# hello, friend.
I’m Wieger Bontekoe, a Principal Site Reliability & Network Engineer. This is where I keep notes on VyOS, peering, monitoring and the occasional cheat sheet.
I have been using VyOS as a routing platform for various networks and projects for a long time with great success. With speeds between 1-40Gbit, I have been able to rely on VyOS to date. However, this…
OpenSSH 8.0 or newer is required and Git 2.34.0. If no key exists yet, it can be created; Today, the RSA is the most widely used public-key algorithm for SSH key. But compared to Ed25519, it's slower…
RFC 9234 adds roles to BGP sessions and an Only-to-Customer attribute to routes. Together they stop the most common kind of route leak automatically. What it does, and how to enable it on VyOS.
I took a hard look at my own Zabbix and Grafana dashboards and asked one question: does this help during an incident? Five concrete fixes, with before and after.
Communities are the cheapest form of documentation your network has. A practical large community scheme for a small AS: tagging where routes come from, and letting peers and customers steer how you announce them.
Peering Manager generates my BGP sessions; NetBox knows everything else about the router. With NetBox config templates you can render the base VyOS configuration straight from your source of truth.
Dropping RPKI-invalid routes on VyOS is a handful of commands. Here is how I set up Routinator as a validator, connect VyOS to it over RTR and filter invalids on every eBGP session.
Peering Manager is an open-source BGP session management solution including Peeringdb synchronization for automating session management. Peering…
Many companies use services to monitor their website or network from various locations around the world. While these services are nice, it also costs…
In the previous blog I did a test between two Vyos hosts, indirectly connected to each other with two switches. It was amazing how easily Vyos could…
I have been using VyOS as a routing platform for various networks and projects for a long time with great success. With speeds between 1-40Gbit, I…
Disable offloading, enable ntuple Configure MAX RPS flow counts for queues TCP Tweaks: Setting the MaxReadReq to 2048 Disable all offloading on the…
Download all wanted block lists and place them as TXT in the same directory as the following script. You can find lots of them on firebog.net. Move…
Installing the Unifi Network Application via Docker is super easy and saves the purchase of a new cloud key or controller. Create a new docker network…
Create a new zone Add a DNS record Add a first record Check for errors Sync zone to slave servers Edit zone manually (for changing TTLs and such)
As a network administrator, I have been (partly) responsible for the monitoring of network infrastructures or even entire companies for many…
OpenSSH 8.0 or newer is required and Git 2.34.0. If no key exists yet, it can be created; Today, the RSA is the most widely used public-key algorithm…
tcpdump is a data-network packet analyzer computer program that runs under a command line interface. It allows the user to display TCP/IP and other…
The Windows Time service uses the Network Time Protocol (NTP) to help synchronize time across a network. It's as easy as 3 commands using powershell:
Last Thursday, June 6, 2019 at 12:00 a.m. Dutch time, a two-hour outage began at various customers. Both business customers for fiber optic internet…
Every network engineer with some experience knows RFC1918 address space from the top of their head. So no need to explain that almost every office,…