Sign up to save your podcasts
Or
Share TechSNAP
Share to email
Share to Facebook
Share to X
Share to email
Share to Facebook
Share to X
Or
TechSNAP episodes
- 430: All Good Things
It's a storage showdown as Jim and Wes bust some performance myths about RAID and ZFS.
Plus our favorite features from Fedora 32, and why Wes loves DNF.
Links:
- What's new in Fedora 32 Workstation
- Fedora 32 ChangeSet
- Linux distro review: Fedora Workstation 32
- TechSNAP 428: RAID Reality Check
- ZFS versus RAID: Eight Ironwolf disks, two filesystems, one winner
- Understanding RAID: How performance scales from one disk to eight
- Find Jim on 2.5 Admins
- Find Wes on LINUX Unplugged
- TechSNAP 1: First episode of TechSNAP (in 2011!)
- TechSNAP 300: End of the Allan and Chris era (2017)
- TechSNAP 301: Enter Dan and Wes
- TechSNAP 347: A Farewell to Dan
- TechSNAP 348: Chris is back!
- TechSNAP 389: Jim's first time as a guest
- TechSNAP 390: Jim's second guest appearance
- TechSNAP 393: Chris says goodbye
- TechSNAP 395: Jim joins the show
53 min - 429: Curious About Caddy
Jim and Wes take the latest release of the Caddy web server for a spin, investigate Intel's Comet Lake desktop CPUs, and explore the fight over 5G between the US Military and the FCC.
Links:
- Caddy offers TLS, HTTPS, and more in one dependency-free Go Web server
- Caddy 2
- Caddy v2 Improvements [slightly out of date]
- Proposal: Permanently change all proprietary licensing to open source · Issue #2786 · caddyserver/caddy
- Revert "Implement Caddy-Sponsors HTTP response header" by lol768 · Pull Request #1866 · caddyserver/caddy
- Intel’s 10th generation desktop CPUs have arrived—still on 14nm
- Intel Comet Lake 10th Gen CPU release date, specs, price, and performance
- 10th Gen Intel® Core™ Desktop Processors
- US military is furious at FCC over 5G plan that could interfere with GPS
- The Pentagon's fight to kill Ligado's 5G network
- FCC Approves Ligado L-Band Application to Facilitate 5G & IoT
31 min - 428: RAID Reality Check
We dive deep into the world of RAID, and discuss how to choose the right topology to optimize performance and resilience.
Plus Cloudflare steps up its campaign to secure BGP, and why you might want to trade in cron for systemd timers.
Links:
- AMD Claims World’s Fastest Per-Core Performance with New EPYC Rome 7Fx2 CPUs
- AMD EPYC 7F52 Linux Performance - AMD 7FX2 CPUs Further Increasing The Fight Against Intel Xeon Review
- Understanding RAID: How performance scales from one disk to eight
- New Cloudflare tool can tell you if your ISP has deployed BGP fixes
- Is BGP safe yet?
- RPKI - The required cryptographic upgrade to BGP routing
- Why I Prefer systemd Timers Over Cron – Thomas Stringer
- systemd/Timers - ArchWiki
- systemd.time (Time format docs)
- systemd.timer (Unit docs)
36 min - 427: Gigahertz Games
Jim finally gets his hands on an AMD Ryzen 9 laptop, some great news about Wi-Fi 6e, and our take on FreeBSD on the desktop.
Plus Intel's surprisingly overclockable laptop CPU, why you shouldn't freak out about 5G, and the incredible creativity of the Demoscene.
