danderson

#!/bin/bash

set -e

# Temporary directory for assembling the unified kernel image.
WORKDIR=$(mktemp -d)
trap "rm -rf ${WORKDIR}" EXIT

# Two directories on the EFI partition: Arch for the bootloaders, and
# Linux for the unified kernel images.

danderson

$ ./natprobe
NAT allocates a new ip:port for every unique 3-tuple (protocol, source ip, source port).
    This is best practice for NAT devices.
    This makes NAT traversal easier.
Firewall requires outbound traffic to an ip:port before allowing inbound traffic from that ip:port.
    This is common practice for NAT gateways.
    This makes NAT traversal more difficult.
NAT seems to try and make the public port number match the LAN port number.
NAT seems to only use one public IP for this client.
NAT seems to not block outbound UDP traffic.

danderson

I'm writing this up as a gist, because I'm not sure I'll pursue any of it, but it seems worth writing down.

A basic problem with IPv6-only LANs at the moment is that you still need support for legacy protocol servers, which implies you doing some kind of DNS64 and NAT64 (IPv6-to-IPv4 stateful translation).

Currently, NAT64 only exists outside the kernel, as userspace software. This is not ideal because it limits available performance (since you have to keep bouncing between user space and kernel space),

danderson

Keybase proof

I hereby claim:

• I am danderson on github.
• I am dave_universetf (https://keybase.io/dave_universetf) on keybase.
• I have a public key ASDD18cHJhm2zgQYbqAkCXAR_44usIKGXts2FqotdMwcRgo

To claim this, I am signing this object:

danderson

apiVersion: kubeadm.k8s.io/v1alpha3
kind: InitConfiguration
bootstrapTokens:
- token: "000000.0000000000000000"
  ttl: "24h"
apiEndpoint:
  advertiseAddress: 1.2.3.4
---
apiVersion: kubeadm.k8s.io/v1alpha3
kind: ClusterConfiguration

danderson

apiVersion: kubeadm.k8s.io/v1alpha3
kind: InitConfiguration
bootstrapTokens:
- token: "000000.0000000000000000"
  ttl: "24h"
apiEndpoint:
  advertiseAddress: $(head -1 /host/ip)
---
apiVersion: kubeadm.k8s.io/v1alpha3
kind: ClusterConfiguration

danderson

#!/bin/bash

# Temporary directory for assembling the unified kernel image.
WORKDIR=$(mktemp -d)
trap "rm -rf ${WORKDIR}" EXIT

# Two directories on the EFI partition: Arch for the bootloaders, and
# Linux for the unified kernel images.
#
# We want a directory for the bootloaders because Redhat's shim binary

danderson

function go-switch() {
    eval `command go-switch $@`
    rehash
}