Skip to content

Instantly share code, notes, and snippets.

View drewr's full-sized avatar
👋
hacking on datum.net

Drew Raines drewr

👋
hacking on datum.net
View GitHub Profile
@drewr
drewr / llm-benchmark.md
Last active May 10, 2026 03:57
LLM Inference Benchmark: CPU-only VM vs H100 — Ollama on Ubuntu 24.04

LLM Inference Benchmark: CPU-only VM vs NVIDIA H100

Current Hardware

Component Details
Host type QEMU/KVM virtual machine
CPU Intel Core (Broadwell, no TSX, IBRS) — 8 vCPUs (8 sockets × 1 core × 1 thread)
RAM 31 GB total, ~10 GB available
GPU Cirrus Logic GD 5446 (emulated VGA — no CUDA, no GPU inference)
@drewr
drewr / .env.example
Last active May 9, 2026 18:58
AirVPN IPv6 via WireGuard on MikroTik
# AirVPN WireGuard values — populated by wg-to-env.scm
AIRVPN_PRIVATE_KEY=
AIRVPN_TUNNEL_IPV4=
AIRVPN_TUNNEL_IPV6=
AIRVPN_MTU=1320
AIRVPN_SERVER_PUBKEY=
AIRVPN_PRESHARED_KEY=
AIRVPN_ENDPOINT_IP=
AIRVPN_ENDPOINT_PORT=
AIRVPN_KEEPALIVE=15
@drewr
drewr / slindseysr-pending-reviews.md
Last active May 8, 2026 16:03
Open PRs awaiting review from @slindseysr across datum-cloud

PRs awaiting review from @slindseysr

Repo PR Title Author
datum-cloud/engineering #259 ops: add on-call log issue template drewr
datum-cloud/enhancements #712 feat: Galatic VPC underlay network requirements privateip
datum-cloud/engineering #254 Ops Review: Weekly traffic report 2026-05-04 drewr
datum-cloud/datum #222 chore(deps): update dependency golangci/golangci-lint to v2.12.2 renovate[bot]
datum-cloud/engineering #251 docs: support process and knowledge base drewr
datum-cloud/infra #2271 feat: add us-central-2 (Chicago / ORD) edge cluster overlay aflor024
@drewr
drewr / gist:c4b1e02e1a27d21fd903037900242368
Created April 10, 2026 18:55
Datum Cloud Infrastructure Service Catalog & API Server Inventory (2026-04-10)
# Datum Cloud Infrastructure Service Catalog
> Generated 2026-04-10 from live Kubernetes clusters (prod + staging).
> Covers all Deployments, StatefulSets, and DaemonSets across both environments.
---
## API Server Inventory
### Aggregated API Servers in the Host GKE Cluster
@drewr
drewr / k8s-native-network-device-projects.md
Last active April 12, 2026 00:52
Kubernetes-native network device projects (Ze research)

Kubernetes-Native Network Device Projects

Research question: Are there Kubernetes-native projects analogous to Ze (a Linux-host-level Network OS with native BGP) that "turn a cluster into a network device" using operators and CRDs?

Short answer: Yes, but exact analogs are rare. Most projects use Kubernetes as a deployment platform for network functions rather than making the cluster itself a network device.


Closest Analogs to Ze

@drewr
drewr / datum-envoy-capabilities.md
Last active April 9, 2026 18:08
Datum Network Services Operator: Accessible vs Inaccessible Envoy Capabilities

Datum Network Services Operator: Envoy Capabilities

Accessible Capabilities

L7 HTTP/HTTPS Routing

  • Listeners on ports 80 (HTTP) and 443 (HTTPS) with TLS termination
  • Request matching — method, path (prefix/exact), headers, query params, scheme (up to 128 matches across 16 rules)
  • Request/response header modification — add, set, remove headers
  • URL rewriting — hostname and path rewriting (prefix/exact)
  • Redirects — scheme, hostname, port, path, and status code
@drewr
drewr / small-colleges-track-field.md
Created March 14, 2026 13:11
Small Colleges with Track & Field, On-Campus Housing & High Acceptance Rates

Small Colleges with Track & Field, On-Campus Housing & High Acceptance Rates

All schools listed are NCAA Division III with on-campus housing, a track & field program, and a high acceptance rate.

# School Location Division Approx. Acceptance Rate Undergrad Size
1 North Central College Naperville, IL NCAA DIII ~60% ~3,000
2 Wartburg College Waverly, IA NCAA DIII ~80% ~1,500
3 Augustana College Rock Island, IL NCAA DIII ~65% ~2,500
4 Loras College Dubuque, IA NCAA DIII ~82% ~1,500
@drewr
drewr / datum-q1-summary.md
Last active March 10, 2026 19:43
Datum Q1 2026 — Top 10 Accomplishments

Datum Q1 2026 — Top 10 Accomplishments

Activity across datum-cloud/enhancements, datum-cloud/infra, and datum-cloud/network-services-operator. Period: January 1 – March 10, 2026.


1. Activity Service — Full Stack to Production

The activity system went from an idea to a fully deployed production service. Work spanned the activity-apiserver (sharing the etcd cluster, infra#1875), activity-processor with NATS mTLS (infra#1584, infra#1587), a ClickHouse full-text index fix for v26.1 (infra#1885), the activity-ui (infra#1581), ActivityPolicy support wired into dns-operator ([infra#1832](https://github.com

id ops-001
title Manual Signup Defense Workflow
status draft
created 2026-03-09
author architect

Manual Signup Defense Workflow

Datum Cloud Authoritative DNS Service: Research Report

1. Overview

The authoritative DNS service solves two distinct but related problems:

User-facing DNS management: Datum Cloud customers own domain names (e.g., example.com) and want Datum to serve authoritative DNS for them. Users create a Domain resource to claim ownership, a DNSZone resource to declare a hosted zone, and DNSRecordSet resources to manage records. Datum's infrastructure then serves live DNS responses for those zones.