A common problem with a familiar shape: a process can dial outbound to the internet, but nothing on the internet can dial it back. Your dev server on a laptop. A service in a private VPC. A homelab app behind your router. A container in a pod with no ingress. Same shape every time — outbound works, inbound doesn't. rift is a small Go binary I built to solve that. Run it as a server on a VPS you ow
Comments
When you build a PowerShell project from multiple files, the natural structure is clear: enums first, then classes, then functions. Each group has its own place, and as long as dependencies only flow in one direction, that structure works perfectly. But sometimes a function depends on a class, and that class calls the function. There is no longer a clean boundary between the two groups — they need
很多团队的网络监控并不算差。 链路可用率有、接口带宽有、CPU 和内存有、异常告警也接进了企业微信、飞书和短信。但真正出了事，复盘时还是会出现同一句话：当时知道出问题了，但没有把现场留住。 这就是为什么越来越多团队开始关注网络回溯分析系统。 它解决的不是“能不能看到告警”这个初级问题，而是更关键的两个问题： 告警发生时，能不能快速还原到底是哪一段流量、哪一条路径、哪一种会话出了问题 事故结束后，能不能基于证据复盘，而不是靠聊天记录和印象拼凑过程 对云上和混合云场景来说，这件事尤其重要。因为链路更长、设备更多、路径更动态，很多故障不是“持续坏”，而是短时抖动、瞬时拥塞、路径切换、策略误命中。如果没有回溯能力，排障就很容易沦为赛后猜谜。 这篇文章不讲空洞概念，直接从一线运维视角拆清楚：云上网络回溯分析系统到底该怎么建，应该覆盖哪些能力，落地时最容易踩哪些坑。 先说结论： 传统监控擅长发现“异常
Most AWS security setups focus heavily on inbound traffic. But outbound is often left open. Security Groups. NACLs. Maybe WAF. But outbound traffic often gets far less attention — and that’s where problems begin. Every outbound request starts with a DNS query. Before your application connects anywhere, it first resolves a domain name. That step is easy to ignore, but it’s where a lot of risk begin
Introduction While studying for CompTIA Network+, I couldn't grasp what a Loopback Plug actually does. I understood that it was used for testing, but had no idea how it worked in practice. As a result, I kept getting questions about it wrong. Once I understood the structure behind it, everything clicked. So I decided to write it down. NIC stands for Network Interface Card. a component inside a c
The drift problem nobody told you about If you have used Claude Code, Cursor, Aider, or any other AI coding agent across more than two projects, you have felt this: You start project A. You copy the .agents/ folder (or CLAUDE.md, or .cursorrules) from your last project. You tweak two things. Done. You start project B six weeks later. You copy from project A. You tweak three things this time. Now
Cross-posted from the Stigmem blog. Today we're releasing stigmem v1.0: A stable, open-source specification and reference implementation for a federated knowledge fabric for AI agents. Stigmem = Stigmergy + Memory. Stigmergy (Greek stigma — mark; ergon — work) is the coordination mechanism you see in ant colonies and termite mounds: agents don't communicate directly with each other. Instead, they