Politics is theater. The current show is off-off-off-off-off-Broadway.

Add the following to named.conf or named.conf.options

// BIND9 configuration
//
// TLS upstream servers
tls cloudflare-tls {
  remote-hostname "one.one.one.one";
  protocols { TLSv1.3; };
};
tls opendns-tls {
  remote-hostname "dns.opendns.com";
  protocols { TLSv1.3; };
};
tls dns-sb-tls {
  remote-hostname "dns.sb";
  protocols { TLSv1.2; TLSv1.3; };
};
options {
...
  forwarders port 853 {
     2620:119:35::35 tls "opendns-tls";
     2620:119:53::53 tls "opendns-tls";
     208.67.220.220 tls "opendns-tls;"
     208.67.222.222 tls "opendns-tls";
     2606:4700:4700::1001 tls "cloudflare-tls";
     2606:4700:4700::1111 tls "cloudflare-tls";
     1.1.1.1 tls "cloudflare-tls";
     1.0.0.1 tls "cloudflare-tls";
     2a09:: tls "dns-sb-tls";
     2a11:: tls "dns-sb-tls";
     185.222.222.222 tls "dns-sb-tls";
  };
  forward first;
};

Oh well, I've tried to install FreeBSD 14.3 on an old PC of mine, but after the first reboot, it would always get stuck on the POST screen and I also couldn't enter the BIOS, as long as the disk with FreeBSD on it was connected.

The installation from a USB drive itself went fine, but wouldn't boot no matter what. It's one of my first PCs with an AMD Athlon 64 3000+, an MSI K8T Neo2, 1 GiB DDR, a 80 GB Seagate ATA HDD and a ATI 9800. I suppose the Phoenix BIOS doesn't like FreeBSD's MBR?

Alt...

Screenshot of the POST screen of a MSI K8T Neo2 after getting stuck trying to boot FreeBSD.

Need another jail like that one?

see: bastille clone help

This lets you duplicate containers in seconds. Fast, efficient, exact.

#FreeBSD #BastilleBSD

And it's IPv6-only 🙂

#freebsd #ipv6 #ipv6only #lxde

Countries, where all mobile networks provide #IPv6 for data use.

de (Telekom, Vodafone, O2, 1&1)
fr (bouygues, free, orange, sfr)
cz (O2, Vodafone, T-Mobile)

partly:
at(a1, magenta) drei?

in (jio) ??

us (T-Mobile, Verizon, AT&T, ?) ?

Is there a overview?

Can you confirm that your mobile ISP in your country supports ipv6?

Besides the other adventures I also just installed FreeBSD on a new dedicated server which will likely become my new internet focal point.

I realized that there is too much complexity in the current setup to save it in of itself.
So I‘ll go with rebuilding it on a different machine, so I can set the speed.

FreeBSD because I finally want to use it in production and want native ZFS.
I’ll hopefully be able to run Jails for stuff that’s easy to run directly and create an Alpine Bhyve VM with Docker and a crapton of docker-compose files for the rest.

Simple, easy, effective (hopefully)

Feature request #IPv6 (again)

First comment 🤦

https://meta.stackoverflow.com/questions/434456/stack-overflow-still-not-reachable-via-ipv6

#stackoverflow

[root@serv ~]# ndp -na | grep fe80::1         
[root@serv ~]# netstat -rn6 | grep default    
default                           fe80::1%eth0                  UGS        eth0
[root@serv ~]# ping -6 -c2 -t2 one.one.one.one
PING6(56=40+8+8 bytes) 2a02:c207:xx:xx::1 --> 2606:4700:4700::1001
--- one.one.one.one ping6 statistics ---
2 packets transmitted, 0 packets received, 100.0% packet loss
[root@serv ~]# curl -v6I https://one.one.one.one/
* Host one.one.one.one:443 was resolved.
* IPv6: 2606:4700:4700::1111, 2606:4700:4700::1001
* IPv4: (none)
*   Trying [2606:4700:4700::1111]:443...
^C

Update: After trial and error, a static ndp entry is needed to recognize their shitty gateway..

ndp -s fe80::1%eth0 gw:mac:addr

ff02::2%eth0 doesn't return any neighbour routers, ndp -na doesn't show any neighbours .. simply adding fe80::1%eth0 won't work right away, so we have to resort to tricks like this to get IPv6 going.. grr

CC: @TomAoki@bsd.cafe @stefano@bsd.cafe @NebulaTide@bsd.cafe