equinox

he/him · FRRouting · Junisco & Hp3Com slayer · knows more about IP routing than is healthy · moonlights in bullying electrons around a circuit board

Public Key

npub12znsfznenq5pgwjulqpqeg9szhmq5kcuw40w2rzcv9vj4ugnuwaqsr4q3p

NIP-05 Address

equinox@chaos-social.mostr.pub

Profile Code

nprofile1qqs9pfcy3fues2q58fw0sqsv5zcptas2tvw82hh9p3vxzkf27yf78wspz4mhxue69uhhyetvv9ujuerfw36x7tnsw43q779jk2

Publishing to

relay.ditto.pub

Author Public Key

npub12znsfznenq5pgwjulqpqeg9szhmq5kcuw40w2rzcv9vj4ugnuwaqsr4q3p

Show more details

Last Notes

2026-06-09 13:17:28 UTC

- reply

@nprofile…3n63 that's another submission on the review pile 😂

2026-04-30 01:45:32 UTC

I don't understand why everyone is picking on algif_aead for copy.fail. It's authencesn that's actually fucking things up.
Sure, you could keep using authencesn for IPsec if you break AF_ALG AEADs. But why? I'd rather break ESN support in IPsec and keep AF_ALG working for AEADs.
It doesn't even break IPsec, it just makes it rotate keys more often in very high bandwidth situations.

2026-04-26 11:55:50 UTC

- reply

@nprofile…mv7s oh I'm not complaining about their charging for it. I'm complaining of the general weirdness of the system as a whole 😅

2026-04-26 11:48:43 UTC

- reply

@nprofile…mv7s RHEL is certainly "enterprise", for better and worse…

2026-04-26 11:47:29 UTC

- reply

@nprofile…mv7s ok, to be fair we never tried supporting Arch 😂
Our main problems with Fedora are actually weird packaging decisions for libraries we depend on, when they go through SOVERSION bumps. (That and the license server bullshit for RHEL. I have no idea how far that applies for different variants.)
But if you have users, it might be worth it. I guess for something like ngscopeclient, Fedora/RH might not be that rare to find as a desktop.

2026-04-26 11:42:42 UTC

- reply

@nprofile…mv7s do you have users on Fedora? In our experience it's the absolute worst in terms of time & resources needed to keep running vs. actual payoff in users. (Because both sides are notably worse than other distros.)
(We're considering switching to something else to cover rpm based distros, maybe Rocky Linux, but not sure yet)

2026-04-21 15:50:48 UTC

- reply

@nprofile…mv7s is that the Sonnet dongle or a more recent one? I thought about grabbing one, but tbh it's not worth it at this point.
As for putting things on TBT… there was some discussion about building a TBT OCP 3.0 NIC enclosure with some $people, that would also be a very nice form factor (not quite as small, but way smaller than PCIe card enclosures.)
Primary issue with that is OCP 3.0 expects good forced airflow…

2026-04-21 15:47:29 UTC

- reply

@nprofile…mv7s the alternative for the laptop would be a chonky PCIe enclosure, which I do have but keep for other tinkering. For docks with builtin 10GbE I unfortunately haven't found any with an SFP+ slot 😅
But also, yeah, 10Gbase-T is utter garbage. The SN2010 actually won't enable more than 4 Cu-SFP+s (in ports 1, 2, 17 and 18) because only those have 2.5W power budget. The other SFP28 ports have only 1.5W, and, well… 🫠

2026-04-21 15:19:27 UTC

- reply

@nprofile…mv7s I just noticed I can see on my power graph whether the 10GbaseT to my laptop is up 😂
(This meter only has the switch right now though, a Mellanox SN2010, I'm moving & stuff isn't set up yet)
https://assets.chaos.social/media_attachments/files/116/443/367/254/234/577/original/79f62ffed0b1367f.png

2026-04-21 09:26:14 UTC

- reply

@nprofile…mv7s 100W continuous for a month is $28 around here, it sums up 😂
But yeah if it's not outlet metered 🤷

2026-04-21 09:18:07 UTC

- reply

@nprofile…mv7s out of curiosity, do you have that switch on a metered circuit? If yes: how much does it pull idle? (And what's the exact type?)

