Hacker Newsnew | past | comments | ask | show | jobs | submit | icedchai's commentslogin

I also use a mix. I moved to FreeBSD initially after a rough period w/Linux in the late 90's. Today, my FreeBSD machines are all VMs running on Linux hosts!

Hah I'm your mirror version -- my linux machines are all VMs running on FreeBSD hosts!

Is bhyve working well for you? Maybe I'll try that in my next rev of my home lab.

Oh you use bhyve?

I've tried to use it but I dound it pretty difficult for systems that need a GUI. Maybe I should revisit.


Yep, most of my linuxes are headless -- but I do have a VM which I pass a graphics card through to for games and ai stuff though -- works really well (as long as you don't reboot the VM, it has a hard time attaching to the gfx card the second time for some reason, not looked into it much)

sysutils/vm-bhyve makes it quite friendly.

I wouldn't use it for work, though, just personal. Work is all enterprisey kubernetes stuff.

Edit: there is a 'proxmox-like' for FreeBSD out [0] -- I did try it on a couple machines and couldn't get the network working, but consoles seemed to work.. Kinda.

0: https://sylve.io


Ah I don't really have a second GPU to dedicate to it though. A virtual console like in VMware or QEMU/KVM would be great. Thanks for the heads-up about sylve! I'll check it out.

For me it's all personal too. For work we still use VMWare a lot.


Same. I've been using it since 1996. Initially, we used it at an early ISP for DNS, SMTP, and POP3 for roughly 8K users, and it stuck with me.

I've worked with some Amazon fanboys who'd rave about being "bar raisers" and other assorted nonsense, trying to impress Amazon-derived "leadership principles" upon much smaller organizations. It left a very bad taste in my mouth.

I haven't written BASIC since I was a teenager! The more "modern" basics, without line numbers, were a definite improvement. I went from AppleSoft to AmigaBasic and QuickBasic.

I had a little crisis at 12 when I went from BASIC to Pascal: how was that supposed to work without line numbers? The statements were just floating around without structure!

I spent two years on hn just to read this comment. So true!

After all these decades, I finally learned that I wasn't the only one who struggled with line numbers from BASIC to Pascal. Thanks, buddy!


> The more "modern" basics, without line numbers, were a definite improvement.

Never used them, and yet I can unquestioningly agree. The way you had to number each line in increments of 10 so that you could insert a line 15 later in between lines 10 and 20 was, looking back at it, insane.

I can understand why they did it. In the era of no full-screen text editors, where you just typed each line one at a time into a REPL (not that I knew the term REPL at the time), and it stored the lines in the order of their lines numbers... well, that was the only way to edit your code. Made a mistake on line 20? Type a brand-new line 20 and it will replace the old line 20. Want to insert a line between lines 10 and 20? Type in line 15 and it will go and insert. So you could actually load your program, edit your code at the REPL, and save it.

But man, using an actual visual editor is so, so, SO much better than that system. I'm glad it's on the dust heap of programming history where it belongs. It was a decent option for the time when computers had 4K of RAM, but once it was actually possible to edit code in a full-screen editor, line numbers were no longer useful.


A lot of 8 bit basics had a RENUM which would even out the line numbers and repoint all the GOTO statements.

The line numbers were also used for GOTO and GOSUB (although later on languages supported strings instead of numbers).

Yeah, forgot to mention that, but that's entirely correct. Modern BASIC variants (I assume) let you label lines so that GOTO and GOSUB can still be used. But with a few flow-control constructs (I don't know modern Basic but in the linked repo I saw a couple `while ... wend` blocks) the need for GOTO is much reduced, I'm sure. GOSUB, well, again I haven't checked. But if GOSUB is allowed to point to a string label rather than a line number then it just becomes a function call, and is still a useful construct. (GOTO only has utility in being able to do the equivalent of `break` or `continue` inside a loop).

I only use BASIC with line numbers, mostly GW-BASIC and pcbasic. Without numbers it just feels like Lua or python or any other scripting language, but worse? The line numbers BASICs come with their own almost-REPL (IDE?) that I find quite nice (or at least fun) to work in. Maybe mostly nostalgia, but it is the only reason for me to use BASIC at all. I have some basic-mode installed to edit BASIC code in emacs, but I only rarely edit the code outside of its natural built-in line-editor.

There were some advantages. The more advanced BASICs gave you functions / subroutines so you didn't have to mess around with using global variables to pass arguments to a "gosub".

Yeah, AmigaBasic especially was when I felt that all the rough edges were sanded off, and it felt like a real language.

Using AmigaBasic or other polished Basics doesn't seem very different than using something like Python.


Too bad Amiga Basic stopped being supported after Workbench 1.3! Supposedly it was Microsoft's only Amiga product.

