for moving petabytes of data2021-12-01T10:09:14+00:00
https://netflixtechblog.medium.com/cache-warming-leveraging-ebs-for-moving-petabytes-of-data-adcf7a4a78c3
jmarchitecture ebs memcache caching networking ec2 netflixhttps://pinboard.in/https://pinboard.in/u:jm/b:1e40b505a3ec/ComReg SiteViewer2021-09-27T14:46:14+00:00
https://siteviewer.comreg.ie/
jmcomreg telecoms 3g 4g 5g networking isps coverage irelandhttps://pinboard.in/https://pinboard.in/u:jm/b:ac78c6a46d97/why Apple devices have wifi problems on non-Apple APs2021-09-15T09:14:35+00:00
https://www.sniffwifi.com/2016/05/go-to-sleep-go-to-sleep-go-to-sleep.html
jmdtim wifi wireless 802.11 apple aps hardware networkinghttps://pinboard.in/https://pinboard.in/u:jm/b:acf092a6c784/QUIC at Snapchat - Snap Engineering2021-06-28T09:59:25+00:00
https://eng.snap.com/quic-at-snap
jmhttp3 quic tcp networking mobile udp cronet snapchathttps://pinboard.in/https://pinboard.in/u:jm/b:58d065b4f47c/Extreme HTTP Performance Tuning: 1.2M API req/s on a 4 vCPU EC2 Instance | talawah.io2021-05-21T08:54:01+00:00
https://talawah.io/blog/extreme-http-performance-tuning-one-point-two-million/
jmhttp servers c10k linux performance scalability ops tuning libreactor networking tcphttps://pinboard.in/https://pinboard.in/u:jm/b:022774113a4b/Boosting Dropbox upload speed—and making Windows’ TCP stack resilient to network reordering - Dropbox2021-05-18T22:04:37+00:00
https://dropbox.tech/infrastructure/boosting-dropbox-upload-speed
jmnetsh trace [...] correlates events on the wire with events that happen on the TCP layer, timers, buffer management, socket layer, and even the Windows asyncio subsystem (IOCP).
]]>windows tools cli networking dropbox iocp tcp ip internet kernelhttps://pinboard.in/https://pinboard.in/u:jm/b:9b45779da44f/Sidecar injection and transparent traffic hijacking process in Istio explained in detail · Jimmy Song2021-04-29T13:11:00+00:00
https://jimmysong.io/en/blog/sidecar-injection-iptables-and-traffic-routing/
jmkubernetes iptables sidecars istio service-mesh networking k8s eks routinghttps://pinboard.in/https://pinboard.in/u:jm/b:3b0dfec4d9d9/Bert Hubert on the Huawei/5G backdoor controversy2021-04-19T09:42:24+00:00
https://berthub.eu/articles/posts/5g-elephant-in-the-room/
jmAs an icebreaker, [telco operators] were asked if they thought the Chinese could eavesdrop through “backdoors” in Huawei equipment. Every single hand went up. One of the bankers then asked, for balance, if they thought the US could access communications through key Cisco equipment. “All the hands went straight back up without hesitation” [....]
In a modern telecommunications service provider, new equipment is deployed, configured, maintained and often financed by the vendor. Just to let that sink in, Huawei (and their close partners) already run and directly operate the mobile telecommunication infrastructure for over 100 million European subscribers.
The host service provider often has no detailed insight in what is going on, and would have a hard time figuring this out through their remaining staff. Rampant outsourcing has meant that most local expertise has also left the company, willingly or unwillingly.
(via ITS slack)]]>telcos telecoms ops networking eu 5g china huawei nsa tappinghttps://pinboard.in/https://pinboard.in/u:jm/b:d2ae6fa81687/Parental control - DD-WRT Wiki2021-04-12T10:09:57+00:00
https://wiki.dd-wrt.com/wiki/index.php/Parental_control
jmdd-wrt networking parenting parental-controls kids internet homehttps://pinboard.in/https://pinboard.in/u:jm/b:034169cdf375/Bufferbloat Test by Waveform2021-04-08T10:42:54+00:00
https://www.waveform.com/tools/bufferbloat?test-id=e2656f6c-bebe-44c7-8005-c7fdfe013678
jmbufferbloat buffering internet networking isps congestionhttps://pinboard.in/https://pinboard.in/u:jm/b:17562d7c6f19/Speedify and multipath2021-03-12T10:23:07+00:00
https://nelsonslog.wordpress.com/2021/03/11/speedify-and-multipath/
jmspeedify multipath vpn vpns internet networking via:nelsonhttps://pinboard.in/https://pinboard.in/u:jm/b:b11da9b67abb/Apple tells app devs to use IPv6 as it's 1.4 times faster than IPv42020-07-31T10:32:56+00:00
https://www.zdnet.com/article/apple-tells-app-devs-to-use-ipv6-as-its-1-4-times-faster-than-ipv4/
jm"when IPv6 is in use, the median connection setup is 1.4 times faster than IPv4. This is primarily due to reduced NAT usage and improved routing."
