Skip to main content

Recently Updated Pages

Base Install

edge

Operating System Proxmox Virtual Environment 6.x Configuration Proxmox configuration has bee...

Updated 3 years ago by dustin@swigg.net

Route Subnet Through Wireguard Interface

Project Router Virtual Private Networking

Funneling all traffic from an Ethernet interface through a Wireguard interface is relatively easy...

Updated 3 years ago by dustin@swigg.net

Wireguard

Project Router Virtual Private Networking

I had two goals I wanted to accomplish with VPNs. I need to redirect all outbound traffic fr...

Updated 3 years ago by dustin@swigg.net

DHCP and SLAAC

Project Router IPv6

I already setup dnsmasq for IPv4 and so there is very little that needs to be done to add IPv6 su...

Updated 3 years ago by dustin@swigg.net

Prefix Delegation

Project Router IPv6

I'd recommend reading about Prefix Delegation to get a better understanding of it but the gist is...

Updated 3 years ago by dustin@swigg.net

Firewall Setup

Project Router IPv6

Install Shorewall6 Configuring Shorewall for IPv6 is nearly identical to how I did it for IPv4. ...

Updated 3 years ago by dustin@swigg.net

DHCP and DNS Cache

Project Router IPv4

Install dnsmasq I decided to use dnsmasq since it can fulfull multiple roles as both a DHCP and ...

Updated 3 years ago by dustin@swigg.net

Firewall Setup

Project Router IPv4

Install Shorewall To manage nftables/iptables I decided to go with Shorewall since it is easy to...

Updated 3 years ago by dustin@swigg.net

Logging in LXC

Project Router

Logging One problem I ran into is that access to kernel logging is limited or unavailable from i...

Updated 3 years ago by dustin@swigg.net

DNS: Recursive DNS

Project Router

Option 1: Unbound $ apt install unbound Recursive DNS can sometimes sacrifice speed for secur...

Updated 3 years ago by dustin@swigg.net

Initial Network Setup

Project Router

Configure Interfaces I need Internet access to download all the packages necessary so I setup DH...

Updated 3 years ago by dustin@swigg.net

DMARC (Domain based Message Authentication, Reporting and Conformance)

Email

Introduction DMARC (Domain-based Message Authentication, Reporting and Conformance) is an emai...

Updated 3 years ago by dustin@swigg.net

DKIM (DomainKeys Identified Mail)

Email

Introduction DomainKeys Identified Mail (DKIM) is an email authentication method designed to d...

Updated 3 years ago by dustin@swigg.net

Bridge Zero Copy Transmit

Linux KVM Virtual Machines

Zero copy transmit mode is effective on large packet sizes. It typically reduces the host CPU o...

Updated 3 years ago by dustin@swigg.net

Passwords

Linux

Generate Random Password With pwgen (generate 1 password, length 16, with a least a number and u...

Updated 3 years ago by dustin@swigg.net

Serial Console

Linux

Output to Serial Console Make sure the kernel is started with the following parameter… console=...

Updated 3 years ago by dustin@swigg.net

SR-IOV

Linux KVM Virtual Machines

Ensure IOMMU Is Activated First step of this process is to make sure that your hardware is eve...

Updated 3 years ago by dustin@swigg.net

PCI Passthrough

Linux KVM Virtual Machines

Ensure IOMMU Is Activated First step of this process is to make sure that your hardware is eve...

Updated 3 years ago by dustin@swigg.net

Isolate CPUs from Kernel Scheduler

Linux

Disable CPU(s) Sysfs # echo 0 > /sys/devices/system/cpu/cpu4/online When disabling a CPU thi...

Updated 3 years ago by dustin@swigg.net

Base Install

vault

Operating System Proxmox Virtual Environment 6.x Configuration Proxmox configuration has bee...

Updated 3 years ago by dustin@swigg.net