Prakhar Shukla

Latest — May 15, 2023

IDS on OpenWRT using Snort3

If you've configured networks or read about network security, you're probably familiar with IDS and IPS. In short IDS (Instrusion Detection System) allows you to know something strange is happening in your network, while IPS (Instrusion Prevention System) helps you in preventing it. You can find out more here. If

More issues

NVIDIA GPU & Proxmox

If you've wondered ever why is it easy to create abstractions like Virtual CPU, RAM, Disk, but not GPU and get equivalent performance? Indeed I did. Why is it that for GPUs the standard tutorials suggested to simply pass through the entire GPU (using PCIe Passthrough) or simply add virtual

Cross Platform Docker Builds

Given the recent prominence of ARM64, Docker images lately need to be built for two flavours and this may even expand more in future RISC-V. However tooling behind this has been really complicated until recently, where people needed to configure and use specific builders, which was pretty complicated stuff. However

pfSense and PPPoE

pfSense is perhaps not a good idea for most home networks Being in IoT industry as a tech guy means that you'll definitely get exposed to networking a lot. And one of the debates that essentially comes up is using OpenWRT vs pfSense. Following is a summary of what most

Docker, AppArmor & LXC

As discussed in the previous post, I use a Proxmox setup, where I rely heavily on LXC containers with nested Docker containers as workloads. And recently, Docker released a new update where AppArmor is enabled by default for docker, docker compose etc. which was crashing unless using privileged containers. After

Docker and AppArmor

My setup relies heavily on Docker containers running inside LXC containers, which run on Proxmox. While this setup is for mostly personal use, it gives me good utilisation for my low cost infrastructure. However, recently Docker-CE pushed an update that broke nested containers for me. In fact google-ing around quickly

Multiline Refactor in Dockerfile

I'm sure you're used to doing multiline refactors in GUI or even CLI based editors quite easily. And I used to think that it would be indeed that simple to do the same in a Dockerfile using the basic utilities present in NIX. However after my trusty sed failed, I

Folding @ Home on TX2

Let me clarify first that this post is not about running GPU enabled folding. For that, some hardware enablement is missing, and thus it'll be really hard to port it, though I may attempt that in future. For CPU performance, TX2 packs decent power, specially with 2 Denver Cores, 4

Why I love OpenZFS

First of all, let me clarify that this post uses OpenZFS, but the technology marvel that it is is based on ZFS, which is something that I truly appreciate. However the original implementation of ZFS was built for BSD Solaris with some license concerns, but OpenZFS clearly integrated with Linux