Advertisement · 728 × 90

Posts by Daryll Swer

IS-IS Basics For Humans
IS-IS Basics For Humans YouTube video by Learn with Cisco

is-is is the superior IGP, watch this from the start to the end:
www.youtube.com/watch?v=jWdD...

4 months ago 1 0 0 0

Ha, I didn't know this information was archived online. Funnily enough it says the object disappeared into the "Lum (meaning mountain or hill) Swer" forest, didn't know that detail. I've been to that forest before, it's named after my clan's surname.

I think there was probably 3-5 more sightings.

5 months ago 1 0 0 0

In K8s I believe a custom CNI that permits seperate subnets per-Pod should in theory do the trick.

5 months ago 1 0 1 0

I am not K8s pro, but in Docker this is easily achieved: Use different subnets for Anycast/unicast, container is exposed to WAN on both subnets natively, no reverse proxy. As long as container app talks SIP/Other protocols, it should work. BGP handles routing with the leave switches.

5 months ago 0 0 1 0

Quick research suggests TPROXY is ossified and limited only to TCP/UDP. This leaves out all other standardised layer 3/4 protocols (including native IPSec in IPv6 without UDP encap hack).

5 months ago 0 0 1 0

Ideally there exists an implementation that allows stable Anycast addresses for end user access (seperate ephemeral unicast for Pod-to-pod and intra-cluster traffic).

5 months ago 0 0 0 0

What if my application is SIP server using native SIP (no UDP) or native SCTP? Ideally I'd like to avoid reverse proxy of any kind.

5 months ago 0 0 1 0
Advertisement

That's just just unicast, right? Or Anycast for global ingress + seperate unicast for pod-to-pod comms or pod-to-WAN comms.

5 months ago 0 0 1 0

Also cover BGP ECMP/Anycast of pods + seperate GUA addressing for unique unicast per node to eliminate the need for GENEVE or other host-to-host tunnelling. Would love to see a single blog post or blog post that covers this end-to-end.

5 months ago 1 0 1 0

This is the way.

6 months ago 0 0 0 0

Can you shoot me a text on Telegram? I think there's a way to solve it by NOT using popular CNIs, rather a custom implementation straight out of network engineering textbooks.

Let's discuss further in DMs. I'm not a K8s guy, but I'm keen to have truly NAT-less IPv6 everywhere.

6 months ago 1 0 0 0

Is it truly NAT-less IPv6 or there's DNAT66 happening on ingress? Or it's true BGP anycast + ECMP LB across the network infrastructure.

6 months ago 0 0 1 0

BGP-to-the-host is an industry standard design. And it's free to do it at zero cost with FRR and BGP unnumbered combined with correctly done IPv6 Architecture of underlay and overlay (VXLAN/EVPN may come into play depending on your situation).

If you're talking about macOS/Windows then ia_pd.

6 months ago 0 0 1 0
Preview
Engine v27 Learn about the new features, bug fixes, and breaking changes for Docker Engine

daemon.json isn't the modern way of using ROUTED mode in Docker:
docs.docker.com/engine/relea...

Docker Compose follows declarative config management and I would recommend it.

6 months ago 0 0 0 0

Sharing the container's namespace/veth broadcast domain with underlay layer 3 router isn't routing, that's basically bridging.

Routing implies no Layer 2 bs, pure layer 3 with routing protocols. If you want to build scalable networks with BGP/ECMP/Anycast, routing is the way.

6 months ago 1 0 1 0
Advertisement
Preview
How to configure routed IPv6 in Docker – Daryll Swer How to set up native IPv6 routing in Docker with routed mode.

Docker has not required the daemon.json params for a whole year now.

www.daryllswer.com/how-to-confi...

github.com/docker/docs/...

6 months ago 0 0 1 0
Preview
How to configure routed IPv6 in Docker – Daryll Swer How to set up native IPv6 routing in Docker with routed mode.

1. Stop using RAs/SLAAC in a production environment, use unnumbered eBGP-to-the-host design in your clos fabric.
2. Enable Routed IPv6 mode in Docker Compose.
3. The rest is history.

www.daryllswer.com/how-to-confi...

6 months ago 0 0 0 0
Preview
From the ipv6 community on Reddit Explore this post and more from the ipv6 community

#IPv6 implementation by varying “experts” across the globe often leads to failures like this one:
www.reddit.com/r/ipv6/comme...

8 months ago 2 0 0 0

It's definitely better than legacy phpBB. If only their network code also had such a massive upgrade and came with SR-MPLS IPv6!

