networking

[pseudo blade]

There's a slightly higher barrier to entry? There are exceptions to the rule I'm sure, but I personally prefer PCIe when I can get it - but it really depends on the chip, support/drivers for the chip etc.

If I can use an intel wireless NIC I generally will.

But that's not a bulletproof approach, do your own research into the parts you buy.

[sudden kayak]

this is the most vague statement possible what are you asking for help with

[wooden epoch]

They - not sure this is the right channel but i guess its the closest to "smart home" topics.

I have a rather unusual problem but ayy here it goes.

I'm looking for a "smart camera" that can sit in a "remote" location (location has wifi) that works standalone, has motion detection, and can be accessed via internet from outside the network.
ideally, recordings that are being triggered with motion detection, can be backed up to a different location for easy access.

Here's the situation:
We have an old relative of ours (90y+) that has some issues with memory loss, hearing and so on, that lives a few hours away. Sadly we cannot be there on a daily basis, so to cover the days where he is alone, we had the idea to set up a smart camera in the central hallway see his regular movements (motion detection), ie. bedroom -> kitchen and so on, with the goal to have a notification if there has been a lack thereof.

Any recommendations or ideas to solve this?

[waxen scroll]

Cameras from the big boys like ring or nest are the easiest solution but the notification of not seeing someone is tricky

[wooden epoch]

if possible, i'd like to avoid any subscription fees.

Worst case im fine with setting up a rpi with home assistant or sth simliar, though i have never worked with smart automation before.

[peak cloak]

that is possible, but in the end can come possibly out to be more expensive and may be less reliable as some prior knowledge is generally needed

If you really want to do it selfhosted, you would need to setup an NVR like shinobi, and then to do motion detection, a pi may not cut it as it can be pretty cpu intensive and/or needs gpu acceleration like CUDA. It starts to get into a rabbit hole, storage, etc.

[waxen scroll]

you can do a solution with zwave and home assistant though

if motion sensor does not see activity in X, alert

wont be cameras lol

[pseudo blade]

Considered looking at seniors tracking watches and emergency pendants? You can get ones that detect falls, movement and the like and may more directly solve your problem

Failing that if you just want record of motion, PIR sensing is very cheap and easy to process vs. video and can be combined with it.

[rocky badge]

@waxen scroll https://www.reddit.com/r/homelab/comments/w4sov1/im_building_my_own_home_data_center_ama/ did you see this

[waxen scroll]

no but nothing in those pics look like its in a home

[rocky badge]

Yeah

[waxen scroll]

I think its just a huge troll

[pseudo blade]

What kind of home do you need to have to stick a 230kW diesel generator in it?

[rocky badge]

he had some of that stuff in his home apparently but moving it out

[pseudo blade]

I also question setting up SPARC in a homelab considering the architecture's probably not coming back

Same shit with having like 10 of everything - do you learn more managing 10 of something than 3?

[worn viper]

I need some help with the router placement,should I place my router here

Or on top of my pc (which is more Central) but its blocking my PC's vents

The other issue with the pc option is that I will have to drill through the wall in my room fiber optic cable

[echo roost]

I'd have it away from the computer. Are you running ethernet between your computer and it or conencting via wifi?

[worn viper]

Ethernet

[echo roost]

Yeah, in that case away from the computer is great. don't really want anything blocking up your vents if you don't need to.

[worn viper]

Doesn't the wooden cabinet affect airflow+ signal coverage?

[echo roost]

Yes and yes. but if its the only thing in there, i'm guessing the doors are not air tight, so there will some air circulation. As for signal strength, there will be degradation of service but that will likely shorten he range.

[worn viper]

Is it worth going overkill?
Drilling fiber optic cable+ getting a shelf?
Or is the benefit minimal,
Thanks for helping btw

[echo roost]

Ideally you want it mounted high, un-interrupted and central to the area you are covering. You can start sacrificing those details depending on a few things. The area you are trying to cover and the speeds you are hoping to achieve.

Whats your internet speeds from your provider?

[worn viper]

I am currently at 40/3 mbps,
In a few weeks I will have fiber and I will move to 1000/100

My house is around 120 sq^2

[echo roost]

Ok, with 40/3 you could put it in a box and bury 2feet underground and wouldn't notice the perforamnce impact to the internet (internal LAN stuff you would).

but with 1000/100 you want to keep as much quality as possible.. is that 120sq meters?

[worn viper]

Internal lan is my biggest issue,I use airlink quit a bit

[worn viper]

Yes

[echo roost]

Ok, so thats a reasonable sized area to cover, but if you use airlink, you probably want to keep it as close to the area you use for that as much as possible.

[worn viper]

It's the reason I wanted to keep it close to my pc, if I moved it farther away I would have to connect my pc with a moca adapter to the router

How problematic would It be if I left the router on top of my pc for a few weeks if I won't game on it?

[echo roost]

wouldn't be a problem.

I suspect it woulnd't be much of a problem if you gamed either. Your fans would probably get a bit excited.

Looking up some papers on the effect of wood on wifi, the loss is pretty minimal and moisture content is the biggest detractor.
Depending on how far you want to go with this. away from the PC, but high up would be my prefence. You have a lot of elctromagentics stuff going on around your PC.

But connected via ethernet.

So if you have a shelf above your p, would be great as temp solution.

[worn viper]

Yep it seems like the best solution, the cabinet is also fairly low either

Thank you so much

[echo roost]

All good. If in doubt test. https://www.metageek.com/downloads/

[rocky badge]

@clear igloo it’s fun walking around campus and seeing aps change colors

bc i’m roaming between them

@peak cloak

[past carbon]

ping = wifi = my ping = 1,000,000 🤓

[clear igloo]

lol, yes 😄

[lethal creek]

Jesus christ

[wintry flare]

combine that with a HDMI over optical and i can have my dream of having my computer in the basement and my monitor/kb/mouse up stairs

[thick minnow]

Anyone have any ideas what's going on here? How can my upload speed be 20x faster than my download speed? I thought upload is always slower than download - could it be that there's something throttling my upload, and that I could get it to be faster?

[wintry flare]

are you watching youtube or have a tv on that's streaming from the internet?

[thick minnow]

12 devices are connected

[wintry flare]

are any of them currently streaming or using the net?

[thick minnow]

but i'm pretty sure that even if i disabled all of them, it wouldn't hit 1,2 GBPS

[thick minnow]

Yep

[peak cloak]

nice

talked to some upperclass men and apparently, in the older dorms you did actually get a public IP

but.... firewall

idk about the new ones

[lethal creek]

HDMI over ethernet is a thing too 😛

[sudden kayak]

there's no technical reason for upload to be slower, it's just how a lot of ISPs allocate their overall bandwidth because most people don't do that much uploading. but that seems unusual, try a different speedtest or two. is your connection fiber, cable, or something else

[thick minnow]

speedtest.net is returning more reasonable results: 74 down, 19 up
fast.com is now returning 74 down, 200 up

i'm not sure what's going on tbh...

[peak cloak]

Fast.com is weird

It uses some predictive thing iirc, so that could be messing up

[neat anvil]

just curious is there a way to make apps use certain networks like if have wifi and ethernet could I send one app through ethernet and one through wifi

[keen flicker]

i need tcp what every the fuck the rest is in i think he said python

[peak cloak]

Yes

[peak cloak]

??????

[neat anvil]

ok how?

