18 posts tagged with "2026"

eBPF and XDP are increasingly used for network traffic filtering, observability, abuse protection, and performing extremely cheap packet inspections before traffic reaches the regular Linux networking stack.

There is one practical problem, though: if your primary workstation is a Mac — especially an Apple Silicon Mac — you cannot build and test Linux eBPF programs exactly the same way you build a normal Go application.

For a reproducible build environment, we need:

• Go
• Clang and LLVM
• Linux headers
• libbpf headers
• bpf2go
• Docker
• a Linux runtime provided by Colima

When you need to run a one-off task in the background or schedule a maintenance script for later, the usual tools that come to mind are nohup, screen, at, or cron.

But if your servers already use systemd, you also have access to a much more powerful tool: systemd-run.

It creates transient units — temporary services and timers that do not require permanent .service or .timer files.

With transient units, you can get proper process supervision, journald logging, cgroup resource limits, sandboxing, scheduling, and status tracking without adding permanent systemd configuration.

Let’s look at a few practical use cases.

Choosing a public DNS resolver today is about much more than picking between Google and Cloudflare.

There are dozens of public DNS services: global and regional providers, commercial services, non-profits, and community-run projects. They differ in privacy policies, filtering capabilities, DNSSEC support, encrypted DNS protocols, infrastructure locations, and logging practices.

Comparing all of them can be difficult.

Under the hood: IPv6, AMD EPYC™, DDR4, NVMe SSD storage, and a high-speed network. A strong candidate for passing OpenBLD’s stress test.

Last year, Onehost.kz supported the OpenBLD project by providing a VPS server in Almaty. Since then, the infrastructure has demonstrated stable 99.99% uptime, with no noticeable overselling or system freezes.

The solution is available for On-Premise deployments and is designed for organizations that require detailed DNS analytics, full control over their data, and event storage within their own infrastructure.

Centralized DNS event collection with ClickHouse and VictoriaLogs integration.

Malware and botnets use Domain Generation Algorithms (DGA) to generate hundreds or thousands of short-lived domains for communication with command-and-control infrastructure.

An attack example from real OpenBLD logs:

• s-dfgfd-sdfz...zdssragv[.]mom
• 96bccebb2f7e...wu7y6z[.]com
• 60r...60pg0131[.]cc
• and billions of similar domains.

Why are DGA domains harmful?​

Beyond their malicious purpose, this chaotic DNS traffic pollutes resolver caches, increases CPU and I/O usage, and generates large volumes of low-value logs. At scale, it can cause higher resource consumption and degraded DNS performance.