BGP.guru

One of the first questions I had when Facebook launched their onion was “I wonder how stable it is?”.

While I’ve had most of my services IPv6 enabled for quite a while, I have not set up monitoring of those services over IPv6 yet.

On Sunday, September 13th, 2015 during the wee hours of the morning a change was made by AS7122 which silenced four Manitoban ASNs, and removed several other routes from the global routing table.

I recently went thru the process of upgrading most of my virtual machines from Debian Wheezy to Debian Jessie.

Nagios is an amazing network monitoring tool, and its logs are a greppable goldmine of information.

This blog post provides a general overview of the Internet Routing Registry.

For one reason or another, I recently ended up with a draft blog post stuck in my OS X Yosemite Trash.

One of the new features of IOS 15 that I’m most excited about is the ability to use RSA public key authentication.

Have you ever use a download manager to download multiple threads, in order to max out or more fully utilize your connection?

I’ve been running ciscodude.net at a new location for about a month now.

What are IPv6 Unique Local Addresses (ULA)?

I recently started maintaining this graph which shows the total number of AS Numbers in Manitoba.

This is a write up of an issue which I experienced on one of my networks.

Does everything still work?

I’ve been trying to track down an issue with SNMP on one of two redundant MikroTik Cloud Core CCR1036-12G-4S routers.

This is a second blog post in a related series, the first is located here.

This evening I successfully moved a second set of services from service provider IP space to BGP IP space.

Right along time with its six-month release schedule, Observium 0.14.11 has been released.

One of the most exciting new features to me in SaltStack 2014.7 is the nagios module.

As part of maintaining my list of Manitoban ASNs and their IPv6 status, I need to determine new Canadian, and specifically, Manitoban ASNs issued by ARIN.

I’ve previously written about my OpenBSD PF firewall in front of my VM server at my colo.

In response to the recent POODLE vulnerability in SSLv3, I have disabled SSLv3 support in anything of mine which speaks SSL/TLS.

I should start this off by saying that I contemplated much longer titles for this article, but kept it short for URL uniformity.

I run an OpenBSD system as a packet filter in front of my various virtual machines at my colo.

Today various sources announced CVE-2014-6271: “bash: specially-crafted environment variables can be used to inject shell commands”.

The Internet Storm Center had an interesting diary entry up today which I was able to independently confirm quite easily in under 5 minutes.

While I’ve been supporting making requests to ipquail.com with useragent curl and responding with only plaintext, I don’t have a formal API for the site.

I attended the ARIN on the Road event held yesterday (2014-09-11) in Winnipeg.

With the deployment of a new nameserver at DigitalOcean NYC3 yesterday (to replace one at NYC2, which doesn’t have IPv6), I have hit a fairly significant personal milestone – All of my public facing services are now fully IPv6 enabled.

Let me start this off by saying in this particular example, this is the wrong way to solve the problem.

There has been a lot of noise in Canada on Twitter about the widespread network issues Shaw was experiencing, and also a lot of speculation about what the cause of those issues were.

Sometimes you get a short URL for something and would like to know where it goes before clicking on it. cURL can help you determine this.

Its been 4 months since I last wrote about global BGP hijacking, when Indosat advertised 320k prefixes.

One of the realities of having public facing SSH is the continual brute force attempts.

This past weekend a colleague and I executed a successful core network change, from stacked Cisco 3750G’s to Brocade ICX6610’s.

One of the great things about DigitalOcean is that you can spin up a new small sized Debian VM in under 55 seconds.

I’ve been exposed to several different models of Brocade ICX switches lately, both the ICX6430 and the ICX6610.

By starting to use SaltStack to administrate my Debian VMs I’ve saved myself a lot of time logging into each machine, running apt-get update; apt-get upgrade.

I’ve always liked how the site ifconfig.me (down today it seems) returns JUST the IP address from command line when accessed via CURL.

I’ve been playing with SaltStack for a week or so now, and while I still haven’t even scratched the surface of what it is capable of yet, I am certainly saving a pile of time using it already.

I’ve often wondered if there is an easy way to generate ASCII network diagrams like those that appear in text RFC documents.

This week I changed that and set up a salt-master and several (OK, 10) salt-minions to take commands from the master. 8 local Debian Linux VMs, 1 Remote FreeBSD VM, and 1 remote Debian Linux VM.

I was always under the impression that to patch the free version of ESXi you needed to download the patches, and transfer them to a VMFS volume, then patch that bundle.

The first set pings a host (ipv4 or ipv6) and runs date when ping fails to respond within 1 second.

As you can see, it supports ipv4/ipv6: $ check-soa -i ciscodude.net ns0.ciscodude.net. 2604:4280:d000:11::6: OK: 2014061301 (0 ms) 199.202.21.6: OK: 2014061301 (0 ms) ns2.henchman21.net. 107.170.63.61: OK: 2014061301 (44 ms) ns3.hcdn.pw. 206.220.199.2…

I’ve been planning to move my website out of my basement for quite a while, and over the last week I’ve finally executed on the plan.

I’ve been wanting to play with GeoDNS to direct clients to servers with content nearer to them for a long time.

I’ve been meaning to colocate most of my basement servers for some time, and some major power problems today have only given me further drive to get that accomplished this week.

I’ve written about OpenBSD and BGP Looking Glasses before.

I’ve been a big fan of Sublime Text for quite some time now, to the point where I’ve almost considered purchasing a license for it.