home.social

#vpp — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #vpp, aggregated by home.social.

fetched live
  1. Нейрослоп, VLAN и одна старая мечта: как я начал делать Visual IDE для сетей

    Кстати, хочу поблагодарить сообщество за обратную связь по EvertyDesk . Я увидел огромное количество замечаний, идей и реальных проверок. Много ребят запускали проект у себя, ковыряли его, находили проблемы, и вместе мы дотащили всё до версии 2.0.1. Да, я перепрыгнул с 0.0.1 почти сразу. Иногда нумерация версий тоже хочет жить быстрее разработчика. Нейросети очень помогают добивать мелкие и очевидные баги. Это невозможно сравнить с тем, как я работал раньше, и с тем, как работаю сейчас. Некоторые спрашивали про Contributor в виде cloud. Ребят, было бы стыдно этого не указать. Значительная часть работы действительно идёт в диалоге с нейросетями. Я фанат технологий, и иногда меня в хорошем смысле удивляет, насколько круто они умеют делать рутинную работу. В целом я считаю, что мы живём в удивительное время. Меня можно за это хейтить. Можно не хейтить. Я просто качусь по общей технологической волне и не особенно жду признания. Сегодня я могу делать вещи, которые раньше даже в виде заказной разработки выглядели безумными идеями. Поэтому я решил начать параллельную серию статей. Помимо своего VST3-плагина для сведения я хочу наконец сделать то, о чём мечтал годами, пока работал ведущим инженером у частного интернет-провайдера.

    habr.com/ru/articles/1068948/

    #MikroTik #RouterOS #VLAN #DPDK #VPP #визуализация_сетей #сетевой_эмулятор #C# #Avalonia #нейросети

  2. My first set of patches got merged into #vpp :D

    I ran into a funny bug where nonblocking sockets can poll the status with `connect()`, but vcl (through the ld_preload "posix"-ish socket shim) opened a new session every time, until eventually exhausting the port limit, which flooded the ctrl_queue with errors, those didn't get processed fast enough, until eventually the main vpp process did an oom segfault.

  3. Как разделить корпоративную сеть на изолированные зоны с помощью одного NGFW

    Когда в сети нет сегментации, компрометация любого узла открывает атакующему прямой путь ко всему остальному. Бухгалтерский сервер, производственная АСУ ТП, веб-приложение и рабочая станция стажёра существуют в одном пространстве — с точки зрения сетевой связности между ними нет разницы. Сегментация решает эту проблему архитектурно: каждая зона изолирована, трафик между зонами проходит только через точку фильтрации, компрометация одного сегмента не даёт автоматического доступа к другим. В этой статье разбираем, как это реализовано в

    habr.com/ru/companies/ideco/ar

    #vpp #zbf #ngfw

  4. For an upcoming article on #vpp and #eVPN I have a screencast to share.

    This 3 minute recording shows the functionality that I intend to ship in v1.0.0 next month. I demonstrate creating a group of VPP routers in an eVPN bridge-domain, including manual failover (2 seconds), and automated failover (8 seconds) between VPP nodes in Zurich and Geneva.

    See also asciinema.org/a/1222897 for the raw .cast file.

  5. Ils sont en train de péter l'#Internet :
    > cette tendance encourage les monopoles et risque de rendre Internet moins ouvert et plus vulnérable aux pannes

    The Shift in #Peering Threatening the Internet’s Foundations - Internet Society (João Paulo de Vasconcelos Aguiar)
    internetsociety.org/blog/2026/

    #GAFAM #IXP #VPP #ISOC

  6. Testing an animated GIF post, although it's limited to 1 Mpix, so font-size is 10pt only. It shows an exciting technical demonstration of my ongoing VPP EVPN work, although perhaps not in full resolution (in more ways than one)

    #vpp

  7. Automation is such a beautiful thing, when done safely.

    #vpp #gitea #selfhosting

  8. Yesterday we upgraded the transmission core switches at Qupra DC - while NorthC in Almere was busy burning down.

    Yesterday we took MPLS into service, and are delivering our first 20 or so circuits.

    Today we will connect Iron Mountain to Qupra using a DWDM connection. EUNetworks will lose network redundancy with only one uplink left. Then, on Sat/Sun we will move from EUNetworks to Iron Mountain, so the window of risk is only two days.

    #selfhosting #vpp

  9. Scratched an itch that's been bothering me for a while. I created a vpp-pcap tool to serve network engineers working with #VPP who want something akin to #tcpdump.