[peak cloak]

Not sure how on windows exactly, but it should be possible. When I have a chance I will look into specifics

[keen flicker]

i need a tcp connection with "legal" methods that can output 1.5 gbs in python with some form of ovh bypass

[rocky badge]

@clear igloo I don't get why my uni, and other places, pay for a cert for radius

most clients don't trust the OS's CA list for radius

[sudden kayak]

your question still makes no sense

[rocky badge]

unless explicitly told to trust a specific list/issuer, and at that point why not just use your internal PKI

[clear igloo]

Good point, not 100% sure since you wouldn't let random people install the client cert either

[rocky badge]

like, yeah, its issued by Sectigo but the client still makes the user verify it

[clear igloo]

Yah

[rocky badge]

Even on Windows, unless a GPO specifies a wireless profile Windows will still say "Do you expect <SSID> here? details"

https://sysmansquad.com/wp-content/uploads/2021/10/image.png like this

[clear igloo]

Bonus trust! 😄

[rocky badge]

most people aren't even gonna read it lol

they're gonna click connect/trust

[livid ruin]

can a wifi card switching between 2.4 and 5ghz cause network issues?

because my laptop wifi card has been terrible since i bought it, so i decided to set it on 2.4ghz only, and now its stable

so then i put it on 5ghz only, and its also stable.

its a mediatek card. is something faulty or is it just to do with mediatek being garbage?

[meager ginkgo]

I've heard of people having issues with mediatek so i'd assume it's because of that.

[drowsy fossil]

That's why we have a wireless profile pushed through gpo, and a separate network entirely for personal devices

[rocky badge]

this is my uni lol

everything joins the only ssid

They have ETSU 802.1X, eduroam, and ETSU-Guest

[keen flicker]

tcp method to send data to shit in python

[peak cloak]

how to say you don't know networking without saying you don't know networking

but here's how to send tcp packets in python https://wiki.python.org/moin/TcpCommunication

[keen flicker]

look i just pay for the servers

[keen flicker]

no work

he say this too

[peak cloak]

I know what you are trying to do, ddos something

[keen flicker]

yes

[peak cloak]

don't be an annoying script kiddie

[keen flicker]

im not i want to make something that compy use

to test shit you know

thats why i said legal

[peak cloak]

they already have ways

[keen flicker]

i have tried those but they ether dont work are have alot of power

[peak cloak]

you said you wanted to make something for companies? but there are already services to do that in a controlled environment

like on Azure docs https://docs.microsoft.com/en-us/azure/ddos-protection/test-through-simulations

[keen flicker]

i want to make something like that too

thats why im asking for help and shit

[peak cloak]

to do what?

flood TCP?

super easy to mitigate

[keen flicker]

some stuff like game and small dev hosting there own server it not

[peak cloak]

if self hosted sure, other than that, not really

judging by your videos I suggest stepping back from whatever you are trying to do and use your and your friend's passion in a good way, rather than trying to build a ddos tool

[sudden kayak]

right so "i don't want to use any of the actual ddos simulators or load testers, i just really want to make my own that can be used for nefarious purposes"

just say you want help ddosing someone and go

I'm surprised you haven't been banned yet honestly

fortunately you don't seem to have the necessary level of networking knowledge to ever accomplish that so the world is safe from your script kiddie ambitions

[pseudo blade]

Yeah I'm reading this as "I want to DDOS people's game servers"

[hollow marlin]

So you're saying that other professional pen test tools don't work or are too good...sure

I highly doubt this is for simulation test only. Even then I don't know what company would bother with a tool that is struggling to get one of the basic methods working vs other that include a suite of test.

It sounds like a script kiddie with the typical "I promise I'm not going to use this for evil" response

[devout ember]

hello. i am trying to run a tor relay on my phone through ubuntu. i have everything set up with nyx but after about 20 minutes i get a error in nyx that says... your server has not managed to confirm reachability for its orport

im trying to do this

[pseudo blade]

Juan, you're giving them too much credit, it's blatant.

[devout ember]

can someone tell me how to set up the port forwarding

[pseudo blade]

Is it Android with fakeroot or similar?

[devout ember]

im using termux and vnc viewer

[pseudo blade]

You're trying to run the relay on your phone?

[devout ember]

yes

[pseudo blade]

And your phone runs Android?

[devout ember]

yes

but i have ubuntu on it

[pseudo blade]

And you're using Termux and an Ubuntu environment using fakeroot

[devout ember]

the 4 programs i installed were termux andronix vnc viewer and f-droid

[pseudo blade]

You don't have root in Android

[devout ember]

no

[pseudo blade]

Is the intent to use WiFi to a home gateway to send the traffic?

[devout ember]

yea

but im not sure how to port forward

[pseudo blade]

Do you have port-forwarding configured on the router to the phone's IP address?

No. Well do that first before even looking at Tor/Android

[devout ember]

so if the 2 ports im using are 9001 and 9030 should i just enter 9000 to 9050 ?

[pseudo blade]

No. You should create two rules, one for each port.

[devout ember]

ok done

[pseudo blade]

Set your relay config to your public IP address, not the phone's internal one. Troubleshoot from there.

[devout ember]

ok thanks i will try that

hmm i checked on portchecktool and it says that port 9030 is open now but 9001 is not open on the router IP

[devout ember]

nvm its working now

thanks

[keen flicker]

im trying my best im not sure on what im doing and im asking for help im not doing anything bad

[final oracle]

I installed OpenWRT on my pi, but when I boot it gets stuck on "openwrt attatched scsi removable disk".

[tranquil lion]

facebooks ipv6 subnet 😂

[sudden kayak]

lol yep there are enough ips that you can pick funny ones. one of the particularly amusing applications of this i saw was that you get a /80 for each ec2 instance - so someone set up iptables to only allow ssh connections if the ipv6 address contains a valid 2FA code

[tranquil lion]

weird

[peak cloak]

Ipv6 screen

Basically reddit r/place, but to set a pixel you ping a certain address

Based on color, location,etc.

[clear igloo]

face:b00c:dead:beef::1/64 😛

[bleak ginkgo]

Can someone help me with apache hosting on oracle cloud, it was working fine until i had to do an update and now its saying port 80 is now closed

[ember basin]

thats kinda super cool

[rocky badge]

@clear igloo

i need to do something with this lol

[clear igloo]

Make it single mode fiber 😄

[rocky badge]

lmao

[livid ruin]

yo guys, so a usb c hub with gigabit ethernet costs about 30 quid minimum. what if you just buy a usb c to usb 3 hub for 10 quid, then plug a gigabit ethernet to usb 3 adapter for 10 quid into it? will that work as good as the hub with ethernet?

[waxen scroll]

y tho

[clear igloo]

why not, just rip the fiber apart and rebuild it
ez

[waxen scroll]

[sudden kayak]

if they're both actually high quality then there shouldn't be enough of a bottleneck to affect anything. but I'm not sure where you're finding those prices and i would doubt you'll get anything usable in the usb to ethernet category that cheap

also is there a reason you don't want to just get a usb C to Ethernet adapter?

that's probably your best chance of getting something with good performance for a low price

[livid ruin]

according to reddit your wrong

apparently you cant do hdmi if you went through usb a

at least to gaming standards

like hdmi2.0

or so im told

oh wait crap, thats the wrong message

[sudden kayak]

that's a completely different question, you were asking about ethernet

[livid ruin]

i forgot what i said lol. sorry. in a different copy paste of the message i mentioned i wanted to connect a 3440x1440 165hz monitor to one of the usbs

[sudden kayak]

ah yeah that's unlikely to work

[livid ruin]

can u even get any usb c hubs with hdmi 2.1 rn tho?

