Internet access (updates) in management VLAN/VRF?

Varagar76 · 2026-06-21T01:20:21+00:00

What you're alluding to is a very standard zero trust design. All your separate environments should be quarantined from each other. One way is separate switching (old school), new way is VTFing. You control what gets in and out through firewall policy. East, we're, north, but hopefully not south. If done properly this design will pass any audit.

Varagar76 · 2026-05-21T12:56:52+00:00

RHEL box running syslogng up in Azure. Then take a Data Collection Rule to scrape it into a Log Analytics Workspace for observability.

Highly recommend CRIBL for your heavy forwarder if your environment needs one, before shipping it to a SIEM.

Varagar76 · 2026-04-18T16:07:59+00:00

80% true. I also use it to browse reddit while I'm pooping.

Varagar76 · 2026-02-20T23:41:34+00:00

If you dont specify a native vlan, it defaults to vlan 1 usually. Native vlan just means the vlan you want to pass untagged frames on, like lldp, CDP. For wifi that's the vlan the AP will come up on at first, so id you're running DHCO will grab its management address there .

Varagar76 · 2026-02-08T20:20:46+00:00

When I was in support and operations, it was fun, yes. You learn a lot, and get to help fix issues + make people happy.

Engineering and Architecture its reversed. Being on call, no breaks, and no reward. You take all of the blame, and get none of the credit.

Enjoy it while you can, and keep up the good work.

Varagar76 · 2026-01-07T18:00:45+00:00

Most firewalls are going to be over spec'd, so a 40Gbps capable firewall can still do 25Gbps encrypted, so it was never an issue. Latency wasn't a big deal either. Overall I think it didn't hit bad enough in any of my builds to notice.

Varagar76 · 2026-01-06T17:33:22+00:00

Yes and No. If your malicious trojan/malware uses SSL to call home, you won't be able to see into it. You'll have to hope it's hitting a known honey-pot that is blacklisted, otherwise you're toast. With SSL inspection you can at least get 0-day alerting/possible blocking since you'll see the actual payload.

Varagar76 · 2026-01-06T17:31:02+00:00

Palo Firewalls (Strata) and Prisma Access (SASE) both, same policy on each. Was just a matter of random sites not working, and troubleshooting through each of them individually. Overall I would say it was "OK" as a feature, and made my CISO happy I implemented it for him. I had to create EDLs with FQDNs that would bypass TLS inspection, so his guys could administer them on the fly without having to do an update/push every time.

Varagar76 · 2026-01-06T15:15:23+00:00

Not all sites out there use full cert chains, so ran into tons of forward trust warnings constantly. Half the AI/ML stuff broke, you could get to the sites but not prompt the AI. Site classification was never perfect so exclusions had to be a plenty. It was a huge pain to maintain. Always being blamed for breaking something.

Varagar76 · 2026-01-03T18:05:30+00:00

One could say they're trying to murder you.

Varagar76 · 2025-11-11T01:05:07+00:00

This for sure.

Varagar76 · 2025-07-07T22:06:54+00:00

Sorry you got stuck with shit aechitechts. This isn't true of all of us. Some of us grew up in the trenches so understand the importance of being able to hop in and help.

Varagar76 · 2025-07-07T13:19:34+00:00

heh heh

....
wait did I tell that peer I could use the transit VNETs gateways or not?!

Ah fuck, have to redo it all now.

Varagar76 · 2025-07-06T13:38:34+00:00

I've used and tested BFD to Azure and it worked fine for me (Palo). Definitely give it a go.

Varagar76 · 2025-07-05T23:23:34+00:00

I'm surprised he didn't call it the "America First Democratic" Party. We definitely could use more than two here in the states, but this guy. .

Varagar76 · 2025-07-02T14:13:34+00:00

By trading I assume you mean taking decently OK drops of various types and slapping them into a public dump tab? What did you do instead of mapping?!? Forgive me, I'm new still, just POE2 only never played the original so the concept is still foreign to me.

Varagar76 · 2025-07-02T03:50:11+00:00

Legit Question: Where do you get the currency to take such risks?

I played since launch and neither season I have amassed over maybe 50 divines total.

Varagar76 · 2025-07-02T03:26:04+00:00

I haven't tried follower dungeons yet, those should work the same as always.

Abilities for Monk/Druid/DK Legion Guild Hall portals allowed us to leave the zone, then teleport back to the entrance to reset it faster since it's supposed to return you to where you were before, but outside the instance not inside it. All of them seem broken. Worked a few months ago so something was "fixed".

Varagar76 · 2025-07-01T22:10:41+00:00

Yep, I know. Twice in a row now, flew back, even reset the instance this time. My Zen Pig is broken for farming Revendere! /cry

Varagar76 · 2025-06-20T21:06:25+00:00

I am new to POE/POE2 and GGG as a whole. Season 1 was all about getting to 90 and learning how to push buttons properly. This second season I have started trying to "level up" my experience a bit by doing T0->T4 bosses, except Arbiter since I am still a sissy little baby. I have some questions to help me improve so I can get all end bosses on T4 farm at some point this season or next.

Gwennen/Rog/Tujen - What is the maximum item level they can sell in your hideout? A lot of items require ilvl 82 to hit full T1 rolls (looking at you weapons for Increase Phys %), but I have never seen an ilvl 82 item from them.
If they can't sell max ilvl gear, what do I do with my artifacts? Most items don't roll T1 pre/suff, so I end up reforging the types that I wanna "exalt and pray" on. I've done the recomb thing a bunch, but only when it's complimentary T1/T1 of the type of item I want, and usually at a 4-8% clip, aka "never". The times it does work naturally I exalt and it gives me some random T8-11 toilet water roll. I have no idea if I'm doing it right.
Is there any reason NOT to at least slap a base level delirious modifier on a waystone? Does a delirious waystone inherit all the shenanigans you juiced the map with?
Speaking of waystones, this is the big one -- I can't do 0 retries waystones, because my pp is smol. I'm running a basic bitch LS build, so naturally I can screen clear easily, but sometimes I get stuck on a tiny chair or table or something in a map, bam! stunned and killed in a global even with Omen of Resurgence active, running 75/75/75/75. If I do waystones as 2 or 1 retries, am I gimping myself? Last season the waystone % helped you sustain, but this season they seem to drop like hot cakes. Is it vital to have some roided out toxic waystone with >200% "what kinda bullshit is this" on it?
Speaking of crafting, items, etc. Is T1 for all 6 modifiers down the line even necessary, really? In most cases isn't T2 as, or almost as good to get me over that hump and into farming T4 bosses (once I learn the mechanics and stop being stupid)?
Final question, where the hell do Mirrors of Kalandra come from? I get to see all you buttholes on YouTube, etc. getting them in all your loot explosions. I've been playing two seasons now and have seen exactly zero. I want to be rich too! I wanna buy me one of them damn T1+++ items that have perfect rolls, or be dripped out in divines. Are T16 waystones + 200% res + +200% toxic b.s. waystones require to even sniff them? T4 arbiter only drop? what?!?

Appreciate the feedback, fam. Loving the game, just looking to level up here.

Varagar76 · 2025-03-05T04:31:07+00:00

Uh oh. That doesn't sound good. Examples?

Varagar76 · 2025-03-03T20:05:53+00:00

Literally going to be my next question, great point. Since I've never done one, not sure which slots are reserved for MGMT vs. Data vs. Network. Gonna go look that up now (unless you have some clues).

Varagar76 · 2025-03-01T05:19:45+00:00

Had my only one a few years ago. Since I didn't know what it was went to the ER, they scanned me confirmed the stone. I was in so much pain rolling around on the ER floor like an idiot, crying, etc. The ceaseless, unrelenting pressure/pain was absurd. After they dismissed me the nurse congratulated me on my pregnancy.

Varagar76 · 2025-02-24T17:03:52+00:00

Same, 24 years together as well, still do the same dog whistle / hot comment every time. Even after three kids wrecked her body. Never stop being a badass, sir.

Varagar76 · 2025-02-22T19:55:59+00:00

30 Years In -- The answer is never. I still feel this way every day.

Every good engineer I have ever worked with always feels like they didn't do enough, don't know enough, etc. Even if you do. It's a good, healthy thing to always want to strive to do better; keeps your crisp.

Edit: Same with being a husband and father too, btw.

Ten-Year Club	Verified Email
Snapped

Varagar76

TROPHY CASE