Babak Farrokhi :dns:
@farrokhi.unix.family.ap.brid.gy
Internet Plumber - Doing DNS for fun and (non)profit.
#BGP, #DNS, #C, #Golang, #SRE, #FreeBSD, #Unix, #Linux #内向
Medicore at all of the above, but gets the job done
🌉 bridged from ⁂ https://unix.family/@farrokhi, follow @ap.brid.gy to interact
#BGP, #DNS, #C, #Golang, #SRE, #FreeBSD, #Unix, #Linux #内向
Medicore at all of the above, but gets the job done
🌉 bridged from ⁂ https://unix.family/@farrokhi, follow @ap.brid.gy to interact
I bought two cheap (?) lighting accessories yesterday. One says it has a “Limited Lifetime Warranty for 2 years.” The other says “No charging cable included,” but it has two cables inside. I’m not sure what to make of it, but I suppose I got a good deal.
November 29, 2025 at 10:07 AM
I bought two cheap (?) lighting accessories yesterday. One says it has a “Limited Lifetime Warranty for 2 years.” The other says “No charging cable included,” but it has two cables inside. I’m not sure what to make of it, but I suppose I got a good deal.
RE: https://mastodon.social/@hynek/115620454186505592
I will call that “The Microsoft Effect”. Case in point: Azure web portal. It feels like it is falling apart every time you click on something.
I will call that “The Microsoft Effect”. Case in point: Azure web portal. It feels like it is falling apart every time you click on something.
shots fired:
> it’s abundantly clear that the talented folks who used to work on the product have moved on to bigger and better things, with the remaining rookies eager to inflict some kind of bloated, buggy JavaScript framework on us in the name of progress. Stuff that used to be snappy is now […]
> it’s abundantly clear that the talented folks who used to work on the product have moved on to bigger and better things, with the remaining rookies eager to inflict some kind of bloated, buggy JavaScript framework on us in the name of progress. Stuff that used to be snappy is now […]
Original post on mastodon.social
mastodon.social
November 28, 2025 at 7:35 AM
RE: https://mastodon.social/@hynek/115620454186505592
I will call that “The Microsoft Effect”. Case in point: Azure web portal. It feels like it is falling apart every time you click on something.
I will call that “The Microsoft Effect”. Case in point: Azure web portal. It feels like it is falling apart every time you click on something.
In the imminent tech bubble burst, is Figma going to be the first casualty?
November 19, 2025 at 2:48 PM
In the imminent tech bubble burst, is Figma going to be the first casualty?
People argue that #mozilla has forgotten that their remaining user base does not care about AI.
They have not forgotten. They simply do not care.
This is a calculated move (or a desperate attempt, if you will) to expand their user base and capture some market share. And we all know how it is […]
They have not forgotten. They simply do not care.
This is a calculated move (or a desperate attempt, if you will) to expand their user base and capture some market share. And we all know how it is […]
Original post on unix.family
unix.family
November 18, 2025 at 8:38 AM
People argue that #mozilla has forgotten that their remaining user base does not care about AI.
They have not forgotten. They simply do not care.
This is a calculated move (or a desperate attempt, if you will) to expand their user base and capture some market share. And we all know how it is […]
They have not forgotten. They simply do not care.
This is a calculated move (or a desperate attempt, if you will) to expand their user base and capture some market share. And we all know how it is […]
I am seeing an increasing trend where developers of software I have purchased licenses for resurface after a long time, switch to a subscription model, release an update or two, and then disappear again.
Dear developer: I am fine with subscription model when it makes sense, but if you know you […]
Dear developer: I am fine with subscription model when it makes sense, but if you know you […]
Original post on unix.family
unix.family
November 17, 2025 at 12:55 PM
I am seeing an increasing trend where developers of software I have purchased licenses for resurface after a long time, switch to a subscription model, release an update or two, and then disappear again.
Dear developer: I am fine with subscription model when it makes sense, but if you know you […]
Dear developer: I am fine with subscription model when it makes sense, but if you know you […]
Apple has just introduced a mankini for iPhone for 229$. And it does not even have a more expensive Pro model? Dang. How do I show off then?
November 13, 2025 at 8:04 AM
Apple has just introduced a mankini for iPhone for 229$. And it does not even have a more expensive Pro model? Dang. How do I show off then?
