| 30 Jun 2025 |
Zhaofeng Li | For those with some kind of overlay mesh network, what kind of optimization do you do? Like tuning OSPF metrics based on some periodic measurement, etc | 22:06:08 |
| Etherbloom [they/sie] {you&} 🐲🦊👿 joined the room. | 22:35:42 |
| 1 Jul 2025 |
| Pratham Patel changed their display name from Pratham Patel (you can mention me) to Pratham Patel. | 05:10:13 |
| xanderio joined the room. | 12:12:49 |
xanderio | Hey, i'm currently hitting this issue (https://github.com/NixOS/nixpkgs/issues/380987) where systems using systemd-resolved resolve there FQDN to 127.0.0.2 which break services on that system trying to contact other services on the same host. This bug is included in 25.05.
I'm currently in the process on rebasing and trying to fix the outstanding issues with https://github.com/NixOS/nixpkgs/issues/132646. | 12:15:59 |
hexa | I run babeld with tunnel type, which uses an RTT based metric https://bird.network.cz/?get_doc&v=20&f=bird.html#toc6.2 | 12:19:04 |
hexa | as defined in https://datatracker.ietf.org/doc/rfc9616/ | 12:19:24 |
hexa | congestion causes delay, which will deprioritize a path | 12:19:38 |
hexa | i would suggest staying away from something as static as OSPF for private use | 12:19:50 |
magic_rb | Related note, say i ran bird on top of wireguard. Bird adjusts routing tables so it will still end up using the inkernel wireguard implementation right | 12:23:57 |
magic_rb | Yeah both babeld and bird just create a mesh on top of the existing wireguard network by adjusting routes | 12:26:25 |
magic_rb | Interesting | 12:26:26 |
hexa | wireguard just provides a transfer network, just make sure AllowedIPs= does not block the traffic you intend to send over it | 12:27:50 |
magic_rb | Mhm yeah thats how i understood things too, cool, maybe one day | 12:28:58 |
Zhaofeng Li | Yeah, AllowedIPs is a pain for dynamic routing... each edge in my mesh is on a separate interface with AllowedIPs=::/0 | 12:40:54 |
hexa | yeah, same here | 12:41:08 |
xanderio | Ok after looking deeper into this issue, I'm not convinced that this is the initial networking issue i've assumed. The more I look into this the more confused I get. | 12:58:52 |
Zhaofeng Li | actually I was thinking of modifying the wireguard client to have a fake ethernet header that's solely used to select the peer 🙃 | 13:01:16 |
Zhaofeng Li | but I never got to do it, and being able to see the peer name in bird (since it's the interface name) is a nice side-effect of having separate interfaces | 13:02:58 |
xanderio | I thing the issue is that the nginx on that host is configured to listen on "localhost" and not on 0.0.0.0. This probably cases this issue. Fun times debugging this 🫠 | 13:16:02 |
| shx228 joined the room. | 19:17:09 |
Zhaofeng Li | Is there a netbox alternative by any chance? Somehow every time I try to upgrade this thing, it ends up in disaster... 🙃 | 20:32:35 |
hexa | sheets | 20:33:53 |
Zhaofeng Li | like... literally google sheets? | 20:36:47 |
hexa | the answer is … not really, no great solutions | 20:44:36 |
hexa | so write your small number of things into a document with a structure that works for you | 20:44:53 |
hexa | setting up a netbox for private use is usually overkill | 20:45:04 |
magic_rb | In reply to @zhaofeng:zhaofeng.li Is there a netbox alternative by any chance? Somehow every time I try to upgrade this thing, it ends up in disaster... 🙃 https://github.com/oddlama/nix-topology may work for you | 20:51:33 |
Zhaofeng Li | interesting, might give it a try as an additional tool | 20:55:20 |
Zhaofeng Li | but I'm specifically looking for a IP management tool | 20:55:42 |