The cccccc your YubiKey sneezes into chat is slot 1 firing a Yubico OTP it came with from the factory. ykman otp swap parks it behind a 3 second hold. Run ykman otp info first, the swap is symmetric. routerjockey.com/yubikey-otp…
netlab turned nine lines of YAML into three FRR routers with OSPF up, every address assigned, and ECMP nobody asked for. netlab up took two minutes. Part 1 of Labs as Code routerjockey.com/labs-as-cod…
Four 10-gig ports in a bundle, backup still runs at 10 gig. The junior answer is one flow per link. The real story is that the standard refuses to say WHICH link, and hands the whole job to the vendor. New deep-dive series on link aggregation... routerjockey.com/link-aggreg…
An AI agent built an SRv6 lab live on stage at CHI-NOG 13, hit a real failure, and debugged its own configs. The failure was the best part of the demo. My writeup of Taran Deshpande's session... routerjockey.com/deshpande-a…
Docker Compose for Your Home Lab, Part 2. Pi-hole in one compose.yaml... commit it, back it up, rebuild it on any box. Pi-hole vs Technitium, healthchecks, and the port 53 fight with systemd-resolved. routerjockey.com/docker-comp…
Git for Network Engineers, Part 4: Going Pro. Branch protection, CI linting on every push, and pre-commit hooks that refuse the bad commit. Make it impossible to land junk on main instead of just being careful. routerjockey.com/git-for-net…
Matt Griswold spent 2015 arguing for the commercial IX. At CHI-NOG 13 he said "I'm wrong" and showed the community owned replacement he's already racking at 350 E Cermak. routerjockey.com/griswold-co…
A container is not a tiny VM. It's a process wearing blinders, and understanding that fixes half of beginner Docker. Part 1 of Docker Compose for Your Home Lab is live... zero to first container, plus the install traps: routerjockey.com/docker-comp…
Your BGP prompt got a CCNA checklist back because you gave Claude nothing to reason with. Prompt engineering for network engineers... the context file, the ask-me-first trick, and the habits that make the model dumber: routerjockey.com/prompt-engi…
Four free subnetting trainers, in your browser, no accounts. The drills track streaks and make share links built for taunting coworkers. Nobody's born fluent in binary: routerjockey.com/training-to…
Claude Fable wrote a ~700 test suite for viaduct. Zero bugs found while writing it... overkill, right? Week one: fuzzing caught a config parser crash, macOS CI caught a concurrency race. Both fixed in v0.2.1.
github.com/tonhe/viaduct/rel…
“One of my jobs is taking IPv4 out of the network.” Nick Buraglio at CHI-NOG 13 on running IPv6-only since 2018, and why dual stack becomes a trap when nobody schedules the off-ramp: routerjockey.com/buraglio-ip…
Tyler Conrad's CHI-NOG 13 talk on building AI back-end fabrics, the how-you-actually-build-one version: topology by GPU count, rail-optimized vs isolated, PXN, LPO power math, packet spraying, SRv6 microSID, PFC/ECN.
routerjockey.com/conrad-ai-f…
via v0.2.0 has been released.
IPv6 traceroute with automatic family selection.
via google.com # auto (prefers v6)
via -6 dns.google # force v6
github.com/tonhe/viaduct/rel…
I went into NFD40 expecting AI networking to be marketing in new vocabulary. It's a different design problem. Two enormous GPU flows can hash onto one uplink and stall the whole collective while every link reads healthy. Wrote up the recalibration.
routerjockey.com/nfd40-lesso…
RFC 10005 just made the BGP link bandwidth community a standard, 17 years after the draft and ~20 after Cisco shipped it. The irony: it got standardized right as AI became the workload it serves worst.
routerjockey.com/bgp-link-ba…
Part 2 of Git for Network Engineers is the oh-shit toolkit: undo a commit, rescue a deleted branch, fix a committed credential, recover from a bad force-push. Trust reflog and git stops being scary.
routerjockey.com/git-for-net…
Cloudflare's 1.1.1.1 got hijacked through an Egyptian ISP and RPKI never looked at the route.
At CHI-NOG 13, Bryton Herdes showed why: some tier-1s run ROV only to /24, then fall back to IRR-only. A /32 walks under it. 2 of 15 he tested failed.
routerjockey.com/herdes-long…
Jeff Doyle brought "single source of truth" back at CHI-NOG 13, and he's right to. "Model-driven" tells you the implementation. "Intent-based" tells you the interface. Neither promises the one thing we actually want. My writeup of his NAF keynote:
r0ute.net/doyle-naf
