The Symptom Your MikroTik IKEv2 VPN was working fine, then your Let’s Encrypt certificate renewed automatically — and now Windows clients refuse to connect with… Read More »IKEv2 VPN Broken After Let’s Encrypt Certificate Renewal? Here’s Why (and How to Fix It)
In Linux with IPv6 and IPv4 (dualstack), IPv6 address have preference. This can be easily changed in file /etc/gai.conf, add lines # /etc/gai.conf precedence ::ffff:0:0/96 100… Read More »How to prefer IPv4 in Linux?
Since iptables are deprecated and most Linux distributions now supports nftables, I have added nftables format to my country IP lists. This lists can be… Read More »Geoip blocking using nftables
I have few chinese Android TV boxes, two with flashed CoreELEC. One oldest which was not compatible with CoreELEC was unused, partialy bricked (OS loader… Read More »Debian on Amlogic
How to block Facebook complete from your site? It is easy using geoip2 module in nginx. In Debian / Ubuntu install libnginx-mod-http-geoip2 and we need… Read More »Blocking Facebook in nginx
After WMware was merged into Broadcom systems, it is very difficult to find VMware patches. Broadcom published this howto (because it is so non-intuitive). These… Read More »How to download VMware patches from Broadcom
RouterOS version 7.16 changelog mention this new feature
certificate - added support for cloud-dns challenge validation for sn.mynetname.net (CLI only);
But there is no documentation yet. How this feature works? Let’s find out.
Read More »Mikrotik Letsencrypt SSL certificate using new cloud-dns challenge featureTen years ago I have published my IP ranges generator and few other articles how it can be used to generate mikrotik firewall address lists or Haproxy ACLs This articles gets many comments about missing or wrong IP ranges. Yes, I know about it, but I can’t do anything with that – source data delegated blocks have country assigned by RIRs. Manually doing exceptions is no way to go…
Read More »New country IP ranges generatorMikrotik version 7 brings many new features, including wireguard vpn. Wireguard vpn is fine, but it is layer 3 VPN – can not be bridged. What if you need L2 VPN, for example to migrate local server to datacenter and from network view keep it in your local network?
In my setup I wanted to be able migrate VMs from local Proxmox PVE to PVE running in Hetzner in datacenter. PVE in datacenter was dedicated server.
Mikrotik 7.1 also support l2tpv3, which is not very well documented in Mikrotik wiki yet, but it enables Layer 2 VPN. L2tpv3 is also supported in linux. How to create bridge between them?
I have been successfully using consumer SSD in my ESXi for few years. After migration to Proxmox, I have tried to use ZFS for virtual machines. First few weeks I was very happy about it. Then I noticed very fast increasing SSD wearout levels on my new SSDs. Proxmox support forums and reddit are full of users mentioning proxmox is destroying SSD, but I thought this is just rumor. Where is the true?
Read More »Do not use consumer SSD with ZFS (for virtualization)