hank_and_deans

That is correct. There is a trick where you can set the source ip to the ipv6 mapped ipv4 ip it originally came from. I have implemented that in a transparent tcp proxy I worked on some years ago, but I am not sure if nginx supports that.

I should look into that actually. It would be useful to me as well.

Edit: actually that only works if you are in the routing path. However a nat64 solution would work as well, where you map a /64 back to the proxy.

It's merely a tcp proxy. It doesn't even have to be http since it has no idea. The trick with tls is that it can extract the requested host name via SNI.

Or just use Nginx stream proxy, and all the encryption happens on the endpoints. No need for certs on the proxy at all.

This is how I make https and mqtts available on ipv4.

I have dealt with a lot of units over the years, both consumer and professional. I have had more non-battery issues with APC ones than the Cyberpower ones, especially with the rack mount units.

For batteries they all have a lifetime, so I don't trash a brand simply because the battery dies. That will happen to any UPS battery. However it is well known that APC floats the batteries too high resulting in slightly more runtime at the expense of battery longevity. I have replaced more APC batteries as a result.

All of that said, at the consumer level I just tell people to go buy whichever one is on sale at that moment since at least one of them usually is.

As other people have mentioned, this can be a hard problem.

However, malls are typically surrounded by massive amounts of space used for parking. There is a plan for the largest mall in my region to convert all of that land into residential spaces, 2000 apartments. The parking will be moving underground.

Seems like a decent idea to me.

I recite IPv6 addresses on my company networks from memory all the time. It helps that we got a bit lucky on our allocation. There are no letters.

Plus it's really easy to number subnets in a way that makes sense.

Yeah, no. If remote hosts could not send traffic to hosts behind NAT almost nothing would work.

The hacks employed to make NAT work make security worse, not better.

I did it by acquiring my own AS number and prefix, allowing me to set the geofeed, and announcing it via public BGP from a box in a data center. Took a few days for most things to pick it up the geolocation.

Pixel 8 pro here. I haven't seen it either.

Here is an excerpt of the table of contents for the book "Linux Application Development":

• Process Primitives
  • Having Children
  • Watching Your Children Die
  • Running New Programs
  • A Bit of History: vfork()
  • Killing Yourself
  • Killing Others
  • Dumping Core
• Simple Children
  • Running and Waiting with system()
  • Reading or Writing from a Process

It's actually quite a good book.

Yes. I have a personal app that I made many years ago and used on my Pixel 4 and 6. It would not work on my 8 until I updated the sdk version and some of the tooling.

This is likely the issue. Both of those woods are famously incompatible with normal stains. Gel stains are what most people recommend for those woods. I have also had decent luck with Saman stains with the right preparation and great results with Omnia natural oil.