[sudden kayak]

maybe but they'd be like the $200 super high end docks

more likely to only be available on thunderbolt docks, if anything

[livid ruin]

why exactly are they so expensive

i have never quite understood

my laptop does not have thunderbolt

so basically i have no way of connecting 3440x1440 165hz to my Asus X16 laptop

[sudden kayak]

essentially they are just passing a massive amount of data. standard usb 3 is 5 Gbps, thunderbolt is 8 times that (40Gbps)

they need very complicated and carefully designed PCBs and shielding to handle those kinds of data rates, plus the silicon is not cheap

i mean there's definitely a lot of markup too especially since apple was the first to go all-in on thunderbolt and we all know there's a markup even for third party accessories that are meant to go along with the apple ecosystem lol

[nocturne wind]

Hello! Quick question! Does a relatively cheap 10g managed network switch exist new yet? And or does anyone have some in mind to keep an eye out for on the used market?

[peak cloak]

I mean there is the mikrotik one

https://mikrotik.com/product/crs305_1g_4s_in

[nocturne wind]

@peak cloak oooooda-feeaking-lelar that's nice. I suppose my follow up question would be are there reasonable priced SFP+ PCIE cards?

[peak cloak]

you can find used for a good price

I'm not too familiar with those and what models are good

but intel ones which iirc are good, are around 50-100

[nocturne wind]

Okay. My plan is to use old computers as server system nodes to start haha. So that's great, thank you for the suggestions. :)

[sudden kayak]

yeah the Intel ones are solid. you can find a single or dual sfp+ 10g nic for like $80-100 if you look around on eBay, or the mellanox ones which are sometimes cheaper

something like the x520-da2 in any of the vendor/oem versions should be fine, although you should google the specific vendor model number to make sure there's no arbitrary restriction (that's a 2 port example but they tend to be easier to find and the same price as the single port ones when it comes to used enterprise gear on ebay)

also strongly recommend one of the passively cooled ones even if they're a few dollars more than the ones with the fan - if you're buying used the fan is the most likely thing to be on its last legs, and the fans they use are built for servers where nobody cares how loud they are so using it at home might be obnoxious

[iron canopy]

what is a good wifi extending thing. no Ethernet the house

[small glade]

How would I go around setting up a VPN or something that would allow me to like tunnel in to my local network from anywhere and appear as a device on my local network?

[shadow bluff]

if you have the budget, get another router that can turn into an access point

for example get 2 ax20 and make one in router mode and make another in access point mode

if you wanted to find them smol extenders, they will work but it wont be as good

something like tp link re650 should do the trick

[small glade]

Access point mode needs ethernet tho usually

Anyway I wouldn't recommend wireless extension as anything non short term

[clear igloo]

Dedicated backhaul over 5GHz

[iron canopy]

Ok

[shadow bluff]

yeah, example i picked on top with ax20 specifically does not need one

idk what choice hes got, and we dont know his budget either

[pulsar thorn]

if you had a windows machine on all the time I'd recommend SoftEtherVPN, it's simple to set up compared to alternatives and offers a way to connect via port 443, so restricted networks (e.g. school networks etc) can be bypassed

I have it set up both on my home network and in the cloud, so I can watch Twitch at school or troubleshoot my pfsense machine at home if Mum starts complaining

[peak cloak]

There are a couple of options, either you can self host a VPN fully, like setup a wireguard or openvpn server, or go with something like tailscale or zerotier where you don't need to port forward and it does nat punch through. I personally am using tailscale right

[small glade]

On my networks side I would want to run it on something that could be always on like a raspberry pi or something

[rocky badge]

@clear igloo $250 in copper stuff 😩

[clear igloo]

ooof

[magic badge]

Someone recommend me some good ethernet cables

[rocky badge]

dad is covering half of it LMAO

[magic badge]

why won't my dad finance my poor financial decisions?

Actually nevermind he bought me a motorcycle

ill be grateful for that lol

[rocky badge]

lol

[magic badge]

blob assist me with cables

[clear igloo]

Monoprice or CableMatters are my usual go to

[magic badge]

Which do you prefer more?

Ive heard of monoprice but I heard they were all fluff no product

[clear igloo]

for pre-terminated stuff, monoprice

The boots on them are meh, bit stiff

[magic badge]

Ill be honest, networking stuff isn't my cup of tea I am trying to understand it more

But I don't know what im doing

Im just buying expensive things I think are good like a stupid.

Im trying to upgrade my wifi situation from the trash modem/router combo that comes from my ISP

[clear igloo]

TrueCable is my preferred bulk cable supplier
Monoprice is my go to for long pre-terminated stuff I don't want to touch and Cable Matters for most of my patch cables
Boots vary a ton between suppliers and the stiffer they are the more difficult it is to remove the cable

[magic badge]

Well I don't plan on ever removing them, I am using them to connec tmy

New modem and Router

[clear igloo]

How far?

[magic badge]

Very short distance

Not exactly sure how far not home righ t

[clear igloo]

Cable Matters then for short runs

[magic badge]

Alright

I’ve upgraded to a netgear nighthawk and a netgear cm1000 modem which hopefully wasn’t a poor choice?

[clear igloo]

That's fine

[magic badge]

Sweet

I don’t like buying things I don’t fully understand, and networking is something I wish I knew more about.

Just far too busy to research more into it.

[waxen scroll]

its so difficult

@clear igloo dont blame the application, blame the network

[clear igloo]

Blame DNS

[stone swan]

it is ALWAYS DNS

[rocky badge]

@clear igloo I wonder how Starlink is handling roaming across satellites

[clear igloo]

Aren't the satellites in geosync?
I imagine for the marine one it's something to deal with but not home users at least

[rocky badge]

because if you get a public IP, you keep the same IP as you roam across sats and ground station

then CGNAT, the router doing NAT has to keep up with sessions and states

[clear igloo]

Beam it all to the ground station and let them deal with it 😄

[rocky badge]

lmao

[clear igloo]

Although that makes more sense, just signal between satellites but have them beam the info to the ground station where all the CGNAT is done

[peak cloak]

nope

[clear igloo]

ah, thought they were for some reason

[peak cloak]

https://satellitemap.space/

for now the sats are basically just relays

but eventually it will be a big mesh

[peak cloak]

I imagine they have their own custom underlay network

[rocky badge]

hmm

[peak cloak]

here's another map https://starlink.sx/

[peak cloak]

found some papers

https://arxiv.org/pdf/2204.01433.pdf
https://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.127.188&rep=rep1&type=pdf

[rocky badge]

[peak cloak]

yeah, math way over my head

[acoustic isle]

Hi i need some help

Hi.

