burble.dn42 http://localhost:2010/ Recent content on burble.dn42 Hugo en-gb Fri, 18 Dec 2020 00:00:00 +0000 2020 http://localhost:2010/additional/maintlog/2020/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/additional/maintlog/2020/ <p>Archive of changes made in 2020</p> <h4 id="22nd-december-2020">22nd December 2020</h4> <p>es-mad1 in Madrid, Spain has been deployed and is now open for peering.</p> <h4 id="13th-december-2020">13th December 2020</h4> <p><strong>Issue Log</strong></p> <p>burble.dn42 now has a public issue log, hosted on the <a href="https://git.dn42.dev">DN42 Registry</a>.</p> <ul> <li><a href="https://git.dn42.dev/burble/burble.dn42/issues">Issue Log</a></li> </ul> <p>Feel free to raise issues or enhancements on the log.</p> <p><strong>Speedtest Service</strong></p> <p>An experimental speed test service has been introduced:</p> <ul> <li>France: <a href="https://speedtest.fr-rbx1.burble.dn42">https://speedtest.fr-rbx1.burble.dn42</a></li> <li>Canada: <a href="https://speedtest.ca-bhs2.burble.dn42">https://speedtest.ca-bhs2.burble.dn42</a></li> </ul> <p>The two services are currently only accessible over IPv6 but are hosted on dedicated servers with plenty of available bandwidth. If the service ends up loading or disrupting the rest of the network then I may end up removing it, so use responsibly.</p> 2019 http://localhost:2010/additional/maintlog/2019/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/additional/maintlog/2019/ <p>Archive of changes made in 2019</p> <h4 id="31st-december-2019">31st December 2019</h4> <p>The Christmas period has been a really busy period for burble.dn42, with integration and transfer of services over to the new nodes. Primarily, this has meant moving services from fr-rbx1 and sg-sin2 to fr-rbx2, fr-sbg1 and sg-sin1. As part of the rebuilding, I&rsquo;ve also taken the opportunity to re-create most of my ansible scripting, with the intent that this will eventually be published.</p> 2018 http://localhost:2010/additional/maintlog/2018/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/additional/maintlog/2018/ <p>Archive of changes made in 2018</p> <h4 id="30th-december-2018">30th December 2018</h4> <p>Migrated US anycast services from dn42-us-dal1 to dn42-us-dal3.</p> <h4 id="27th-december-2018">27th December 2018</h4> <p>Added <a href="http://localhost:2010/home/certificate-authority">Certificate Authority</a> details.</p> <h4 id="26th-december-2018">26th December 2018</h4> <p>Upgraded the <a href="https://lg.burble.com">looking glass</a> with Zhaofeng <a href="https://github.com/zhaofengli/bird-lg/commits/zhaofengli">bird-lg fixes</a>.<br> ROA data is available through the burble.dn42 website, see the <a href="home/burble-dn42-services">Services</a> page.<br> RPKI service is now replicated across regions to provide additional resiliency.<br> New version of bird2 deployed, including RPKI fixes from JRB0001.</p> <h4 id="24th-december-2018">24th December 2018</h4> <p>Added new peers:</p> Dialup Service http://localhost:2010/retro/modem/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/retro/modem/ <p>Connect in to dn42 using a real physical modem.</p> <blockquote class="gdoc-hint danger"> <p><strong>06/02/23</strong> - The modem service is currently unavailable and will remain offline until later in the year.</p> <p>In the meantime, the <a href="https://wdev.burble.dn42/retro/fake/">modem emulator</a> service is still available.</p> </blockquote> <blockquote class="gdoc-hint warning"> <strong>Health warning</strong>: dialing in to dn42 can be rewarding and great fun, but using modems over VoIP is flakey at the best of times and getting it to work can be a frustrating experience. This is very much an experimental service. </blockquote> <p>The burble.dn42 dialup service allows you to dial in to dn42 via a modem. The modem is reachable via VoIP and connected to a PPP server, allowing you to log in and obtain full dn42 IPv4 connectivity.</p> Peering with burble.dn42 http://localhost:2010/network/peering/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/network/peering/ <p>This page provides the information to get started on peering with the burble.dn42 network</p> <p>burble.dn42 is a set of global POPs integrated to the <a href="https://dn42.dev/">dn42</a> network, and new peering requests are welcome. Some details of the network are available in the <a href="http://localhost:2010/network/design">Design</a> page.</p> <p>burble.dn42 is a large network and there are some restrictions in place to protect the network and the rest of the DN42.<br/> <em>Please ensure you read the information below before requesting to peer.</em></p> DN42 http://localhost:2010/services/dn42/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/services/dn42/ <p>burble.dn42 hosts a number of DN42 infrastructure services.</p> <h2 id="dns">DNS</h2> <table> <thead> <tr> <th style="text-align: left">Service</th> <th style="text-align: left">Name</th> <th style="text-align: left">IP</th> </tr> </thead> <tbody> <tr> <td style="text-align: left">DN42 Master</td> <td style="text-align: left">b.master.delegation-servers.dn42</td> <td style="text-align: left">fd42:180:3de0:30::1</td> </tr> <tr> <td style="text-align: left">Authoritative Service</td> <td style="text-align: left">b.delegation-servers.dn42</td> <td style="text-align: left">172.20.129.1<br/>fd42:4242:2601:ac53::1</td> </tr> <tr> <td style="text-align: left">Recursive Service</td> <td style="text-align: left">b.recursive-servers.dn42</td> <td style="text-align: left">172.20.129.2<br/>fd42:4242:2601:ac53::53</td> </tr> </tbody> </table> <p>burble.dn42 provides a local, anycast, authoritative and recursive DNS service.<br> The <a href="http://localhost:2010/services/dns">DNS Service</a> has it&rsquo;s own page.