2026-04-05 20:13:02 UTC

- reply

@nprofile…y6rq I don't think you're making the right argument there. There's simply no consensus for this document. There's a lot of cases where that's a hard determination to make; a pretty even split is not one of them. If anything, showing that it is in fact even (and not biased by random drive-bys or sockpuppets), and then insisting on the conclusion of no consensus would be the way to go.
They can publish on the individual stream. The bar to cipher suite numbers is only "specification required" ffs.

2026-03-19 02:30:11 UTC

- reply

@nprofile…mv7s I totally agree but from what I've seen of what these people are doing I'm a bit jaded and not super hopeful about getting useful things out of it
The problem is also that building e.g. a Quadro card like you're describing would still incur fresh development costs and vendors just won't want to take those if the AI bubble is gone

2026-03-19 02:13:09 UTC

- reply

@nprofile…mv7s I'm afraid a good percentage will be straight up junk, i.e. big fat very-low-precision matrix multipliers… 😢 … the network gear should indeed be reusable though

2026-03-19 01:55:04 UTC

"128*400G" … these scales 😵‍💫 … all just for some slop …
https://assets.chaos.social/media_attachments/files/116/253/345/792/473/419/original/9175c2236dfecde3.jpg

2026-03-03 17:14:18 UTC

For the record, this is the IPv4 NAT performance of a Mellanox SN2010. The fact that it only has a single interrupt/queue is the major limiting factor, it's maxing out one of the 4 CPU cores while the other 3 twiddle their thumbs.
(The upload performance is probably also limited by Firefox not being able to send enough.)
IPv6, being hardware line rate switched, of course has none of these problems…
https://assets.chaos.social/media_attachments/files/116/166/350/471/055/934/original/90ff01e88dfc5bcb.png
https://assets.chaos.social/media_attachments/files/116/166/362/516/675/601/original/42060f63b3c162bd.png

2026-03-02 00:58:45 UTC

- reply

@nprofile…mv7s @nprofile…xr5j @nprofile…vnlz you can 'git bundle' the thing and hand the resulting file into the CI runner; if it doesn't need to pull dependencies (or if you can include those) you can have runners entirely without internet access.
(I demoed this at work but we deemed it excessive particularly since it makes debugging the CI rather annoying.)

2026-02-27 13:24:06 UTC

This whole business about deprecating the old ISC dhcp client would go much better if there was a fucking usable and *unobtrusive* alternative.
Like, yeah, thank you dhcpcd for fucking with half of my /proc/sys/net/ipv[46]/conf settings, I DID NOT ASK FOR ANY OF THAT.

2026-02-21 03:09:13 UTC

- reply

@nprofile…mv7s this sounds like an integration problem? Phase at (T) is "just" the fractional part of ∫ [0…T] f(t)dt and whether you can calculate that depends on what f(t) is specified as(?) I guess if your input f(t) is an arbitrary waveform, there's some math magic™ to apply… it's been a while since analysis at uni… 🤔 … I might be thoroughly confused/misunderstanding something

2026-02-10 16:35:39 UTC

- reply

@nprofile…y6rq sorry, I thought we were in the realm of arguing the technically correct (bureaucratic) here 😜
On the plus side it seems it got fixed between GCC 14 and 15.

2026-02-10 16:22:27 UTC

- reply

@nprofile…y6rq you don't need -m32, you need -mfpmath=387

2026-01-18 05:07:16 UTC

- reply

@nprofile…0adl …und genau deswegen war es eine gute Idee Signal zu empfehlen ohne das Fass aufzumachen für wen jetzt genau wann Threema oder Telegram oder Brieftauben besser sind. Signal deckt 95% ab, und für die restlichen 5% kann man dann individuell gucken ohne die 95% ins Chaos (yes) zu reißen.

