I’m using IPv6 on Kubernetes and it’s amazing. Every Pod has its own global IP address. There is no NAT and no giant ARP routing table slowing down the other computers on my network. Each of my nodes announces a /112 for itself to my router, allowing it to give addresses to over 65k pods. There is no feasible limit to the amount of IP addresses I could assign to my containers and load balancers, and no routing overhead. I have no need for port forwarding on my router or worrying about dynamic IPs, since I just have a /80 block with no firewall that I assign to my public facing load balancers.

Of course, I only have around 300 pods on my cluster, and realistically, it’s not really possible for there to be over 1 million containers in current kubernetes clusters, due to other limitations. But it is still a huge upgrade in reducing overhead and complexity, and increasing scale.

I haven’t really looked into it, but it doesn’t seem like it.

Heres the documentation about having multiple cidr pools in one cluster with the Cilium network driver, and it seems to imply that each Pod only gets one IP.

https://docs.cilium.io/en/stable/network/concepts/ipam/multi-pool/

There’s something called Multus that I haven’t looked into, but even then it looks like that is for multiple interfaces per Pod, not multiple IPS per interface.

https://github.com/k8snetworkplumbingwg/multus-cni

Containers are just network namespaces on Linux, and all the routing is done in iptables or ebpf, so it’s theoretically possible to have multiple IP addresses, but doesn’t look like anybody has started implementing it. There’s actually a lot of Kubernetes clusters that just use stateful IPv6 NAT for the internal Pod network, unfortunately.

Yeah, I wonder if there’s any proposals to allow for multiple IPV6 addresses in Kubernetes, it would be a much better solution than NAT.

As far as I know, it’s currently not possible. Every container/Pod receives a single IPv4 and/or IPv6 address on creation from the networking driver.

I have static IPs for my Kubernetes nodes, and I actually use DHCPv6 for dynamic dns so I can reach any device with a hostname, even though most of my devices don’t have static IPs.

The issue is those static IPs are tied to my current ISP, preventing me from changing ISPs without deleting my entire Kubernetes cluster.

Hurricane Electric gives me a /48.

Site-local ipv6 would work here as well, true. But then my containers wouldnt have internet access. Kubernetes containers use Ipam with a single subnet, they can’t use SLAAC.

1:1 stateless NAT is useful for static IPs. Since all your addresses are otherwise global, if you need to switch providers or give up your /64, then you’ll need to re-address your static addresses. Instead, you can give your machines static private IPs, and just translate the prefix when going through NAT. It’s a lot less horrible than IPv4 NAT since there’s no connection tracking needed.

This is something I probably should have done setting up my home Kubernetes cluster. My current IPv6 prefix is from Hurricane Electric, and if my ISP ever gives me a real IPv6 prefix, I will have to delete the entire cluster and recreate it with the new prefix.

1, These days the machines used to etch chips (flash light onto the chips to carve them out) are mostly made by ASML. The most modern machines are the ASML Twinscan NXE and Twinscan EXE. The raw silicon is coated with different chemicals that react to light, and when the light patterns are flashed onto the silicon, it carves physical arrangements of atoms on the silicon that forms complex electrical circuits.

2. CPUs were literally drawn by hand, and then the drawing was shrunk down with a magnifying glass back in the day. Programs could be written into electrical memory with physical switches (think 100 light switches), punch cards, or electric typewriters. You could pause the computer so that it would wait for you to type in the next program for it to run. By the time we had kernels, we already had large memory banks in the kilobytes that could store the OS between program runs. So you’d type in the OS once when you turned on the computer, and it would keep in in memory until you turned the computer off again.

3. The internet is different computers connected together. This website is just data sitting on a server somewhere, and your computer connects to the server over the internet and asks for the data.

4. Everything is built on the shoulders of giants. There is plenty to learn, but there will always be something you don’t know.

5. There’s tons of information online if you know where to look. There’s also some good courses out there to understand more specific things like cpu design, networking, programming, etc. In university these sorts of questions fall into the field of Computer Engineering, if you’re looking for a university program to get into.

