Kazaii

joined 1 year ago
 

VyOS 1.4.0 is finally here as a full LTS release (although, it's early production access).

So many great features are highlighted in the post. I've been using 1.4 images for quite some time, with great success, in my labs. Looking forward to using this one more.

Congrats to the VyOS team.

[–] Kazaii@sh.itjust.works 1 points 8 months ago

Thanks for reporting back. Every time I looked at it's features, I came to roughly the same conclusions. Glad you actually did the work to try it, though.

[–] Kazaii@sh.itjust.works 1 points 9 months ago

Looks cool. Adding to my linkding. Thanks!

[–] Kazaii@sh.itjust.works 1 points 10 months ago

This release has such bangers. Was so excited to read it in my RSS feed today & comment here.

  • IPv6 segment routing (SRv6) support
  • BGP monitoring (BMP) suppor
  • Firewall flowtable offload functionality

And the ultimate biggie: The long-awaited ability to rollback configuration without having to reboot is finally here (T5249).

Thanks so much to the VyOS team for an awesome RC.

[–] Kazaii@sh.itjust.works 2 points 11 months ago

Yet another reason to love VyOS

[–] Kazaii@sh.itjust.works 1 points 11 months ago (2 children)

Yep, mainly because it's targetting DC/SP operators, rather than just the home

[–] Kazaii@sh.itjust.works 1 points 11 months ago

This is somehow worse than "five giant websites, each filled with screenshots of text from the other four"

[–] Kazaii@sh.itjust.works 2 points 1 year ago

You just hurt Huawei & Arista's feelings. /s

[–] Kazaii@sh.itjust.works 1 points 1 year ago

Cool project. Saving it for future reference, once I get a better handle on Rust.

[–] Kazaii@sh.itjust.works 2 points 1 year ago

Another vote for LibreNMS. I've been using it for a long time and it's just great for most small - relatively large orgs (you have to work a bit harder to deploy it properly / distributed, if you're going for a larger build).

I've also had Zabbix data piped into grafana and that was rock solid.... I just find that Zabbix requires quite a bit more finessing to get going, if you're not a seasoned sysadmin.

[–] Kazaii@sh.itjust.works 1 points 1 year ago

Sorry, I commented then went to Europe for 3 weeks; Browsing detox.

Symmetric NAT wouldn't be an issue for Nebula at all -- or WireGuard, as you know, but neither ZeroTier.

If you're worried about CGNAT, it has several ways to deal with it:

https://nebula.defined.net/docs/config/punchy/

The lighthouse can also act as a bastion/proxy and handle the connections for you, if your two nodes can't speak directly.

That being said.... if you're supporting other users, I think wireguard is the way to go.

[–] Kazaii@sh.itjust.works 4 points 1 year ago (3 children)

I've been using Nebula for a long time. It's great and definitely worth your time to setup.

 

Great project for anyone who likes what the Vyatta project was doing, or anyone who wants a more operator focused distribution of FRR.

11
submitted 1 year ago* (last edited 1 year ago) by Kazaii@sh.itjust.works to c/networking@sh.itjust.works
 

I went to NANOG88 last week. It was a great time, and I haven't been since 76 in DC.

They just posted the talks yesterday. Allow me to share some of my favourites I attended:

AWS deep dive ( architecture hints & hardware used in AWS):

Design Driven Network Assurance (Person at MLB discusses his approach to Network testing automation.... he has previous talks on how the code works).

Deploying a backbone in APAC (A little fluff but F5 shares the troubles with submarine fiber in the APAC region).

New encrypted protocol stack (Mainly about QUIC pattern/flow detection & behaviour)

Keynote from Len (of Cisco) was nice. A lot better vibes than Cisco Live apparently had the week before.

Those are just the ones that stood out. There are some other interesting ones that I attended or wanted to attend but was busy doing the hallway track. I will start drafting my blog post on the content, once I've reviewed my notes & the slides.

view more: next ›