Links:
- Asus ROG Zephyrus G14—Ryzen 7nm mobile is here, and it’s awesome
- Linux on Laptops: ASUS Zephyrus G14 with Ryzen 9 4900HS
- Intel’s 10th-generation H-series laptop CPUs break 5GHz | Ars Technica
- Wi-Fi 6E becomes official—the FCC will vote on rules this month
- Celebs share rumors linking 5G to coronavirus, nutjobs burn cell towers
- Not-actually Linux distro review: FreeBSD 12.1-RELEASE
- Not actually Linux distro review deux: GhostBSD
- MOD (file format) - Wikipedia
- AT&T.MOD (YouTube)
- DJ Moses Rising—Ice Cream Trance (YouTube)
- Farbrausch—The Product (64K Intro, 2000)
- Farbrausch—Poem to a Horse (64K Intro, 2002)
- Finland accepts the Demoscene on its national UNESCO list of intangible cultural heritage of humanity
52 min - 426: Storage Stories
We take a look at Cloudflare's impressive Linux disk encryption speed-ups, and explore how zoned storage tools like dm-zoned and zonefs might help mitigate the downsides of Shingled Magnetic Recording.
Plus we celebrate WireGuard's inclusion in the Linux 5.6 kernel, and fight some exFAT FUD.
Links:
- WireGuard VPN makes it to 1.0.0—and into the next Linux kernel
— It's a good day for WireGuard users—DKMS builds will soon be behind us.- Linux 5.6 Is The Most Exciting Kernel In Years With So Many New Features
- fs: New zonefs file system
— zonefs is a very simple file system exposing each zone of a zoned block device as a file. This is intended to simplify implementation of application zoned block device raw access support by allowing switching to the well known POSIX file API rather than relying on direct block device file ioctls and read/write.- Ama-ZNS! Zonefs File-System Will Land with Linux® 5.6
- What is Zoned Storage and the Zoned Storage Initiative?
— Zoned Storage is a new paradigm in storage motivated by the incredible explosion of data. Our data-driven society is increasingly dependent on data for every-day life and extreme scale data management is becoming a necessity.- Linux Kernel Support - ZonedStorage.io
- dm-zoned
— The dm-zoned device mapper target exposes a zoned block device as a regular block device.- Device Mapper - ZonedStorage.io
- What are PMR and SMR hard disk drives?
- Beware of SMR drives in PMR clothing
— WD and Seagate are both submarining Drive-managed SMR (DM-SMR) drives into channels, disguised as "normal" drives.- Beware of SMR drives in PMR clothing [Reddit]
- The exFAT filesystem is coming to Linux—Paragon software’s not happy about it
— When software and operating system giant Microsoft announced its support for inclusion of the exFAT filesystem directly into the Linux kernel back in August, it didn't get a ton of press coverage. But filesystem vendor Paragon Software clearly noticed this month's merge of the Microsoft-approved, largely Samsung-authored version of exFAT into the VFS for-next repository, which will in turn merge into Linux 5.7—and Paragon doesn't seem happy about it.- The New Microsoft exFAT File-System Driver Is Set To Land With Linux 5.7
- Speeding up Linux disk encryption - The Cloudflare Blog
— Encrypting data at rest is vital for Cloudflare with more than 200 data centres across the world. In this post, we will investigate the performance of disk encryption on Linux and explain how we made it at least two times faster for ourselves and our customers.- Add inline dm-crypt patch and xtsproxy Crypto API patch
32 min - 425: Ryzen Gets Real
We take a look at AMD's upcoming line of Ryzen 4000 mobile CPUs, and share our first impressions of Ubuntu 20.04's approach to ZFS on root.
Plus Let's Encrypt's certificate validation mix-up, Intel's questionable new power supply design, and more.
Links:
- Let's Encrypt changes course on certificate revocation
- Revoking certain certificates on March 4
- Let's Encrypt: Incomplete revocation for CAA rechecking bug
- Pass authzModel by value, not reference
- The Complete Guide to CAA Records
- DNS Certification Authority Authorization
- AMD's 7nm Ryzen 4000 laptop processors are finally here
- How Intel is changing the future of power supplies with its ATX12VO spec
- Single Rail Power Supply ATX12VO Design Guide
- FreeNAS and TrueNAS are Unifying
- FreeNAS and TrueNAS are Unifying [Video Announcement]
- Ubuntu 20.04's zsys adds ZFS snapshots to package management
- ubuntu/zsys: zsys daemon and client for zfs systems
33 min - 424: AMD Inside
Cloudflare recently embarked on an epic quest to choose a CPU for its next-generation server build, so we explore the importance of requests per watt, the benefits of full memory encryption, and why AMD won.
