Hacker News with Generative AI: Networking

KubeVPN: Revolutionizing Kubernetes Local Development (github.com/kubenetworks)
KubeVPN offers a Cloud-Native Dev Environment that seamlessly connects to your Kubernetes cluster network.
Go-msquic: A new QUIC/HTTP3 library for Go (github.com/noboruma)
go-msquic is a Go wrapper for the Microsoft's QUIC library, providing Go developers with an easy interface to work with QUIC-based protocols such as HTTP/3.
Pi-hole v6 (pi-hole.net)
We’re excited to announce the general release of Pi-hole v6!
IPv6 Is Hard (jenslink.net)
Yesterday I read this toot (German) over on mastodon which starts with “IPv6 is hard.”
Implementing a Zero Trust Architecture [pdf] (nist.gov)
Low-Latency Transaction Scheduling via Userspace Interrupts [pdf] (cs.sfu.ca)
The Gemini protocol as seen by cURL's creator (haxx.se)
There is again a pull-request submitted to the curl project to bring support for the Gemini protocol. It seems like a worthwhile effort that I support, even if it is also a lot of work involved and it might take some time before it reaches the state in which it can be merged. A previous attempt at doing this was abandoned a while ago.
Hickory DNS Is Moving Toward Production Readiness (memorysafety.org)
The Domain Name System (DNS) is a foundational part of the Internet. It stores data associated with domain names, like web server addresses and mail server addresses. Almost all network connections are preceded by a DNS lookup. The most popular DNS server implementations are written in C, and as a result, they have been affected by a series of memory safety vulnerabilities. These vulnerabilities can put DNS infrastructure at risk, as well as any system that depends on DNS.
Do It Yourself Database CDN with Embedded Replicas (turso.tech)
Imagine you have a user in Singapore, and your database is in the US. Every time the user makes a request, it has to travel halfway around the world, which can lead to high latency and poor performance.
Trust, 2-Party Relays, and QUIC (obscura.net)
2-Party Relays largely resolve the trust and privacy problem inherent in existing consumer VPNs QUIC-based VPN protocols blend in with HTTP/3 traffic, bypassing network filters while avoiding the TCP-over-TCP slowdown We built a new VPN named Obscura based on these two insights, partnering with Mullvad as our exit hop
Systemd adding the ability to boot directly into disk image downloaded via HTTP (phoronix.com)
Systemd lead developer Lennart Poettering has been working on adding the ability to let systemd boot directly into a disk image downloaded via HTTP within the initial RAM disk (initrd) during the Linux boot process.
A Small Contribution to Curl (shkspr.mobi)
The venerable curl is one of the most fundamental pieces of code in the modern world.
NAT Is the Enemy of Low Power Devices (golioth.io)
If you have ever tried communicating with a device on a private network, you may have encountered Network Address Translation (NAT). Fundamentally, when one device needs to send data to another device, it needs to know how to address it.
Mellanox ConnectX-5: iRISC reverse engineering (irisc-research-syndicate.github.io)
NVIDIA/Mellanox has made a series of smart network interface cards(SmartNICs/NICs) called ConnectX primarily for server and datacenter uses. In this series of articles we will take a look at its firmware, and try to reverse engineer the instruction set for the iRISC processor.
Residential Networking over Telephone (computer.rip)
Recently, I covered some of the history of Ethernet's tenuous relationship with installed telephone cabling.
I cannot believe there's no way to use a 27" 2015 iMac as a second display (macrumors.com)
It just seems totally INSANE that there's no way to use an iMac 27" 2015 as a display without hardware hacks. In 2025. I don't need high FPS or anything. I mean, the iMac and the MacBook are on the same network, surely there is some solution which works over the local network.
ZeroTier – home VPN without a public IP address (tomaszdunia.pl)
🇬🇧->🇵🇱 Przejdź do polskiej wersji tego wpisu / Go to polish version of this post
Ask HN: Is it worth it to post on the 'Who Wants To Be Hired' thread? (ycombinator.com)
Title. I see many people posting but would like to hear if people really get jobs this way?
Token Ring Networking [video] (youtube.com)
Getaddrinfo sucks. everything else is much worse (gosu.se)
DNS is one of the critical building blocks of the internet and of the modern web. For the longest time the only way for Firefox to resolve a DNS domain was by using getaddrinfo. What's remarkable about this function is that it's implemented on Linux, Windows, MacOS - even Android. It has the same signature, and works in roughly the same way, even though the implementation in these operating systems doesn't share the same code base.
is the EOL of isc.org dhcpd a mistake? Kea doesn't feel like a replacement (ycombinator.com)
Has anybody forked the original dhcpd to keep maintaining it?
OpenWrt 24.10.0 – First Stable Release (openwrt.org)
The OpenWrt community is proud to announce the first stable release of the OpenWrt 24.10 stable series.
OpenWISP: Multi-device fleet management for OpenWrt routers (openwisp.org)
Leveraging Linux OpenWrt, OpenWISP is an open-source solution for efficient IT network deployment, monitoring & management.
Linux kernel tweak could cut data center power usage by up to 30% (networkworld.com)
An improvement to the way Linux handles network traffic, developed by researchers at Canada’s University of Waterloo, could make data center applications run more efficiently and save energy at the same time.
Httptap: View HTTP/HTTPS requests made by any Linux program (github.com/monasticacademy)
View the HTTP and HTTPS requests made by any linux program by running httptap -- <command>. For example, the following runs curl on "monasticacademy.org", which results in an HTTP status of 308 (Redirect):
VEINS: Open-source vehicular network simulation framework (car2x.org)
Veins is an open source framework for running vehicular network simulations.
Avoid ISP Routers (2024) (routersecurity.org)
In my opinion, you are safest using both a modem and a router that you purchased on your own. That is, avoid equipment from your ISP.
Using Foundry Instead of LinkedIn (foundry.bz)
Justice Department Sues to Block HPE's $14B Acquisition of Juniper Networks (justice.gov)
The Justice Department today sued to block Hewlett Packard Enterprise Co.’s (HPE) proposed $14 billion acquisition of rival wireless local area network (WLAN) technology provider Juniper Networks Inc. (Juniper).
Zyxel firewalls borked by buggy update, on-site access required for fix (theregister.com)
Zyxel customers are dealing with a range of issues including reboot loops after an update on Friday went awry.