分类： 自言自语

云原生

At which size is a configmap the wrong solution? : r/kubernetes
超过 Config Maps 大小限制的超大文件需要注入容器的场景，可以借助 Init Containers 复制到共享的 Empty Dir。真实世界案例在 OpenTelemetry Instrumentation 中可见。

Annotated Gateway resource – cert-manager Documentation
如果需要启用 Gateway 资源上的注解支持，则需要在 values 中启用。

Embed a PodTemplate or Container[] list in the OpentelemetryCollector CRD · Issue #901 · open-telemetry/opentelemetry-operator
Add podLabels to collectors · Issue #3186 · open-telemetry/opentelemetry-operator
OpenTelemetryCollectors CRD 暂时无法为 Pod 添加 Label，但可以对 CRD 本身加 Label 使其附加在 Deployment 上。

AWS and Google Cloud collaborate on multicloud networking | Google Cloud Blog

Clarify `–node-ip` vs `–node-public-ip` vs `–flannel-iface` · k3s-io/k3s · Discussion #9888

让kong监听80和443端口 – jeremy的技术点滴
setcap CAP_NET_BIND_SERVICE to support deploying Kong to port 80 in h… by JoyZhang66 · Pull Request #213 · Kong/docker-kong
其实不需要各种骚操作，如果是云下裸金属，可以直接使用 DaemonSet + hostPort。

开发

原來 CORS 沒有我想像中的簡單 | TechBridge 技術共筆部落格

The Future of Fleet | The Fleet Blog
红极一时的 Fleet 在 AI 浪潮中落幕。

网络

PredictableNetworkInterfaceNames
Difference between eth0 and enp0s3? : r/linuxquestions

setsockopt(3p) – Linux manual page
好像可以用这个系统调用配置 TCP 连接的拥塞控制算法。

Limiting WireGuard Bandwidth | Pro Custodibus

解决Kubernetes集群Pod访问入口网关CLB地址不通-服务网格-阿里云
eni模式下设置LoadBalancer 或 NodePort Service 的 externalTrafficPolicy 为 Local时，通信异常 · Issue #531 · AliyunContainerService/terway
spiderpool/cmd/coordinator/cmd/utils.go at 9160105851ace1128b8b069debcf148c82a193c1 · spidernet-io/spiderpool

Optimizing TLS over TCP to reduce latency

杂项

Cloudflare outage on December 5, 2025
反反复复…

时代的眼泪！《电脑爱好者》注销了

403 Forbidden

云原生

Ingress NGINX Retirement: What You Need to Know | Kubernetes

Annotated Gateway resource – cert-manager Documentation

When not to use docker run –init – Stack Overflow

开发

The request was rejected because the header value “TomažĔ is not allowed. · Issue #24480 · spring-projects/spring-boot
Spring Security 默认阻止头部带有中文字符的请求，类似 Cloudflare 在大陆地区插入源 IP 归属地请求头包含中文，将导致异常，如有必要可根据实际情况调整。

Linux

The Life of a Packet in the Linux kernel | 0xkato

Limiting WireGuard Bandwidth | Pro Custodibus

云原生

How to configure Containerd to pull from a mirror ? · containerd/containerd · Discussion #10909
给 containerd 配置 registry mirrors – asdf
How to configure containerd to use a registry mirror? – Stack Overflow

杂项

Rclone v1.70 重磅更新：使用 `convmv` 和 `–name-transform` 在云端随心所欲地转换文件名 | 青蛙小白

Nginx Reverse Proxy 的 DNS Issue | hwchiu learning note
linux – How to force nginx to resolve DNS (of a dynamic hostname) everytime when doing proxy_pass? – Server Fault

网络

RouterOS <> AWS VPN – Asymmetric Routing problem – RouterOS / General – MikroTik community forum
Amazon AWS VPN — A Working Configuration Example and Bug – RouterOS / General – MikroTik community forum
Configure dynamic routing-based AWS VPN with MickroTik router | AWS re:Post
Redundant or at least failover IPSec VPN Tunnels – RouterOS / General – MikroTik community forum
Redundant IPsec tunnel – second tunnel cannot connect – a bug? – RouterOS / General – MikroTik community forum
实在是没搞懂 RouterOS 是怎么对接 AWS IPsec 的。

Linux 网络调优：内核网络栈参数篇 | 星尘独奏曲

I’m giving up on HPKP

开发

At the end you use git bisect | Kevin Jivani

Linux

veeso/termscp: 🖥 A feature rich terminal UI file transfer and explorer with support for SCP/SFTP/FTP/S3/SMB

trzsz/trzsz-ssh: trzsz-ssh ( tssh ) is an ssh client designed as a drop-in replacement for the openssh client. It aims to provide complete compatibility with openssh, mirroring all its features, while also offering additional useful features. Such as login prompt, batch login, remember password, automated interaction, trzsz, zmodem(rz/sz), udp mode like mosh, etc.
终极 SSH 工具方案：Windows Terminal + PowerShell + Trzsz-ssh 深度指南 – 阿张Respect – 博客园

終端機 session 管理神器 — tmux. 身為一名開發者對終端機應該不陌生，不管是要執行腳本、ssh… | by Larry Lu | Larry・Blog
Tmux Cheat Sheet & Quick Reference | Session, window, pane and more

