Improving the MikroTik RB5009 WireGuard performance

A quick guide on how to get better WireGuard performance out of the already awesome MikroTik RB5009 router, by playing with the queues and the CPU frequency settings.

Read more  ↩︎

Sharing the same IPv6 subnet across different networks without using Prefix Delegation

A story about how my fediverse instance wasn't completely ready for IPv6 and how Linux saved the day.

Read more  ↩︎

Installing Proxmox on Hetzner with ZFS full-disk encryption and remote unlocking

Proxmox VE is a very good virtualization platform, but it's lacking a feature that's pretty important in my opinion: full-disk encryption.

Although it is not supported out of the box, it is still possible to achieve as Proxmox is based on Debian, so let's see how to set it up!

Read more  ↩︎

Self-hosting an Authoritative DNS server with PowerDNS - Part 3: Infra-as-Code and DNSSEC

After putting our new self-hosted PowerDNS servers in production, it'd be fun to use Infra-as-Code with OctoDNS to deploy and version our DNS records, as well as to secure our DNS records with DNSSEC.

Read more  ↩︎

Self-hosting an Authoritative DNS server with PowerDNS - Part 2: High-Availability and production

Now that we hosted our first authoritative DNS server, let's take that to the next level, setting up high availability and putting it in a real-world production: yours.

Read more  ↩︎