2026-01-16 04:05:35 UTC

- reply

@nprofile…mv7s not having 1500 is normal for a VPN though? I'm confused.

2026-01-16 03:47:42 UTC

- reply

@nprofile…mv7s people breaking PMTUD isn't quite T-Mobile's fault though, not that they're great or something, but on that one I really want to put the blame on the idiots actually breaking the internet with their dropping/non-handling ICMP.

2026-01-12 03:06:27 UTC

- reply

@nprofile…hf3e @nprofile…g8vl I love the UKCA conformity mark on this pile of wonky solder joints 😂

2026-01-09 23:08:06 UTC

- reply

@nprofile…9daw @nprofile…hnca ACK, a situation not improved by the lecture room situation & expectations being fuzzy :(

2026-01-09 17:23:20 UTC

- reply

@nprofile…9daw while you are mostly correct, the lecture halls have different rules again due to the VOC recording most talks. There is/was a large sign before you enter the room saying that anyone in the room may end up on a recording.
What this means for others taking photos, I don't know, and it's a bit annoying that this isn't even mentioned in the photo policy.
@nprofile…hnca

2025-12-19 05:39:17 UTC

- reply

@nprofile…syqt (I also spent 3 hours on that design hunting down a phantom 0.65V on the 1.8V permanent (ultra low idle current, <1uA) rail, until I turned off my very bright desk light and then it was gone… stupid green LED moonlighting as solar cell 😂)

2025-12-03 23:18:12 UTC

- reply

@nprofile…syqt 'full' OSes just map all config space from all devices and leave it, especially on >=40bit virtual address space platforms. It was even a thing on i686. You never know if a PCIe switch or bridge gets involved (even hidden in a single fleck of silicon) and remapping is annoying.

2025-11-25 18:55:16 UTC

- reply

@nprofile…syqt I have not 😮

2025-11-25 18:51:24 UTC

- reply

@nprofile…syqt we have named function arguments at home!
Named function arguments at home:
struct args {
int a, b, c, d;
};
int myfunc(struct args args);
\#define myfunc(...) myfunc((struct args){ __VA_ARGS__ })
use as:
myfunc(1, 2, .d = 4);
You're welcome! (For the new reason to scream into the abyss. I don't know where the brain bleach is, sorry.)

2025-10-06 10:42:45 UTC

@nprofile…em0x @nprofile…0hj7 vmtl. schon gesehen, aber Südkorea hat das mit "1x alles anzünden" etwas falsch verstanden…
https://koreajoongangdaily.joins.com/news/2025-10-01/national/socialAffairs/NIRS-fire-destroys-governments-cloud-storage-system-no-backups-available/2412936
https://www.chosun.com/english/national-en/2025/10/02/FPWGFSXMLNCFPIEGWKZF3BOQ3M/
"However, due to the system’s large-capacity, low-performance storage structure, no external backups were maintained — meaning all data has been permanently lost."

2025-08-14 19:27:30 UTC

- reply

@nprofile…facu @nprofile…r0dc z.T. steht in den AGB irgendwas, ich hatte Fälle von 6 und 12 Monaten. kA ob das "legal" ist, würde vermuten ja.

2025-08-12 18:08:23 UTC

- reply

@nprofile…8x2j @nprofile…hxp4 because it has no advantages over SMF.
And also this is in a peer group of networkers cursing 200m in-building cemented MMF runs 😅 😭

2025-07-09 23:11:49 UTC

Why the fuck am I watching a video at 23.8095 fps. Who fucked up their encoder settings this badly, and how?!?

