Setting Up HAProxy Load Balancer for Kubernetes and Talos API

When running a highly available Kubernetes cluster with multiple control plane nodes, you need a load balancer to distribute API traffic across all control plane endpoints. This guide walks through setting up HAProxy 3.2 on Debian to load balance both the Kubernetes API (port 6443) and Talos API (port 50000). Architecture Overview Component Address Port Purpose HAProxy LB 192.168.66.160 6443 Kubernetes API HAProxy LB 192.168.66.160 50000 Talos API HAProxy LB 192.168.66.160 9600 Stats Dashboard Control Plane 1 192.168.66.161 6443/50000 talos-lon-cp01 Control Plane 2 192.168.66.162 6443/50000 talos-lon-cp02 Control Plane 3 192.168.66.163 6443/50000 talos-lon-cp03 Prerequisites Debian Trixie (or compatible) server for the load balancer Network connectivity to all control plane nodes Root or sudo access on the load balancer server Install HAProxy 3.2 HAProxy 3.2 is available from the official HAProxy Debian repository. First, add the repository signing key and apt source: ...

2025-12-15 · 5 min · Junaid Saeed Uppal

Building a Talos Kubernetes Cluster with KubeSpan and Tailscale

This guide walks through setting up a highly available Talos Linux Kubernetes cluster with 3 control plane nodes and 2 workers, featuring KubeSpan for encrypted node-to-node communication and Tailscale integration for secure remote access. Cluster Overview Node Hostname IP Address Control Plane 1 talos-cp01 172.16.18.231 Control Plane 2 talos-cp02 172.16.18.232 Control Plane 3 talos-cp03 172.16.18.233 Worker 1 talos-worker01 172.16.18.241 Worker 2 talos-worker02 172.16.18.242 VIP Endpoint - 172.16.18.222 Prerequisites Talos Linux installed on all nodes (using nocloud image) talosctl CLI installed on your workstation Tailscale account with an auth key Network connectivity to all nodes Environment Setup Set up the environment variables for your cluster: ...

2025-12-12 · 5 min · Junaid Saeed Uppal

Setting Up a Talos Kubernetes Cluster on Proxmox Using OpenTofu

Introduction Talos Linux is a modern, minimal, and secure operating system designed specifically for running Kubernetes. Unlike traditional Linux distributions, Talos is immutable, API-driven, and removes SSH access entirely—making it ideal for production Kubernetes clusters. In this article, I’ll walk through how to provision a complete Talos Kubernetes cluster on Proxmox using OpenTofu (an open-source Terraform alternative). This approach leverages infrastructure as code to create reproducible, version-controlled cluster deployments. Architecture Overview Our cluster will consist of: ...

2025-12-10 · 13 min · Junaid Saeed Uppal

Unregistration from Redhat Satellite or Spacewalk Server

Ideally use 1 # subscription-manager unregister Otherwise: 1 # rm /etc/sysconfig/rhn/systemid should do the trick.

2018-06-05 · 1 min · uppal

CGRateS Tutorial Series: Installation - Mongo DB Server Install - Debian 8 - Part 1

Below are the steps to prepare a stand alone mongodb server for cgrates on Debian 8 jessie Install sudo 1 # apt-get install sudo Import key 1 # apt-key adv --keyserver hkp://keyserver.ubuntu.com:80 --recv 0C49F3730359A14518585931BC711F9BA15703C6 Add repository URL 1 # echo "deb http://repo.mongodb.org/apt/debian jessie/mongodb-org/3.4 main" | sudo tee /etc/apt/sources.list.d/mongodb-org-3.4.list Update and Install 1 2 3 # apt-get update # apt-get install -y mongodb-org Enable and Start ...

2017-11-02 · 1 min · Junaid Saeed Uppal

Poor Man's GSM BTS :: Nuand's BladeRF & OpenBTS 5 Setup Instructions

!!!! THIS IS FOR EDUCATIONAL PURPOSES ONLY !!!! These instructions are for setting up and running OpenBTS with Nuand’s BladeRF x40 Board. These are a work in progress and should be taken as is. This was possible with the help of @mambrus on #bladerf and @rwr on #bladerf, and is a collection of different how-tos linked at the end of the post. OS Used: Ubuntu 12.04 LTS Server 32 bit, The ISO can be downloaded from here ...

2015-01-16 · 5 min · Junaid Saeed Uppal

Mbuni - MM7: Interconnectivity with Operator

Was playing around with Mbuni for a friend of mine, who wanted to use it as a VASP gateway and interconnect it with an operator over MM7. Spent a little while configuring it and thought of posting the configs here for anyone who’s trying to achieve a similar configuration. Mbuni consists of: MMS Relay MMS Proxy MMS From Email MMSbox For this specific purpose, only MMSBOX is required. I expect that you’re already familiar with either Kannel and/or Mbuni’s basic configuration. So I’ll just focus on MMSBox MM7 integration. ...

2010-08-15 · 2 min · Junaid Saeed Uppal

Opendiameter Compilation Instructions

For FC8 Make sure gcc, gcc-c++, bison, flex, make, openssl and openssl-devel are present Install boost-devel: 1 yum -y install boost-devel Set environment variable: 1 export BOOST_ROOT=/usr/include/ Get ACE Here. Extract and build ACE: 1 2 3 4 tar xvf ACE-5.5.tar.gz cd ACE_wrappers mkdir build cd build Patch the configure file: 1 2 3 4 5 6 7 8 9 10 11 --- configure.orig 2008-08-05 11:11:19.000000000 -0800 +++ configure 2008-08-05 11:13:30.000000000 -0800 ... @@ -10329,7 +10329,7 @@ _ACEOF *) { echo "$as_me:$LINENO: enabling GNU G++ visibility attribute support" >&5 echo "$as_me: enabling GNU G++ visibility attribute support" >&6;} - ACE_GXX_VISIBILITY_FLAGS="-fvisibility=hidden -fvisibility-inlines-hidden" + ACE_GXX_VISIBILITY_FLAGS="-fvisibility=hidden" ACE_CXXFLAGS="$ACE_CXXFLAGS $ACE_GXX_VISIBILITY_FLAGS" cat >>confdefs.h <<_ACEOF Configure and build: 1 2 3 cd build ../configure make && make install Set ACE_ROOT: 1 export ACE_ROOT=/usr/local/src/ACE_wrappers/ Build OpenDiameter: 1 2 3 4 5 tar xvf opendiameter-1.0.7-i.tar.gz cd opendiameter-1.0.7-i ./configure make make install

2008-09-05 · 1 min · Junaid Saeed Uppal

Reverse SSH Tunnel

ISPs in PK don’t generally allow incoming traffic to your public IP rendering it useless, this is a real pain when you want to access your machine from a remote location. The solution to it is a reverse ssh tunnel, which will work in the following way: [Home Machine] ==> {Middle Machine} ==> {You} So you’ll map a port from your home machine to your middle machine, which when connected to from the middle machine will forward all traffic to your home machine. I’ll give an example on how to achieve it. ...

2008-07-21 · 1 min · Junaid Saeed Uppal

Howto Register Your Mobilink Infinity VoIP Number on Softphone

Here are the SIP settings if you want to use your VoIP number from Mobilink Infinity on a softphone. Disable SIP ALG You’ll have to first logon to your CPE admin interface, browse to NAT -> ALG and uncheck SIP ALG, then click Apply. If you use an outdoor unit, do the same with the outdoor CPE as well. X-Lite Configuration Fire up X-Lite and configure it with the following settings: ...

2008-07-20 · 1 min · Junaid Saeed Uppal