Networking

Sentry events vanished from a Fargate Node app because Happy Eyeballs stalls on IPv6 with no route. Forcing IPv4 in the transport fixes it.

AWS charges $3,000 a month for CloudFront Anycast IP. Testing shows it is a small static IP set, not anycast in any meaningful sense.

Setting up WireGuard end to end: interface, key pairs, IP forwarding, config files and a systemd unit for auto start.

Adding the HTTP basic auth username to Envoy access logs with a Lua filter that base64 decodes the Authorization header.

Pulling request logs out of Cloudflare with the log API: zone ID, scoped API key, the field list and a worked curl query.

Attaching a UniFi UDM to an AWS Transit Gateway over VPN, using static routing because the UDM does not speak BGP.

Watching Pooq from Australia with a Korean Lightsail host, an nginx proxy and dnsmasq entries, good enough for 4K over NBN.

Caching app generated pages on F5 AAM: the headers it needs, the policy setting that honours them, and the debug commands.

The firewall ports Windows Deployment Services actually needs, which is more than the RPC and SMB pair every search result lists.

Running Citrix NetScaler VPX on KVM by converting the Hyper-V disk, plus the missing default route and the virtio interface catch.

Disabling MSI on a bnx2 NIC by reloading the module with disable_msi=1 while keeping the link up, including the bonded interface case.

A site to site VPN on a Cisco ASA comes up but passes no packets one way, because the dynamic profile outranks the L2L one.

Working sip-ua and voice service voip config for registering a Cisco router against an Acme Packet SBC, including fax and codec pass-through.

Giving a Cisco router a non-NAT public IP over PPPoE, using a loopback interface or a static NAT entry alongside the route-map overload.