Im trying figure out how im going to come at problem. i have been lit on fire last 1moth been reserching things how to make somthing you can call me crazy or just insane. Its normal i just like do things that normal person dont iven think about or can image joy way internet providets looked at me when i said need 4 sims. But ye i found about spedify tryed it out was meh but i resererched more and found out that thay have pretty bad rep with privacy. Other one is modem with bonding feture almost inposible find. Now looking in to Linux based server that can run and Bond network. Plan is get server that have 4 m2 pci card with sim lte extender card and qspf/spf+ 10gig card to some kind qspf+ switch 8-24port not desided yet. From there to uqubity gatway loadbalansing. From there to pro switch for cameras and 2x48 port switch and 1 24port poe++ switch. Im basicly smartifing my hous fully got lot of idieas how to do staw im high ranking electric i basicly can do any 230v and very close with it appartment. I will have atleast 4 spots for 100gig fiber duplex and probly 2-4 25gig. My roof have atm mimo 2x2 antena 14db gain and plan is build 8x8 mimo for mininla latancyServer rack gona have my 3 pcs and monitor via fiber and and controls. 1 Ai learning machine, and looks like 1 network pc.I have to figure out how i Bond my connection localy pref.

[chrome pollen]

please use commas

my brain hurts trying to read this

[chrome pollen]

rack:

I ran out of blanks :(

[acoustic isle]

sry english and any typing is not my strongest side 😄

[meager ginkgo]

now all you need is a UDM Pro or UDM SE 😉

[echo roost]

Nice rack!

[modest cosmos]

https://en.wikipedia.org/wiki/Vampire_tap for those unaware of the most cursed piece of networking gear in history

[thick minnow]

how doable would a ethernet crawlspace run be? do i really need to terminate it with a keystone or can i just use a female-female adapter

[chrome pollen]

I've been saving upp

10 bucks a week for allowance

also, do any of you guys know how to use the console port on the back of a unifi switch

ik you need some rollover cable or dmt

smt*

[chrome pollen]

all good lol

imagine you were saying it out loud, right

everytime you take a break talking, add in a comma

every time*

[acoustic isle]

i was talking with internet expert about how i solve this problem

[chrome pollen]

ahh yes

[acoustic isle]

i dont do this in my own launge becous i was f bad in scool 😄

basically this what he suggested if any one intresterd

[pseudo blade]

It's pretty much the only possible implementation without carrier assistance or accepting a max throughput per connection equal to the speed of one of your modems. (Can't speak for the specific software much) It is however going to have latency issues and unless all four SIMs are to different carriers on different spectrum on different towers and somehow all four are near flawless and similar speeds won't give you 4x the performance, or even close!

[acoustic isle]

Im expecting around 3gig connection

[pseudo blade]

It won't happen

Sorry

[acoustic isle]

How come?

[pseudo blade]

Spectrum requirements and contention on shared networks

Performance doesn't just scale with modem count, as I said.

[acoustic isle]

If every connection is about 850mbs and vps cable dowenload and upload sppeds of 5gig

[pseudo blade]

For testing's sake just buy one modem and test carrier reachability and what towers you can hit.

[acoustic isle]

I have atm 750mb with out antena allingment

Lte 5g connection

[pseudo blade]

850mbps is incredibly idealistic for an LTE network. 5G != LTE

[acoustic isle]

And got hint that if aim 4 antenas difrent towers would help decrade populaation of one tower

[pseudo blade]

LTE = 4G

[acoustic isle]

Finland network normal

Got 1gig lte 5g mobile and 1gig 5g home network

It sufles between 4 and 5g

Just standing outside connection on mobile

[pseudo blade]

Yes. One connection.

[acoustic isle]

Biggest botlenec i see connection to vps

[pseudo blade]

That's resolveable using better hardware and offloading, though good luck if you need your packets in order with reasonable latency

[chrome pollen]

woa

the absolute one time an isp over provides

[acoustic isle]

Nice using fiber?

[chrome pollen]

sure am 👍

[clear igloo]

Unless everything in the line is 2.5GbE or above it's down to a caching issue with fast

Still nice to see it redline the links though 😄

[waxen scroll]

Easy. The hard part is whether or not you can fit in there. If you're not going to mount it to a wall the adapter is fine

[thick minnow]

yeah ive been in it i can fit pretty easily

[magic badge]

I went with Cable matters

[chrome pollen]

prime cables is currently cheaper. I haven't personally tried cable matters, but considering their website has one review, and it being a one star, I'd go with prime.

(i did check the other pages)

[waxen scroll]

for 1000' I do monoprice

https://www.monoprice.com/product?p_id=43701

$174 vs $349

I wired tons of this in datacenters. It's legit

[sudden kayak]

briefly worked at micro center and the employee discount was insane on 1000' cable reels

like $80-100 for 1000' of everything from cat5e to cat7

the employee discount was just at-cost to the store

so you can get an idea of how high the markup actually is

[waxen scroll]

I get 50% off high end HDMI cables a similar way

[tired imp]

Friends, I am looking to serve as backup node for a P2P network with a half a dozen disks I have laying around, how would I connect them to my network, as in, how can I add 6 sata conectors to a host machine?

Maybe this is not strictly network related 😅

[chrome pollen]

uhh, RaspberryPis are an option

or an old pc with Ubuntu or some Nas os

truenas is ok

[zenith crater]

Hey There
i hadbeen facing this problem for a long rime when ever i Turn On my Desktop , My Ethernet Cable Automatically turn off and On. Everytime i have through Network Setting ! and its getting Frustrating day by day ! Any solution please ?
TIA

[chrome pollen]

what

[sudden kayak]

uhhh if you mean the cable loses connection - it could just be a damaged cable

either the cable itself or more likely bad termination

but yeah im not really sure what you're asking either

[acoustic isle]

i love see ppls buing cat6 cable from shop when i can buy it for 20cnt /m

and fiber is like 5-10cnts

[acoustic isle]

cable testers are pretty chap and very easy to use

[sudden kayak]

yeah but if it's obviously something wrong with the cable, it's a lot easier to just use a different one than spend time getting your hands on a tester that you will probably only use once

[thick minnow]

hey guys, im wondering... why the heck is my download speed constantly between 50mb/s to 60mb/s when its clocked at 1gb/s at the gateway at the router? My network card is capable of 2.5gb/s... and yes i realize you don't always get the advertised download speeds from the ISP. So, I'm curious as to whats going on. Using CAT6 cable... so that's no big deal. Maybe the router itself?

[meager ginkgo]

MB/s and Mbps are different things. 8mbps is 1MB/s. So that's most likely part of it. Other reasons could be the server you're downloading from doesn't have enough bandwidth.

[thick minnow]

thats news to me.

[meager ginkgo]

so even on my "1Gbps" connection I only pull around 110ishMB/s max

[thick minnow]

mbps is megabytes 'per sec' and so is the abbreviation 'MB/s' correct?

weird..

[meager ginkgo]

Mbps is Megabits per second.

MB/s is Megabytes per second

[thick minnow]

ah

ok thanks

[meager ginkgo]

👍

[sudden kayak]

it's also very possible that your router can't actually route line speed

i.e. even if all its ports can handle gigabit ethernet link speed (or better, since you said your computer has 2.5GbE), it's very possible for a consumer router to not actually be able to handle NATing that full line speed

i.e. my modem supports ~900Mbps, my speed plan is 600Mbps (we actually provision more like 750) and all the ports are gigabit ethernet... but the actual router only has the CPU to NAT like 250-300Mbps on a good day. hence why i keep looking for upgrades but chip shortages & stuff plus the fact that i have strict space & power consumption requirements means i still haven't found anything usable 😆

[peak cloak]

What do you have rn?

Er-x?