</p> <h2 id="dn42-wiki-mirror">DN42 Wiki Mirror</h2> <table> <thead> <tr> <th style="text-align: left">Mirror URLs</th> <th></th> </tr> </thead> <tbody> <tr> <td style="text-align: left"><a href="https://wiki.dn42/">wiki.dn42</a><br/><a href="https://wiki.burble.dn42/">wiki.burble.dn42</a> </td> <td style="text-align: left">(editable via DN42)</td> </tr> <tr> <td style="text-align: left"><a href="https://dn42.dev/">dn42.dev</a><br/><a href="https://wiki.burble.com/">wiki.burble.com</a> </td> <td style="text-align: left">(read-only via public internet)</td> </tr> </tbody> </table> <p>burble.dn42 maintains a globally distributed mirror of the DN42 Wiki, and is part of the wiki.dn42 anycast group. The DN42 services (<a href="https://wiki.dn42/">wiki.dn42</a> and <a href="https://wiki.burble.dn42/">wiki.burble.dn42</a>) are editable, whilst the public internet views (<a href="https://dn42.dev/">dn42.dev</a> and <a href="https://wiki.burble.com/">wiki.burble.com</a>) are read-only.</p> Modem Emulator http://localhost:2010/retro/fake/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/retro/fake/ <p>No modem ? no problem.</p> <blockquote class="gdoc-hint danger"> Dialup services may or may not be available depending on rebuild progress. </blockquote> <p>If you don&rsquo;t have a physical modem you can still get that retro vibe by accessing dn42 using the modem emulator service. This service presents a series of TCP/IP ports that emulate a subset of the Hayes AT command set and which are speed limited to specific baud rates. The modem can dial directly to the fr-par1 shell service for that CLI experience, or get full dn42 access via a PPP session.</p> Node Information http://localhost:2010/network/nodes/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/network/nodes/ <p>Public peering nodes</p> <h2 id="europe">Europe</h2> <h3 id="dn42-fr-rbx1">dn42-fr-rbx1</h3> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td><strong>Location</strong></td> <td>OVH, Roubaix, France</td> </tr> <tr> <td><strong>Specs</strong></td> <td>E5-1650v3, 64GB, 2 x 480GB SSD, 300mbit up/1Gbit down</td> </tr> <tr> <td><strong>Public Hostname</strong></td> <td>dn42-fr-rbx1.burble.com</td> </tr> <tr> <td><strong>Public IPv4 Address</strong></td> <td>51.254.198.204</td> </tr> <tr> <td><strong>Public IPv6 Address</strong></td> <td>2001:41d0:1008:acc::1</td> </tr> <tr> <td><strong>Tunnel IPv4 Peer Address</strong></td> <td>172.20.129.189/32</td> </tr> <tr> <td><strong>Tunnel IPv6 Link Local</strong></td> <td>fe80::42:2601:26:1/64</td> </tr> <tr> <td><strong>Tunnel IPv6 ULA</strong></td> <td>fd42:4242:2601:26::1/128</td> </tr> </tbody> </table> <h3 id="dn42-fr-par1">dn42-fr-par1</h3> <blockquote class="gdoc-hint warning"> fr-par1 is being decommissioned </blockquote> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td><strong>Location</strong></td> <td>Scaleway/Online.net, Paris, France</td> </tr> <tr> <td><strong>Specs</strong></td> <td>E3-1230v2 - 4c/8t, 32GB, 2 x 1TB SSD, 1Gbit unmetered</td> </tr> <tr> <td><strong>Public Hostname</strong></td> <td>dn42-fr-par1.burble.com</td> </tr> <tr> <td><strong>Public IPv4 Address</strong></td> <td>51.159.194.131</td> </tr> <tr> <td><strong>Public IPv6 Address</strong></td> <td>2001:bc8:1201:50d:d6ae:52ff:fecc:c97</td> </tr> <tr> <td><strong>Tunnel IPv4 Peer Address</strong></td> <td>172.20.129.181/32</td> </tr> <tr> <td><strong>Tunnel IPv6 Link Local</strong></td> <td>fe80::42:2601:37:1/64</td> </tr> <tr> <td><strong>Tunnel IPv6 ULA</strong></td> <td>fd42:4242:2601:37::1/128</td> </tr> </tbody> </table> <h3 id="dn42-uk-lon1">dn42-uk-lon1</h3> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td><strong>Location</strong></td> <td>HostHatch, London, UK</td> </tr> <tr> <td><strong>Specs</strong></td> <td>6 x EPYC 7513, 24GB, 270GB NVME, 40TB @ 10gbit</td> </tr> <tr> <td><strong>Public Hostname</strong></td> <td>dn42-uk-lon1.burble.com</td> </tr> <tr> <td><strong>Public IPv4 Address</strong></td> <td>45.91.93.104</td> </tr> <tr> <td><strong>Public IPv6 Address</strong></td> <td>2a0e:dc0:5:5::1</td> </tr> <tr> <td><strong>Tunnel IPv4 Peer Address</strong></td> <td>172.20.129.187/32</td> </tr> <tr> <td><strong>Tunnel IPv6 Link Local</strong></td> <td>fe80::42:2601:35:1/64</td> </tr> <tr> <td><strong>Tunnel IPv6 ULA</strong></td> <td>fd42:4242:2601:35::1/128</td> </tr> </tbody> </table> <h3 id="dn42-de-fra1">dn42-de-fra1</h3> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td><strong>Location</strong></td> <td>BeroHost, Frankfurt, Germany</td> </tr> <tr> <td><strong>Specs</strong></td> <td>6 x EPYC 7443P, 24GB, 300GB NVME, 25TB @ 10gbit</td> </tr> <tr> <td><strong>Public Hostname</strong></td> <td>dn42-de-fra1.burble.com</td> </tr> <tr> <td><strong>Public IPv4 Address</strong></td> <td>5.180.253.211</td> </tr> <tr> <td><strong>Public IPv6 Address</strong></td> <td>2a0e:6a80:3:430::1</td> </tr> <tr> <td><strong>Tunnel IPv4 Peer Address</strong></td> <td>172.20.129.169/32</td> </tr> <tr> <td><strong>Tunnel IPv6 Link Local</strong></td> <td>fe80::42:2601:31:1/64</td> </tr> <tr> <td><strong>Tunnel IPv6 ULA</strong></td> <td>fd42:4242:2601:31::1/128</td> </tr> </tbody> </table> <h3 id="dn42-se-sto1">dn42-se-sto1</h3> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td><strong>Location</strong></td> <td>HostHatch, Stockholm, Sweden</td> </tr> <tr> <td><strong>Specs</strong></td> <td>6 x EPYC 7542, 32GB, 340GB NVME, 10gbit</td> </tr> <tr> <td><strong>Public Hostname</strong></td> <td>dn42-se-sto1.burble.com</td> </tr> <tr> <td><strong>Public IPv4 Address</strong></td> <td>176.126.84.199</td> </tr> <tr> <td><strong>Public IPv6 Address</strong></td> <td>2a0e:dc0:2:1e93::1</td> </tr> <tr> <td><strong>Tunnel IPv4 Peer Address</strong></td> <td>172.20.129.167/32</td> </tr> <tr> <td><strong>Tunnel IPv6 Link Local</strong></td> <td>fe80::42:2601:2d:1/64</td> </tr> <tr> <td><strong>Tunnel IPv6 ULA</strong></td> <td>fd42:4242:2601:2d::1/128</td> </tr> </tbody> </table> <h2 id="north-america">North America</h2> <h3 id="dn42-ca-bhs1">dn42-ca-bhs1</h3> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td><strong>Location</strong></td> <td>OVH, Beauharnois, Canada</td> </tr> <tr> <td><strong>Specs</strong></td> <td>E5-1650v3, 64GB, 2 x 480GB SSD, 300mbit up/1Gbit down</td> </tr> <tr> <td><strong>Public Hostname</strong></td> <td>dn42-ca-bhs1.burble.com</td> </tr> <tr> <td><strong>Public IPv4 Address</strong></td> <td>167.114.211.156</td> </tr> <tr> <td><strong>Public IPv6 Address</strong></td> <td>2607:5300:60:7a9c::1</td> </tr> <tr> <td><strong>Tunnel IPv4 Peer Address</strong></td> <td>172.20.129.170/32</td> </tr> <tr> <td><strong>Tunnel IPv6 Link Local</strong></td> <td>fe80::42:2601:2c:1/64</td> </tr> <tr> <td><strong>Tunnel IPv6 ULA</strong></td> <td>fd42:4242:2601:2c::1/128</td> </tr> </tbody> </table> <h3 id="dn42-us-ash1">dn42-us-ash1</h3> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td><strong>Location</strong></td> <td>GreenCloud, Ashburn, United States</td> </tr> <tr> <td><strong>Specs</strong></td> <td>8 x EPYC 7763, 32GB, 480GB NVME, 10gbit</td> </tr> <tr> <td><strong>Public Hostname</strong></td> <td>dn42-us-ash1.burble.com</td> </tr> <tr> <td><strong>Public IPv4 Address</strong></td> <td>173.249.195.195</td> </tr> <tr> <td><strong>Public IPv6 Address</strong></td> <td>2607:9000:9000:10ae::a</td> </tr> <tr> <td><strong>Tunnel IPv4 Peer Address</strong></td> <td>172.20.129.181/32</td> </tr> <tr> <td><strong>Tunnel IPv6 Link Local</strong></td> <td>fe80::42:2601:37:1/64</td> </tr> <tr> <td><strong>Tunnel IPv6 ULA</strong></td> <td>fd42:4242:2601:37::1/128</td> </tr> </tbody> </table> <h3 id="dn42-us-lax1">dn42-us-lax1</h3> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td><strong>Location</strong></td> <td>HostHatch, Los Angeles, United States</td> </tr> <tr> <td><strong>Specs</strong></td> <td>2 x EPYC 7413, 8GB, 60GB NVME, 10TB @ 10gbit</td> </tr> <tr> <td><strong>Public Hostname</strong></td> <td>dn42-us-lax1.burble.com</td> </tr> <tr> <td><strong>Public IPv4 Address</strong></td> <td>45.67.219.3</td> </tr> <tr> <td><strong>Public IPv6 Address</strong></td> <td>2a04:bdc7:100:4656::1</td> </tr> <tr> <td><strong>Tunnel IPv4 Peer Address</strong></td> <td>172.20.129.172/32</td> </tr> <tr> <td><strong>Tunnel IPv6 Link Local</strong></td> <td>fe80::42:2601:2a:1/64</td> </tr> <tr> <td><strong>Tunnel IPv6 ULA</strong></td> <td>fd42:4242:2601:2a::1/128</td> </tr> </tbody> </table> <h3 id="dn42-us-nyc1">dn42-us-nyc1</h3> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td><strong>Location</strong></td> <td>HostHatch, New York, United States</td> </tr> <tr> <td><strong>Specs</strong></td> <td>2 x EPYC 7443P, 8GB, 60GB NVME, 10TB @ 10gbit</td> </tr> <tr> <td><strong>Public Hostname</strong></td> <td>dn42-us-nyc1.burble.com</td> </tr> <tr> <td><strong>Public IPv4 Address</strong></td> <td>109.205.61.36</td> </tr> <tr> <td><strong>Public IPv6 Address</strong></td> <td>2605:4840:2:eed4::1</td> </tr> <tr> <td><strong>Tunnel IPv4 Peer Address</strong></td> <td>172.20.129.175/32</td> </tr> <tr> <td><strong>Tunnel IPv6 Link Local</strong></td> <td>fe80::42:2601:29:1/64</td> </tr> <tr> <td><strong>Tunnel IPv6 ULA</strong></td> <td>fd42:4242:2601:29::1/128</td> </tr> </tbody> </table> Public Services http://localhost:2010/services/public/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/services/public/ <p>Services provided for use within DN42</p> <h2 id="website">Website</h2> <ul> <li><a href="https://burble.dn42/">burble.dn42</a> (dn42 link)</li> <li><a href="https://dn42.burble.com/">dn42.burble.com</a> (public internet link)</li> </ul> <p>This website is built using <a href="https://gohugo.io/">Hugo</a> and is <a href="http://localhost:2010/services/internal/#rproxyburbledn42">distributed</a> across burble.dn42 core nodes.</p> <p>The public internet site is a <a href="https://www.cloudflare.com">CloudFlare</a> pages application and the source is <a href="https://git.burble.com/burble.dn42/www">published</a> in the burble.dn42 git.</p> <h2 id="service-administration-portal">Service Administration Portal</h2> <ul> <li><a href="https://svc.burble.dn42/">svc.burble.dn42</a></li> </ul> <p>The service portal allows you to configure your burble.dn42 services.</p> <p>Functionality includes:</p> <ul> <li>Setting or changing a burble.dn42 LDAP password</li> <li>Changing your shell for the shell services</li> <li>Viewing peering information</li> </ul> <h2 id="diagnostic-services">Diagnostic Services</h2> <h3 id="looking-glass">Looking Glass</h3> <ul> <li><a href="https://lg.burble.com">lg.burble.com</a> (public internet link)</li> <li><a href="https://lg.burble.dn42">lg.burble.dn42</a> (dn42 link)</li> </ul> <p>The burble.dn42 looking glass is based on <a href="https://github.com/xddxdd/bird-lg-go">bird-lg-go</a> with some local customisations. The source code for the looking glass is available on the <a href="https://git.burble.com/burble.dn42/bird-lg-go">burble.dn42 git</a>.</p> Internal Services http://localhost:2010/services/internal/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/services/internal/ <p>This page provides some documenation on other services used within burble.dn42 that are not directly available for public use.</p> <h2 id="traefik--traefik-eu--traefik-na">traefik / traefik-eu / traefik-na</h2> <p>burble.dn42 runs a global <a href="https://traefik.io/traefik/">traefik</a> cluster which acts as a reverse proxy and load balancer for burble.dn42 web services.</p> <p>The traefik instances are anycast globally (traefik.burble.dn42), but also have regional load balancing groups for Europe (traefik-eu.burble.dn42) and North America (traefik-na.burble.dn42). This regional split helps to direct users to local services where possible.</p> IPAM http://localhost:2010/network/IPAM/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/network/IPAM/ <p>IP address tables</p> <h2 id="general-ranges">General Ranges</h2> <h3 id="ipv4">IPv4</h3> <table> <thead> <tr> <th style="text-align: left">IPv4 Address Range</th> <th style="text-align: left">Purpose</th> </tr> </thead> <tbody> <tr> <td style="text-align: left">172.20.129.0/27</td> <td style="text-align: left">burble.dn42 services</td> </tr> <tr> <td style="text-align: left">172.20.129.160/27</td> <td style="text-align: left">burble.dn42 nodes</td> </tr> </tbody> </table> <h3 id="ipv6">IPv6</h3> <table> <thead> <tr> <th style="text-align: left">IPv6 Address Range</th> <th style="text-align: left">Purpose</th> </tr> </thead> <tbody> <tr> <td style="text-align: left">fd42:4242:2601:acXX::/64</td> <td style="text-align: left">anycast services</td> </tr> <tr> <td style="text-align: left">fd42:4242:2601:<em>AA</em>::/64</td> <td style="text-align: left">public services for host <em>AA</em></td> </tr> <tr> <td