Welcome to Larvitz Blog! I’m Christian, a Senior Consultant by day and FreeBSD enthusiast by night, with over 20 years in enterprise IT. Here I write about FreeBSD jails, PF firewalling, self-hosting, Linux system administration, and anything that’s cleanly engineered. Most articles are hands-on guides born from running my own infrastructure, from dual-stack networking and Ansible automation to hosting a Mastodon instance on FreeBSD.

Have a question or want to discuss something? Find me on the Fediverse at @Larvitz@burningboard.net. I’m always happy to chat!

#idm Articles

Sat 14 November 2026
Linux

An IdM Replica at Home: Kerberos That Survives a Dead Tunnel

My two Red Hat Identity Management servers live in a data center, and every SSH login at home depends on a WireGuard tunnel to reach them. This is how a third replica ended up in a bhyve VM on my home hypervisor: a DMZ that only exists inside the host, a tunnel that only worked in one direction, location-aware DNS that was less location-aware than I thought, and a test with the tunnel switched off.