On the morning of 1 May 2025, I noticed the FreshPorts production website was under heavy load. For the most part, the database server was running at 100%. The usual load is 7%. Even if you look back 4 weeks, this was highly unusual. I found it was one IP address. I blocked it. The load dropped. It had been going for hours. Time to try Anubis. In this post: FreeBSD 14.2 go-anubis […]
Implement Anubis to give the bots a harder time Read More »
But first, there’s more Right after asking “Anyone running zfsd? Did you do anything in particular to configure it? I just added my first hot-spare to a zpool.”, ivy told me “noooooooo don’t use hot spares!! Keep a cold spare or at least an online device not attached to a pool. otherwise your zpool will randomly decide to attach its hot spare due to a temporary cabling issue or something like that. the
Adding in a hot-spare for zfs on FreeBSD Read More »
Last night, I wanted to update several hosts which were running sysutils/samdruckerclientshell. I ran csshX host1 host2 host3 … hostn. I didn’t get connected to all the host, so I closed out those screens and tried againg, adding -l dvl to the command. I got connected. Updated the packages, and went on with other tasks. What happened? On the laptop I was using, I was logged in as the user dan, so the
invalid user dan or illegal user dan? Why different messages? Read More »
First, let me be clear: I am a fan of powerd++. I use it on all servers in the basement. A recent test shows my gateway does not benefit from it. To determine the range of this graph, I consulted my logs: [11:31 gw01 dvl ~] % sudo grep powerd /var/log/auth.log Mar 25 12:38:12 gw01 sudo[73534]: dvl : TTY=pts/1 ; PWD=/usr/home/dvl ; USER=root ; COMMAND=/usr/sbin/service powerdxx sto Mar 25 12:38:18 gw01 sudo[73544]: dvl
powerd++: Not always savings Read More »
I’ve been configuring a new gateway server for use in my basement data center (home lab). I had recently read about DCO and FreeBSD’s opvn device. DCO (Data Channel Offload) let’s OpenVPN use the encryption features available in many CPUs. In my previous post, I checked; my OpenVPN server and most of the clients are DCO-capable. I decided to try it. I found documentation lacking as to how to use it. I took
Get faster OpenVPN on FreeBSD by enabling DCO – easily done Read More »
After replacing an existing gateway with new hardware, the OpenVPN connections had issues. The clients would connect, but non-trivial amounts of traffic would cause errors. This post contains a workaround, by upgrading the OS. I would like to know the cause. In this post, these are the version in use: FreeBSD 14.2 (for the OpenVPN server and some of the clients) FreeBSD 14.1 (for some of the clients) OpenVPN 2.6.13 (on the server
Problems with OpenVPN when server is FreeBSD 14.2 and client is 14.1 Read More »
In this post: FreeBSD 14.2 ddclient-3.11.2 Ansible playbook for ddclient: https://github.com/dlangille/ddclient/ forked from https://github.com/hammadrauf/ddclient/ In my previous post, I configured dhclient to setup my Hurricane Electric tunnel and notify HE of same. First attempt: [12:39 gw01 dvl ~] % sudo ddclient [12:47 gw01 dvl ~] % tail /var/log/messages … Mar 6 12:47:50 gw01 ddclient[52929]: WARNING: ” is not a valid IPv4 or IPv6 address Mar 6 12:47:50 gw01 ddclient[52929]: WARNING: found neither IPv4
Invoking ddclient from dhclient to update 3rd party dynamic dns hosts on FreeBSD Read More »
It is not often that I need to debug pf firewall rules. Yet, when I do, I cannot remember the commands for what I want to do. What is being blocked First, I want to see the firewall rule numbers in the tcpdump output. I am logging all blocked packets, via pflog0. I can use that to see what is being blocked and by what rule. These are found in my /etc/pf.conf: There
Debugging aids for pf firewall rules [on FreeBSD] Read More »
During the 2025-01-22 OpenZFS Production User Call, ‘atomic operations’ was mentioned with respect to ~/tmp/deleting zfs list -r -t snapshot data01/snapshots/deleting > ~/tmp/deleting 2.54s user 48.47s system 99% cpu 51.042 total 50 seconds. That’s OK. 60,000 deletes starting on the 23rd I started the delete. Actually, it’s not 60,000 deletes. It’s one destroy, of 60,000 snapshots. [12:52 r730-03 dvl ~] % time sudo zfs destroy data01/snapshots/deleting@1%60000 After starting the above command, I started
Is deleting empty snapshots faster? Read More »
In this post In this post, we have: FreeBSD 14.1-RELEASE-p5 r730-03 Lots of boring repetitive sections, so skip over that to find what you need This article was written over a couple of days. The zpool in question is 3 pairs of 12TB HDD: [13:44 r730-03 dvl ~/tmp] % zpool status data01 pool: data01 state: ONLINE scan: scrub in progress since Fri Jan 17 05:29:21 2025 22.1T / 26.1T scanned at 200M/s, 19.2T
Way too many snapshots Read More »