style="text-align: left">fd42:4242:2601:10<em>AA</em>::/64</td> <td style="text-align: left">dmz services for host <em>AA</em></td> </tr> <tr> <td style="text-align: left">fd42:4242:2601:<em>AA</em>00::/56</td> <td style="text-align: left">/56 routed to host <em>AA</em></td> </tr> <tr> <td style="text-align: left">fd42:4242:2601:<em>AA</em>02::/64</td> <td style="text-align: left">tier2 services on host <em>AA</em></td> </tr> </tbody> </table> <h2 id="burbledn42-services">burble.dn42 Services</h2> <table> <thead> <tr> <th style="text-align: left">DNS</th> <th style="text-align: left">IPv4</th> <th style="text-align: left">IPv6</th> <th style="text-align: left">Comment</th> </tr> </thead> <tbody> <tr> <td style="text-align: left"> </td> <td style="text-align: left">172.20.129.0</td> <td style="text-align: left"> </td> <td style="text-align: left">Reserved</td> </tr> <tr> <td style="text-align: left">ns1.burble.dn42</td> <td style="text-align: left">172.20.129.1</td> <td style="text-align: left">fd42:4242:2601:ac53::1</td> <td style="text-align: left">Authoritative DNS Master</td> </tr> <tr> <td style="text-align: left">dns.burble.dn42</td> <td style="text-align: left">172.20.129.2</td> <td style="text-align: left">fd42:4242:2601:ac53::53</td> <td style="text-align: left">Recursive DNS Resolver</td> </tr> <tr> <td style="text-align: left"><a href="https://burble.dn42">burble.dn42</a><br/><a href="https://burble.dn42">www.burble.dn42</a></td> <td style="text-align: left">172.20.129.3</td> <td style="text-align: left">fd42:4242:2601:ac80::1</td> <td style="text-align: left">Website</td> </tr> <tr> <td style="text-align: left">collector.dn42</td> <td style="text-align: left">172.20.129.4</td> <td style="text-align: left">fd42:4242:2601:ac12::1</td> <td style="text-align: left">Global Route Collector</td> </tr> <tr> <td style="text-align: left">pingable.burble.dn42</td> <td style="text-align: left">172.20.129.5</td> <td style="text-align: left">fd42:4242:2601:ac05::1</td> <td style="text-align: left">Pingable IP Address</td> </tr> <tr> <td style="text-align: left"></td> <td style="text-align: left">172.20.129.6</td> <td style="text-align: left"></td> <td style="text-align: left"><em>unallocated</em></td> </tr> <tr> <td style="text-align: left"></td> <td style="text-align: left">172.20.129.7</td> <td style="text-align: left"></td> <td style="text-align: left"><em>unallocated</em></td> </tr> <tr> <td style="text-align: left">whois.burble.dn42</td> <td style="text-align: left">172.20.129.8</td> <td style="text-align: left">fd42:4242:2601:ac43::1</td> <td style="text-align: left">Whois service anycast</td> </tr> <tr> <td style="text-align: left">voip.burble.dn42</td> <td style="text-align: left">172.20.129.9</td> <td style="text-align: left">fd42:4242:2601:37:216:3eff:fe8f:6211</td> <td style="text-align: left">Asterisk VOIP Service</td> </tr> <tr> <td style="text-align: left">shell.burble.dn42</td> <td style="text-align: left">172.20.129.10</td> <td style="text-align: left">fd42:4242:2601:ac22::1</td> <td style="text-align: left">Shell service anycast</td> </tr> <tr> <td style="text-align: left">traefik-v2.burble.dn42</td> <td style="text-align: left">172.20.129.11</td> <td style="text-align: left">fd42:4242:2601:ac81::1</td> <td style="text-align: left">Global traefik cluster</td> </tr> <tr> <td style="text-align: left">traefik.burble.dn42</td> <td style="text-align: left">172.20.129.12</td> <td style="text-align: left">fd42:4242:2601:ac82::1</td> <td style="text-align: left">Global traefik cluster</td> </tr> <tr> <td style="text-align: left">traefik-eu.burble.dn42</td> <td style="text-align: left">172.20.129.13</td> <td style="text-align: left">fd42:4242:2601:ac83::1</td> <td style="text-align: left">Europe traefik cluster</td> </tr> <tr> <td style="text-align: left">traefik-na.burble.dn42</td> <td style="text-align: left">172.20.129.14</td> <td style="text-align: left">fd42:4242:2601:ac84::1</td> <td style="text-align: left">North America traefik cluster</td> </tr> <tr> <td style="text-align: left"> </td> <td style="text-align: left"><em>172.20.129.15-19</em></td> <td style="text-align: left"> </td> <td style="text-align: left"><em>Unallocated</em></td> </tr> <tr> <td style="text-align: left"></td> <td style="text-align: left">172.20.129.20/30</td> <td style="text-align: left"> </td> <td style="text-align: left"><a href="http://localhost:2010/retro/modem/">Dialup Service</a> endpoints</td> </tr> <tr> <td style="text-align: left">shell.ca-bhs1.burble.dn42</td> <td style="text-align: left">172.20.129.21</td> <td style="text-align: left">fd42:4242:2601:100c:72ef:f1ff:febb:d521</td> <td style="text-align: left">Shell Server</td> </tr> <tr> <td style="text-align: left">shell.us-ash1.burble.dn42</td> <td style="text-align: left">172.20.129.22</td> <td style="text-align: left">fd42:4242:2601:1017:72ef:f1ff:febb:d521</td> <td style="text-align: left">Shell Server</td> </tr> <tr> <td style="text-align: left">shell.fr-rbx1.burble.dn42</td> <td style="text-align: left">172.20.129.23</td> <td style="text-align: left">fd42:4242:2601:1006:72ef:f1ff:febb:d521</td> <td style="text-align: left">Shell Server</td> </tr> <tr> <td style="text-align: left">shell.de-fra2.burble.dn42</td> <td style="text-align: left">172.20.129.24</td> <td style="text-align: left">fd42:4242:2601:100b:72ef:f1ff:febb:d521</td> <td style="text-align: left">Shell Server</td> </tr> <tr> <td style="text-align: left">shell.uk-lon1.burble.dn42</td> <td style="text-align: left">172.20.129.25</td> <td style="text-align: left">fd42:4242:2601:1015:72ef:f1ff:febb:d521</td> <td style="text-align: left">Shell Server</td> </tr> <tr> <td style="text-align: left">shell.us-nyc2.burble.dn42</td> <td style="text-align: left">172.20.129.26</td> <td style="text-align: left">fd42:4242:2601:101d:72ef:f1ff:febb:d521</td> <td style="text-align: left">Shell Server</td> </tr> <tr> <td style="text-align: left">shell.us-lax2.burble.dn42</td> <td style="text-align: left">172.20.129.27</td> <td style="text-align: left">fd42:4242:2601:1018:72ef:f1ff:febb:d521</td> <td style="text-align: left">Shell Server</td> </tr> <tr> <td style="text-align: left"> </td> <td style="text-align: left"><em>172.20.129.28-30</em></td> <td style="text-align: left"> </td> <td style="text-align: left"><em>shell service unassigned</em></td> </tr> <tr> <td style="text-align: left"></td> <td style="text-align: left">172.20.129.31</td> <td style="text-align: left"></td> <td style="text-align: left"><em>unassigned</em></td> </tr> </tbody> </table> <h2 id="burbledn42-nodes-dn42-addressing">burble.dn42 Nodes (DN42 Addressing)</h2> <table> <thead> <tr> <th style="text-align: left">DNS</th> <th style="text-align: left">IPv4</th> <th style="text-align: left">IPv6</th> <th style="text-align: left">Comment</th> </tr> </thead> <tbody> <tr> <td style="text-align: left">fr-gra1.burble.dn42</td> <td style="text-align: left">172.20.129.164</td> <td style="text-align: left">fd42:4242:2601:3f::1</td> <td style="text-align: left">Private Node</td> </tr> <tr> <td style="text-align: left">us-nyc3.burble.dn42</td> <td style="text-align: left">172.20.129.165</td> <td style="text-align: left">fd42:4242:2601:3a::1</td> <td style="text-align: left">NYC Cluster</td> </tr> <tr> <td style="text-align: left">uk-lon2.burble.dn42</td> <td style="text-align: left">172.20.129.166</td> <td style="text-align: left">fd42:4242:2601:2e::1</td> <td style="text-align: left">UK Storage</td> </tr> <tr> <td style="text-align: left">se-sto1.burble.dn42</td> <td style="text-align: left">172.20.129.167</td> <td style="text-align: left">fd42:4242:2601:2d::1</td> <td style="text-align: left">SE Public Peering</td> </tr> <tr> <td style="text-align: left">de-fra3.burble.dn42</td> <td style="text-align: left">172.20.129.168</td> <td style="text-align: left">fd42:4242:2601:34::1</td> <td style="text-align: left">Private Node</td> </tr> <tr> <td style="text-align: left">de-fra1.burble.dn42</td> <td style="text-align: left">172.20.129.169</td> <td style="text-align: left">fd42:4242:2601:31::1</td> <td style="text-align: left">DE Public Peering</td> </tr> <tr> <td style="text-align: left">ca-bhs1.burble.dn42</td> <td style="text-align: left">172.20.129.170</td> <td style="text-align: left">fd42:4242:2601:2c::1</td> <td style="text-align: left">CA Public Peering</td> </tr> <tr> <td style="text-align: left">de-fra2.burble.dn42</td> <td style="text-align: left">172.20.129.171</td> <td style="text-align: left">fd42:4242:2601:2b::1</td> <td style="text-align: left">DE Cluster</td> </tr> <tr> <td style="text-align: left">us-lax1.burble.dn42</td> <td style="text-align: left">172.20.129.172</td> <td style="text-align: left">fd42:4242:2601:2a::1</td> <td style="text-align: left">LAX Public Peering</td> </tr> <tr> <td style="text-align: left">uk-lon6.burble.dn42</td> <td style="text-align: left">172.20.129.173</td> <td style="text-align: left">fd42:4242:2601:27::1</td> <td style="text-align: left">UK Cluster</td> </tr> <tr> <td style="text-align: left">ch-zur1.burble.dn42</td> <td style="text-align: left">172.20.129.174</td> <td style="text-align: left">fd42:4242:2601:28::1</td> <td style="text-align: left">CH Public Peering - <em>being decommissioned</em></td> </tr> <tr> <td style="text-align: left">us-nyc1.burble.dn42</td> <td style="text-align: left">172.20.129.175</td> <td style="text-align: left">fd42:4242:2601:29::1</td> <td style="text-align: left">NYC Public Peering</td> </tr> <tr> <td style="text-align: left">us-nyc2.burble.dn42</td> <td style="text-align: left">172.20.129.176</td> <td style="text-align: left">fd42:4242:2601:3d::1</td> <td style="text-align: left">NYC Cluster</td> </tr> <tr> <td style="text-align: left">uk-lon4.burble.dn42</td> <td style="text-align: left">172.20.129.177</td> <td style="text-align: left">fd42:4242:2601:25::1</td> <td style="text-align: left">UK Cluster</td> </tr> <tr> <td style="text-align: left">uk-lon5.burble.dn42</td> <td style="text-align: left">172.20.129.178</td> <td style="text-align: left">fd42:4242:2601:24::1</td> <td style="text-align: left">UK Cluster</td> </tr> <tr> <td style="text-align: left">uk-cov1.burble.dn42</td> <td style="text-align: left">172.20.129.179</td> <td style="text-align: left">fd42:4242:2601:23::1</td> <td style="text-align: left">UK Cluster</td> </tr> <tr> <td style="text-align: left">us-lax2.burble.dn42</td> <td style="text-align: left">172.20.129.180</td> <td style="text-align: left">fd42:4242:2601:38::1</td> <td style="text-align: left">LAX Cluster</td> </tr> <tr> <td style="text-align: left">us-ash1.burble.dn42</td> <td style="text-align: left">172.20.129.181</td> <td style="text-align: left">fd42:4242:2601:37::1</td> <td style="text-align: left">Ashburn Public Peering</td> </tr> <tr> <td style="text-align: left">fr-par2.burble.dn42</td> <td style="text-align: left">172.20.129.182</td> <td style="text-align: left">fd42:4242:2601:3e::1</td> <td style="text-align: left">FR Cluster</td> </tr> <tr> <td style="text-align: left">nl-ams3.burble.dn42</td> <td style="text-align: left">172.20.129.183</td> <td style="text-align: left">fd42:4242:2601:3c::1</td> <td style="text-align: left">Experimental - <em>being decommissioned</em></td> </tr> <tr> <td style="text-align: left">uk-lon3.burble.dn42</td> <td style="text-align: left">172.20.129.184</td> <td style="text-align: left">fd42:4242:2601:30::1</td> <td style="text-align: left">Private Node</td> </tr> <tr> <td style="text-align: left">no-trd1.burble.dn42</td> <td style="text-align: left">172.20.129.185</td> <td style="text-align: left">fd42:4242:2601:39::1</td> <td style="text-align: left">NO Public Peering - <em>being decommissioned</em></td> </tr> <tr> <td style="text-align: left">nl-ams1.burble.dn42</td> <td style="text-align: left">172.20.129.186</td> <td style="text-align: left">fd42:4242:2601:32::1</td> <td style="text-align: left">Private Node</td> </tr> <tr> <td style="text-align: left">uk-lon1.burble.dn42</td> <td style="text-align: left">172.20.129.187</td> <td style="text-align: left">fd42:4242:2601:35::1</td> <td style="text-align: left">UK Public Peering</td> </tr> <tr> <td style="text-align: left">fr-par1.burble.dn42</td> <td style="text-align: left">172.20.129.188</td> <td style="text-align: left">fd42:4242:2601:36::1</td> <td style="text-align: left">FR Public Peering - <em>being decommissioned</em></td> </tr> <tr> <td