pavel_odintsov

9 ms·

1.
Network Traffic Telemetry on modern Telco grade routers(pavel.network)
2 points by pavel_odintsov 2y ago|0 comments
2.
BGP Flow Spec: Ultimate Weapon Against Volumetric DDoS(pavel.network)
1 points by pavel_odintsov 2y ago|0 comments
3.
Using brand new 64-Core ARM server board from Ampere Altra at home(boredengineer.medium.com)
4 points by pavel_odintsov 2y ago|0 comments
4.
Versatile open source toolkit to detect volumetric DDoS attacks(github.com)
1 points by pavel_odintsov 3y ago|0 comments
5.
by pavel_odintsov 3y ago
Thank you for great feedback! I decided to cover NAT64 and DNS64 gateway setup guide mentioned in this article briefly: https://pavel.network/building-gateway-to-access-legacy-ipv4...
6.
by pavel_odintsov 3y ago
It was more about way to fix some very broken tool. ssh was just an example. It may be proprietary app without source code available.
7.
by pavel_odintsov 3y ago
Thank you very much for this question. I've rewrote and improve my article to cover exactly this topic: https://pavel.network/building-gateway-to-access-legacy-ipv4...
8.
by pavel_odintsov 3y ago
Thank you very much for approving my idea!
9.
by pavel_odintsov 3y ago
In home network single $70 USD device with 2 daemons running may be clearly too much but for corporate or even office network it's just one more box in addition to dozens of network devices.
10.
by pavel_odintsov 3y ago
It can be easily sorted out with DNS64 and NAT64: https://pavel.network/building-gateway-to-access-legacy-ipv4...
11.
by pavel_odintsov 3y ago
Author is here. Thank you for sharing! Yes, macOS has such logic and it works just fine. The main issue from clatd that it's pretty tricky to setup and it emulates presence of IPv4 on machine which is not very desirable as it tends to
12.
25 Gbit/s at home, part 1(boredengineer.medium.com)
131 points by pavel_odintsov 3y ago|149 comments
13.
by pavel_odintsov 3y ago
eBPF requires way more tooling which I find excessive for such easy task. More complicated load balancing protocols may need more complicated balancing microcode and eBPF will be helpful in this case. One of the main differences between BPF
14.
Multiple inconsistencies in BPF based UDP load balancing logic of Linux Kernel(pavel.network)
2 points by pavel_odintsov 3y ago|0 comments
15.
by pavel_odintsov 3y ago
Thank you for your great feedback
16.
Linearly scalable UDP server with BPF based load balancing on Linux(pavel.network)
23 points by pavel_odintsov 3y ago|4 comments
17.
by pavel_odintsov 3y ago
It's very useful information for many low level network application. There are clearly many cases when such information is not useful but there are cases you cannot do without having this information in place.
18.
by pavel_odintsov 3y ago
Great article. Thank you! I used to develop and maintain one of the World largest DNS services and summarised my experience with DNS protocol in this blog post: https://pavel.network/please-stop-using-dns-protocol-for-you...
19.
Best way to get default outgoing IP address on Linux(pavel.network)
2 points by pavel_odintsov 3y ago|2 comments
20.
Please stop using DNS protocol for your application(pavel.network)
3 points by pavel_odintsov 3y ago|1 comments
21.
by pavel_odintsov 3y ago
I'm Pavel from FastNetMon and we do for sure love Clickhouse as TSDB for embedded systems and we have multiple deployments on ARM64.
22.
by pavel_odintsov 3y ago
Thank you for sharing such great insights.
23.
by pavel_odintsov 3y ago
Yep that's serious issue and it's similar to our case. Our main product can work just fine even without SSE 4.2 but MongoDB requires it and then indirectly leads to AVX1 support as we use MongoDB as storage. We did PoC with Ferret
24.
by pavel_odintsov 3y ago
Great feedback, thank you. We have customers in many countries around the World and in many cases even medium sized businesses cannot afford buying new equipment just to make some random software happy about CPU flags. In multiple countries
25.
Please do not require AVX support for your software(pavel.network)
45 points by pavel_odintsov 3y ago|52 comments
26.
Curious case of Martian traffic in Linux(pavel.network)
51 points by pavel_odintsov 3y ago|39 comments
27.
by pavel_odintsov 3y ago
Great catch. I did not notice it: dig -t aaaa news.ycombinator.com @8.8.8.8 +short Returns empty result.
28.
by pavel_odintsov 3y ago
I have idea of even more hostile environment in my mind. My plan for next phase is to get rid of 127.0.0.1 on lo interface. I've tried it once and I had to reboot my machine as all things stopped working. As another angle to make it ev
29.
by pavel_odintsov 3y ago
The main idea of my experiment was to run IPv6 only setup without any IPv4 connectivity: sudo ip route get 8.8.8.8 RTNETLINK answers: Network is unreachable So I intentionally decided not to have IPv4 connectivity system wide to catch apps
30.
by pavel_odintsov 3y ago
Yep GitHub is one of the main reasons why I started work on NAT64 box next day after switching to IPv6. Most of the services I need for work do support IPv6 and the only exceptions is GitHub.

More ›