I've been using Canonical's LXD for this, under Debian Trixie. Nowadays I can usually get away with just running containers for things I need vs full-blown VMs. I guess the only downside is that in order to get the…
There's also been advancements in cylinder head technology (i.e., VTEC, VVT, etc), which I guess also falls under control systems, but worth mentioning as these technologies are very cool. Honda's iVTEC has it down to a…
Sounds like a fun way to make a lot of friends in law enforcement :)
The only thing the ViRGE was good for was passing through to a Voodoo2
It looks like it can. Check out GPUDirect RDMA.
When you setup your single ethernet port (let's call it eth0) as a VLAN trunk port, you'll get the ability to configure multiple virtual interfaces off of it. How many virtual interfaces you get depends on how many…
Yes. You can take advantage of Netfilter's flowtable infrastructure and if you have the right hardware (NVIDIA/Mellanox ConnectX-5 or MediaTekMT7621) it will actually offload the processing of these packets to the NIC…
You'd need to run a daemon like miniupnpd to enable UPnP, however I'd avoid it if you can, as it can be a significant security risk.
You can still use the iptables interface for nftables rules if you'd like, but I think you miss out on things like atomic application of rulesets, ranges, lists, and variables (not shell variables).
I've gone through quite a few embedded devices for exactly this use case. So far I've used: - Soekris net4501 (x86, 486-class CPU) (discontinued) - PCEngines alix2d3 (x86, AMD Geode LX800) (discontinued) - PCEngines APU…
Hell, you could do this with a single NIC if you have a VLAN-aware switch.
Cool post, I love a good firewall story. One suggestion though: rather than doing this all on a single LAN network and having to deal with adding exceptions for devices that still need access to the Internet during…
Vegas should start taking bets
I hope this at least resulted in some equity of this project for you.
Have we already forgotten about Edward Snowden & the NSA?
Here's a fun one that I still haven't figured out: I recently purchased a Banana Pi 4 with the 802.11be Wi-Fi 7 module to be used as an access point. It generally works well as an AP and I'm getting full speeds.…
Never I hope
This is kind of a complicated example, but here goes: Say we want to create a report that determines how long a machine has been down, but we only want to count time during normal operational hours (aka operational…
Migrations are kind of a different beast. In that case I just stand up a test environment in Docker that does what it needs, then just trash it once things have been tested/verified.
Bingo...this is how I get around that.
I was able to accomplish this by doing each test within its own transaction session that gets rolled-back after each test. This way I'm allowed to modify the database to suit my needs for each test, then it gets…
Range types are a godsend when you need to calculate things like overlapping or intersecting time/date ranges.
Back when video games separated the men from the boys.
Damn, that was a walk down memory lane.
Well, look at how Microsoft tried to hijack the JVM back in the 90s. I think the big fear is that somebody creates a "mostly compatible" product, that in fact isn't 100% compatible, and tries to market it as the same…
I've been using Canonical's LXD for this, under Debian Trixie. Nowadays I can usually get away with just running containers for things I need vs full-blown VMs. I guess the only downside is that in order to get the…
There's also been advancements in cylinder head technology (i.e., VTEC, VVT, etc), which I guess also falls under control systems, but worth mentioning as these technologies are very cool. Honda's iVTEC has it down to a…
Sounds like a fun way to make a lot of friends in law enforcement :)
The only thing the ViRGE was good for was passing through to a Voodoo2
It looks like it can. Check out GPUDirect RDMA.
When you setup your single ethernet port (let's call it eth0) as a VLAN trunk port, you'll get the ability to configure multiple virtual interfaces off of it. How many virtual interfaces you get depends on how many…
Yes. You can take advantage of Netfilter's flowtable infrastructure and if you have the right hardware (NVIDIA/Mellanox ConnectX-5 or MediaTekMT7621) it will actually offload the processing of these packets to the NIC…
You'd need to run a daemon like miniupnpd to enable UPnP, however I'd avoid it if you can, as it can be a significant security risk.
You can still use the iptables interface for nftables rules if you'd like, but I think you miss out on things like atomic application of rulesets, ranges, lists, and variables (not shell variables).
I've gone through quite a few embedded devices for exactly this use case. So far I've used: - Soekris net4501 (x86, 486-class CPU) (discontinued) - PCEngines alix2d3 (x86, AMD Geode LX800) (discontinued) - PCEngines APU…
Hell, you could do this with a single NIC if you have a VLAN-aware switch.
Cool post, I love a good firewall story. One suggestion though: rather than doing this all on a single LAN network and having to deal with adding exceptions for devices that still need access to the Internet during…
Vegas should start taking bets
I hope this at least resulted in some equity of this project for you.
Have we already forgotten about Edward Snowden & the NSA?
Here's a fun one that I still haven't figured out: I recently purchased a Banana Pi 4 with the 802.11be Wi-Fi 7 module to be used as an access point. It generally works well as an AP and I'm getting full speeds.…
Never I hope
This is kind of a complicated example, but here goes: Say we want to create a report that determines how long a machine has been down, but we only want to count time during normal operational hours (aka operational…
Migrations are kind of a different beast. In that case I just stand up a test environment in Docker that does what it needs, then just trash it once things have been tested/verified.
Bingo...this is how I get around that.
I was able to accomplish this by doing each test within its own transaction session that gets rolled-back after each test. This way I'm allowed to modify the database to suit my needs for each test, then it gets…
Range types are a godsend when you need to calculate things like overlapping or intersecting time/date ranges.
Back when video games separated the men from the boys.
Damn, that was a walk down memory lane.
Well, look at how Microsoft tried to hijack the JVM back in the 90s. I think the big fear is that somebody creates a "mostly compatible" product, that in fact isn't 100% compatible, and tries to market it as the same…