Dear kids, this is what happens when you let AI design your core infrastructure architecture...

@manawyrm @amy techies kennen die Infrastruktur und wissen was für Probleme es machen würde, vor allem weil mehrere teams zusammenarbeiten müssten also suchen sie eine schnelle Lösung ohne externe Hilfe (uäh, teamübergreifend arbeiten? Mit den Netzwerkern???)

Und so kommt was bei raus; technisch mit den Einschränkungen die sie haben vermutlich.. kreativ gelöst, aber von außen Lachnummer

.... been there tbqh ^^`

RE: https://ipv6.social/@tschaefer/116071588412706294

Dear kids, this is what happens when you let AI design your core infrastructure architecture...

"For HTTP/HTTPS: The gateway automatically adds the X-Forwarded-For header. Configure your web server (for example: Nginx or Apache) to evaluate this header."

European sovereign clouds!!

EDIT: I don't even know how they want to add this header in HTTPS traffic... Maybe (i hope?) this whole article really is just hallucinated

@littlefox @amy Ich weiß, dass eine gewisse österreichische Firma auch so Dinger gepullt hat und eine gewisse Firmenkultur hat...
Das macht man aber im Rest der Welt eigentlich nicht so xD

RE: https://ipv6.social/@tschaefer/116071588412706294

Dear kids, this is what happens when you let AI design your core infrastructure architecture...

"For HTTP/HTTPS: The gateway automatically adds the X-Forwarded-For header. Configure your web server (for example: Nginx or Apache) to evaluate this header."

European sovereign clouds!!

EDIT: I don't even know how they want to add this header in HTTPS traffic... Maybe (i hope?) this whole article really is just hallucinated

@manawyrm@chaos.social what even the fuck, this is some serious bullshit tbh

@manawyrm and i thought digitalocean making customers share /64s was bad

@manawyrm when Mythic Beasts did an IPv4 to IPv6 proxy for VPSes/Pis without IPv4 addresses it was cute.

But this… This is horrific. This is a crime against all that is good in this world. How is your internal infrastructure so fucked up you need to do this. How is everyone involved in this not dying of embarassment.

RE: https://ipv6.social/@tschaefer/116071588412706294

Dear kids, this is what happens when you let AI design your core infrastructure architecture...

"For HTTP/HTTPS: The gateway automatically adds the X-Forwarded-For header. Configure your web server (for example: Nginx or Apache) to evaluate this header."

European sovereign clouds!!

EDIT: I don't even know how they want to add this header in HTTPS traffic... Maybe (i hope?) this whole article really is just hallucinated

@manawyrm

EDIT: I don’t even know how they want to add this header in HTTPS traffic… Maybe (i hope?) this whole article really is just hallucinated

Hopefully they’re using the Proxy Protocol.

But I have this horrible suspicion they’re not…

@erincandescent I don't think so:
- it would break existing applications
- it probably has the same/similar security implications
- they explicitly mention "X-Forwarded-For" by name

@manawyrm @amy oh die hatten sinnvollen IPv6 support, an den meisten stellen jedenfalls x)

@manawyrm @amy (dafür ein "Database as a Service" wo Kunden alles per Support ticket einkippen mussten; nix API)

@littlefox@gotosocial-dev.svc.0x0a.network @manawyrm@chaos.social @amy@mastodon.fibercut.org Für jeden SQL-Befehl? ​​

RE: https://ipv6.social/@tschaefer/116071588412706294

Dear kids, this is what happens when you let AI design your core infrastructure architecture...

"For HTTP/HTTPS: The gateway automatically adds the X-Forwarded-For header. Configure your web server (for example: Nginx or Apache) to evaluate this header."

European sovereign clouds!!

EDIT: I don't even know how they want to add this header in HTTPS traffic... Maybe (i hope?) this whole article really is just hallucinated

@manawyrm just give your cert to that gateway ^^

@CyReVolt @manawyrm aaaaaaaa

@manawyrm and i thought digitalocean making customers share /64s was bad

@artemist @manawyrm wait until you learn about upcloud's /128

5 IPs max per server. Yes, including ipv6 IPs

@manawyrm just give your cert to that gateway ^^

@CyReVolt 🫣🫣🫣