Brad Fitzpatrick 🌻

I do computers. Married to @radkat. 3 kids. Xoogler. @golang team '10~'20. Made LiveJournal, memcached. Now @Tailscale. Mostly in bluer skies these days.

[Brad Fitzpatrick 🌻 @bradfitz]

@fatih After my big fancy APC rack unit exploded for no reason and fried half my rack equipment, I'm done with APC.

[Brad Fitzpatrick 🌻 @bradfitz]

@albinowax I couldn't resist.

[Brad Fitzpatrick 🌻 @bradfitz]

Some time back I rigged up a WireGuard-to-Tailscale proxy but it was a Rube Goldberg machine and fell apart and was hard to run.

This weekend @maisem_ali and I "polished" it up into a standalone Go binary:

https://t.co/lsWIVRLyWI

Still rough, but fun. Good weekend distraction.

[Brad Fitzpatrick 🌻 @bradfitz]

@shanselman @filias9 Maybe few have such fast uplinks, but 10 Gb NICs within the home/office (e.g. to a NAS) are relatively common. I certainly have, for many years now.

[Brad Fitzpatrick 🌻 @bradfitz]

Want to come work on the @Tailscale backend systems?

We're hiring. (Remote, but US and Canada only)

https://t.co/p5brT2BBrO ("Platform Engineer")

#golang

[Brad Fitzpatrick 🌻 @bradfitz]

@FOSSPenguin @Tailscale https://t.co/PUs33yb4hg

[Brad Fitzpatrick 🌻 @bradfitz]

@zimmskal @Tailscale The word you're looking for is "looked", past tense 😉

[Brad Fitzpatrick 🌻 @bradfitz]

@aboodman Actually I just quipped we should do it in our app as a response to somebody asking if it was okay to add a word to their corp laptop dictionary. But after the joke we then wondered if anybody actually did this and if it were reasonable. The reactions are fun.

[Brad Fitzpatrick 🌻 @bradfitz]

How would you feel if a piece of software you installed added its own product name to your machine's local user dictionary as a valid word so it didn't get red squiggly lines when users typed it? #poll

(arguably OS should do this itself, sure)

[Brad Fitzpatrick 🌻 @bradfitz]

@ravanscafi Besides changing your routing table & DNS & installing tun devices?

I mean, speaking hypothetically. :)

[Brad Fitzpatrick 🌻 @bradfitz]

@apecat @Tailscale Note that the only thing affected was our marketing site. Our actual control plane and admin console is not on Vercel and we manage the certs (and support IPv4 and IPv6).

[Brad Fitzpatrick 🌻 @bradfitz]

@apecat @Tailscale We're still working on our own postmortem but the rough summary is Vercel doesn't support IPv6, we need IPv6, so we run an IPv6-to-v4 proxy in front of Vercel, which conflicted with Vercel's LetsEncrypt use and being unclear whether ACME dns-01 vs http-01 was being used. etc.

[Brad Fitzpatrick 🌻 @bradfitz]

@supersat @chabotc @Tailscale @MayaKaczorowski (I can then poke the right people, pointing them at something that's not Twitter.)

[Brad Fitzpatrick 🌻 @bradfitz]

@supersat @chabotc @Tailscale @MayaKaczorowski Can you file either a GitHub tailscale/tailscale or golang/go bug? And I can then file the other one if/when needed.

[Brad Fitzpatrick 🌻 @bradfitz]

@rothgar pity you'll need to change your Twitter profile's amazing banner image

[Brad Fitzpatrick 🌻 @bradfitz]

@winter_queue_t @Tailscale Yeah, we've screwed it up a few times, unfortunately. Once from pulling a binary and later re-pushing it, which resigned (with new date, presumably) so new hash.

Another time two concurrent releases ran and different CDN edges cached different copies.

Ideally shouldn't happen.

[Brad Fitzpatrick 🌻 @bradfitz]

There's my dad's KF initials near the middle! 🤓

[Ken Shirriff @kenshirriff]

Chip designers often puts their initial on a die. The 386, though, has many initials. I zoomed in on the initials, which seem to be next to the functional unit that person worked on. I couldn't identify most of the people, but "SEC" is head mask designer Shirley Carter. 3/9

[Brad Fitzpatrick 🌻 @bradfitz]

@NWSSeattle Definitely felt it in Queen Anne.

[Brad Fitzpatrick 🌻 @bradfitz]

@nanaze Will no one rid me of this troublesome world?

[Brad Fitzpatrick 🌻 @bradfitz]

@jimmyzelinskie @Tailscale @mullvadnet I'm not very involved in this project but I would guess forever. Supporting that would, IIUC, involve Mullvad knowing that we have API access to that account number and you'd somehow have to delegate it (tell Mullvad that's okay). Lot of work relative to the benefits.