Reposted by Babak Farrokhi :dns:
Scientists have discovered that it is possible to just do something, without making a podcast about it
November 9, 2025 at 11:56 PM
Scientists have discovered that it is possible to just do something, without making a podcast about it
Updated my opinionated "Securing SSH Server Configuration" guide. There are some recommendation that you may find useful:
https://farrokhi.net/posts/2025/11/securing-ssh-server-configuration-in-2025/
https://farrokhi.net/posts/2025/11/securing-ssh-server-configuration-in-2025/
Securing SSH Server Configuration in 2025
Updated guide for securing OpenSSH with modern cryptographic standards
farrokhi.net
November 8, 2025 at 9:53 AM
Updated my opinionated "Securing SSH Server Configuration" guide. There are some recommendation that you may find useful:
https://farrokhi.net/posts/2025/11/securing-ssh-server-configuration-in-2025/
https://farrokhi.net/posts/2025/11/securing-ssh-server-configuration-in-2025/
Reposted by Babak Farrokhi :dns:
Weekend Reads
* EDNS client subnet in practice
https://farrokhi.net/posts/2025/10/edns-client-subnet-in-practice-evaluating-public-resolver-behaviors/
* BGP-based DDoS scrubbing services survey
https://ris.utwente.nl/ws/portalfiles/portal/507287576/BGP_based_scrubbing_services.pdf
* Circuit […]
* EDNS client subnet in practice
https://farrokhi.net/posts/2025/10/edns-client-subnet-in-practice-evaluating-public-resolver-behaviors/
* BGP-based DDoS scrubbing services survey
https://ris.utwente.nl/ws/portalfiles/portal/507287576/BGP_based_scrubbing_services.pdf
* Circuit […]
Original post on infosec.exchange
infosec.exchange
November 7, 2025 at 11:23 PM
Weekend Reads
* EDNS client subnet in practice
https://farrokhi.net/posts/2025/10/edns-client-subnet-in-practice-evaluating-public-resolver-behaviors/
* BGP-based DDoS scrubbing services survey
https://ris.utwente.nl/ws/portalfiles/portal/507287576/BGP_based_scrubbing_services.pdf
* Circuit […]
* EDNS client subnet in practice
https://farrokhi.net/posts/2025/10/edns-client-subnet-in-practice-evaluating-public-resolver-behaviors/
* BGP-based DDoS scrubbing services survey
https://ris.utwente.nl/ws/portalfiles/portal/507287576/BGP_based_scrubbing_services.pdf
* Circuit […]
If Apple were serious about QA and product quality, there would be many heads rolling in their hallways right now.
November 5, 2025 at 9:25 PM
If Apple were serious about QA and product quality, there would be many heads rolling in their hallways right now.
Something that started as a small curiosity and weekend project turned into a long article with several surprises for myself (including how bad I am at time estimates). I went down quite a few rabbit holes along the way.
EDNS Client Subnet in Practice: Evaluating Public Resolver Behaviors […]
EDNS Client Subnet in Practice: Evaluating Public Resolver Behaviors […]
Original post on unix.family
unix.family
November 3, 2025 at 2:13 PM
Something that started as a small curiosity and weekend project turned into a long article with several surprises for myself (including how bad I am at time estimates). I went down quite a few rabbit holes along the way.
EDNS Client Subnet in Practice: Evaluating Public Resolver Behaviors […]
EDNS Client Subnet in Practice: Evaluating Public Resolver Behaviors […]
Which cloud service is down _today_? My washing machine stopped working this morning 😎
October 31, 2025 at 10:28 AM
Which cloud service is down _today_? My washing machine stopped working this morning 😎
Pleasant surprise to see Niall O’Reilly (@niallor) here on Mastodon. Many of you from the RIPE and Internet ops community will certainly know him already. Welcome aboard! I’m sure you’ll have plenty of followers in no time!
October 30, 2025 at 8:12 PM
Pleasant surprise to see Niall O’Reilly (@niallor) here on Mastodon. Many of you from the RIPE and Internet ops community will certainly know him already. Welcome aboard! I’m sure you’ll have plenty of followers in no time!
Funny story: I built a Dockerfile and image for dnsdiag years ago, as a joke. Turns out people actually use it (why??), so now it’s part of the release workflow.
https://hub.docker.com/r/farrokhi/dnsdiag
https://hub.docker.com/r/farrokhi/dnsdiag
October 26, 2025 at 12:29 PM
Funny story: I built a Dockerfile and image for dnsdiag years ago, as a joke. Turns out people actually use it (why??), so now it’s part of the release workflow.
