121
10Gb/s Ethernet: switching to a Broadcom SFP+ module
As predicted by several people, one of my Marvell-based SFP+ modules had overheating problems. I've switched it over to a Broadcom-based one, and it looks better, though I can't be certain.
New
The latest blog posts to take off on Hacker News. 4,377 posts.
Infrastructure & DevOps
Any year
122
How we run Firecracker VMs inside EC2 and start browsers in less than 1s
Every Browser Use Cloud session runs in its own Firecracker microVM on regular EC2. It starts in under a second and costs $0.02 per browser hour, down from $0.06.
123
124
What job interviews taught me about Kubernetes
So I've been job hunting lately. Reading job postings, doing interviews, talking to engineering teams at like a dozen companies. And I noticed...
125
My Homelab AI Dev Platform
Self-hosting OpenCode Web for GitOps style homelab changes.
126
Caddy compatibility for zeroserve: 3x throughput and 70% lower latency
zeroserve is a high-performance HTTPS server that runs eBPF scripts in userspace ( intro ). Now it's got a Caddy-compat mode - when provided a Caddyfile, zeroserve JIT-compiles it to eBPF and then to native x86_64/ARM64 machine code, and runs it in an io_uring event loop.
127
128
Introduction to UEFI HTTP(s) Boot with QEMU/OVMF
The historic go-to solution for network booting is PXE. PXE is based on DHCP and TFTP. It is tricky to correctly configure, even trickier to make it highly available and good luck with the security with this clear-text unsigned protocol.
129
Alpine Linux 3.24.0 Released
Alpine Linux
130
Linux latency measurements and compositor tuning
Linux latency on the desktop and in games compared to Windows. Network streaming with Sunshine and Moonlight. Tuning the KWin compositor for lower latencies.
131
Flat Datacenter Networks at Scale at Amazon
The research roots of finding “optimal routing” networks trace back to the late 1970s. Mathematicians defined special kinds of networks called “expanders“. These are graphs with strong connectivity properties guaranteeing no subset of vertices can be isolated from the rest. In 1976, Leslie Valiant gave one of the…
132
Podman 6: machine usability improvements (2025)
I wanted to introduce a significant change we are making in Podman 6 for our machine function. To understand the problem and change, we first need to establish that Podman machine is based on a con…
133
Zeroserve: A zero-config web server you can script with eBPF
zeroserve is a small, fast, zero-config HTTPS server. You hand it a tarball of a website and it serves it - over HTTP/2 and TLS 1.3, with hot reload and a tiny resident footprint. The twist is that you can drop eBPF programs into the tarball and they run on every request, in userspace, as sandboxed middleware …
134
I tested every IP KVM in my Homelab
Since the PiKVM came out in 2017, there's been an explosion of IP KVMs. I've tested almost every one. But what are they good for? You can use Remote Desktop, Screen Sharing, or VNC to remote control a computer from anywhere on a LAN. And if you don't have a private VPN, you could use RealVNC, Raspberry Pi Connect, or…
135
Azure Linux 4.0 is Microsoft's first general-purpose Linux
Microsoft’s in-house Linux, the distribution that grew out of CBL-Mariner, just hit public preview as a general-purpose cloud OS you can run on any Azure VM and coming soon to WSL.
136
WSL 2 is getting faster Windows file system access
From DrvFs in WSL 1 to Plan 9 to virtiofs, cross-OS file access in WSL 2 has improved with each generation. A new change gives each virtio device its own dedicated DMA pool, removing the last major contention point on the virtiofs path.
137
OpenAI frontier models and Codex are now available on AWS
OpenAI frontier models and Codex are now generally available on AWS, giving enterprises a new path to build with OpenAI through the AWS environments, controls, and procurement workflows they already use. Customers can get started with OpenAI on AWS and move faster from evaluation to production.
138
Sysadmining Like It's 2009
2026 legacy lab summer camp plan
139
Indoor Wi-Fi Roaming with OpenWRT
A few months after writing up the Cudy AX3000 units and moving the house over to OpenWRT, I ended up revisiting the one bit I had deliberately waved away ...
140
AWS Fired the One Employee Who Gave a Damn
Remember Tarus Balog, the AWS employee who rescued my deleted account when nobody else would? AWS just fired him. His proudest accomplishment in four years was saving my data. Leadership didn't care. The finale of a trilogy nobody asked for.
141
The bootstrapper's EU stack for under €10 per month
How close to zero can you get on a 100% EU infrastructure stack? A bootstrapper-friendly setup for under €10 a month.
142
Amazon Web Services – Four Years and Out
Today marks four years since I joined AWS. My last day will be Friday.\nI have to say being fired from AWS is actually a relief. There have been a lot of changes to the company since I joined in 2022, and the company I wanted to work for is no longer the same company.\nThis past year, while I was doing my best to make…
143
Blog ran on Ubuntu 16.04 for 10 years. I migrated it to FreeBSD
After a decade on Ubuntu 16.04, I migrated my blog to FreeBSD on Hetzner. Some notes on setting up a VPS with FreeBSD, Jails, Bastille, Caddy reverse proxies, and load testing and benchmarking the blog from four continents.
144
Incident Report: May 19, 2026 – GCP Account Suspension
Railway experienced a platform-wide disruption after Google Cloud incorrectly suspended our account, temporarily taking down all GCP-hosted infrastructure.
145
Infomaniak transitions to a foundation model to protect user data privacy
Infomaniak transfers the majority of its voting rights to a Swiss public-benefit foundation. Your cloud remains sovereign, independent, and true to its values. Forever.
146
Using HTTP/2 Cleartext for a server in Go 1.24
I'll give a brief outline of how to enable HTTP/2 cleartext (h2c) in a Go API server when you are using Go 1.24 or newer. This is useful in Cloud Run environments, which handles TLS termination but can take advantage of HTTP/2 features.
147
'No way to prevent this,' says only package manager where this regularly happens
Kevin Patel - Application Security Engineer @ NISC
148
Amazonbot is finally respecting robots.txt
Thanks for giving me a viable business model Amazon!
149
Gaining control of every projector and camera on campus
While starting my first year at the Colorado School of Mines, I came across a rather interesting fact: the local DNS servers will assign a subdomain to each device that connects to the network. This means that a device called “meow” will be visible as “meow.mines.edu” on any campus wifi, though the network still…
150
Setting up a free *.city.state.us locality domain (2025)
In the US, you can get a domain name like `somename.city.state.us` for free. If your town has its own domain, you can get nameservers from Amazon Lightsail, send the *Interim .US Domain Template* to the delegated manager for your locality, then point DNS entries at your webhost.