Plus Mozilla's rollout of DNS over HTTPS has begun, a big milestone for Let's Encrypt, and more.
Links:
- Firefox continues push to bring DNS over HTTPS by default for US users - The Mozilla Blog
- The Facts: Mozilla’s DNS over HTTPs (DoH)
- Security/DOH-resolver-policy - MozillaWiki
- HTTPS for all: Let’s Encrypt reaches one billion certificates issued | Ars Technica
- Let’s Encrypt Has Issued a Billion Certificates - Let’s Encrypt - Free SSL/TLS Certificates
- Let’s Encrypt: A History - The Morning Paper
- Apple drops a bomb on long-life HTTPS certificates: Safari to snub new security certs valid for more than 13 months • The Register
- Ballot SC22: Reduce Certificate Lifetimes
- Google Chrome’s fear of Microsoft Edge is revealing its bad side
- Microsoft shares a roadmap for the new Microsoft Edge
- Microsoft Edge: Top Feedback Summary for March 4
- Download Microsoft Edge Insider Channels
- Flaw in billions of Wi-Fi devices left communications open to eavesdropping | Ars Technica
- kr00k: A serious vulnerability deep inside Wi-Fi encryption
- Kr00k Paper
- Technical Details of Why Cloudflare Chose AMD EPYC for Gen X Servers
- An EPYC trip to Rome: AMD is Cloudflare’s 10th-generation Edge server CPU
- Cloudflare’s Gen X: Servers for an Accelerated Future
- Impact of Cache Locality
- Gen X Performance Tuning
- Securing Memory at EPYC Scale
- Intel promises Full Memory Encryption in upcoming CPUs | Ars Technica
29 min - 423: Hopeful for HAMR
We explore the potential of heat-assisted magnetic recording and get excited about a possibly persistent L2ARC.
Plus Jim's journeys with Clear Linux, and why Ubuntu 18.04.4 is a maintenance release worth talking about.
Links:
- Ubuntu 18.04.4 LTS: here's what's new
— It's not as shiny and exciting as entirely new versions, of course, but it does pack in some worthwhile security and bugfix upgrades, as well as support for more and newer hardware.- 18.04.4 - Ubuntu Wiki
- MobaXterm
— Enhanced terminal for Windows with X11 server, tabbed SSH client, network tools and much more.- Linux distro review: Intel’s own Clear Linux OS
— There's not much question that Clear Linux is your best bet if you want to turn in the best possible benchmark numbers. The question not addressed here is, what's it like to run Clear Linux as a daily driver? We were curious, so we took it for a spin.- Clear Linux* Project
— Clear Linux OS is an open source, rolling release Linux distribution optimized for performance and security, from the Cloud to the Edge, designed for customization, and manageability.- swupd — Documentation for Clear Linux* project
- clr-boot-manager: Kernel & Boot Loader Management
- Cannot compile zfs for 5.5-rc2 · Issue #9745 · zfsonlinux/zfs
- Persistent L2ARC might be coming to ZFS on Linux
— The primary ARC is kept in system RAM, but an L2ARC device can be created from one or more fast disks. In a ZFS pool with one or more L2ARC devices, when blocks are evicted from the primary ARC in RAM, they are moved down to L2ARC rather than being thrown away entirely. In the past, this feature has been of limited value, both because indexing a large L2ARC occupies system RAM which could have been better used for primary ARC and because L2ARC was not persistent across reboots.- Persistent L2ARC by gamanakis · Pull Request #9582 · zfsonlinux/zfs
— This feature implements a light-weight persistent L2ARC metadata structure that allows L2ARC contents to be recovered after a reboot. This significantly eases the impact a reboot has on read performance on systems with large caches.- LINUX Unplugged 303: Stateless and Dateless
— We visit Intel to figure out what Clear Linux is all about and explain a few tricks that make it unique.- LINUX Unplugged Blog: Clear Linux OS 2019