This is counterintuitive?]]>ipv6 ipv4 networking apple internet performancehttps://pinboard.in/https://pinboard.in/u:jm/b:2c0b2ebac997/Understand Wi-Fi 4/5/6/6E (802.11 n/ac/ax)2020-06-29T10:01:44+00:00
https://www.duckware.com/tech/wifi-in-the-us.html#PHY
jmwifi 802.11n 802.11ac networking wireless home mimo mu-mimo dfshttps://pinboard.in/https://pinboard.in/u:jm/b:a30d6f7c18a5/WiMood shop2020-04-27T09:22:05+00:00
https://wimoodshop.nl/
jmvia:its ubiquiti unifi wifi wireless shopping networkinghttps://pinboard.in/https://pinboard.in/u:jm/b:b9fe5ba97183/The Ars Technica semi-scientific guide to Wi-Fi Access Point placement2020-02-24T17:51:33+00:00
https://arstechnica.com/gadgets/2020/02/the-ars-technica-semi-scientific-guide-to-wi-fi-access-point-placement/
jmwifi ops networking ieee802.11 wireless ars-technica tips advice radiohttps://pinboard.in/https://pinboard.in/u:jm/b:1134f19d1050/Amazon EBS Multi-Attach now available on Provisioned IOPS io1 volumes2020-02-17T10:49:05+00:00
https://aws.amazon.com/about-aws/whats-new/2020/02/ebs-multi-attach-available-provisioned-iops-ssd-volumes/
jmebs ec2 filesystems networking opshttps://pinboard.in/https://pinboard.in/u:jm/b:2f99d09d89c4/Power Line Adapter noise interference2020-01-06T13:27:48+00:00
http://gm4fvm.blogspot.com/2018/06/power-line-adapter-noise-interference.html
jmAbout 3 weeks ago our neighbour installed power line adapters. The PLAs in question were branded TP-Link [....]
How did I know that my neighbour had installed these? Well, the 50MHz band was immediately submerged under a wall of radio noise. Much tinkering with the Noise Blanker settings on the Icom IC-7300 allowed me to separate out two distinct types of noise - 1st a sound like a chicken clucking which was there 24 hours per day and - 2nd a wideband swoosh of white noise of varying strength which happened at certain times.
]]>noise rf wifi powerline networking home hardware radiohttps://pinboard.in/https://pinboard.in/u:jm/b:e2319196b653/Nebula2019-11-20T13:56:22+00:00
https://github.com/slackhq/nebula
jma scalable overlay networking tool with a focus on performance, simplicity and security. It lets you seamlessly connect computers anywhere in the world. Nebula is portable, and runs on Linux, OSX, and Windows. [...] It can be used to connect a small number of computers, but is also able to connect tens of thousands of computers.
Nebula incorporates a number of existing concepts like encryption, security groups, certificates, and tunneling, and each of those individual pieces existed before Nebula in various forms. What makes Nebula different to existing offerings is that it brings all of these ideas together, resulting in a sum that is greater than its individual parts.
Nebula is a mutually authenticated peer-to-peer software defined network based on the Noise Protocol Framework. Nebula uses certificates to assert a node's IP address, name, and membership within user-defined groups. Nebula's user-defined groups allow for provider agnostic traffic filtering between nodes. Discovery nodes allow individual peers to find each other and optionally use UDP hole punching to establish connections from behind most firewalls or NATs. Users can move data between nodes in any number of cloud service providers, datacenters, and endpoints, without needing to maintain a particular addressing scheme.
Nebula uses elliptic curve Diffie-Hellman key exchange, and AES-256-GCM in its default configuration.
Nebula was created to provide a mechanism for groups [of] hosts to communicate securely, even across the internet, while enabling expressive firewall definitions similar in style to cloud security groups.
