• 1 Post
  • 289 Comments
Joined 1 year ago
cake
Cake day: June 30th, 2023

help-circle



  • You can do reverse proxy on the VPS and use SNI routing (because the requested domain is in clear text over HTTPS), then use Proxy Protocol to attach the real source IP to the TCP packets.
    This way, you don’t have to terminate HTTPS on the VPS, and you can load balance between a couple wireguard peers so you have redundancy (or direct them to different reverse proxies or whatever).
    On your home servers, you will need an additional frontend(s) that accepts Proxy Protocol from the VPS (as Proxy Protocol packets aren’t standard HTTP/S packets, so standard HTTPS reverse proxies will drop them as unknown/broken/etc).
    This way, your home reverse proxy knows the original IP and can attach it to the decrypted http requests as x-forward-for. Or you can do ACLs based on original client IP. Or whatever.

    I haven’t found a way to get a firewall that pays attention to Proxy Protocol TCP headers, but I haven’t found that to really be an issue. I don’t really have a use case





  • Yeh, immutable distros… You can install software, it’s just you have to declaratively define what software you want, then apply that as a patch.
    You don’t just apt install cowsay, you have to create a file that defines the installation of cowsay.
    This way, if you have to change how cowsay is installed, you tweak that patch file and reapply it.
    If you have to wipe & reinstall (or get a new computer or whatever) you just apply all your patches, and the system is the same again.







  • I’m saying it’s false to apply Occam’s razor to this scenario and draw a conclusion that this is caused by non-human life.

    I’m not assuming earth is unique. There have been many earth-like planets that have been discovered.
    I’m not even assuming humans are unique, given all of space-time.

    It is extremely unlikely that there exists intelligent life other than humans at this time (or within the window-function of time required for us to receive a transmission from however many million lightyears).
    Like, it is vanishingly small. The insane series of events that has lead to an intelligent species being dominant on a planet is ridiculous, to be honest.
    In other words, humans are essentially unique at this point in “observable” time.

    It is extremely likely it is a natural phenomena that we don’t understand, or even equipment malfunction, misinterpretation, miscalculation etc.
    We have discovered unknown signals, then learnt what they are. Humans don’t know everything.
    We have discovered unknown signals, then realised it was a nearby microwave, or a dodgy connection, or whatever. Humans make mistakes.

    The simplest explanation in order to not have to deal with a new research project is probably “aliens”. But the simplest explanation is “natural phenomena we don’t understand yet”





  • It’s not a workaround.
    In the old days, if you had 2 services that were hard coded to use the same network port, you would need virtualization or a different server and make sure the networking for those is correct.

    Network ports allow multiple services to use the same network adapter as a port is like a “sub” address.
    Docker being able to remap host network ports to containers ports is a huge feature.
    If a container doesn’t need to be accessed outside of the docker network, you don’t need to expose the port.

    The only way to have multiple services on the same port is to use either a load balancer (for multiple instances of the same service) or an application-aware reverse proxy (like nginx, haproxy, caddy etc for web things, I’m sure there are other application-aware reverse proxies).


  • How the Linux kernel “made it” and is still free and open source is - imo - one of the pinnacles of humanity.
    It’s inspired so much other software to adopt the same philosophy, and modern humanity/science/society stands on those shoulders.

    I think science has missed that boat.
    Or that pinnacle was before the tools to support such an open source atmosphere/community were around… So not missed the boat, but swam before the boat was built