https://hub.docker.com/r/farrokhi/dnsdiag
https://hub.docker.com/r/farrokhi/dnsdiag
Released dnsdiag v2.9.0 :dns:
New in this release:
• `dnstraceroute`: NSID support for tracing anycast DNS instances
• `dnseval`: DNS over QUIC (DoQ) and HTTP/3 (DoH3)
• Improved error handling and validation
• Modern packaging with PEP 639 compliance
• Tons of Quality of Life improvement […]
New in this release:
• `dnstraceroute`: NSID support for tracing anycast DNS instances
• `dnseval`: DNS over QUIC (DoQ) and HTTP/3 (DoH3)
• Improved error handling and validation
• Modern packaging with PEP 639 compliance
• Tons of Quality of Life improvement […]
Original post on unix.family
unix.family
October 26, 2025 at 11:37 AM
Released dnsdiag v2.9.0 :dns:
New in this release:
• `dnstraceroute`: NSID support for tracing anycast DNS instances
• `dnseval`: DNS over QUIC (DoQ) and HTTP/3 (DoH3)
• Improved error handling and validation
• Modern packaging with PEP 639 compliance
• Tons of Quality of Life improvement […]
New in this release:
• `dnstraceroute`: NSID support for tracing anycast DNS instances
• `dnseval`: DNS over QUIC (DoQ) and HTTP/3 (DoH3)
• Improved error handling and validation
• Modern packaging with PEP 639 compliance
• Tons of Quality of Life improvement […]
After a month of traveling, events, and catching up with friends and colleagues, I finally made it home. The only progress I can report is that my unread emails and backlog have multiplied.
October 26, 2025 at 11:26 AM
After a month of traveling, events, and catching up with friends and colleagues, I finally made it home. The only progress I can report is that my unread emails and backlog have multiplied.
I smell circular dependency...
https://mastodon.rfc1925.org/@ondrej/115406008529572272
https://mastodon.rfc1925.org/@ondrej/115406008529572272
Ondřej Surý (@ondrej@sury.org)
Attached: 1 image It was DNS…
mastodon.rfc1925.org
October 20, 2025 at 1:43 PM
I smell circular dependency...
https://mastodon.rfc1925.org/@ondrej/115406008529572272
https://mastodon.rfc1925.org/@ondrej/115406008529572272
Reposted by Babak Farrokhi :dns:
Have you noticed that when the blame #dns meme starts flying the root is perfectly operational, there is rarely a mention of the big registry operators, BIND, Unbound, Knot, and PowerDNS are absent the conversation, and many who can craft a reasonable dig query are getting responses from local […]
Original post on infosec.exchange
infosec.exchange
October 20, 2025 at 12:00 PM
Have you noticed that when the blame #dns meme starts flying the root is perfectly operational, there is rarely a mention of the big registry operators, BIND, Unbound, Knot, and PowerDNS are absent the conversation, and many who can craft a reasonable dig query are getting responses from local […]
DNSDiag 2.8.1 is now available with DNS Cookie support, EDNS Client Subnet testing, automatic Extended DNS Error display, and DNS over QUIC/HTTP3 tracing.
This was also the perfect opportunity to fix the known bugs and make some quality of life improvements […]
This was also the perfect opportunity to fix the known bugs and make some quality of life improvements […]
Original post on unix.family
unix.family
October 4, 2025 at 7:48 PM
DNSDiag 2.8.1 is now available with DNS Cookie support, EDNS Client Subnet testing, automatic Extended DNS Error display, and DNS over QUIC/HTTP3 tracing.
This was also the perfect opportunity to fix the known bugs and make some quality of life improvements […]
This was also the perfect opportunity to fix the known bugs and make some quality of life improvements […]
Heading to OARC in a few weeks? Join one of the table topics! I’ll be moderating an ADoT/ADoQ Adoption discussion among several other interesting choices.
https://mastodns.net/@dnsoarc/115264999087793934
#dns #lovedns
https://mastodns.net/@dnsoarc/115264999087793934
#dns #lovedns
DNS-OARC (@dnsoarc@mastodns.net)
Attached: 1 image Join the conversation at #OARC45! Table Topics will run during the last 30 minutes of lunch (13:45 – 14:15 CEST) on both workshop days. Small-group discussions—covering DNS operations, security, and community topics—will be clearly marked with table signs. Find a topic that interests you and pull up a chair! More information can be found on our event site https://bit.ly/4nG1bCW #LoveDNS #TableTopics ^RP
mastodns.net
September 25, 2025 at 5:49 PM
Heading to OARC in a few weeks? Join one of the table topics! I’ll be moderating an ADoT/ADoQ Adoption discussion among several other interesting choices.
https://mastodns.net/@dnsoarc/115264999087793934
#dns #lovedns
https://mastodns.net/@dnsoarc/115264999087793934
#dns #lovedns
Running some experiments on public DNS resolvers to see how they handle ECS. Surprise: resolvers aren’t all created equal!
I will share my findings soon.
I will share my findings soon.
September 25, 2025 at 10:34 AM
Running some experiments on public DNS resolvers to see how they handle ECS. Surprise: resolvers aren’t all created equal!
I will share my findings soon.
I will share my findings soon.