[sudden kayak]

nah the ER-X died 😭

got a credit for it from micro center but they don't have any other good alternatives in stock either

im just using the shitty all in one TP link combo until i can build a solid x86 box

i also have a rock 5B board on preorder but the timeline is fuzzy

[peak cloak]

Rip

I like the edge routers, the software is old tho...

Apparently the good devs left

[sudden kayak]

that checks out lol

[thick minnow]

Damn i wish i had 1GB/s dl speeds

lol

[sly lark]

I need help

How do I make and host a website on a regular computer

Not a server one

And will i need a special pci card

X1 or x16

[thick minnow]

uh

you will need nginx

thats about it

and a text editor

[sly lark]

Wdym?

[meager ginkgo]

You can't really? You need something always running lol

[sudden kayak]

no you don't need any special hardware, but you do need a stable internet connection and a computer that's always running

[meager ginkgo]

^

[sudden kayak]

hence why it usually makes sense to have a server somewhere not run it on your desktop

[meager ginkgo]

If you can't have something always running, it's probably easier to use something like Weebly or buy a domain and use a website builder

[sudden kayak]

the only thing that makes a computer a server in the abstract sense is that it's always on

[sly lark]

It is always running

[fierce flame]

They should be the same. nothing is downloading in the background

[thick minnow]

they usually will not be the same

but it is indeed very strange that your upload is way higher than download

[pseudo blade]

That's a mobile broadband speed test, not WiFi

Shared service, so even if you're not downloading, others likely are

[meager ginkgo]

It's probably a glitch in speedtest.. usually uploads aren't that high and ping isn't that low

[pseudo blade]

Based on the unusually high upload speeds it'd be 5G and bad contention, or an issue with the test

[granite horizon]

My homelab disagrees

A server serves some kind of a service, not necessarily 24/7

[crystal oriole]

but my SLA says 100% uptime /s (sorry for shitposting)

[ivory egret]

What alternatives do you use to Windows Active Directory?

[pale ridge]

Python3 -m http.server

[pale ridge]

Azure

[broken hearth]

My ISP provided router is not gigabit (their LAN supports 10/100 Mbps), so I bought TP-Link Archer A6 Gigabit router. This one does not have the option to directly plug the fiber cable, so this A6 should be hooked into ISP's router with the help of LAN cable. (The LAN cable will go into one of the LAN ports of ISP's router and the other end will go into TP-Link's WAN port). Since the ISP's router outlets are only 10/100Mbps, am I stuck with maximum of 100Mbps speeds and I cannot upgrade the speed?

[crystal oriole]

...where did they get a router with only 10/100 Mbps..

also got the model of the router?

[umbral tide]

Which dns should i use ? Very confused

[granite horizon]

Most ISPs (in EU) will provide a service to connect & configure fiber on your hardware for a reasonable fee

Or config details so you can do this yourself, but if you snap the fiber or do something else like that it's on you

[granite horizon]

ISP DNS is fine for 99.999% cases. Google (8.8.8.8 8.8.4.4) or Cloudflare (1.1.1.1 1.0.0.1) if you need external, reliable and relatively secure DNS.

[umbral tide]

Primary is 8.8.8.8 and secondary is 4.2.2.2

[granite horizon]

4.2.2.2 is Level 3 IIRC

[umbral tide]

Yes

Is it reliable?

[granite horizon]

You tell me, I'm not using it 😉

If it works don't fix it

[echo roost]

Find the best local to you or benchmark your fav https://www.grc.com/dns/benchmark.htm

[peak cloak]

No special hardware needed. Just need nginx or apache and that's it

[stone swan]

Depends on how much you hate yourself lol. 389Directory Server is one I tried out for a while but after 15+ years of AD it just makes sense to bow to the great machine. If you want to look into 389Directory Server this is the link https://directory.fedoraproject.org/index.html

[pseudo blade]

I'd suggest this to a developer testing something, but not for actually exposing anything to the internet - Python's docs warn against doing such - Use NGINX or Apache httpd.

[ivory egret]

Thanks for thatt

[acoustic isle]

Thots on SMB MULTICHANNEL should look in to it with double internet?

[sterile galleon]

So I'm looking for a new router, as my current ISP one is rubbish. Only issue is most of the routers I'm looking at only have a WAN port, not a ADSL one. I'd preferably like to just have the router, and not have to hide away a modem box. Are there any small modems or anyway I could do it without one? (I'm in the UK)

[meager ginkgo]

Does your ISP make you use their modem?

[sterile galleon]

No, says I can use any of my own equipment, just looking for something small really

[meager ginkgo]

Companies make combo devices. That seems to be your best bet looking at what I can find on Amazon

[sudden kayak]

you'll probably have much better results getting a basic modem & a separate router even if it's slightly less convenient

[meager ginkgo]

That would be my general recommendation. But I couldn't find any seperate basic modems on Amazon UK

[elder folio]

writing a 20 page paper on trace analysis. loving life

[fierce flame]

well it was like that for a day but now it fixed itself

[strange cloak]

new rack??? Sheesh

[meager ginkgo]

Wood is horrible for heat

[strange cloak]

no like heat is going to be coming out the sides?

hmmmm Found a nice one

open rack

16U

more for audio equip tho

I'd have to mount the dl380 at the bottom because it would stick out by like 57cm

[sacred ocean]

I've set up a somewhat simple 3 node + truenas proxmox cluster. Is it possible to have VMs run on local (ssd) storage and replicate to shared storage as a failover? I can't seem to find anything about this, so I assume no?

[acoustic isle]

that upload uhh

[meager ginkgo]

😂

[acoustic isle]

My mobile network is just so bad with upload

[meager ginkgo]

that was his home internet

[acoustic isle]

I fugured prob fiber too

[meager ginkgo]

yeah definitely fiber

[acoustic isle]

My home wifi 5g lte connection to modem and deco as mesh

My deco trotles speeds to - 500mbs

This Village only have 5g tower and thats only way get internet😩

[shadow bluff]

yea best to just use one good router instead of mesh wifi

bloats your network using the system

[pseudo blade]

As far as I can tell the lower end Deco's use use the same radio for backhaul and AP duties so I'm not surprised it isn't faster

[hazy lichen]

Hi.
I am running an Awstats update and get these warnings.
Reverse DNS lookup for XXXXXX not available without ipv6 plugin enabled.
I didn't find anything about this, however, I believe it is nothing to do with Awstats, rather than some ipv6 plugin for the DNS lookup package? Anyone knows something about this and how to enable ipv6 plugin?