With regards to the limits of programming: Making websites is already challenging enough, but the cutting edge can be rewarding too :) Software Engineering is a massive field with infinite opportunities. Start small and work your way towards more complex projects with larger teams.

Here’s a good 20 minute video about the history of making microchips: https://youtu.be/Pt9NEnWmyMo

Onani!

This is a really important principle of making APIs that people don’t really talk about. There’s a fine balance between hardcoded literals and full-gui options menu.

Every piece of data in your program has a different level of configurability, and you need to make that trade-off to decide how hard or easy it should be to change. You could hardcode the data as a literal, or you could hoist it to the top of your source file as a const. You could have a separate static const configuration class, or you could have a runtime configuration file. You could even go for an interactive configuration editor/ options menu. It’s all a tradeoff based on offering your users choice but not overburdening them with it, as well as balancing development cost.

I think you might not be allowed to use two 'a s in one type? I could be wrong though, I’m not very familiar with lifetimes.

I mean this is kind of bullshit. There’s a lot of things that run in containers these days, and kubernetes is the best way to run containers. If you can do everything with static js or managed services, more power to you, but as soon as you have multiple services talking to each other, you should be using kubernetes, and you should probably consider message queues.

It’s ironic that a company that was well regarded for the quality GUI on their OS is so fucking bad atmaking GUIs now.

Teams, Windows Settings, Azure, even the Microsoft login page, it’s all godawful.

Everybody was out of town for Christmas.

I mean, I will point out that the proto-Israeli terrorist group, Lehi, assassinated the top UN mediator, Folke Bernadotte, in 1948. Lehi was pardoned for their actions and glorified by the Israeli state, and their leader was Prime Minister of Israel from 1983 to 1992.

https://en.m.wikipedia.org/wiki/Folke_Bernadotte

https://en.m.wikipedia.org/wiki/Lehi_(militant_group)

https://en.m.wikipedia.org/wiki/Yitzhak_Shamir

The Israeli state historically has been very hostile to the UN.

Yeah, the Israeli government’s response to the ICJ decision have been appalling.

Im not criticizing Reuters as a whole for leaving out defense minister Gallant’s and security minister Ben-Gvir’s comments, I just think it was a mistake to not include that in this article. The Israeli government is not just mocking the ICJ, they’re delegitimizng it.

I thought it was strange that this article limited their description of Israel’s reaction, to only Ben Gvir saying “Hague Schmague”. Multiple Israeli cabinet officials have accused The Hague of being anti-semetic since the ruling, which is much more serious than silly wordplay. Why would Reuters downplay the emotional responses to the decision?

I wonder if servo could be turned into a safer electron alternative.

“The decision of the antisemitic court in The Hague proves what was already known: This court does not seek justice, but rather the persecution of Jewish people. They were silent during the Holocaust and today they continue the hypocrisy and take it another step further,” he says.

The ICJ in its current iteration was founded in 1945.

The Israeli government is losing all of its credibility.

Therefore, it is essential to use the term “genocide” with caution and precision.

The state of Israel is committing genocide with its systematic extermination and resettling of the Palestinian people.

The goal is to take the car as little as possible. It sounds like visiting the beach and visiting your friend isn’t possible without a car, and that’s not something that you need to worry about. If there are car sharing services available in your city, like zipcar. You can still do that without committing to the $10k/year cost of owning a private car.

Let’s say you use a car 3 times a week, twice to visit friends, and once to go to the beach. Zipcar offers a $11/hour rate, and we’ll assume you spend 4 hours on each trip. That comes out to $132/week, or $6870/year, saving you over $3k/year over owning a car. You’d no longer have to worry about maintenance or car insurance. This would also be much better for the environment, since you can use a shared car instead of dedicating a car to yourself. Any week where you don’t go to the beach, or your friend visits you, would be pure savings for you, too.

This video is a really good video about why car-sharing is so useful:

https://youtu.be/OObwqreAJ48

Source for $10k/year number:

https://newsroom.aaa.com/wp-content/uploads/2021/08/2021-YDC-Fact-Sheet-FINAL-8-9-21.pdf