SDN Clinic

Many folks and organizations are running their own Certificate Authority (CA) internally, to manage certificates for internal services and (infrastructure) devices, which won’t ever be exposed to regular users.

After I upgraded my IRC-host to the next Debian release, I rebooted the box, restarted the IRC and mail client to get things back up again, and wanted to log into my mailbox again.

Many, many years ago, I was introduced to Hammerfall, and especially their album Crimson Thunder, with the song of the same name.

With WireGuard having found its way into the Linux kernel and all major distributions out there, we’ve got a pretty powerful new card into our decks, that we can play when we’re in need of a VPN solution.

Linux has been a first class networking citizen for quite a long time now.

Linux has been a first class networking citizen for quite a long time now.

Linux has been a first class networking citizen for quite a long time now.

If you are like me and have some systems with fully encrypted disks, where you can’t or don’t want to be physically present for a system (re)boot, or which don’t have OOBM/KVM/CIMC access, this might be for you!

Although NetBox has a pretty nice data model and a lot of things found in common environments can be modelled pretty well, it sometimes reaches its limits.

Recently I wrote a script which aids in provisioning things inside our network, which will do some sanity checks and if all is good set up a number of things (prefixes, IPs, sub-interfaces, IPs on them, etc.).