Build your own IPv6 Tunnel Broker using Linode and WireGuard

There are some free IPv6 tunnel broker services such as the popular https://tunnelbroker.net from Hurricane Electric. It’s a great service that I used for years. But over time I ran into two major issues. First the performance of the only server in Canada had become pretty poor. And second, many services were blocking the prefixes uses by tunnelbroker.net making it less practical to use on a regular use network. Looking for options I came across the unique ability on Linode to assign a virtual machine a /56 IPv6 prefix....

2024-02-25

NAT64 on the Router Using VyOS

If you want to operate an IPv6 only network, there is a new way to make it happen that is much simplified compared to what we had to do in the past. And this is using VyOS as your router which has integrated Jool starting in v1.4 making it very easy to setup and use out of the box. DNS64 Just as important as the NAT64 component is DNS64. This is what translates a DNS lookup that only has an A record to also respond with an AAAA record usually using the NAT64 well-known reserved prefix 64:ff9b::/96....

2024-02-18

How-to Run Unifi Network Application on VyOS

Normally we wouldn’t recommend hosting applications on your firewall, but considering the UniFi Network Application (Controller) is connected closely to your network, there is at least some rational for running MongoDB on your firewall 😎 All you need to get started is a working VyOS installation. At this moment I am using v1.4 and v1.5 would be the same procedure. I also want to say thanks to the LinuxServer.io team who has done a great job maintaining this docker image....

2024-02-15

Connect to FPM Socket Permission Denied After Upgrade to PHP 5.5.12

If you’ve just upgraded your web server to PHP-FPM you probably noticed that your web sites went down and your Nginx logs or whatever server you are using are giving you an error message that include the following statement: connect() to unix:/var/run/www.sock failed (13: Permission denied) while connecting to upstream To provide some context for this problem see http://www.openwall.com/lists/oss-security/2014/04/29/5 What was happening before is that the sockets were being created with a mode (permissions) of 0666 which makes it possible in theory for any web site to connect to them....

2014-05-11

Merge Split MTS AVCHD Clips on Windows

One really annoying thing about working with high definition video on the Windows platform is that none of the video editing application out there seem to understand that video clips from the camera may be split into multiple files because of the 2GB file size limitation of the FAT32 file system. In my case I’m working with a Canon XA10 recording to an SD card and editing using Adobe Premier....

2013-04-08