style="text-align: left">fr-rbx1.burble.dn42</td> <td style="text-align: left">172.20.129.189</td> <td style="text-align: left">fd42:4242:2601:26::1</td> <td style="text-align: left">FR Public Peering</td> </tr> <tr> <td style="text-align: left"><em>reserved</em></td> <td style="text-align: left">172.20.129.190</td> <td style="text-align: left">fd42:4242:2601:20::1</td> <td></td> </tr> <tr> <td style="text-align: left"><em>reserved</em></td> <td style="text-align: left">172.20.129.191</td> <td style="text-align: left">fd42:4242:2601:20::1</td> <td></td> </tr> </tbody> </table> <h2 id="burbledn42-nodes-public-addressing">burble.dn42 Nodes (Public Addressing)</h2> <table> <thead> <tr> <th style="text-align: left">DNS</th> <th style="text-align: left">IPv4</th> <th style="text-align: left">IPv6</th> </tr> </thead> <tbody> <tr> <td style="text-align: left">dn42-fr-rbx1.burble.com</td> <td style="text-align: left">51.254.198.204</td> <td style="text-align: left">2001:41d0:1008:acc::1</td> </tr> <tr> <td style="text-align: left">dn42-uk-lon1.burble.com</td> <td style="text-align: left">45.91.93.104</td> <td style="text-align: left">2a0e:dc0:5:5::1</td> </tr> <tr> <td style="text-align: left">dn42-de-fra1.burble.com</td> <td style="text-align: left">5.180.253.211</td> <td style="text-align: left">2a0e:6a80:3:430::1</td> </tr> <tr> <td style="text-align: left">dn42-se-sto1.burble.com</td> <td style="text-align: left">176.126.84.199</td> <td style="text-align: left">2a0e:dc0:2:1e93::1</td> </tr> <tr> <td style="text-align: left">dn42-ca-bhs1.burble.com</td> <td style="text-align: left">167.114.211.156</td> <td style="text-align: left">2607:5300:60:7a9c::1</td> </tr> <tr> <td style="text-align: left">dn42-us-lax1.burble.com</td> <td style="text-align: left">45.67.219.3</td> <td style="text-align: left">2a04:bdc7:100:4656::1</td> </tr> <tr> <td style="text-align: left">dn42-us-nyc1.burble.com</td> <td style="text-align: left">109.205.61.36</td> <td style="text-align: left">2605:4840:2:eed4::1</td> </tr> <tr> <td style="text-align: left">dn42-us-ash1.burble.com</td> <td style="text-align: left">173.249.195.195</td> <td style="text-align: left">2607:9000:9000:10ae::a</td> </tr> </tbody> </table> <table> <thead> <tr> <th style="text-align: left">DNS</th> <th style="text-align: left">IPv4</th> <th style="text-align: left">IPv6</th> </tr> </thead> <tbody> <tr> <td style="text-align: left">git.dn42.dev</td> <td style="text-align: left">45.91.93.104</td> <td style="text-align: left">2a0e:dc0:5:5:425d:6eff:feb4:6e2d</td> </tr> </tbody> </table> <h2 id="elburbdn42">elburb.dn42</h2> <p>elburb.dn42 is a private domain used for burble.dn42 internal services.</p> Routing Policy http://localhost:2010/network/routing-policy/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/network/routing-policy/ <p>With a global network and multiple peers, the burble.dn42 network typically has many alternative route paths for reaching a particular destination. The routing policy aims to keep route selection sane, and avoid sending traffic outside of a region where possible.</p> <h2 id="policy-objectives">Policy Objectives</h2> <ol> <li>Direct routes for prefixes belonging to a peer should be given the highest priority. <ul> <li>So that traffic to peer networks is routed over the burble.dn42 network directly to the peer and not via an external 3rd party</li> </ul> </li> <li>Where prefixes are tagged with a DN42 region, they should be routed locally or within the burble.dn42 network. <ul> <li>To avoid sending traffic across regions when this could have been avoided.</li> <li>The AS path length is also increased between regions to pursuade external routers to also prefer local hosts.</li> </ul> </li> <li>Prioritise by shortest path, then lowest latency</li> </ol> <h2 id="policy-implementation">Policy Implementation</h2> <h3 id="bgp-local_pref">bgp local_pref</h3> <p>The local_pref for routes is set on entry, and then propogated across the whole network. This forces the network to prefer routes that, where possible, send traffic through the burble.dn42 network to a local peer, rather than sending cross regional traffic through external peers (aka <a href="https://en.wikipedia.org/wiki/Hot-potato_and_cold-potato_routing">Cold Potato Routing</a>).</p> BGP Communities http://localhost:2010/network/communities/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/network/communities/ <p>This page describes the use of BGP communities within the network.</p> <h2 id="dn42-communities">DN42 Communities</h2> <p>The <a href="https://dn42.net/howto/Bird-communities">DN42 Route Origin Community</a> is applied both internally and externally, and is used to influence the <a href="http://localhost:2010/network/routing-policy">Routing Policy</a>.</p> <table> <thead> <tr> <th style="text-align: left">Community  </th> <th style="text-align: left">Description</th> </tr> </thead> <tbody> <tr> <td style="text-align: left">( 64511 : 40 &lt; x &lt; 54 )  </td> <td style="text-align: left">Route Origin</td> </tr> </tbody> </table> <p>The other DN42 communities are not used in burble.dn42:</p> <table> <thead> <tr> <th style="text-align: left">Community  </th> <th style="text-align: left">Description</th> </tr> </thead> <tbody> <tr> <td style="text-align: left">( 64511 : 0 &lt; x &lt; 21 )  </td> <td style="text-align: left">Max latency</td> </tr> <tr> <td style="text-align: left">( 64511 : 20 &lt; x &lt; 30 )  </td> <td style="text-align: left">Min bandwidth</td> </tr> <tr> <td style="text-align: left">( 64511 : 30 &lt; x &lt; 35 )  </td> <td style="text-align: left">Min encryption</td> </tr> </tbody> </table> <h2 id="well-known-bgp-communities">Well Known BGP Communities</h2> <p>The following well known communities are implemented.</p> DNS http://localhost:2010/services/dns/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/services/dns/ <p>burble.dn42 provides a suite of DNS services, including running one of the two DN42 DNS master nodes that exports registry information to the DNS infrastructure.