subnetspider @subnetspider

My main interests are IPv6, FreeBSD, ZFS and jails. I also enjoy playing around with automation, networking, virtualization, hardware, FOSS, and IT security. mastodon.bsd.cafe/@subnetspider localhost Joined June 2022

Tweets

938
Followers

331
Following

94
Likes

6K

subnetspider @subnetspider

a week ago

FreeBSD 15.1 is here, and my home server is already running it. :D

1 14 86 3K 13

View Details

subnetspider @subnetspider

2 weeks ago

@ChristianLempa They also don't make production networks secure. I once worked with a large customer, where all 15+ VLANs were routed by the core switches without a single ACL. You could go straight from the guest wifi network to the domain controllers and such. Scary how often I see this.

1 0 1 103 1

View Details

subnetspider @subnetspider

2 weeks ago

@oshogbovx This is why my important data is always stored on ZFS with redundant vdevs. Not a single byte lose or corrupted since 2019 :D

1 0 1 60 0

View Details

subnetspider @subnetspider

2 months ago

No idea why it did this, but the fact that other people have been trying to debug this problem for two years (to the day!) is something I find even more mind boggling.

0 0 0 46 0

View Details

subnetspider @subnetspider

2 months ago

Just had a fun network debugging session Two routers, both with VRRP enabled and both are master. Opened WireShark and saw zero VRRP advertisements on the network. It turned out that the 15-year-old D-Link managed switch was blocking all the VRRP packets for some unknown reason.

1 0 0 127 0

View Details

subnetspider @subnetspider

2 months ago

Just had both of my AdGuard Home servers die on me, turned out the latest version I installed moved the config file locations and can't start anymore. Fortunately I have two Unbound servers, they will be enough for the time being, guess I will take a look at this tomorrow...

0 0 0 87 0

View Details

subnetspider @subnetspider

2 months ago

@ChristianLempa OPNsense with the ACME Plugin and a few automations to deploy them locally as well as on other hosts.

0 0 1 232 0

View Details

subnetspider @subnetspider

2 months ago

I've just upgraded my FreeBSD Nextcloud server to Version 33.0.3, as well as Postgres from 17 to 18 and PHP from 8.3 to 8.4. Soon I'll also upgrade the jail from 14.3 to 15.x, but the host is going to be converted to pkgbase first. :)

1 1 4 244 0

View Details

subnetspider @subnetspider

2 months ago

The host is an old Dell T330, and since it uses the PERC H330, I had to modify the FreeBSD installer again, so it uses the newer mrsas driver. It's Intel Xeon E3-1230 v6 and 32 GiB of RAM are still fast enough for light virtualization tasks, so no reason to toss it. 😁

0 0 0 69 0

View Details

subnetspider @subnetspider

2 months ago

Yesterday I decided to move my test env at work from VMware ESXi 8.0 to Bhyve, so I exported all VMs, Installed FreeBSD 15.0 on a 2x SSD ZFS mirror, and set up the network (bridge / VLAN) today. Now I just need to converte the vmdk files and import them, let's see if it works.

1 0 0 92 0

View Details

subnetspider @subnetspider

3 months ago

@Acknologia @geerlingguy @TrueNAS If iXsystem decides it wants to paywall downloads and/or updates, you can't build it yourself and have to pay to use TrueNAS. Basically the path that Netgate took with pfSense.

0 0 0 29 0

View Details

subnetspider @subnetspider

3 months ago

@geerlingguy @TrueNAS For me, it all started with the rebranding of FreeNAS to TrueNAS CORE, culminated in the creation of TrueNAS Scale, and ended discontinuation of the BSD based TrueNAS. I can't say that I'm surprised, just disappointed. Really glad I decides to migrate my NAS to vanilla FreeBSD.

0 0 1 97 0

View Details

subnetspider @subnetspider

4 months ago

@ServeTheHome If this device also came with an integrated 5G modem, it would probably collapse into a black hole

0 0 0 29 0

View Details

subnetspider @subnetspider

4 months ago

@furiouswhopper @nsg650 Yes and no. Yes, IPv6 *can* make all devices globally addressable and accessible, no NAT or Proxies needed, like IPv4 once did. No, IPv6 (as well as IPv4) still require a firewall (e.g. on your ISPs router), if this is misconfiguration by your ISP, it's their fault, not IPv6's.

0 0 0 9 0

View Details

subnetspider @subnetspider

4 months ago

@nsg650 What kind of router doesn't have a firewall enabled by default in 2026? (Like seriously, I'd really want to know what make and model your ISP gave you that's this bad).

0 0 0 4 0

View Details

subnetspider @subnetspider

4 months ago

@vermaden @session_app @signalapp The biggest downside of Signal for me is that everyone I know only uses WhatsApp 😁

1 0 2 47 0

View Details

subnetspider @subnetspider

5 months ago

I just realized that I've spent most of the last eight hours rewriting and consolidating my Ansible roles and playbooks, something I've been putting off for the last two years. And the best part? I've just about finished half of it. 🤪

0 0 0 49 0

View Details

subnetspider @subnetspider

5 months ago

@ChristianLempa Zabbix Server for my "production" stuff and Uptime Kuma for "nonproductive" stuff (both on FreeBSD btw)

0 1 2 175 0

View Details

subnetspider @subnetspider

6 months ago

@vermaden Would be great if the current FreeBSD home page would at least be on par with the FreeBSD handbook page. It doesn't need to be fancy, but it could use a new layer of paint.

0 0 1 36 0

View Details

subnetspider @subnetspider

6 months ago

@quilnux @SCOTTHOGG *People in western countries that own most of the IPv4 address space. Try starting an IPS in India or get your own /24 IPv4 prefix to announce via BGP in 2026, just forget about it. Try to self host services at home, when your ISP uses CG-NAT but no IPv6, not going to happen.