@subnetspider

My main interests are IPv6, FreeBSD, ZFS and jails. I also enjoy playing around with automation, networking, virtualization, hardware, FOSS, and IT security.

 localhost
subnetspider.com
Joined June 2022
  • Tweets975
  • Following93
  • Followers377
146Media
First time I've actually installed #NetBSD on "real" hardware, until now I've only run it in VMs and on a Raspberry Pi 1. So far configuring it differs a bit from FreeBSD, but commands like ifconfig, route, sockstat, top, and so on are almost identical, which makes it intuitive.
Screenshot of fastfetch output on NetBSD (Asus P10S-I, Intel Xeon E3-1225 v6, 8 GiB DDR3, 100GB SSD)

ALT Screenshot of fastfetch output on NetBSD (Asus P10S-I, Intel Xeon E3-1225 v6, 8 GiB DDR3, 100GB SSD)

53
If you want to upgrade your #FreeBSD system, here are two very useful links to ensure a smooth process: 1. freebsd.org/releases/15.1R/u… 2. docs.freebsd.org/en/books/ha… Also don't forget to create a backup or ZFS boot environment before the upgrade, you will thank yourself later. 😎
3
7
116
I always find it funny when someone on the Internet says "ZFS is memory hungry" or "ZFS needs at least 8 GB of ECC RAM to run". Nonsense. To prove it, I installed #FreeBSD 15.1 (64 bit!) on a 23 year old PC, with ZFS and only 1 GB of RAM, running multiple jails without issue. 😎
Screenshot of a 23 year old AMD Athlon 64 gaming PC running FreeBSD 15.1 with many programs like htop and fastfetch running inside tmux.

ALT Screenshot of a 23 year old AMD Athlon 64 gaming PC running FreeBSD 15.1 with many programs like htop and fastfetch running inside tmux.

11
30
3
211
15,046
The image quality isn't great, but here are some pictures of the physical machine:
A photo of the hardware running inside the AMD Athlon 64 PC.

ALT A photo of the hardware running inside the AMD Athlon 64 PC.

The POST screen of the AMD Athlon 64 system.

ALT The POST screen of the AMD Athlon 64 system.

Fastfetch on the AMD Athlon 64 system, before trying ZFS (on UFS still).

ALT Fastfetch on the AMD Athlon 64 system, before trying ZFS (on UFS still).

6
514
The single core AMD Athlon 64 3000+ is a bit slow, but pkgbase really helps with speeding up installing patches. It's still fast enough to reach 604 Mbit/s in iperf3 (and 490 Mbit/s in client mode).
1
9
679
If I wanted to, I could even turn this ancient machine into a NAS, which really proves that old PCs aren't trash, but modern software is.
1
11
604
🧵[1/2] For the last week, I've been thinking about how to best do an initial ZFS replication between two remote ZFS pools, which requires to copy 3+ TB of data, and the upload at the source is only a measly 50 Mbit/s, or 6.25 MB/s, of which I can only use 40 Mbit/s, or 5 MB/s.
1
1
170
🧵[2/2] This means I would have to wait for an entire week before the replication finishes. Then I remembered that I can redirect ZFS send into a file on a HDD, and then pipe the file into ZFS receive. As the remote site is only a half hour drive away, which is much faster. 🤦‍♂️
3
55
Fun fact: FreeBSD's ifconfig can display information about installed SFP modules, like their temperature, voltage, and tx/rx power. Example: ifconfig -v ix0
Screenshot of the command "ifconfig -v ix0" my FreeBSD offline backup server.

ALT Screenshot of the command "ifconfig -v ix0" my FreeBSD offline backup server.

Screenshot of the command "ifconfig -v ixl0" my FreeBSD NAS server.

ALT Screenshot of the command "ifconfig -v ixl0" my FreeBSD NAS server.

2
8
38
824
Today I migrated my last Proxmox VE VM to my FreeBSD NAS and migrated it to Bhyve. After a quick zfs send | receive of the Zvols I only had to modify the config file vm-bhyve had created and that was it. 😁 I used this blog post as reference: it-notes.dragas.net/2024/11/…
Screenshot of the command "vm info minecraft01" of my Windows Server 2022 VM I had migrated from Proxmox VE to Bhyve on FreeBSD 15.1 today.

ALT Screenshot of the command "vm info minecraft01" of my Windows Server 2022 VM I had migrated from Proxmox VE to Bhyve on FreeBSD 15.1 today.

1
7
177
And another #FreeBSD host installed successfully. 😁 After I retired the Proxmox VE host at my parent's house, all services ran on the FreeBSD NAS, but now the secondary DNS jails run on their own thin client once more. VNET with bridging didn't work, so I used Netgraph instead.
Screenshot of my secondary FreeBSD host for my parents network, running on a HP t620 thin client with 8 GiB of DDR3 and a 16 GB M.2 SATA SSD.

ALT Screenshot of my secondary FreeBSD host for my parents network, running on a HP t620 thin client with 8 GiB of DDR3 and a 16 GB M.2 SATA SSD.

2
3
12
349
more replies
Luckily, I can just create VLAN interfaces on re0 and use Netgraph together with Bastille to create netgrap bridges and netgraph eiface interfaces, which do not require driver support, as they directly hook into the network card's send/receive buffer.
1
48
Here is how the netgraph setup looks like:
Screenshot of the netgraph visualized.

ALT Screenshot of the netgraph visualized.

26
The cable Internet at my parent's house died and in order for IPv6 to work with the 4G internet connection, I've just created a NAT66 source NAT rule on my parent's OPNsense. This feels wrong, but as the 4G link only gets a /64, this is all I can do. But at least it works. 🫣
Screenshot of a OPNsense Firewall (Firewall > NAT > Outbound) where I had to create a NAT66 rule for WAN failover to work for IPv6.

ALT Screenshot of a OPNsense Firewall (Firewall > NAT > Outbound) where I had to create a NAT66 rule for WAN failover to work for IPv6.

2
3
11
1,255
IPv4 is only NATed by the Cable and 4G routers, and WAN failover is taken care of by Gateway Groups.
Screenshot of a OPNsense Firewall (System > Gateways > Group) where you can see the IPv4 and IPv6 failover groups.

ALT Screenshot of a OPNsense Firewall (System > Gateways > Group) where you can see the IPv4 and IPv6 failover groups.

94
Today I installed #Immich in a Docker container on Debian inside a #Bhyve VM on my #FreeBSD home server and trying it out right now by backing up my phones pictures to it. All that's left for me to do now is wait until the upload is finished, which is the hardest part.😅
Screenshot of my vm-bhyve Debian VM on the left and htop on the right while packing up all of my phones pictures to it.

ALT Screenshot of my vm-bhyve Debian VM on the left and htop on the right while packing up all of my phones pictures to it.

2
9
1,097
Today I have set up my first mail server with Stalwart, running inside a FreeBSD 15.1 jail on my home server. Sending and receiving mails works, but Gmail thinks it is Spam (oh well), while Tuta accepts them. As this was only a test, I'm pretty happy it worked at all. 😁
Screenshot of Stalwart mail server running inside a FreeBSD 15.1 jail.

ALT Screenshot of Stalwart mail server running inside a FreeBSD 15.1 jail.

4
15
843
Update: after adding the missing PTR records for my mail server's A and AAAA records, I can now send Emails to Gmail and they are no longer detected as Spam. Typical Layer 8 problem. :D For anyone wondering, I used Thunderbird and the e/OS (Fairphone 4) Email client for testing.
3
120
Load more