9 months ago 2 0 0 0
Preview
How to bring data centre-like connectivity to your home with IPTTTH – Daryll Swer The operational and financial feasibility of MPLS-delivered IP Transit-To-The-Home (IPTTTH).

Ever wondered what it’s like to bring physical IP transit directly to your home over #MPLS? I pulled it off — twice — in India.

#BGP, #IXP, fibre runs, barter deals, and plenty of Layer 8 chaos. Blog post up now👇

www.daryllswer.com/how-to-bring...

#IPTransit #NetEng #IPTTTH #AS149794

10 months ago 0 0 0 0

You don't need scripts and you shouldn't be messing with that "enable_ipv6" flag at all on latest Docker versions.

I published a blog post to address this, later I'll link it on the open GitHub issue I created on Docker repo as well:
bsky.app/profile/dary...

10 months ago 0 0 0 0
Preview
How to configure routed IPv6 in Docker – Daryll Swer How to set up native IPv6 routing in Docker with routed mode.

Think native IPv6 in Docker is rocket science? 🚀 It’s not.

Set up routed IPv6 with Docker Compose—no NAT66, no bridging, just pure Layer 3 connectivity via routing.

Blog post up now👇
www.daryllswer.com/how-to-confi...

#IPv6 #Docker #Networking #Routing #Containers #DevOps #NetEng #BGP

10 months ago 3 1 0 1
Preview
#networking #neteng #networkengineering #mikrotik #starlink #ipv6… | Daryll Swer | 13 comments When a friend in Nigeria reached out for help with setting up a MikroTik router over Starlink, I didn’t hesitate. The project was for a local, community-driven initiative, so I volunteered my time to ...

Helped fix a network mess at a non-profit where “certified experts” left behind broken #IPv6, triple #NAT, and the wrong hardware. Might not have been incompetence—might’ve been intentional.

Full story + tech details on LinkedIn 👇
www.linkedin.com/posts/daryll...

#NetEng #CGNAT #NetworkEngineering

11 months ago 2 0 0 0
Preview
IPv6 Architecture and Subnetting Guide for Network Engineers and Operators… | Ekow Nyame Ayetsi While I was learning IPv6 and how to implement it best, I stumbled upon Daryll Swer's IPv6 Architecture guide blog post, it gave me everything I needed to know about real-life IPv6 deployments. I...

Always nice to see, how my work has positively helped both network business owners and network engineers across the world.

#IPv6 and #BGP FTW!

www.linkedin.com/posts/ekowny...

11 months ago 0 0 0 0
Post image

That isn't the correct way to do routed IPv6 in Docker. Some references here:
github.com/docker/docs/...

daemon.json should be empty.

11 months ago 0 0 0 0
Advertisement
Preview
Let's talk about CGNAT and IPv6, yet again. – Daryll Swer Yet another blog article on IPv4, NAT, CGNAT, Hairpinning and native IPv6.

Yet another post about #CGNAT - because the #internet still hasn’t learnt. It’s 2025, and we’re still patching #IPv4 with CGNAT instead of embracing #routing with #IPv6.

Shout out to @FastNetMon for sponsoring this article!

www.daryllswer.com/lets-talk-ab...

#NetEng #NetworkEngineering

11 months ago 3 2 0 0
Preview
Response: Peer-to-Peer Communication in IPv6 World « ipSpace.net blog Daryll Swer posted a very informative response to my NAT Traversal Mess blog post, focusing on: Punching holes through that firewall is equivalent to establishing NAT translations. It would be a sha...

blog.ipspace.net/2025/04/resp...

#IPv4 #IPv6 #NAT #CGNAT #STUN #TURN #NetEng #NetworkEngineering

11 months ago 0 0 0 0
Preview
One Patent to Rule Them All? Demystifying China’s “Terrifying” Cable-Cutting Tech What is this new wonder weapon that can sever undersea cables and "plunge the world into darkness"? We needed to fact-check.

Please read and circulate this explainer from @telegeography.bsky.social that debunks the recent sensationalist headlines stemming from the filing of a Chinese patent for a subsea cable cutter (cut and hold grapnel):
blog.telegeography.com/demystifying...

1 year ago 5 2 1 0

"AI" would suggest a human brain equivalent that's verified by a neurologist.

Do you mean, LLMs? I've found most aren't anti-LLM in our community, I use it myself. But it's absolutely trash at generating complex configurations.

1 year ago 1 0 0 0
Post image

Nice to see that my IPv6 Architecture guide has been helpful enough to inspire ISPs in the USA to adopt BCOP-690—especially with a static /48 prefix delegation for residential customers to boot!

#NetworkEngineering #NetEng #IPv6

1 year ago 5 2 0 0