[thick minnow]

i cant wait until i own the place i live so then i can get a bunch of networking shit

[pseudo blade]

I'm definitely getting ethernet wired everywhere if I buy a place and think I'll get to stay there

[meager ginkgo]

If I was building I'd run CAT6a everywhere, speaker wire, security system wire etc. but if I were to just go buy a house i'd use MoCA

[pseudo blade]

Speaker wire, security system... eh, I'd rather run ethernet then just put devices on that tbh

[meager ginkgo]

I mean like in ceiling speakers

[pseudo blade]

Especially the security system, ipcams are fine

[meager ginkgo]

Ethernet in ceiling speakers don't really exist

[pseudo blade]

Perhaps it should (it does, but not cheaply)

[meager ginkgo]

and I mean like a regular system in addition to cameras lol

[meager ginkgo]

It's easier to just get an amp tbh

and probably cheaper

but yeah i'd run a shit load of wires and smurf tube

[zealous ledge]

@meager ginkgo just went back to the house, no ethernet but cable plug things

[meager ginkgo]

do you know where those go to

[zealous ledge]

nope

i searched the entire house there was no box inside or outside for networking

i asked the workers there if they know anything

they didnt see anything

[meager ginkgo]

is it a regular house or like a townhouse or something

[zealous ledge]

there was a box in the garage that i thought was for ethernet but it was for turning off and on the water

regular house

[meager ginkgo]

did you like by the electric meter on the outside

that's good you have those atleast

because you can buy $40 moca adapters and have 2.5gig ethernet over those

[zealous ledge]

alright

is that good or bad

[meager ginkgo]

good

[zealous ledge]

alright

[meager ginkgo]

once you find where those go to let me know (get a pic also) and I can help you out with setting that up lol

[zealous ledge]

alright i will look around

[meager ginkgo]

sounds good

[thick minnow]

I would use moca in my house but there are like 2 coax jacks

[meager ginkgo]

i've been lucky enough to have tons of coax and or ethernet jacks in our homes lol

[thick minnow]

my house was built in 1989 and i'm pretty sure all the networking is original

so like a couple coax and a couple rj11

[meager ginkgo]

yeah it's typically mid 90s when they started putting them like everywhere

[thick minnow]

the rj11 are connected to nothing

[meager ginkgo]

this was a 1999 house

crap ton of coax

[thick minnow]

gg

[meager ginkgo]

@zealous ledge do you know if your new internet is fiber or is it cable

[thick minnow]

all i have is a couple of these

[meager ginkgo]

if it's 2 pair you can run 100mbps ethernet over those

if lucky

[thick minnow]

none of them are where my pc is though

family computer is right next to router so it gets ethernet

[meager ginkgo]

yeah bummer

[rocky badge]

access control in residential /s

[meager ginkgo]

lmao

yeah. just scan your key card to enter

[rocky badge]

conduit everywhere

[meager ginkgo]

yes

https://docs.google.com/presentation/d/1LNONZXsLi-R9ejamD9Bd2UfzpqjqEWVt0ZepTGmMC50/edit

everything in there

[rocky badge]

lmfao

tbh

I'd love low voltage lighting

[meager ginkgo]

there was a company doing cat6 lighting

I forgot the name of them though

[rocky badge]

nah not like that

LV to the control, back to a panel, the panel is full of relays

[meager ginkgo]

yeah that'd be neat

I came across this thing recently https://voltekinc.com/dc-power-advantage/

[rocky badge]

Lutron RA is cool though

[meager ginkgo]

I'd love to have RA3 but it's soooo expensive lol

[meager ginkgo]

it is gorgeous though

[meager ginkgo]

did you see the new caseta line they are coming out with?

[rocky badge]

the radio units are PoE + data

yes

[meager ginkgo]

I might grab some of the new caseta if they are sunnata style or similar

[rocky badge]

these are so nice

[meager ginkgo]

I've never used them but they look amazing

Need to purchase some.

[rocky badge]

My high school uses them

[meager ginkgo]

pretty sure my high school just uses traditional wire nuts lol

[rocky badge]

makes it so easy to work on the electrical

[rocky badge]

We had to climb up above the drop tile in the closet

because some of the outlets in the closet didn't work

[meager ginkgo]

ah that's cool

[rocky badge]

the breaker was on but no power in the outlets

[meager ginkgo]

loose wire?

[rocky badge]

turns out they didn't insert the wires into tie far enough

[meager ginkgo]

ah

[rocky badge]

@meager ginkgo

i wonder if this is still like this

[meager ginkgo]

where is this at lmao

[rocky badge]

i put velcro on the "AP"

[rocky badge]

high school theater

[meager ginkgo]

your high school is using those for aps? 💀

[rocky badge]

no

in the theater bc its our own network

the school itself uses extreme

[meager ginkgo]

ok that makes more sense lol

mine uses cisco

[rocky badge]

I couldn't find scrap 2x4 that would work and didn't feel like cutting

so i took the bricked crestron computer center and used it to hold the "ap" while the velcro adhesive worked

its probably still like that

[meager ginkgo]

lol

[rocky badge]

"cisco expensive"

the only cisco they have is ASAs in the core

everything else is extreme

[meager ginkgo]

they didn't even bother trying to hide the cable

[rocky badge]

💀

Uni or K12?

[meager ginkgo]

K12

[rocky badge]

dang

[meager ginkgo]

it looks like they used weird cable types too lmao

I swear some of the cables are flat

[rocky badge]

uni educational buildings have these APs

or older

the student center and shit have the catalyst wifi 6 ones

[meager ginkgo]

damn

[rocky badge]

they went crazyyy

[meager ginkgo]

I'm kind of mad I upgraded my home APs from AC Pro's to U6 Pros tbh

I wish I would have waited for the Enterprise ones

[rocky badge]

damn

[meager ginkgo]

My iPhone barely gets above 450mbps via wifi 6

but Apple devices typically are horrible for wifi anyway because no 160mhz

Even my M1 Air connects at 80mhz

[rocky badge]

yeah :(

[meager ginkgo]

I setup WPA-Enterprise a bit ago

using freeradius

pretty neat

[rocky badge]

same lol

but i'm using jumpcloud for radius

[rocky badge]

i'm still 802.11ac lol

[meager ginkgo]

let's see what I actually get

[meager ginkgo]

let me disable ethernet

[rocky badge]

9ms, 420Mbps down, 380Mbps up (WiFi)

[meager ginkgo]

weird how my upload is so much higher

[rocky badge]

LOL that speedtest server also shows up for me

[meager ginkgo]

aren't you by Johnson City lol

[rocky badge]

no

knoxville lol

[meager ginkgo]

ah

[rocky badge]

i think their speedtest server is shitty idk

[meager ginkgo]

let me try the comcast nashville one

[rocky badge]

took it the entire test to get up to 500Mbps down

but instantly maxed my up

300Mbps down, 470Mbps up lol

[meager ginkgo]

even worse

[rocky badge]

etsu went crazy on conduit

[meager ginkgo]

damn good for them

[meager ginkgo]

whoever wired that did a good job

I need to dump this GS316 i'm still using

[rocky badge]

@meager ginkgo I'm excited that they have 23ms ping to my home

[meager ginkgo]

yeah that will be nice for hosting stuff

[rocky badge]

and i get 240mbps both ways on wifi to my isp's speedtest server

[meager ginkgo]

damn

not bad

[thick minnow]

is there a software that i can control my wifi with on my pc? Like direct more to a certain program etc

[meager ginkgo]

What do you mean? lol

[thick minnow]

well i used to use dragon to monitor the network traffic, it let me prioritise programs which gave them a stronger connection

[meager ginkgo]

Ah you can do that in task manager i'm pretty sure

[tough sierra]

My main PC had a hard drive failure on 1 of the drives. Reset everything, even re installed windows on a new hard drive. Now will not connect to Internet to Internet wireless nor hard line. Internet does work Because I can connect the hard line to my switch and connect wirelessly via the TV phone or switch or anything else. Just computer seems to be no Internet.

[old basalt]

almost the same here

What is the price some of you pay for a 500mb connection in the US?

against another server

[sudden kayak]

iirc fios is $70/month for 500 up and down? my parents might be grandfathered in to a cheaper plan though i don't remember

i pay the same for 600 down but only 25ish up - hopefully that will change soon lol

[meager ginkgo]

$65/mo iirc for att 500 plan

we pay $80/mo for gig

[old basalt]

Okay so is that like unlimited data?