2025-06-18 12:36:06 UTC

I accidentally looked at architecture specific details on atomic ops and now I know that while cmpxchg16b is guaranteed on RAM, it can (theoretically) fail half-executed on NVDIMMs if there's a power failure…
Can I un-learn this somehow? I'm not that young anymore and need the brain space 🙃

2025-06-18 07:54:16 UTC

- reply

@nprofile…8x2j ah right the 25G ones have those tiny stubby short press fit pins for data…
Yeah sorry this sucks and I don't think my comments are useful, sorry for wasting your time 😅

2025-06-18 07:47:59 UTC

- reply

@nprofile…8x2j hmm. Right, I *think* I saw a 2-high connector separate from cage just once, might be a 'boutique' part (or I'm imagining it entirely…)
Soldering the press-fit parts is not an option? (I have nowhere near your understanding on what that does to HF behaviour…)

2025-06-18 07:44:37 UTC

- reply

@nprofile…8x2j actually… is that an integrated cage + connector? I should be clear I did this with separate cages that are only mechanical parts. But I thought the integrated cage/connectors also come in THT solder?

2025-06-18 07:42:44 UTC

- reply

@nprofile…8x2j my personal approach is to slightly under-size the holes, just going by bottom end of specified tolerance (and not pay extra for a "press-fit" option if the fab has one), and then force in the connector.
Some of the press-fit "springs" *will* break, but honestly who cares?

2025-05-28 22:09:51 UTC

When you really, Really, REALLY, REALLLYYYYYY!!! want SSL support…
https://assets.chaos.social/media_attachments/files/114/587/737/491/293/830/original/0a9e44e4e1e1e014.png

2025-05-27 10:58:32 UTC

- reply

@nprofile…8x2j https://www.vibra-tite.com/threadlockers/medium-strength-removable/hot-lock-extreme-high-temperature-threadlocker/
(found with random googling, no prior personal experience, hopefully will never make that experience 🤣)

2025-03-31 17:19:39 UTC

"People are wrong on IETF mailing lists" is really the end boss of "people are wrong on the internet"…
Like, how many times and in how many ways am I supposed to explain how something works, both in reality as well as in established RFCs (which, in this case, easy to misread) before people run off and build things on top of plain incorrect understanding?
(I am completely, absolutely, totally certain I am right. I wrote code. I understand the code. I understand the RFC. Benefit in discourse: 0)

2025-03-30 09:14:01 UTC

- reply

@nprofile…p7ts you only need this particular fork if you don't have access to hardware perf counters. The version with perf counters is a bit faster. Also note that multithreaded things work but are serialised into a single thread (i.e. emulated task switching)

2025-03-25 16:10:44 UTC

- reply

@nprofile…p7ts stupid question from someone building software and packaging it: do you just have a different package manager than apt, or none at all?
FRRouting doesn't depend on a lot (<10 things) but it does have these deps (and a container is not viable*, and static binaries might address some bits but don't solve kernel dependencies)
* FRRouting is occasionally used to build connectivity for those very containers, containerising it is… unhelpful

2025-03-19 09:24:25 UTC

BGP over HTTP(/3, with QUIC) was just suggested on mic at IETF 🤣
(To be clear, it was effectively laughed out.)

2025-02-20 17:52:44 UTC

- reply

@nprofile…htaz don't have them in hand yet, but yeah that's one of the reasons I bought 50 of them… I need maybe 10 😅
(also the alternative would've been buying 10 for 110€…)

2025-02-20 17:39:42 UTC

anyone need CWDM4 (2km, SMF) QSFP28s? Just bought 50 of them on eBay… 150€… total 😯
…man this shit has gotten cheap.
(used of course, but still)

2025-02-14 12:15:15 UTC

I just found out we've been sending BGP ORF updates with incorrect encoding ever since that feature was added in FRRouting *checks notes* Quagga *checks again* Zebra in September of 2001.
How's everyone else's day going? 🤪

2025-02-10 15:02:21 UTC

I put the (public, posted here) RIPE PR photo of me on https://theyseeyourphotos.com/ and it's vaguely on point, …
… EXCEPT …
… it wants to target me for "Personalized NFT collectibles (OpenSea)"!!!!!!!1!1!1one!eleven
I have never been so offended! 😱 🤣