Tony

@tonhe.bsky.social

Dad, husband, geek

Your Pi-hole died on a reboot, the blog post you built it from is gone, and there's a ~/pihole-data directory you're afraid to delete. Docker Compose for Your Home Lab starts today with the article I should've written seven years ago: routerjockey.com/docker-compo...

Docker Compose for Your Home Lab, Part 1: A Container Is Not a Tiny VM

From zero to your first running container. Why Docker beats running things directly on the host, the difference between images and containers, and the one-line Compose file that gets you started.

routerjockey.com

You asked Claude why your BGP session keeps dropping and got a CCNA study guide back. Same model, better prompt, senior-level reasoning. Prompt engineering for network engineers, including the one line I end every prompt with: routerjockey.com/prompt-engin...

Prompt Engineering for Network Engineers

Getting senior-level answers out of Claude. A context file for your network, the ask-me-first trick, and why you trust the reasoning but verify the syntax.

routerjockey.com

Somebody asks in standup: why did we change the ACL on edge-fw-02 last quarter? The answer is already in your repo. Git for Network Engineers part 3 is live: log, blame, bisect, and the rebase cleanup that makes your PRs reviewable: routerjockey.com/git-for-netw...

Git for Network Engineers, Part 3: Reading the Crime Scene

Reading and reshaping git history. Rebase, cherry-pick, bisect, and the interactive workflows that turn git from a backup tool into a thinking tool.

routerjockey.com

Nobody's born fluent in binary. Four free trainers just landed on the routerjockey tool rack: IPv4 and IPv6 subnetting with practice drills, plus binary and hex. No backend, no accounts, and the drills make share links built for taunting coworkers: routerjockey.com/training-too...

Nobody's Born Fluent in Binary

Four free client-side training tools join the /tools page: IPv4 and IPv6 subnet trainers with drills and shareable streak challenges, plus binary and hex trainers. No backend, no accounts.

routerjockey.com

Claude Fable wrote a ~700 test suite for viaduct. Zero bugs found while writing it... overkill, right? Week one: fuzzing caught a config parser crash, macOS CI caught a concurrency race. Both fixed in v0.2.1. github.com/tonhe/viaduc...

Release v0.2.1 · tonhe/viaduct

via v0.2.1 Two fixes for issues surfaced by the automated test suite added in v0.2.0 — one caught by weekly fuzzing, one by the cross-platform CI race detector. Fixed Config no longer crashes on ...

github.com

I went into NFD40 expecting AI networking to be marketing in new vocabulary. It's a different design problem. Two enormous GPU flows can hash onto one uplink and stall the whole collective while every link reads healthy. Wrote up the recalibration. routerjockey.com/nfd40-lesson...

What NFD40 Taught Me About AI Networking

What NFD40 taught me about AI networking. Why collective communication breaks ECMP assumptions, the port math at 100K GPUs, Arista's case for XPO over CPO, and why scale-up, scale-out, and …

routerjockey.com

The IETF sometimes invents something new and sometimes just writes down what everyone already does. RFC 10005 (weighted ECMP) is the second kind, a 17-year draft finally blessed right as AI became the case it handles worst. Wrote up why. routerjockey.com/bgp-link-ban...

Sometimes the Internet Standardizes Reality Instead of Inventing It

RFC 10005 made the BGP Link Bandwidth Extended Community a Proposed Standard after seventeen years as a draft, a feature vendors shipped and operators ran long before the IETF blessed it. Why weighted...

routerjockey.com

That "60% of prefixes have valid ROAs" stat everyone cites? Coverage isn't enforcement. Bryton Herdes (Cloudflare) at CHI-NOG 13 tested 15 tier-1s with a long-prefix bypass. 2 accepted a /32 hijack that ROV should've killed on sight. One of them ate quad1. routerjockey.com/herdes-long-...

False Immunity: Long Prefixes That Bypass ROV (CHI-NOG 13)

ROV is the foundation of modern routing security. It has a hole. Bryton Herdes at CHI-NOG 13 on AS3356, AS6461, and how long-prefix TE customers are inadvertently breaking ROV protection.

routerjockey.com

Jeff Doyle keynoted CHI-NOG 13 on the Network Automation Framework. Wrote up the parts worth keeping: the six-layer framework as a BS-detector for vendor demos, the return of "single source of truth," and why engineers lose the budget argument to execs. r0ute.net/doyle-naf

Jeff Doyle on the Network Automation Framework: CHI-NOG 13

Jeff Doyle's CHI-NOG 13 keynote on the Network Automation Framework. The six layers worth knowing, the cultural-resistance trap that kills most automation projects, and the engineer-to-executive …

r0ute.net

The most honest moment at CHI-NOG 13: I asked Brad Gorman (ARIN) what stops someone spoofing a sub-AS as the real origin, and he said “Nothing.” BGPSec died, RPKI won, ASPA is finally shipping. Where routing security actually stands in 2026 (spoiler: not “solved”): routerjockey.com/arin-chinog13

ARIN at CHI-NOG 13: The State of Routing Security

BGPSec didn't ship. RPKI did. A walkthrough of where RPKI and ROV stand in 2026, the gaps Brad Gorman's ARIN workshop exposed, and what's coming next with ASPA.

routerjockey.com

Upscale AI at NFD40: no products yet, but the best AI networking tutorial of the year. Why ECMP fails with 10 flows vs 10K. Why one packet stalls the collective. SkyHammer (scale-up), Spectrum-X (scale-out). Good pitch. Now ship. routerjockey.com/upscale-nfd4...

Upscale AI at NFD40: The Pitch Before the Product

About thirty seconds into Aravind Srikumar’s NFD40 talk, he said the thing that made me stop fidgeting and start paying attention: “We haven’t announced any products yet.” That’s an unusual opener for...

routerjockey.com