Recent content on telcokwaks.com
Introduction In the past, I have worked with proprietary firewalls (Stormshield, Arkoon, Netasq). The experience was rather mixed: the whole thing is hard to debug, updates are gated behind licenses, prices are excessive, and there are many technical limitations. So many reasons to rule out proprietary gear for this kind of design, in favor of a Linux-based solution (FRR, BGP, nftables): open…
The SatNOGS Network Project The goal of the SatNOGS project, as its “ about ” page indicates, is to have a global network of ground stations. An interface allows you to manage your station, observations, etc. The observations are freely accessible to anyone who wishes. It is possible to participate in the project by installing one or more stations, which allows access to other…
I manage virtualization servers, and we have full control over the hypervisors. The administration of the virtual machines is handled by the clients. Ubuntu is the most commonly used operating system on our virtual machines. We deploy them using cloud images . The initial configuration is managed by cloud-init , which takes care of networking and SSH keys. It also automatically installs the…
I operate servers where we use BGP (EVPN - VXLAN). The architecture is similar to the one described by Vincent Bernat . The hypervisors act as routers for the VMs. When I designed the addressing plan, I used IPv4/IPv6 networks in /24 and /64 respectively with the gateway VIPs positioned on the first available IP: 10.0.0.1/24 and fdc0:3489:e0fd::/64 . This topology has been working perfectly for 2…