zrail

6 ms·

61.
by zrail 6mo ago
I think this is mostly a Wireguard thing and not specifically a Tailscale thing. Wireguard does what they call "cryptokey routing" where if you prove you possess a key that the other peer knows, you get the traffic (subject to fir
62.
by zrail 6mo ago
From what I can tell you're pretty much right. A linux bridge cannot possibly be as efficient or speedy as a dedicated switch asic. OpenWRT has support for a few different hardware switch kernel APIs, but you can't exactly buy one
63.
by zrail 7mo ago
(not a lawyer) I _think_ this is a result of Trump v CASA, where the Supreme Court determined that preliminary injunctions and TROs without a bond of some sort (which until then were fairly common) were invalid and unenforceable.
64.
by zrail 7mo ago
It's baffling, to be honest. I'm at a fintech that is currently pushing very hard at this, but in the same breath talking about how we're not a pure software play. I just don't understand where they're coming from.
65.
by zrail 7mo ago
Looks pretty interesting! Tiny note: there's a typo in your repo description.
66.
by zrail 7mo ago
It's a Show HN. That's the point.
67.
by zrail 8mo ago
Yes.
68.
by zrail 8mo ago
(Citation needed)
69.
by zrail 8mo ago
One could make the argument that the modern Republican Party has in fact largely been shaped by this pushback.
70.
by zrail 8mo ago
Except that's not really true, because the work expands to fill the time allotted. Now we can build more boring applications with fewer people.
71.
by zrail 8mo ago
Maybe for some. I've worked from home for 15 years and a huge thing that I've learned is that I have to have a hard physical boundary. My work laptop stays at my desk unless I'm on call and actively fighting a fire. When I wa
72.
by zrail 9mo ago
Maybe! CGNAT isn't free, of course, you need pretty beefy machines to handle ISP numbers of clients. So, is the capex for the machines, engineering time to set them up, and opex for keeping them running more or less than they'd ma
73.
by zrail 9mo ago
It might be more fair to say that most American residential ISPs don't have to do that because they have access to giant legacy IPv4 allocations. Comcast alone has 65 million IPv4 addresses, for example (including a /8, /9, a
74.
by zrail 9mo ago
Out of curiosity how did you discover this?
75.
by zrail 9mo ago
Could you explain more about how this helps and how one might use a different runtime image on Sprites?
76.
by zrail 9mo ago
Generac 26kW Guardian, natural gas fueled, connected to a pair of automatic transfer switches. We have two electric meters due to having a ground source heat pump on its own meter.
77.
by zrail 9mo ago
My spouse and I work at home and after the first couple multi-day power outages we invested in good UPSs and a whole house standby generator. Now when the power goes out it's down for at most 30 seconds. This also makes self-hosting mo
78.
by zrail 9mo ago
The minimum publicly routable IPv4 subnet is /24 and IPv6 is /48. IPv6 is effectively free, there are places that will lease a /48 for $8/year, whereas as far as I can tell it's multiple thousands of USD per year to
79.
by zrail 9mo ago
Curious how long you've been sitting on the IP block. I've been nosing around getting an ASN to mess around with the lower level internet bones but a /24 is just way too expensive these days. Even justifying an ASN is hard, s
80.
by zrail 9mo ago
My security update system is straightforward but it took quite a lot of thought to get here. My self hosted things all run as docker containers inside Alpine VMs running on top of Proxmox. Services are defined with Docker Compose. One of th
81.
by zrail 10mo ago
I like to refer to it as the cooties ownership model. I.e. once you touch it you have cooties.
82.
by zrail 11mo ago
Chicken and rice is anything but bland. I haven't had Hainanese style but the Thai style khao man gai that Nong's serves in Portland is a flavor that I still remember more than a decade later.
83.
by zrail 11mo ago
Yep. I treat work computers as hostile entities. They are always on an isolated guest SSID and VLAN and I never use them for personal tasks. When my kids start bringing school-owned hardware home that's getting the same treatment.
84.
by zrail 11mo ago
On consumer chips the more memory modules you have the slower they all run. I.e. if you have a single module of DDR5 it might run at 5600MHz but if you have four of them they all get throttled to 3800MHz.
85.
by zrail 11mo ago
Tailscale has what they call Peer Relays now to help solve this problem: https://tailscale.com/blog/peer-relays-beta
86.
by zrail 11mo ago
Nobody who has used Helm in anger will debate this with you.
87.
by zrail 11mo ago
> Got a link to what you meant? This is pretty hard to search for. It's part of plan9: https://en.wikipedia.org/wiki/Acme_(text_editor)
88.
by zrail 11mo ago
Another pertinent example: (in the US) corporate officers are personally liable unpaid wages and can serve time for willfully neglecting to pay their workers.
89.
by zrail 11mo ago
Unfortunately not. The RP1 controls the stuff on the 40 pin connector and the firmware is locked down. That said, you do have access to the PIO block, which is a programmable state machine that can talk to (I think?) any GPIO on the connect
90.
by zrail 11mo ago
Heck, the Raspberry Pi 5 does this. GPIO is handled by an MCU that is effectively a Raspberry Pi Pico.

More ›