</p> <table> <thead> <tr> <th style="text-align: left">Role</th> <th style="text-align: left">Names</th> </tr> </thead> <tbody> <tr> <td style="text-align: left">DN42 DNS Master</td> <td style="text-align: left">b.master.delegation-servers.dn42</td> </tr> <tr> <td style="text-align: left">Authoritative DNS Service</td> <td style="text-align: left">b.delegation-servers.dn42<br>ns1.burble.dn42</td> </tr> <tr> <td style="text-align: left">Recursive DNS Service</td> <td style="text-align: left">b.recursive-servers.dn42<br/>dns.burble.dn42</td> </tr> <tr> <td style="text-align: left">dns64 Service</td> <td style="text-align: left">dns64.burble.dn42</td> </tr> </tbody> </table> <p>Apart from the Master, all DNS services are anycast across every node to provide fast, local responses network wide. The services support DNSSEC and are available over UDP, TCP, DNS over HTTPs and DNS over TLS.</p> ACME http://localhost:2010/services/acme/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/services/acme/ <p>burble.dn42 provides an <a href="https://en.wikipedia.org/wiki/Automatic_Certificate_Management_Environment">ACME</a> service using an intermediate certificate issued by the <a href="https://dn42.dev/services/Certificate-Authority">dn42 certificate authority</a> and implemented using a <a href="https://vaultproject.io/">HashiCorp Vault</a> cluster to provide a highly available service.</p> <p>The following ACME challenge types are supported:</p> <ul> <li>http-01</li> <li>dns-01</li> <li>tls-alpn-01</li> </ul> <h2 id="dn42-endpoint">dn42 endpoint</h2> <ul> <li><a href="https://acme.burble.dn42/v1/dn42/acme/directory">https://acme.burble.dn42/v1/dn42/acme/directory</a></li> </ul> <p>The dn42 endpoint serves certificates signed by an intermediate certificate issued by the <a href="https://dn42.dev/services/Certificate-Authority">dn42 certificate authority</a>.</p> <blockquote class="gdoc-hint info"> <p>Note that certificates are issued with a validity period of <strong>30 days</strong>, which is shorter than most clearnet ACME services.</p> Shell Accounts http://localhost:2010/services/shell/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/services/shell/ <p>burble.dn42 provides shell accounts on the following servers:</p> <ul> <li>shell.fr-rbx1.burble.dn42</li> <li>shell.uk-lon1.burble.dn42</li> <li>shell.de-fra2.burble.dn42</li> <li>shell.ca-bhs1.burble.dn42</li> <li>shell.us-ash1.burble.dn42</li> <li>shell.us-lax2.burble.dn42</li> <li>shell.us-nyc2.burble.dn42</li> </ul> <p>There is also an anycast address <a href="https://shell.burble.dn42">shell.burble.dn42</a> that will route to the closest server.</p> <h2 id="accessing-the-service">Accessing the Service</h2> <p>The shell service imports user information from the dn42 registry allowing any MNTNER to log in to the servers. Usernames are constructed by lowercasing and removing the &lsquo;-MNT&rsquo; suffix.</p> <h3 id="using-an-ssh-public-key">Using an SSH public key</h3> <p>If you have an <code>auth</code> attribute with an SSH public key, this will be imported from the registry and you can use the SSH key to log in to the shell server.</p> S3 Object Storage http://localhost:2010/services/minio/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/services/minio/ <p>burble.dn42 provides an S3 compatible storage service based on <a href="https://min.io/">min.io</a>.</p> <ul> <li><a href="https://minio.burble.dn42">https://minio.burble.dn42</a> - Web interface</li> <li>s3.burble.dn42 - S3 compatible interface</li> </ul> <blockquote class="gdoc-hint warning"> <p>Remember that the storage service is provided for the dn42 community and the <a href="http://localhost:2010/network/abuse/">burble.dn42 abuse policy</a> applies.</p> <p>Be considerate in your usage so that others will get the same benefits as you are enjoying now. Clean up files that you no longer need, do not use the service for illegal or objectional content and don&rsquo;t be stupid.</p> Certificate Authority http://localhost:2010/services/ca/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/services/ca/ <p>burble.dn42 maintains a PKI infarstructure for its services, using <a href="http://localhost:2010/services/internal/#vaultburbledn42">Hashicorp Vault</a></p> <h2 id="ca-details">CA details</h2> <table> <thead> <tr> <th></th> <th></th> </tr> </thead> <tbody> <tr> <td>countryName</td> <td>GB</td> </tr> <tr> <td>stateOrProvinceName   </td> <td>dn42</td> </tr> <tr> <td>organizationName</td> <td>burble.dn2</td> </tr> <tr> <td>commonName</td> <td>ca.burble.dn42</td> </tr> <tr> <td>emailAddress</td> <td><a href="mailto:dn42@burble.com">dn42@burble.com</a></td> </tr> </tbody> </table> <h2 id="ca-download">CA Download</h2> <pre tabindex="0"><code>-----BEGIN CERTIFICATE----- MIIFYzCCA0ugAwIBAgIUDFQuqm9Jd1nKLsvx0mFD0sOo5ZIwDQYJKoZIhvcNAQEL BQAwLDEUMBIGA1UEChMLYnVyYmxlLmRuNDIxFDASBgNVBAMTC2J1cmJsZS5kbjQy MCAXDTI0MTIwNTE0MDgzM1oYDzIwNzQxMTIzMTQwOTAyWjAsMRQwEgYDVQQKEwti dXJibGUuZG40MjEUMBIGA1UEAxMLYnVyYmxlLmRuNDIwggIiMA0GCSqGSIb3DQEB AQUAA4ICDwAwggIKAoICAQDBU5+AhFEIgQb8HpV6DWTyHCEFsSLHfYElV7Su+q/R 5RxeLSoYbNrzfsKzoWdVS7lHhmxSsjsY4fM6P3mxhns4QmUOobvB0tuDWtWnudKU oOqT2U5XCZZ05342F5isnEHdGYZPolMnFkv4Diiy4Bx+fgFElyqA7yJpIvuHXK1W upy9V5NC6zcUBs6S3grOKRJ4Wk1PZMjGj++wt5B8wc+eqOt/P/V33dqdou6vvQgE 9TAPn36dYLsY3ifIZCSf4VWEtkJTsuEx/eGGnbkH6Q6Qwqz6gMFE9ICHadSpxBDR GMFRBYAaDE3m/YQxezkQ3rJIj88crKzM/UgM2xB6W6Z69tUZWJU39c5SP96/nxaY qhBw1IwfPborpBx0iWNOa9sZwWlJPUDeRvqyFeZSsza8luGXd8SnXFL4YGscZUzn Y19nrfy4xzkwrGRQw1cQiYa6mvfxcZtRFDbNu+k4nBXrLwdUtvyGImkGhNVJxu4T RTAi3YOf8cm5Vibr6nL2iDZBXpc0NRZJGteHlyvU7QV5iXBq7aB8oBTu2mJ4xHLn qdokBlEblcmDDJGzKV6Y2RXVDsUeZjnSfuYUQ7+UvzWu3upWcXIw9+SPJJGFAZqh 39YC2R0kvMhE81TfIe+G80pTXNOkvaWb+ubkJaKyIKvlC3AnHcFOzeM3r0Sp9wy9 1wIDAQABo3sweTAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zAdBgNV HQ4EFgQUhCbuFSi7v4bKCY8nWJMIYsd6XPYwHwYDVR0jBBgwFoAUhCbuFSi7v4bK CY8nWJMIYsd6XPYwFgYDVR0RBA8wDYILYnVyYmxlLmRuNDIwDQYJKoZIhvcNAQEL BQADggIBAIBX61fUiNS9N9xxksuwnGPgJSVdGIGFKexYDbVEG2NsyF55K1XuyWWP bh059agAZoTrJRVINCTTwe0Ox+J87RqoozGMR6/xKd83hCVMTZHEcKJzR5N0s/PR PAnzRFUPWXkHjjY+9NrVQ8taLVIRpnkTt08RRcvvaFaC2Am5kUZRqc7U5vNkOX1U Jgl2G88TJphsxf8HgFBB0VFOxvo04Ub6v+RIVDy+hDWllx8t6KOn2hketSeCsQOc 0g9WGn86ofSvWgLvpd6w4RnIWVggSNd+vcOXJhpBN4FvrJXU4XYADj/sf3x1GHkj ODs0CPzsI2sR3JBxDUJwK/10qQyCnvJ5cKPT+OgpJlf3swLRyapE/p5jcs22iIBF ZIHLePCgfv7QSntLuf9ahx4NAMmz/R23im4tcUD3alZ6iTPvPtcGi+FeAOBXChWr ItpNnlrPEPdqTKKmmfFdrehOYYVoX+Ch4WOdftpXr2KEECjiZhMEMywhgXecjnCM c691Tpa+sdCrQ56kD5I1xGzZKINcHpuiek0H/S7dPUE4PjH8ol0ccSxawgeA/Udm FtM7hk85EYPUESzQGFEbUoQ6RS9r087zYKwowZN2rJ/MrCF/i7WIqt03YG87V8J3 BUtApScN9rpa7AdP0egAoNdPohO3yIahwvfDvecSERcmg5AeTQu5 -----END CERTIFICATE----- </code></pre><blockquote class="gdoc-hint danger"> Certificate Expiry Date: <code>Nov 23 14:09:02 2074</code> </blockquote> Ping Challenge http://localhost:2010/services/ping/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/services/ping/ <p>Can you solve the burble.dn42 ping challenge ?