]]>networking vpn nebula slack ops crypto overlay-networks tunnellinghttps://pinboard.in/https://pinboard.in/u:jm/b:84f3329308a5/DD-WRT Network Stats Graphics using Grafana and InfluxDB2019-10-21T09:55:23+00:00
http://blog.thescorpius.com/index.php/2016/03/14/dd-wrt-network-statistics-graphics-using-grafana-and-influxdb/
jmgrafana networking metrics dd-wrt routers jffs influxdbhttps://pinboard.in/https://pinboard.in/u:jm/b:a686ad6da3e2/trevorndodds/dd-wrt-grafana2019-10-21T09:54:29+00:00
https://github.com/trevorndodds/dd-wrt-grafana
jmdd-wrt wrt routers networking grafana graphite metricshttps://pinboard.in/https://pinboard.in/u:jm/b:59555aef5c79/Rokt.com's bad experiences with gRPC on AWS2019-10-03T09:40:20+00:00
https://rokt.com/engineering_blog/learnings-grpc-aws/
jmWith ALB, a client sends request to the ALB via HTTP/1.1 and then the ALB forwards the request to the backend targets to distribute the load. Unfortunately, with gRPC, it was not as simple because gRPC uses HTTP/2. The AWS ALB only supports HTTP/2 from client to ALB. The ALB then downgrades the request to HTTP/1.1 before forwarding it through to the backend target. Additionally, AWS ALB lacks support for HTTP trailers. Full support for HTTP/2 and trailers is required for gRPC to function. This left us with two options: spin up our own HTTP/2 compliant load balancer (e.g. Envoy, Nginx), or, use one of AWS’s lower-level, L4 Load Balancers such as the Elastic Load Balancer, ELB, or the newer Network Load Balancer, NLB.
Thereafter follows a parade of issues with NLB. All pretty sucky.
]]>grpc aws alb elb nlb http2 http protocols networkinghttps://pinboard.in/https://pinboard.in/u:jm/b:eea1b9e098c6/How To Use The Bridgefy Offline Messaging App2019-09-30T09:21:47+00:00
https://medium.com/bridgefy/how-to-use-the-bridgefy-offline-messaging-app-b4799af7649b
jmapps mobile offline networking bluetooth chat emergencyhttps://pinboard.in/https://pinboard.in/u:jm/b:7a6bbce82790/Implementing graceful-close in Haskell network library2019-09-27T10:19:20+00:00
https://kazu-yamamoto.hatenablog.jp/entry/2019/09/20/165939
jmhttp networking protocols http2 bidirectional-protocols tcp iphttps://pinboard.in/https://pinboard.in/u:jm/b:9fc9cf60d72b/Replacing Eir's FTTH WiFi router with a NetGear Orbi2019-09-16T11:07:30+00:00
https://www.pixelbeat.org/systems/FTTH/
jmorbi netgear han lan home networking wifi opshttps://pinboard.in/https://pinboard.in/u:jm/b:678e221848a8/An update on Sunday’s service disruption | Google Cloud Blog2019-06-04T18:49:01+00:00
https://cloud.google.com/blog/topics/inside-google-cloud/an-update-on-sundays-service-disruption
jmIn essence, the root cause of Sunday’s disruption was a configuration change that was intended for a small number of servers in a single region. The configuration was incorrectly applied to a larger number of servers across several neighboring regions, and it caused those regions to stop using more than half of their available network capacity. The network traffic to/from those regions then tried to fit into the remaining network capacity, but it did not. The network became congested, and our networking systems correctly triaged the traffic overload and dropped larger, less latency-sensitive traffic in order to preserve smaller latency-sensitive traffic flows, much as urgent packages may be couriered by bicycle through even the worst traffic jam.
Google’s engineering teams detected the issue within seconds, but diagnosis and correction took far longer than our target of a few minutes. Once alerted, engineering teams quickly identified the cause of the network congestion, but the same network congestion which was creating service degradation also slowed the engineering teams’ ability to restore the correct configurations, prolonging the outage. The Google teams were keenly aware that every minute which passed represented another minute of user impact, and brought on additional help to parallelize restoration efforts.
]]>gcp google odd outages post-mortems networkinghttps://pinboard.in/https://pinboard.in/u:jm/b:f7abad5a30a2/Packets-per-second limits in EC22019-04-26T10:26:17+00:00
https://stressgrid.com/blog/pps_limits_in_ec2/
jmBy running these experiments, we determined that each EC2 instance type has a packet-per-second budget. Surprisingly, this budget goes toward the total of incoming and outgoing packets. Even more surprisingly, the same budget gets split between multiple network interfaces, with some additional performance penalty. This last result informs against using multiple network interfaces when tuning the system for higher networking performance.