Even with line numbers it's a hell of a lot easier once you get out of the 24 line X 80 character console window and into an editor you can scroll without needing the LIST command.

It depends. Do you also have email or other services for that domain? The advantage is your email doesn't start bouncing when your single host web site / DNS server is down.

Email bouncing during rare downtimes is hardly that big of an issue - if its actually important the sender will retry, possibly with a different contact method. And for short downtimes most likely the sender's MTA will just automatically retry a bit later - email is designed to work with temporary failures.

There isn't some magic reliability that everyone needs which just so happens to fall into "not achievable with a single authoritative name server" and "guaranteed with two servers". I'm not saying you should never have more than one, just that isn't the registry's business to decide what kind of availability guarantees you need for your domain.


It's simple enough to get a secondary DNS server somewhere and put it on $5/month VPS. I use BIND and DNS replication (AXFR/IXFR) handles it.

Have you ANY clue about the size of .DE's name server infrastructure?

> Have you ANY clue about the size of .DE's name server infrastructure?

Is it more or less than the F-root server run by ISC?

* https://www.isc.org/f-root/

If you want, you can even request your own instance (a 1U Dell):

* https://www.isc.org/froot-process/

Or an instance of ICANN's L-root server, also 1U:

* https://www.dns.icann.org/imrs/

Would .de have more, or less, traffic than some of the root servers?


Are you following the thread? We're talking about redundancy for a single domain here.

The single domain here is a ccTLD, and DNS's heirarchical nature means your personal domain's redundant DNS can't mitigate an outage at the ccTLD level.

Sorry, no. I was responding to "I am reminded of the warning that zonemaster gives about putting your domain name servers on a single AS, as is common practice for many larger providers."

That is not the ccTLD, that is an individual domain and its name servers. I recall being given that warning for early domain registrations.


I've been in IT 30+ years, been running DNS, web servers, etc. since at least 1994. I haven't bothered with DNSSEC due to perceived operational complexity. The penalty for a screw up, a total outage, just doesn't seem worth the security it provides.

That was my experience too until I decided that just running email systems for 30 odd years when HN says that is unnatural piqued my weird or something!

I ran up three new VMs on three different sites. I linked all three systems via a private Wireguard mesh. MariaDB on each VM bound to the wg IP and stock replication from the "primary". PowerDNS runs across that lot. One of the VMs is not available from the internet and has no identity within the DNS. The idea is that if the Eye of Sauron bears down on me, I can bring another DNS server online quite quickly and fiddle the records to bring it online. It also serves as a third authority for replication.

I also deployed https://github.com/PowerDNS-Admin/PowerDNS-Admin which is getting on a bit and will be replaced eventually but works beautifully.

Now I have DNS with DNSSEC and dynamic DNS and all the rest. This is how you start signing a zone and PowerDNS will look after everything else:

  # pdnsutil secure-zone example.co.uk
  # pdnsutil zone set-nsec3 example.co.uk
  # pdnsutil zone rectify example.co.uk
Grab a test zone and work it all out first, it will cost you not a lot and then go for "production".

My home systems are DNSSEC signed.


How simple sysadmin was in 1994 with no cryptography on any protocol. Everything could be easily MITM'd. Your credit card number would get jacked left and right in the 90s.

Nobody was taking credit cards online then. Your telnet sessions were easily sniffed, however.

Not in '94, sure. But a couple of years later it was common and SSL was still uncommon, for a bunch of reasons, and also everyone was storing the card numbers in plaintext on their servers too.

Telnet was sniffed. IRC was being sniffed and logged.


Yes, I worked on some early ecommerce sites. Often, we'd accept credit cards with SSL and then send them out with email (plain text SMTP) to the customer, for manual entry. Very secure.

And your mailman can also just open your letters. So what, it mostly doesn't happen in developed countries. Not everything needs an airtight technical solution, we have way less costly ways to deal with unwanted behavior.

Cool. Feel free to explain how to tighten things up.

I've just given them part of a recipe for using DNSSEC. I suspect you are not actually human .. qingcharles.


I don't even understand what your comment is about, my dude. Given who a recipe? DENIC?

Look at his previous post. He described how to set up DNSSEC with PowerDNS.

I work with a "global systems integrator" that has IT security policies so insane that it takes 1 to 2 months to onboard a developer and finally get their work laptop set up. Meanwhile, they are basically twiddling their thumbs getting billed out at ~$200/hour, unless they happen to have their own laptop. Some of them just stay working on their own laptops because it's so much more productive.

Was the app vibe coded?

Google is seeing almost 50% IPv6 adoption: https://www.google.com/intl/en/ipv6/statistics.html#tab=ipv6...

Yes, it started out slow. But from 2016 to 2026 we've gone from 10% to almost 50%.

In some countries, it is much higher. It would be a waste of time to deploy yet another standard.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: