Bilingual

I Finally Found a Use for IPv6
a day ago
- IPv6 provides a massive number of addresses (e.g., a /64 subnet with 18.4 quintillion addresses) that can be used to assign unique IPv6 addresses to individual services on a single server.
- Using IPv6 with Cloudflare allows each service to listen on its own IPv6 address, while Cloudflare handles IPv4 to IPv6 translation for users without IPv6 support, eliminating the need for a reverse proxy for routing.
- This method reduces single points of failure compared to using a reverse proxy, as each service has its own address and can fail independently.
- Ephemeral environments can be deployed by assigning random IPv6 addresses via the Cloudflare API in CI/CD pipelines, with low collision risk.
- Docker’s IPv6 support is a major drawback, requiring workarounds like using '--network host' (which sacrifices security isolation) or 'macvlan' networks (which may lack IPv4 outbound connectivity).
- Docker 28.0 has added experimental IPv6-only network support, and Podman is noted for better IPv6 compatibility, suggesting gradual improvement in container IPv6 support.
Rebuilding My Homelab with Compose, Ruby, IPv6, and No Kubernetes
18 days ago
- The author's homelab had issues with a machine called 'nibbler' that was unreliable and likely defective, purchased as refurbished.
- Kubernetes was abandoned due to complexity and maintenance difficulties; the author reverted to using Docker Compose as a simpler solution.
- Current homelab setup includes: 'lrrr' (Proxmox host), 'morbo' (TrueNAS SCALE for storage), 'nibbler' (revamped as the main non-critical service machine), and an external VM 'ord-router' for public ingress.
- The deployment system uses Docker Compose stacks enhanced with Ruby libraries, Rake, and YAML for features like cron jobs, secrets management, ingress via Caddy, IPv6 networking, and cross-stack dependencies.
- Networking relies on deterministic IPv6 addressing with ULAs for isolation and security, and Caddy handles ingress with optional public exposure and authentication.
- Tailscale is used for secure backhaul traffic between hosts and for external access, though it causes battery drain on mobile devices.
- The architecture emphasizes failure domain separation: critical services on 'lrrr' and non-critical on 'nibbler' to minimize impact of failures.
- Full control over the system allows custom implementations (e.g., static sites via ingress, IPv6 setup) without relying on outdated external solutions.
- The author acknowledges that this setup may not suit everyone and validates alternatives like Kubernetes or other Docker Compose managers.
My ASN Journey series (2024)
24 days ago
- The author shares their ASN journey and questions why ordinary people cannot buy IP addresses like domain names, as most IPs are owned by large businesses and governments.
- They created tutorials on acquiring an ASN, setting it up, configuring BGP on a VPS, and other related topics to address the lack of comprehensive guides.
- Advantages of owning an IP address include gaining IPv6 connectivity, avoiding CGNAT issues, having a clean IP for tasks like editing Wikipedia, and reducing CAPTCHAs.
- Limitations involve self-doxxing due to no privacy in ASN registration, potential BGP misconfiguration risks, and contributing to Internet routing table growth.
- Costs include a one-time ASN fee, annual RIPE charges, and VPS expenses, with optional fees for services like FogIXP or ONIX.
- FAQs cover topics such as needing an ASN for BYOIP, IPv4 availability being costly, differences between IP transit and peering, and accessing IPv6-only VPS via Cloudflare WARP.
- Useful resources are provided, including Discord servers, guides, and training materials for networking and ASN setup.

Hasty Briefsbeta

ipv6

I Finally Found a Use for IPv6

Rebuilding My Homelab with Compose, Ruby, IPv6, and No Kubernetes

My ASN Journey series (2024)