The maximum budget for m5.metal and m5.24xlarge is 2.2M packets per second. Given that each HTTP transaction takes at least four packets, we can translate this to a maximum of 550k requests per second on the largest m5 instance with Enhanced Networking enabled.
]]>aws ec2 networking pps packets tcp ip benchmarkinghttps://pinboard.in/https://pinboard.in/u:jm/b:94369fd8e8b0/Tinder’s move to Kubernetes – Tinder Engineering – Medium2019-04-18T12:56:05+00:00
https://medium.com/@tinder.engineering/tinders-move-to-kubernetes-cda2a6372f44
jmkubernetes k8s flannel networking elb aws envoy ec2 ops tinderhttps://pinboard.in/https://pinboard.in/u:jm/b:68e5fb0e2425/Marc Brooker on leases2019-02-08T14:18:15+00:00
https://twitter.com/MarcJBrooker/status/1093650148708691969
jmleases primitives distributed-systems distcomp networking coding marc-brooker algorithmshttps://pinboard.in/https://pinboard.in/u:jm/b:4945e87a8ceb/using BGP to compute best paths across the London Underground2019-02-07T09:31:08+00:00
https://blog.benjojo.co.uk/post/eve-online-bgp-internet
jmvia:fanf bgp networking internet routing london-underground trainshttps://pinboard.in/https://pinboard.in/u:jm/b:c84d01a61942/Linkerd 2.02018-11-26T16:08:28+00:00
https://blog.linkerd.io/2018/09/18/announcing-linkerd-2-0/
jmThe 2.0 release of Linkerd brings two very significant changes. First, we’ve completely rewritten Linkerd to be orders of magnitude faster and smaller than Linkerd 1.x. Linkerd 2.0’s data plane is comprised of ultralight Rust proxies which consume around 10mb of RSS and have a p99 latency of <1ms. Linkerd’s minimalist control plane (written in Go) is similarly designed for speed and low resource footprint.
Second, with the 2.0 release, Linkerd moves beyond the service mesh model to be something not more, but less: Linkerd 2.0 at its core is a service sidecar, running on a single service without requiring cluster-wide installation. This means that if you’re a developer or service owner who doesn’t have access to the whole Kubernetes cluster, you can run Linkerd on your service and get:
Instant Grafana dashboards of your service’s success rates, latencies, and throughput;
A topology graph of incoming and outgoing dependencies;
A live view of requests being made to your service;
Improved, latency-aware load balancing;
… and much more.
]]>linkerd mesh networking services architecture sidecarshttps://pinboard.in/https://pinboard.in/u:jm/b:1d41240fa54d/HTTP-over-QUIC to be renamed HTTP/32018-11-14T11:27:31+00:00
https://www.reddit.com/r/programming/comments/9wncor/httpoverquic_to_be_renamed_http3/
jmip protocols http http3 quic networking internet newsyhttps://pinboard.in/https://pinboard.in/u:jm/b:0194d098183b/Deadlines, lies and videotape: The tale of a gRPC bug2018-11-09T14:31:04+00:00
https://blog.hostedgraphite.com/2018/10/30/deadlines-lies-and-videotape-the-tale-of-a-grpc-bug/
jmtcp protocols keepalive grpc rpc architecture networkinghttps://pinboard.in/https://pinboard.in/u:jm/b:ed03b965998a/How Triplebyte solved its office Wi-Fi problems2018-09-27T09:10:23+00:00
https://triplebyte.com/blog/how-triplebyte-solved-its-office-wifi-problems
jminternet networking wifi ethernet routers opshttps://pinboard.in/https://pinboard.in/u:jm/b:94b781f9c525/gRPC On HTTP/2: Engineering A Robust, High Performance Protocol2018-09-06T15:57:30+00:00
https://www.cncf.io/blog/2018/08/31/grpc-on-http-2-engineering-a-robust-high-performance-protocol/
jmhttp2 grpc rpc networking http tcp protocolshttps://pinboard.in/https://pinboard.in/u:jm/b:0c050c1f8551/How network clients need to participate in fault tolerance2018-08-29T22:22:30+00:00
https://twitter.com/clare_liguori/status/1034829325306978304
jmColm's thread on shuffle sharding reminded me of how important it is that clients participate in fault tolerance, and how frustrated I get when a client library *doesn't* do this by default in my application. Let's talk about some best practices!
Bottom line: use Hystrix :)]]>retries fault-tolerance networking tcp http exponential-backoff iphttps://pinboard.in/https://pinboard.in/u:jm/b:6dfb8a6e0dc7/