Hacker News with Generative AI: Networking

Life pro tip: macOS migration can run over thunderbolt (xeiaso.net)
Wifi is "it depends" fast. Ethernet is either one or 10 gigabits fast. MacBooks come with very high data rate thunderbolt ports, so why not use them for migration?
Intel's Tofino P4 Software Is Now Open Source (p4.org)
We are excited to usher in the dawn of a new era for the P4 programming language. For many years, the Tofino family of programmable Ethernet switches, powered by P4, has represented the cutting edge of network innovation. Tofino’s unprecedented levels of programmability have enabled organizations to shape their networks like never before. But there was always one limitation: the software driving this groundbreaking hardware remained closed source. Today, that changes.
Rsync 3.4.0 Released (samba.org)
Rsync: Vulnerabilities (openwall.com)
Two independent groups of researchers have identified a total of 6 vulnerabilities in rsync. In the most severe CVE, an attacker only requires anonymous read access to a rsync server, such as a public mirror, to execute arbitrary code on the machine the server is running on.
Providing Precise Time over the Network (lwn.net)
Handling time in a networked environment is never easy.
What the TP-Link Ban in the US Means for You (thedefendopsdiaries.com)
The potential ban on TP-Link routers in the United States has sparked significant concern and debate, reflecting broader geopolitical tensions and cybersecurity challenges.
IP addresses through 2024 (potaroo.net)
Time for another annual roundup from the world of IP addresses. Let’s see what has changed in the past 12 months in addressing the Internet and look at how IP address allocation information can inform us of the changing nature of the network itself.
Linux Routing Fundamentals (sdn.clinic)
Linux has been a first class networking citizen for quite a long time now. Every box running a Linux kernel out of the box has at least three routing tables and is supporting multiple mechanisms for advanced routing features from policy based routing (PBR), to VRFs(-lite), and network namespaces (NetNS). Each of these provide different levels or separation and features, with PBR being the oldest one and VRFs the most recent addition (starting with Kernel 4.3).
Preventing conflicts in authoritative DNS config using formal verification (cloudflare.com)
Over the last year, Cloudflare has begun formally verifying the correctness of our internal DNS addressing behavior — the logic that determines which IP address a DNS query receives when it hits our authoritative nameserver.
Building Ultra Long Range Toslink (benjojo.co.uk)
This post is a textual version of a talk I gave at The 38th Chaos Computer Congress at the end of 2024. You can watch the talk that was recorded by the wonderful C3VOC team below if that’s your preferred medium:
Consumer-grade routers on puny power supplies (2024) (apnic.net)
Around a decade ago, I proudly joined the — then still small — ranks of people in New Zealand with a solar photovoltaics system on their roof.
HTTP/2 Flow Control Deadlock (ycombinator.com)
Our real-world experience with flow control deadlock that manifested as infinite HTTP request hangs.
IPv6-only Network based on Jool (taoshu.in)
In this post, I will share experiences of my experiment of how to setting up the IPv6-only network on Linux using the Jool1.
A curated list of WireGuard tools, projects, and resources (github.com/cedrickchee)
A curated list of WireGuard tools, projects, and resources.
There are different sorts of WireGuard setups with different difficulties (utoronto.ca)
I've now set up WireGuard in a number of different ways, some of which were easy and some of which weren't. So here are my current views on WireGuard setups, starting with the easiest and going to the most challenging.
How NAT Traversal Works (2020) (tailscale.com)
We covered a lot of ground in our post about How Tailscale Works. However, we glossed over how we can get through NATs (Network Address Translators) and connect your devices directly to each other, no matter what’s standing between them. Let’s talk about that now!
GPON FTTH networks (in)security (2016) (pierrekim.github.io)
GPON FTTH network is the future: GPON FTTH (Fiber To The Home) is very popular because it is cheap and allows people to download legal Video On Demand damn fast. Everybody wants GPON FTTH at home, you, me, my dog and my neighbors. In fact, you are sharing 2.5gbps of downstream with others clients (but it is still fast).
Multi-Path TCP: revolutionizing connectivity, one path at a time (cloudflare.com)
The Internet is designed to provide multiple paths between two endpoints. Attempts to exploit multi-path opportunities are almost as old as the Internet, culminating in RFCs documenting some of the challenges. Still, today, virtually all end-to-end communication uses only one available path at a time.
Show HN: An SSH based utility to transfer pipes across machines – beam (github.com/ksdme)
transfer pipes and files from one computer to another over ssh
Cloudflare Talks Up Multi-Path TCP but Dings Linux's Less Than Ideal Support (phoronix.com)
The folks at Cloudflare have published another great engineering blog post with this time covering Multi-Path TCP (MPTCP) as a very interesting addition to the TCP spec. But there they acknowledge the less than ideal Linux support especially on the client side.
Harnessing 3200 Gbps Network: A Journey with RDMA, EFA, and Libfabric (le.qun.ch)
Earlier this year, I had the fortune of joining Perplexity AI, where I finally got to use servers with the most powerful configuration—AWS p5 instances equipped with 8 NVIDIA H100 GPUs interconnected via NVSwitch. What excited me even more was the ultra-high-speed 3200 Gbps network between servers. I thought it would be incredibly cool if I could write a program that could utilize this full 3200 Gbps bandwidth!
Saving 100+ Desk Phones from E-Waste Doom with TFTP and a Simpler PBX (difuse.io)
Saving 100+ Desk Phones from E-Waste Doom with TFTP and a Simpler PBX
Mptcp: Revolutionizing connectivity, one path at a time (cloudflare.com)
The Internet is designed to provide multiple paths between two endpoints. Attempts to exploit multi-path opportunities are almost as old as the Internet, culminating in RFCs documenting some of the challenges. Still, today, virtually all end-to-end communication uses only one available path at a time.
A brief history of the RFC format (2021) (apnic.net)
Geoff Huston recently discussed the processes behind putting together an RFC, and the history of why they came to be, so today we’re going to explore another aspect of what makes RFCs the way they are — their plain text format.
Diagnosing an Unusual WiFi Issue (2020) (ryuuta.net)
Late last year, I started experiencing some unusual intermittent connection issues on my Desktop.
Show HN: connet – A P2P reverse proxy with NAT traversal (github.com/connet-dev)
connet is a peer-to-peer reverse proxy for NAT traversal. It is inspired by ngrok, frp, rathole and others.
iKOOLCORE R2 Max 10GbE Mini PC Review (cnx-software.com)
iKOOLCORE R2 Max is an Alder Lake-N mini PC, server, and soft router equipped with two 10GbE and two 2.5GbE ports and offered with either an Intel Processor N100 quad-core CPU, or a more powerful Intel Core i3-N305 octa-core processor.
Diving into the world of Linux WiFi drivers (inconsistentrecords.co.uk)
Welcome to 2025
Open sourcing h3i: a command line tool and library for low-level HTTP/3 (cloudflare.com)
h3i is a binary command line tool and Rust library designed for low-level testing and debugging of HTTP/3, which runs over QUIC. h3i is free and open source as part of Cloudflare's quiche project.
Production Twitter on One Machine? 100Gbps NICs and NVMe Are Fast (thume.ca)
In this post I’ll attempt the fun stunt of designing a system that could serve the full production load of Twitter with most of the features intact on a single (very powerful) machine.