    root@jt-router:~# vpp-pcap -i any --print
    2026-05-05 02:27:16.544645919 lan Inbound 192.168.37.1224.0.0.251  MDNS 212 Standard query response 0x0000 SRV, cache flush 0 0 44677 lgwebostv.local NSEC, cache flush lgwebostv.local NSEC, cache flush LG webOS Projector 3D93._hap._tcp.local AAAA, cache flush 2604:2940:4001:172:32b1:b5ff:feb9:232e A, cache flush 10.11.64.235
    2026-05-05 02:27:16.568789127 lan Inbound 2602:f90e:10:0:18ff:7059:2bb8:3aac → 2602:f90e:10:0:ffff:ffff:ffff:fffe ICMPv6 90 Neighbor Solicitation for 2602:f90e:10:0:ffff:ffff:ffff:fffe from 16:59:1d:c2:0d:c7
    2026-05-05 02:27:16.568827057 bvi100 Outbound 2602:f90e:10:0:ffff:ffff:ffff:fffe → 2602:f90e:10:0:18ff:7059:2bb8:3aac ICMPv6 86 Neighbor Advertisement 2602:f90e:10:0:ffff:ffff:ffff:fffe (rtr, sol, ovr) is at de:ad:00:00:00:64
    2026-05-05 02:27:16.568834557 lan.30 Outbound 2602:f90e:10:0:ffff:ffff:ffff:fffe → 2602:f90e:10:0:18ff:7059:2bb8:3aac ICMPv6 90 Neighbor Advertisement 2602:f90e:10:0:ffff:ffff:ffff:fffe (rtr, sol, ovr) is at de:ad:00:00:00:64
    2026-05-05 02:27:16.568929957 lan Inbound 2602:f90e:10:0:18ff:7059:2bb8:3aac → 2602:f90e:10:0:ffff:ffff:ffff:fffe ICMPv6 90 Neighbor Solicitation for 2602:f90e:10:0:ffff:ffff:ffff:fffe from 16:59:1d:c2:0d:c7
    2026-05-05 02:27:16.568934037 bvi100 Outbound 2602:f90e:10:0:ffff:ffff:ffff:fffe → 2602:f90e:10:0:18ff:7059:2bb8:3aac ICMPv6 86 Neighbor Advertisement 2602:f90e:10:0:ffff:ffff:ffff:fffe (rtr, sol, ovr) is at de:ad:00:00:00:64
    2026-05-05 02:27:16.568935527 lan.30 Outbound 2602:f90e:10:0:ffff:ffff:ffff:fffe → 2602:f90e:10:0:18ff:7059:2bb8:3aac ICMPv6 90 Neighbor Advertisement 2602:f90e:10:0:ffff:ffff:ffff:fffe (rtr, sol, ovr) is at de:ad:00:00:00:64
    

    VPP has some very rich tracing tools, but I find them ergonomically challenging to use. I came up as a network engineer in the late 90s and early 2000s - this feels much more natural to me.

    The repository is on GitHub. Both a plugin and a small Rust utility are used to provide live access to data passing through the VPP dataplane. It can also be chained with tcpdump, tshark, or wireshark to use those familiar interfaces. Usage details are in the GitHub README.

    License is Apache 2.0, so use it as you'd like.

  10. I might experiment with RFC 8925 tomorrow night to signal to clients on my #IPv6 preferred subnet to disable their IPv4 stacks altogether. That might take another patch to the #VPP router advertisement process.

    I can disable IPv4 on my Macs and they engage the CLAT based on the PREF64 and RDNSS flags. But Android seems to be stubborn. It won't stay connected without DHCP (v4) on the network. Maybe RFC 8925 will help.

  11. Extending the Vector Packet Processing Engine

    I've been building core networking components to leverage VPP more fully as a branch router. Here is an overview of that work.

    enigmatick.social/objects?uuid

  12. BSDCan bsdcan.org/2026/ Tutorial Wednesday 2026-06-17: 09:00 - 16:00 DMS 1120
    VPP on FreeBSD Tutorial - Building high capacity networks
    Massimiliano Stucchi
    bsdcan.org/2026/timetable/time
    To register bsdcan.org/2026/registration.h @bsdcan #freebsd #networking #vpp

  13. Running a Static CT log is fun!
    IPng's logs are being used in production by most public CAs, and are being monitored by most public log verification and monitoring companies.

    This little web cluster does 140M/day (1600/s), and scrapers / dos attacks are becoming a thing!

    #ctlog #vpp #selfhosting

  14. Четыре миллиарда лет R&D: что биология говорит об архитектуре NGFW

    Попытка посмотреть на идеи архитектур систем сетевой безопасности через призму 4 млрд лет эволюционных экспериментов от генерального директора компании Дмитрия Хомутова.

    habr.com/ru/companies/ideco/ar

    #ngfw #ideco #ips #dpi #vpp #dpdk #компьютерные_сети #информационная_безопасность #информационные_технологии #будущее

  15. eVPN/VxLAN interop between VPP, Nokia and Arista is a fact!
    #vpp #bird

  16. I guess I have VXLAN point-multipoint tunnels working in VPP. The cool thing is, I am at 39000ft over the Atlantic right now.

    eVPN/VxLAN gets closer every day! Take a look at gerrit.fd.io/r/c/vpp/+/45221 to see what I got so far #vpp

  17. A reminder to check your power plan.

    I just switched from one big power co to another.🤦

    Surprisingly, it's a much better plan for me, despite higher kWh costs. I'm fully solar, almost zero imports & lots of exports—I benefit most from lower daily & higher export rates. There's a connection fee, but I'll easily recover that.

    Cheaper plans are available, but not with a decent feed in, unless I cede battery control to a VPP. I'm not ready for that yet. Maybe next year. 🤷

    #Electricity
    #VPP

  18. @electrek
    There are certainly all sorts of reasons not to like or trust Tesla (or perhaps specifically Musk), but ideological purity tests shouldn't blind us to the positive potential.

    There are already almost 1/4 million Tesla vehicles in the UK that represent a theoretical battery pool of almost 18 GWh. Realistically in practice about a tenth might be available at any point in time.

    That's an order of magnitude more than typical large grid batteries.

    #Battery
    #RenewableEnergy
    #VPP