[meager ginkgo]

yes

All ATT Fiber plans now offer unlimited data

[old basalt]

I pay like 40 $

[meager ginkgo]

the cheapest fiber plan they offer is 300mbps for $55/mo + taxes lol

[old basalt]

Okay i pay 40$ for 500/500 and the cheapest we have is like 25$ for 100/100

[subtle estuary]

For 500/500 and getting those speed are they with wifi or ethernet we live in Sweden and we are getting around 550/550 for 40$ but we are oaring for 500/500

[old basalt]

and i think its like 75$ for 1 gig up and down

[old basalt]

im from sweden aswell

and its with ethernet

[subtle estuary]

Wait i thought that fiber was always unlimted data ?

[old basalt]

yeah it is in sweden but not always in US.

What company do you have @subtle estuary ?

[subtle estuary]

We are using Telia and my friends is getting way over their speeds to and they are using Telia to.

[old basalt]

okay i have Banhof, and i get over my speeds on downloads but not when im doing speedtest thou

on downloads its like 520-530

[rocky badge]

ATT finally has multi gig options at my address

[old basalt]

nice

[subtle estuary]

We have hade fiber since 2013 so Sweden was probely ahead of its time and we unlimted data then to. But it was pretty expensive back then to install. And we paied like 75€ for 100/10 back then.

[old basalt]

yeah its was really expensive back then.

think my first fiber was 100/100

[subtle estuary]

How much was it to get it installed to your house/apartment back then for ous it was like 3000€ in 2013

[old basalt]

i think i "only" payed 16000 sek

And that was like 2015/16

[subtle estuary]

And in our summer cottage it was only 3500sek to install. But that was in 2019 so the prices hade gone down alot since we got it at home.

[old basalt]

yeah thats good

[sacred ocean]

I'm basically stuck between Comcast/Xfinity and Verizon Fios

[rocky badge]

rip

[sacred ocean]

I have gigabit so it's not that bad

miss my old apartment which offered up to 10gb for like 20 usd a month for some reason

[acoustic isle]

2 storys house 4b 7rooms 2 living pretty hard get with 1 modem

[peak cloak]

Verizon FiOS is pretty good. Haven't had issues

[acoustic isle]

and using mesh only for phone wifi and atm im pulling 80+ cat6a cables and upgrading unify every area

[acoustic isle]

they promised 6.5k m2 area covrage and yes works well but it tanks speed pretty bad

[sacred ocean]

I wrote something to log bandwidth over time and forgot about it. Turned out I was getting half the speed I was supposed to get and they refunded me the difference.

[acoustic isle]

us outlets🤮

[zealous ledge]

its not even an outlet

this is

[acoustic isle]

ty will read toda

[acoustic isle]

hmm that would be nice for smart house

[acoustic isle]

in finland thats like standard to use i recomen 10/10 bit cosly if buy in shop but its like 20cnt ea if buy as company

[acoustic isle]

public area they realy dont care hide cables contract more important for fast mony

[acoustic isle]

in finland fire proofing must be 30% empty for fireproof mass

[acoustic isle]

siiish

[acoustic isle]

i mean over all outlet

[acoustic isle]

Shider exxact socets more eye candy need to istal 2 cat6 x2 socets and keystone fiber lc more

[peak cloak]

Downloads and speed tests always get at or above advertised

I do at least

[sacred ocean]

yeah, it's fairly consistent for me now as well

but I still hope to get more bandwidth so I can download my linux isos fast

[thick minnow]

FiOS is great for just internet

if you need tv get comcast

their tv stuff is really good

[peak cloak]

Yeah idc about tv

[thick minnow]

yeah then fios is the way to go

[meager ginkgo]

Why not YouTube TV or Hulu Live TV?

[thick minnow]

well if you want cable tv

idk

[sacred ocean]

I've never had cable TV so I don't think I'll ever be getting that haha

[junior smelt]

Question for y'all NAS enthusiast out here. I'm fairly knowledgeable in tech but a complete noob when it comes to NAS. I'm looking into setting up a Home NAS for personal use (mostly data storage like videos/tv shows/movies, but also some raw photography and video editing stuff) When looking at a friend's Unraid setup, i understand that 1 drive is used as parity, and then he can expand as he wants as long as the drive is smaller or equal top the parity. Is the same possible with TrueNAS? The way i understood the stuff i read is that if i use, say, 4x16tb i would end up with 32tb of space as opposed to 1 parity and 3x16tb. am i correct?

[unborn sluice]

It’s not about unraid or truenas.
It’s the configuration

[junior smelt]

yeah, i understand that, but i read that truenas didnt offer that ocnfiguration, unless what i read is wrong or outdated

like i mentioned i'm an actual noob when it comes to nas 😂

[rocky badge]

@meager ginkgo @peak cloak https://cdn.discordapp.com/attachments/765292850219843645/1001988129848299550/IMG_5810.jpg Cleaned up my rack

[meager ginkgo]

looks good

[rocky badge]

All of the Ethernet runs in the house terminate here

[meager ginkgo]

looks good compared to my mess of a closet 😂

[rocky badge]

1-8 are in the house, port 24 is my Internet

All punch downs negotiated Gigabit first try

[rocky badge]

@meager ginkgo omg https://www.reddit.com/r/bell/comments/w9s45q/bell_self_installation/

[meager ginkgo]

lmaooo

💀

[sacred ocean]

I wonder why they would even offer that though

I assume they broke it ig

[rocky badge]

self install is like....take the ONT & router out of the box, plug in the terminated fiber into the ONT, and setup

not chop off the end 😂

[sacred ocean]

yeah lol

I could sort of see them giving you unterminated fiber if it were like a business install

[rocky badge]

ehh

even business would have a tech come out and terminate

[sacred ocean]

yeah

[rocky badge]

splicers and terminating isn't easy and less headache for the ISP for them to send someone out to do it

[sacred ocean]

The ISP just leave me with a spool of unterminated fiber when the building engineer refused to let them open the ceiling tiles and told me to just tell them to do it, but I had to call them again since they didn't have a splicer because why would they

[rocky badge]

they're expensive

[keen flicker]

is this good?

[hollow marlin]

The overhead cost of troubleshooting alone makes it impractical to let a customer even touch a drop, let alone let them make the splice.

[rocky badge]

yeah

[hollow marlin]

Also regarding that post, depending on the state or laws, there can be heavy fines for leaving exposed glass in the open.

You touch the glass and it's straight to the ER

[burnt dagger]

What's the best app for screen sharing my desk top to my friends when watching movies

[waxen scroll]

HDMI cable

I've not seen an app yet that handles basic video and audio well. You would need to use a streaming service or something

[fleet wagon]

might be best to set up a PLEX server and give him the link for it.

[hollow marlin]

@clear igloo @waxen scroll Looks like we may be looking for alternative metro-e vendors as Ciena lead times have gone from 12 to 16 months out. Apparently its now really starting to kill our sales.
My argument is looking at Adva or Accedian is just additional operational overhead with eventually the same end result

[clear igloo]

Yah, lead times are really growing longer it seems these days

Also AWS went boom a bit ago 😄

[hollow marlin]

Looking at some of the reddit responses, looks like it was a power issue. They make it sound like someone made an oopsie

[clear igloo]

Yah, wouldn't surprise me

[chrome pollen]

why do you have two switches if you have a 48 port thats not even close to full

poe?

