majke
Joined 17 years ago
Joined 17 years ago
It turns out you can do all the packet processing magic (connection tracking, syn handling, etc) in userspace totally fine, and then indeed hand it over this to userspace syscalls.
Being upset with classic C-based slirp and rust smoltcp (not enough features) I've dug up Fuchsia userspace tcp/ip stack - netstack - and wrapped it in slirp a-like envelope.
https://github.com/cloudflare/slirpnetstack
So this beast is basically that - on one hand you pass it packets (potentially from inside container) on the other hand it does connect/bind/etc to host OS.
This approach, in one form or another, is used by tailscale, podman and many other container runtimes.
8. 80.239.216.210. 0.0% 78 123.2 64.6 42.9 141.8 30.6
9. vl202.zur-itx1-dist-1.cdn77.com. 0.0% 78 60.1 58.8 43.7 136.5 24.2
10. 89-187-165-194.bunnyinfra.net. 0.0% 78 45.9 63.5 41.8 131.9 31.0
so cdn77.com and bunny.netOne of the measures of "making The Internet" could be looking at RFC contributions:
So... Nvidia did a good job?
Another question is if going with a burner phone that has just sim card and bank card, sufficient. But then you need appleid/google account on the device, and this again links back to your phone number, and it's not easy in practice to have proper clean device.
https://blog.cloudflare.com/tld-glue-sticks-around-too-long/
I hinted there how the NS chain of lookups works from . to your domain. The point is that we wanted to be able to move name servers around the ip addresss, but that wouldn't work for many domains. So - in some contexts moving IP's rapidly is possible, in some it's not. Fun.
Recently there has been a push to figure out the backpressure situation, so it's worth checking again.
Marek
Are you saying CF documentation is better than Computer Science / Networking education resources? Why don't people know better? I thought the tunnels are mostly used to bypass NAT's.
> Static blogs hiding behind bot protection
I'm not sure what is the proportion of the static vs dynamic sites, but I would argue that for wordpress CF is adding real value.