网络

用 Rust 从零开始写 QUIC：MTU 探测

开发

vmware_exporter/vmware_exporter/vmware_exporter.py at 9f9bfaf0b96cdaeb3ff293c1d489f9f3c716097f · pryorda/vmware_exporter
vmware/pyvmomi: VMware vSphere API Python Bindings
Network Counters | vSphere Web Services API
你是否好奇，vmware_host_net_bytesRx_average 或者 vmware_host_net_bytesTx_average 代表什么呢？如果找到源头，你会发现它的含义是平均每秒钟的收发量（Average amount of data received per second.），单位是 KB/s（kiloBytesPerSecond）。

Harbor docs | Configure OIDC Provider Authentication

Unexpected security footguns in Go’s parsers -The Trail of Bits Blog

Linux

Linux 201

安全

[SECURITY] busybox tar: TOCTOU symlink race overwrites arbitrary root file with –overwrite

网络

Why Do We Need IBGP Full Mesh? « ipSpace.net blog

基于VPC对等连接与转发路由器组合实现多VPC互通方案
在阿里云上，混合转发路由器和对等连接的方案。通常大流量传输使用对等连接（因为不要流量费），反之可以使用转发路由器以降低复杂度，易于管理。

配置 TCP KeepAlive 設定 – IBM 說明文件
TCP keepalive | 小不的笔记 | 时间之外的往事

云原生

The complete Kustomize tutorial | Glasskube

Kustomize Components | SIG CLI

maximum of series (500) reached for a single query · Issue #3045 · grafana/loki

Google Chrome won’t start after changing hostname – Ask Ubuntu
Ubuntu 上面的 Chrome 有一天突然打不开了，尝试 Shell 执行 google-chrome，提示 The profile appears to be in use by another Google Chrome process，然后找到了原因：修改了主机名导致的问题。

杂项

KrishKrosh/TrackWeight: Use your Mac trackpad as a weighing scale

GL-Kageyama/UNIQLO_Akamai_T-shirt_Code

RB5009/L009 3D打印1U标准安装支架 – YuS

云原生

prune option doesn’t play nice with CiliumIdentity resource · Issue #10456 · argoproj/argo-cd
旧事重提。

网络

大故障：阿里云核心域名被拖走了
aliyuncs.com 这个核心域名 NS 记录被修改错误，导致无法正常解析。你凌晨被告警叫醒了吗？

arduinocelentano/cdimage: A tool for burning visible pictures on a compact disc surfase
改天找个刻录机试试。

Failover (WAN Backup) – RouterOS – MikroTik Documentation

Active subsription shows “warp=on” not “warp=plus” · Issue #492 · ViRb3/wgcf

no socket implementation registered · strongswan/strongswan · Discussion #2443

安全

安卓GPU漏洞攻防介绍 | 京东獬豸信息安全实验室

杂项

geekan/HowToLiveLonger: 程序员延寿指南 | A programmer’s guide to live longer

开发

Bedtime Stories For Children: Storage Engines (pub-ver) – Google 幻灯片

云原生

GitHub – stakater/Reloader: A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you’re using it!

Network Load Balancer – AWS Load Balancer Controller
ConfigMap – Ingress-Nginx Controller

AWS 上使用 NLB 作为 Ingress Nginx 入口时，如果 LB 未配置为保留源 IP 地址，则需要使用 Proxy Protocol 取源 IP 地址。

网络

Multi-Path TCP: revolutionizing connectivity, one path at a time (cloudflare.com)

Troubleshoot your Network Load Balancer – Elastic Load Balancing

杂项

It takes two to ChaCha (Poly) (cloudflare.com)

请将我的邮件服务器加入白名单 – Microsoft Community
Delist IP – Delist IP (office.com)

Linux

深入理解Linux Netlink机制：进程间通信的关键 – 知乎

The proc/net/tcp and proc/net/tcp6 variables — The Linux Kernel documentation

kernel.org/doc/Documentation/networking/proc_net_tcp.txt

How to increase swap space? – Ask Ubuntu

GitHub – canonical/cloud-utils: This package provides a useful set of utilities for interacting with a cloud.

apt install cloud-guest-utils -y
growpart /dev/sda 1
e2fsck -f /dev/sda1
resize2fs /dev/sda1

读书

大教堂与集市 (豆瓣)

网络

HTTPS 温故知新（四） —— 直观感受 TLS 握手流程(下)

Submarine Cable Map

杂项

calculator-app – Chad Nauseam Home
搞个计算器是真的不容易。

Site Names in Google Search | Google Search Central  |  Documentation  |  Google for Developers
发现搜索的时候，站点名称没有展示，而是显示为域名。

找到了从哪里获取的就比较好办了，这段可以直接在 functions.php 里面注入：

add_action('wp_head', function () {
    echo '<script type="application/ld+json">{"@context":"http://schema.org","@type":"WebSite","name":"我们的笔记","url":"' . home_url() . '"}</script>';
});

开发者

Bedtime Stories For Children: Storage Engines (pub-ver) – Google 幻灯片

网络

从流量控制算法谈网络优化 – 从 CUBIC 到 BBRv2 算法 | 亚马逊AWS官方博客

BBR Testing Using iperf3

AI

Reverse Prompt Engineering for Fun and (no) Profit

杂项

Powercfg command-line options | Microsoft Learn
最近发现有台 Windows 机器总是意外唤醒，一个个找唤醒设备有点麻烦，发现有命令行工具 powercfg 可以用。