[rocky badge]

yes

[chrome pollen]

huh

why did you choose to do that

[rocky badge]

because i had the 8 port one first

[chrome pollen]

and you didn't want to swtich over?

[rocky badge]

48 port poe + sfp+ is expensive lol

[chrome pollen]

ahh i see

what are you expecting to do with 48 ports in a house though

[rocky badge]

idk

[chrome pollen]

hm

[sudden kayak]

yeah i would say a small poe switch + bigger non poe is a reasonable setup for home use ... where you don't need the flexibility of "what if we need to install 30 poe desk phones suddenly next week" lol

[chrome pollen]

definitely 👍

[toxic chasm]

Hey so I have a question.

I don't think the answer will be that complicated, but want to get a baseline going.

I have 3 public IPs YYY.YYY.YYY.58 YYY.YYY.YYY.59 YYY.YYY.YYY.60
They are mapped to 3 servers 192.168.55.201 192.168.55.202 192.168.55.205

additionally there is a an entire 192.168.55.0/24 network that otherwise uses YYY.YYY.YYY.62 as its IP

I need to be able to access the servers from the 192.168.55.0/24 network

I tried doing a LAN -> LAN NAT, but if I do that the servers wont be accessed via there TLD names, so the SSL certs are not valid.

I need to be able to access the servers WITH SSL from the local network. Where should my next step be?

The firewall is a Cisco ASA5585. Im not looking for exact commands, just trying to find the next thing to look at. Having issues with most of the results im finding and just hoping to be pointed in the correct direction.

Also does not seem to work when an A NAME record points at another A NANE record before pointing to the public IP

[peak cloak]

I think the most elegant way would be to somehow assign the IPs directly to the machines and just setup some routes, but that would require a redesign. What I think you are looking for is some sort of NAT loopback, but with an IP range.

[waxen scroll]

Your local dns server needs to point to the internal IPs while the external dns server points to the external

Or if you're dealing with a single computer then just edit the hosts file

[peak cloak]

Oh yeah duh, split horizon DNS will still work with ssl

Just needs to be the same name

[waxen scroll]

Everywhere I worked did the split dns thing

[peak glen]

ubiquiti local dns? poggers

[toxic chasm]

Sorry, didnt mean to ignore anybody.

The answer ended up being LAN-LAN dynamic source for EACH server. I tried to do it in groups, but the router would not handle that.

nat (LAN,LAN) source dynamic LAN-subnet interface destination static Public-IP-1 Server-1

[unborn sluice]

Why did you ignore us though

[junior smelt]

Hey y'all, quick question, I'm planning on setting up a home nas in the near future and weighing my options. I'm most probably going to go for Unraid and get myself a couple of 16tb exos drives. I'm wondering tho, would it be okay to build the server in a closet with wall mounted racks in an open air config? or should i go for something enclosed? (that would be my very first server and i'm learning as i go hence the "near future", trying to learn enough before hand to not mess it up 😂 )

[toxic chasm]

Re-archatecting an entire network from basically scratch. 5 switches, an ASA, 3 server's, vpn access, a handful of APs etc

Not huge, but not small either

And all the servers are VMs on a 270TB SAN array

[pale ridge]

I think you need to start with a diagram of what you are trying to achieve but not sounds like you are in the right track. A better solution would be to use a reverse-proxy for your servers and have that do ssl offload. Nat your internal ranges for internet access and fix dns accordingly.

[pale ridge]

Security. We not doing security?

[toxic chasm]

I guess the long and short of it is it was never supposed to have needed to be re-engineered. But we needed to get a new firewall and then we needed to change around the switch configuration and then the new firewall need a new VPN access and then we had to split out some vlans and then we were already 80% the way to completely rebuilding the network

Oh and also this all needed to happen in the one week of time where everyone is at home and we are moving offices.

Also I haven't touched the Cisco CLI in 5 or 6 years and even then I never really spent enough time in it to remember anything

I guess really, the long and short of it is I have like 40 hours of overtime this week

So that's nice

[pale ridge]

Did you maybe plan want you intend to do?

[toxic chasm]

I want even the one that was supposed to do it

But yeah, I did have an idea how things worked but it wasn't my project so I didn't know the details

[peak cloak]

?

[pale ridge]

Assign the public ip to the machine I assumed you mean.

[peak cloak]

Yes, that was one way. Split horizon DNS is a better solution tho

[pale ridge]

If you put public ip on server how do you then firewall them off?

You just put a server directly on the internet.

[peak cloak]

You just put a firewall?

Public IP != No firewall

Look at ipv6, there are so many IPs, every device gets a global ip

Does it mean there's no firewall? No

[pale ridge]

Well yes

You can route public ranges

If you only have a small ipv4 public allowance you can not just use it up

So in ipv6 world you can put things behind firewalls with public prefixes

Hell in ipv4 you can also but… if you only have 4 ip to play with good luck

[peak cloak]

True true

I'd have to look into it more

[pale ridge]

I have a /22 and /24 at work and it is all natted

We do not sit real servers on the public addressing space.

You then are reliant on the servers security

So iptables or god forbid. Window firewall

I have never used one but I think there are inline firewalls that can block on the wire

[hollow marlin]

Most the time "L2" firewalls are referred to as transparent FWs. They're a pain because them come with a ton of caveats and can cripple you in the long term.
But it not necessarily true that if your servers are assigned public IPs, you're reliant on the OS's FW. As long as you have the IP space or a routed block on /30,/31, nothing is preventing the use of an edge FW.

[sudden kayak]

in my experience people just have no idea what a firewall is and think that NATing (i.e. having no public IP) is the source of the security, not the actual firewall

[silent spruce]

I'm getting the quest 2 and i heard you need a good router for wireless to not be dogshit
What's a good 5ghz router that don't break the bank and how would i set it up with my main internet router?

[hollow marlin]

NAT does have security like side effects on its own, at least for traffic not sourced from adjacent devices. But yes it's not security nor a replacement for a FW

[pseudo blade]

I find it slightly terrifying how many large enterprise network administrators think that network security is just restricting ports and that 443 is somehow safer than other ports.

Same with geofencing by country as if VPNs don't exist.

TLS interception on appliances, but not doing anything with the decrypted data so the net outcome is just stripping away proof of integrity from clients...

[echo roost]

GeoIp filtering is a must, even though vpn's exist. it's all part of the overall security package.

[pseudo blade]

It's not useless, but it's pretty damn close

I'm watching administrators cling to it as a solution

Everyone and their grandma has VPNs for bypassing geoblocks nowadays

[echo roost]

your thinking one-to-one attacks as part of a broad attacks botnets/zombie machines geo-filtering helps keep the workload down a lot.

[pseudo blade]

A good security approach is many-faceted, you don't just assume traffic is good because it comes from America

I don't get asked about ratelimiting, just GeoIP

A good approach contains both and more

[echo roost]

Oh no, you are right America has some of the worst vectors, but if you know you don't need/want a region, get rid.

[pseudo blade]

This may be the worst offender, I think many security appliances are dangerous in the hands of a poorly trained network admin who won't configure and update them, which I'm coming to believe make up a majority

[hollow marlin]

GeoIP is far from a must and arguably has had an overall negative impact for everyone. