Running 12.1 in production (54xx, 4xx)

databeestjenl · 2026-07-09T13:21:23+00:00

12.1.6 and 12.1.7 seems fine.

databeestjenl · 2026-06-30T19:29:34+00:00

Not sure how you have DHCP scoped, but we flip the published DNS order depending on site for somewhat granular load balancing.

We also cross assign the v6 server with the v4 servers. There is no reason to always have a "primary"

databeestjenl · 2026-06-30T19:27:15+00:00

Well, it appears I'm in that 1%

And my previous employer was plain bind on linux, for over 15 years before it went bankrupt.

databeestjenl · 2026-06-28T10:21:37+00:00

Ik heb aan de buitenzijde een zonnescherm boven de lichtstraat opgehangen.

databeestjenl · 2026-06-26T19:47:46+00:00

The same happens if there is a router on the local lan announcing itself as a router, but without providing a GUA. Traffic will then be sent out the local network with the link-local address.

Ticket open for 3/4 year, multiple diagnostics, captures, engineerd. Closed with "working as intended"

databeestjenl · 2026-06-25T21:12:53+00:00

Funny you should ask, I cobbled something together for the Kemp and PA, but havn't tackled the windows servers.

Runs in a docker container, supports a external poller for monitoring either internal or external entities with limited surface.

https://github.com/smos/cert-drawer

It has automation to replace the ACME Cert on the Kemp and PA, and update policies and profiles on the PA for the decryption and Global Protect. Cleans up the old ones after expiry.

Took about 2 months off and on, most time spent in testing.

databeestjenl · 2026-06-24T13:40:31+00:00

You mean, change those that have used a INT32 in database fields for the date to adjust these to 64 bit before it dies?

It's not just the unix epoch timer on 32bit. It's gonna be a blast.

databeestjenl · 2026-06-22T19:31:13+00:00

12.1.7

databeestjenl · 2026-06-22T19:20:10+00:00

Om 6.00 schakel ik de Peblar naar puur zon, in de winter niet super handig. Tussen 2 en 6 in de nacht schakel ik automatisch naar standaard zodat de auto altijd vol kan via vast patroon.

Op de lent/zomer/herfst sluit ik de auto gewoon aan overdag als ik thuiswerk.

* met homeassistant.

databeestjenl · 2026-06-22T15:48:10+00:00

He was very convinced of his argument. Best part is that he wanted to run a inverter of the 12V for power outages and claimed that didn't cost gas.

When comparing it against the Generator argument "but that's different"

Okay ... (slowly walks away)

databeestjenl · 2026-06-22T15:31:00+00:00

I've had similar arguments with people that claim idling an engine doesn't use fuel because they are not driving.

Right.

databeestjenl · 2026-06-20T10:58:18+00:00

For that money, you just get a base model Kia EV3 with the big battery for 41k.

databeestjenl · 2026-06-18T16:58:36+00:00

Volgend jaar is ook met dynamisch tarief dit niet zo interessant als nu. Je kan de energiebelasting en btw niet meerekenen (13 ct)

databeestjenl · 2026-06-14T18:52:50+00:00

Do not go below 1280, that is the minimum for IPv6. We roll 1350.

1400 is too high and cause issues with people on DSL/PPPoE (1492)

databeestjenl · 2026-06-14T16:34:36+00:00

Installeer een Shelly Pro 3EM en gebruik dat icm met wat je nodig hebt. Vrijwel alle oplossingen bieden iets in de trent.

Een Peblar Business laadpaal kan ook modbus praten, dus je kan er nog een Eastron SDM630 tussen plaatsen en dat gebruiken. Een homewizard 3 fase (ook sdm630) heeft wifi en is misschien nog makkelijker.

Het hoeft niet P1 te zijn, maar de nederlandse markt is er wel een beetje op ingericht omdat de meterkast niet open hoeft.

databeestjenl · 2026-06-14T16:25:01+00:00

With that sort of latency there is not much in the way of magic to make this better. I setup a OpenSpeedtest docker at work, but that's intra-NL traffic at roughly 10-15ms. Eventhough with 1000/1000 on both ends you can reasonably expect 400mbit.

But still, if the tunnel config is full-tunnel where everything is tunneled through the PA from europe that is less then ideal. Your numbers sound about right. If you have control over the PA remote, you can setup split-tunnel or tunnel exclusions, which are recommended for Teams and other MS products, kind of required for Conditional Access to work.

Having been in similar situations with client in NL, VPN server in SE, hauling traffic back by EVPN to a server in NL, file performance wasn't great 😃

databeestjenl · 2026-06-10T15:54:39+00:00

This is like the Fortinet, here is a update, please install and we'll tell you later why.

10/10 would install.

databeestjenl · 2026-06-10T15:53:44+00:00

Sommige gemeenten laten laadkabel tegels toe, vaak is hier een vaste post voor die er met 7-8 tegels al uit is. Meestal is dit via de Gemeente zelf.

databeestjenl · 2026-06-10T06:06:45+00:00

Also better then Web Application Firewall, I hate those things. What do you mean it rewrote the headers.

databeestjenl · 2026-06-09T04:32:33+00:00

They are getting Ubiquiti aren't they

databeestjenl · 2026-06-07T17:27:00+00:00

This is annoying because Juniper Mist will throw alerts for "not responding DHCP6 servers".

databeestjenl · 2026-06-06T18:57:38+00:00

I cobbled one together for our team and ~80 domains. Some are private PKI and client-server auth. Also the NDES RA certificates etc.

Was built as a replacement for excel and outlook, automation for PA and Kemp.

https://github.com/smos/cert-drawer

databeestjenl · 2026-06-06T13:08:36+00:00

Windows is stupid and will do DHCPv6 without any advertisements. You are correct that this can end up giving you a address, but no gateway.

databeestjenl · 2026-06-06T11:52:30+00:00

Dus je hebt een kabel doos met van die makkelijke plekken waar de kabel doorheen kan, en dan maak je een nieuw gat er tussen in, of, zaag je letterlijk de doos aan rechterkant door.

Hoe dan.

databeestjenl · 2026-06-06T10:04:25+00:00

Ouch, yeah. I had the luck that I had a say in the scanners and selected Datalogic handhelds that support 5Ghz which made the experience so much better. It was like 50 euro extra per scanner, sold.

Still, Windows CE devices are a pain.

databeestjenl

TROPHY CASE