</p> <h2 id="to-start">To start</h2> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-sh" data-lang="sh"><span class="line"><span class="cl">$ ping -s <span class="m">0</span> -c <span class="m">1</span> fd42:4242:2601:31f0::1 </span></span></code></pre></div><h2 id="hints">Hints</h2> <ul> <li>Use <code>-c 1</code> to only return one ping, <em>unless instructed otherwise</em></li> <li>Use <code>-s 0</code> to create a zero sized ping, <em>unless instructed otherwise</em></li> <li>Packet capture is your friend</li> <li>You may also find a <a href="http://kioubit.dn42/cyber/">CyberChef</a> useful</li> <li>The server maintains state based on your source IP and will time out idle clients after several days. There are ways to check the status (revealed during the challenge) but if your state times out you will need to restart from the nearest checkpoint.</li> </ul> Realtime Status http://localhost:2010/network/status/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/network/status/ <h2 id="uptime-robot">Uptime Robot</h2> <ul> <li><a href="https://stats.uptimerobot.com/l2913c0R6">https://stats.uptimerobot.com/l2913c0R6</a> (public internet link)</li> </ul> <p>Major nodes are also monitored off-network using <a href="https://uptimerobot.com/">UptimeRobot</a>.</p> <h2 id="grafana-dashboards">Grafana Dashboards</h2> <ul> <li><a href="https://grafana.burble.com">https://grafana.burble.com</a> (public internet link)</li> <li><a href="https://grafana.burble.dn42">https://grafana.burble.dn42</a> (DN42 link)</li> </ul> <p><a href="https://www.netdata.cloud">Netdata</a> and <a href="https://prometheus.io">Prometheus</a> are used to monitor the network and stats are presented using a series of <a href="https://grafana.com">Grafana</a> dashboards.</p> <h2 id="bgp-and-peering-status">BGP and Peering Status</h2> <ul> <li><a href="https://lg.burble.com/">https://lg.burble.com/</a> (public internet link)</li> <li><a href="https://lg.burble.dn42/">https://lg.burble.dn42/</a> (DN42 link)</li> </ul> <p>BGP status can be found through my looking glass.</p> Abuse Policy http://localhost:2010/network/abuse/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/network/abuse/ <p>The burble.dn42 network has a zero tolerance policy on network abuse, both within burble.dn42 and across the wider DN42 network.</p> <p>Abuse could include, but is not limited to:</p> <ul> <li>Excessive use of resources</li> <li>Hacking, viruses, trojans etc or any other disruption that could harm or create risk to the services or its users</li> <li>Distribution of objectional content that could create a civil or criminal liability</li> </ul> <p>The burble.dn42 network owner is the sole arbiter for determining what is deemed abuse and for any mitigations taken.</p> Privacy Policy http://localhost:2010/privacy/ Fri, 18 Dec 2020 00:00:00 +0000 http://localhost:2010/privacy/ <p>In common with most websites, the burble.dn42 site and associated services may log any access you make and these logs contain your source IP address together with the page or service being accessed. If you are required to log in to access a burble.dn42 service, you should assume that the user id used for the service is also logged. Website and service logs are accessible only by the network administrators and used purely for diagnostic reasons and to prevent abuse. They are not shared in any way. Log retention varies depending on the service, but is at most, 1 month.</p> Network Design http://localhost:2010/network/design/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/network/design/ <blockquote class="gdoc-hint warning"> This page documents a previous iteration of the burble.dn42 network and is currently out of date. </blockquote> <h2 id="tunnel-mesh">Tunnel Mesh</h2> <figure><img src="http://localhost:2010/design/DN42-Tunnels.svg" width="80%"> </figure> <p>Hosts within the burble.dn42 network are joined using an Wireguard/L2TP mesh. Static, unmanaged, L2TP tunnels operate at the IP level and are configured to create a full mesh between nodes. Wireguard is used to provide encryption and encapsulate L2TP traffic in plain UDP such that it hides fragmentation and allows packets to be processed within intermediate routers&rsquo; fast path.</p> Other stuff http://localhost:2010/additional/other-stuff/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/additional/other-stuff/ <p>A collection of other stuff that may or may not be dn42 related, or even interesting.</p> <h2 id="an-atomic-clock-ntp-server">An atomic clock NTP server</h2> <p><img src="http://localhost:2010/other/rubi.jpg" alt="Atomic Clock" width="80%"/></p> <p>Rubidium Atomic Clock + GPS + Odroid N2+</p> <h2 id="homelab">Homelab</h2> <p>The burble.dn42 homelab:</p> <p><img src="http://localhost:2010/other/homelab.jpg" alt="Serverz" width="80%"/></p> <p>32 cores, 156GB RAM, 6TB NVMe/SSD, 56TB HDD, ~70 watts</p> <p>The two hanging USB devices are USB modems for the <a href="http://localhost:2010/retro/modem/">burble.dn42 dial up service</a>.</p> Things to do in DN42 http://localhost:2010/additional/things-to-do/ Mon, 01 Jan 0001 00:00:00 +0000 http://localhost:2010/additional/things-to-do/ <p>What can you do in DN42 ? Ultimately, you&rsquo;ll get out of DN42 what you put in to it, but I&rsquo;ve listed here a few ideas that may serve as inspiration and the spark an idea.</p> <p>This is deliberately not a set of instructions or a guide and it&rsquo;s not a checklist of stuff you must do.<br/> If you are interested in something there is plenty of public information available on all these topics.</p>