- HAMR don’t hurt ’em: laser-assisted hard drives are coming in 2020
— Although the 2012 "just around the corner" HAMR drives seem to have been mostly vapor, the technology is a reality now. Seagate has been trialing 16TB HAMR drives with select customers for more than a year and claims that the trials have proved that its HAMR drives are "plug and play replacements" for traditional CMR drives, requiring no special care and having no particular poor use cases compared to the drives we're all used to.- HAMR Milestone: Seagate Achieves 16TB Capacity on Internal HAMR Test Units
- Western Digital debuts 18TB and 20TB near-MAMR disk drives
- Previously on TechSNAP 341: HAMR Time
— We've got bad news for Wifi-lovers as the KRACK hack takes the world by storm; We have the details & some places to watch to make sure you stay patched. Plus, some distressing revelations about third party access to your personal information through some US mobile carriers. Then we cover the ongoing debate over HAMR, MAMR, and the future of hard drive technology & take a mini deep dive into the world of elliptic curve cryptography.30 min - 422: Multipath Musings
We take a look at a few exciting features coming to Linux kernel 5.6, including the first steps to multipath TCP.
Plus the latest Intel speculative execution vulnerability, and Microsoft's troubled history with certificate renewal.
Links:
- Oregon company makes top bid for Microsoft check - CNET
- Microsoft’s failures to renew: Teams, Hotmail, and Hotmail.co.uk | Ars Technica
- Microsoft Teams goes down after Microsoft forgot to renew a certificate - The Verge
- Browser review: Microsoft’s new “Edgium” Chromium-based Edge | Ars Technica
- Linus Torvalds pulled WireGuard VPN into the 5.6 kernel source tree | Ars Technica
- Ubuntu 20.04 LTS Adds WireGuard Support - Phoronix
- Multipath TCP Support Is Working Its Upstream - First Bits Landing With Linux 5.6 - Phoronix
- MultiPath TCP - Linux Kernel implementation
- Upstreaming multipath TCP
- LPC2019 - Multipath TCP Upstreaming - YouTube
- LPC2019 - Multipath TCP Upstreaming - Slides
- LPC2019 - Multipath TCP Upstreaming - Paper
- Using MultiPath TCP to enhance home networks
- Linux 5.6 Crypto Getting AVX/AVX2/AVX-512 Optimized Poly1305
- Poly1305
- CacheOut
- CacheOut Paper
- Intel Responds to ZombieLoad and CacheOut Attacks | Tom's Hardware
- New CacheOut Attack Targets Intel CPUs, Leaks Data From VMs And Secure Enclave
24 min - 421: Firewall Fun
We explore the latest round of Windows vulnerabilities and Jim shares his journey adding OPNsense to his firewall family.
Plus a look back at Apollo-era audio that's still relevant today with the surprising story of the Quindar tones.
Links:
- Critical Vulnerabilities in Microsoft Windows Operating Systems
- Win10 Crypto Vulnerability: Cheating in Elliptic Curve Billiards 2
- NSA discovers a serious flaw in Windows 10
- Exploiting CVE-2020-0601
- CVE-2020-0601 POC
- NSA Cybersecurity Advisory on CryptoAPI Flaw
- Why can’t I get to the internet on my new OPNsense install?! - Jim's Blog
- OPNsense: a true open source security platform and more
- There's An Actual Name And Reason For Those Beeps You Hear In Recordings Of Astronauts In Space
- Quindar Tones
- Cap'n Crunch Whistle and the Secrets of the Little Blue Box
26 min
About TechSNAP
From the publisher's feed
Systems, Network, and Administration Podcast. Every two weeks TechSNAP covers the stories that impact those of us in the tech industry, and all of us that follow it. Every episode we dedicate a…
portion of the show to answer audience questions, discuss best practices, and solving your problems.
More shows like TechSNAP
Packet Protector
7 Listeners