> But the moment two sites share the same address range, you have an ambiguity that IP routing cannot resolve.
Writing PF or nft rules to NAT these hyper-legacy subnets on the local side of the layer3 tunnel is actually super trivial, like 20 seconds of effort to reason about and write in a config manifest.
Like written the article, a device on the customer site is required. At that point you might as well deploy a router that has a supportable software stack and where possible sober IP instead of legacy IP.
.
I have been running IPv6-only networks since 2005 and have been deploying IPv6-only networks since 2009. When I encountered a small implementation gap in my favorite BSD, I wrote and submitted a patch.
Anyone who complained about their favorite open source OS having an IPv6 implementation gap or was using proprietary software (and then also dumb enough to complain about it), should be ashamed of themselves for doing so on any forum with "hacker" in the name. But we all know they aren't ashamed of themselves because the competency crisis is very real and the coddle culture let's such disease fester.
There is no excuse to not deploy at minimum a dual-stack network if not an IPv6-only network. If you deploy an IPv4-only network you are incompetent, you are shitting up the internet for everyone else, and it would be better for all of humanity if you kept any and all enthusiasm you have for computers entirely to yourself (not a single utterance).
This may come as a shock to someone stuck in a radical far left bubble but people who are not either a citizen of one of the several states or not a citizen of the federal government (nor both) are not parties to the agreement that is the constitution.
"concentration camp" isn't a root command line term to people with critical thinking skills.
Anyone who is neither a state citizen or federal citizen and does not have a valid VISA (or some equivalent) is an unlawful invader.
Again, this may come as a shock to someone stuck in a radical far left bubble, but most Americans' sentiment, the Americans who are busy raising their families, the ones who actually pay all the taxes that pay to house and feed all of these unlawful invaders stuck in limbo is: they are lucky we don't just kill them all.
I know it's shocking to those stuck in a radical far left bubble, but it's the reality. The state governments and federal governments were formed to protect what the founders wrote: "our posterity". Not every third world rando who shows up for the gibs Biden promised rather than fix their own country.
If you want to be effective in your activism, try to avoid "rhetorical correct" terms. Those terms only work on a particular lower class and only piss off the people with critical thinking skills because it comes across as trying to bullshit them in a malicious way (which it is).
> or you have a child or family member in one of our concentration camps
I must be one of those comfortable and oblivious tech workers because I don't know about any concentration camps in the US. So you'll have to tell me what this is about.
The Sig P320 that an agent took off of him went off while it was in a federal cop's hand. This is the same Sig P320 that the US Army rejected and was mass recalled for going off on its own.
Unfortunately, when the shot went off he was still fighting with them, actively resisting and not complying. Fighting with federal cops like that is a good way to get killed. He played a stupid game and won a stupid prize.
Perfect. Now all they need to do is set up the redirect.
Every bot is doing something on behalf of a human. Now that LLMs can churn out half-assed bot scripts every "look I installed Arch Linux and ohmyzsh" script kiddie has bots too.
Bots aren't going anywhere.
"Use the web the way it was over 10 years ago plox" isn't going to do it.
What I have seen in practice (not with Spotify) is a law firm that is cozy with both entities will be delegated standing, the "powers" in power of attorney but with clauses defining a limited scope and "escape hatch" and "kill switch" clauses.
Make the data available through bit-torrent and IPFS. Redirect IPs that make excessive requests to response only kilobytes in size "use the torrents and IPFS".
As an SRE, the only legitimate concern here could be the bandwidth costs. But QoS tuning should solve that too.
Supposedly technical people crying out for a journalist to help them is super lame. Everything about this looks super lame.
If you aren't on a high talent density team comprised of people you have learned you can trust, assume the worst because far too often the original author didn't know why either.
In 2014 and 2015 I was able to make some great things happen because of the people (mostly former Sun people) in the #smartos and #illumos IRC channels on Freenode. They were very helpful. Maybe this is because I put actual thought and effort into my questions and didn't waste their time with stupid questions (ones already answered in documentation or found in mailing lists).
I am on a team that runs database services (mostly Postgres and DuckDB) on an internally maintained illumos branch that runs in VMs on the client's Oxide racks.
Dtrace, Zones, and an "untainted branch" of ZFS are the main reasons given when I asked why illumos and not Linux. I did later see the light (heh) with the Dtrace part for sure.
> Are there any workloads (other than as a VM host) that run on SunOS derived OSes?
Pretty much any workload that runs on Linux or BSD. The exceptions that are notable are Ceph and "big network" applications like XDP/VPP/DPDK centric stuff like edge router or DDoS protection.
Zones provide full security isolation. A downstream user can have root in an illumos Zone and there isn't anything to worry about other than CPU side-channel flaws (which are or are not a problem depending on use case). FreeBSD's Jails, as shown by a 39C3 talk given this winter showed that the FreeBSD kernel is highly vulnerable to processes running as root within a Jail. Security isolation that can be relied on for untrusted workloads in Linux, in the form of containers at least, never really materialized.