Personal blog of a Linux and Networking professional
For those who have followed my in the last few years know that I am a big fan of Layer 3 routing, BGP, VXLAN and EVPN. In networks I design I try to eliminate the use of Layer 2 as much as possible. Although I think VXLAN is great, it still creates a virtual Layer Continue reading Linux bridging with Virtual Machines and pure L3 routing and BGP
Recently, I became a RIPE member, which resulted in an IPv6 /29 subnet being allocated to me. One of my main goals was to route a /48 from this /29 to my home, allowing me to use my own IPv6 addresses on my local network. However, my ISP (Ziggo Zakelijk) does not allow me to Continue reading Routing IPv6 through Wireguard with MikroTik and Debian
Early 2025 I ve decided to become a RIPE member with my own holding (BV, Netherlands) so I could obtain my own ASN and IPv6 PA space. My goal was to obtain IPv6 space which I could use forever and knowing I would never have to renumber again. Initially I started with PI-space, but that s limited Continue reading I became a RIPE LIR! :-)
Many Ceph storage environments out there are deployed using a L2 underlay. This means that the Ceph servers (MON, OSD, etc) are connected using LACP/Bonding to a pair of switches. On their bond0 device (example) they are assigned an IPv4/IPv6 address and this is used for connectivity between the Ceph nodes and the Ceph clients. Continue reading Using L3 (BGP) routing for your Ceph storage
Our house (2020) is being heated and cooled by a Stiebel Eltron WPL20AC heatpump. Being a techy I searched if there was a possibility to extract some statistics out of the heat pump and connect it to my Home Assistant. The pictures above show the system while being installed in the summer of 2020. ISG Continue reading Connect ISG Web to Stiebel Eltron WPL20AC heatpump
Recently I was asked to assist with setting up a BGP+EVPN+VXLAN network where Juniper MX204 routers would be the gateways in the VNI and the rest of the network would consist of Spine and Leaf switches running Cumulus Linux. The actual workload would run on Proxmox servers which would also run Frrouting. I wrote a Continue reading EVPN+BGP+VXLAN between JunOS and FRR (with Cumulus)
I recently upgraded my Lenovo X1 Carbon (5th gen) from Ubuntu 20.04 to 22.04 and my 4G connection stopped working. I travel a lot and one of the great features of the Lenovo X1 Carbon is the (optional) 4G/LTE modem which I use with an additional data-sim of my provider (Vodafone NL). After not really Continue reading Lenovo X1 Carbon FCC Unlock of EM7455 under Ubuntu 22.04
Proxmox by default does not support BGP+EVPN+VXLAN but there is a small piece of documentation on the Wiki of Proxmox. Using the routing daemon Frrouting a Proxmox cluster can also be configured to use BGP with EVPN+VXLAN for it s routing allowing for very flexible networks. I won t go into all the details of Frr, BGP, Continue reading Proxmox with BGP+EVPN+VXLAN
Apache CloudStack does not have a build-in mechanism to rate-limit failed authentication attemps on the API. This potentially allows an attacker to brute-force credentials and gain access. The api.allowed.source.cidr.list configuration option in CloudStack can be used to globally or on an account level limit the source IPs where the API allows requests from. This is Continue reading Using fail2ban…
When we talk about IP protocols and IPv6 in this particular case we think about routing over the internet. But what many do not know is that IPv6 is already playing a major role in all kinds of systems. In this post I m not going to explain IPv6 in detail, for many things I ll link Continue reading Combined Charging System (CCS) and IPv6