#dn42

Btw, I switched my HTTPS certificates from self-signed to Burble's ACME. #dn42

Half of my #dn42 bgp sessions are down. This is not really acceptable :| I probably need to go into the irc again...

Sooooo.... since 4/5 "dead" sessions are probably "gone from dn42" (can't find the addresses in the routing table anymore, maintainers domains dead, etc.pp), I only have one person, I think, which I need to contact. #dn42

Uhhh???? My #dn42 is down because... .... over tinc vpn, http and ping requests arrive at the server:; but dns requests (UDP!) don't? I.e. I run tcpdump, but I don't see anything arriving on port 53.

Uhhh? Apparently, I fucked something up at one point, I dunno when? But my tinc connection suddenly doesn't work anymore. And/or it's a firewall rule problem? I expect the path to go my home router -> my hetzner server but instead it goes my home router -> my netcup server --/didn't forward b/c not allowed/--> my hetzner server. uhhh??? #dn42

Should I try the DN42 thing? (I don't know anything about BGP and barrely know how to use git. ) #DN42 #BGP

New on the blog: patching FreeBSD machines inside DN42 without giving them a clearnet route. A small dual-homed VM lazily caches pkg.freebsd.org, update.freebsd.org and ftp.freebsd.org with nginx proxy_store, chases CDN redirects server-side, and serves it all over IPv6 into the mesh. pf default-denies both directions, and clients keep verifying signatures against the official FreeBSD keys. It is also a public DN42 service: point freebsd-update, pkg or bastille at bsdmirror.chofstede.dn42 and go from empty jail host to fully patched without touching the clearnet. https://blog.hofstede.it/a-caching-freebsd-mirror-for-dn42-nginx-proxy_store-pf-and-a-dual-homed-vm/ #FreeBSD #DN42 #nginx #RunBSD #SelfHosting

Had the problem on my DN42 (a distributed overlay network, that is sperated from the internet), that my FreeBSD servers couldn't update without hacky firewall tricks (NAT etc.) Did now finally solve that cleanly with a single caching Nginx server that is dual-homed (internet+dn42) and that enables me to use freebsd-update AND pkg from systems that only have DN42 connectivity :-) Also add that to the DN42 wiki and offer others to use it as infrastructure! bsdmirror.chofstede.dn42 (IPv6-only by design) #freebsd #dn42 #selfhosting #networking #ipv6

AI Agent Bankrupted Their Operator While Trying to Scan DN42 - Lan Tian @ Blog https://lantian.pub/en/article/fun/ai-agent-bankrupted-their-operator-scan-dn42lantian.lantian/ #ai #aiagents #dn42