The Linux kernel doesn’t consider routing to be a separate process, so it can eat lots of CPU capacity and still be at a load average of 0.

Load averages are calculated as the number of running and uninterruptible processes, sampled every 5 seconds, and then displayed as an exponentially decaying average, optionally per core (or SMT “core”). A process actively computing stuff is counted the same as a process that has an outstanding I/O request, which can be a source of excitement.

The act of routing packets (as opposed to working on a routing protocol exchange) is handled by the kernel, so it does not have a countable process identifier, so it does not count for load averages.

-30-

About two weeks ago I decided to use parts from a suddenly unused desktop to upgrade the living room media server. The initial plan was to keep the disks, power supply and case of the media server, and use the motherboard, CPU, RAM and video card from the desktop.

Things did not go to plan, of course…

My RSI prevention strategy involves change: I use three different keyboards, four or five pointing devices, and move around to different places. On my main desktop, I mostly use a thumb trackball, with a mouse in second place and a drawing pad in distant third.

On Friday the trackball died in a peculiar way.

People use tools to get things done. Tools vary in capabilities. Using a perfect or great tool is more comfortable, takes less time, or does a better job than using a good-enough tool. Using a poor tool incurs penalties in time, comfort and/or quality.

Minimalism is, in the current parlance, a “flex”. Minimalism is a statement that you can afford to prefer a non-optimal set of tools in order to satisfy an aesthetic fad.

-30-

What’s running on the firewall? A big list follows, with discussion.

Today I replaced the last spinning root disk in the house. The media server still has 4x3TB spinning disks, but the old 120GB spinning boot disk has been replaced by a cheap 1 TB SSD. Boot times improved dramatically, and the database access for various things now feels instantaneous.

Process follows, but it’s nothing extraordinary.

One of my kids wanted a new computer badly enough to pay for most of it, and I have been wanting to upgrade the main house server for a year or so. Parts for both arrived this week.

Several people have asked me recently what hardware I would buy today for use as a home firewall.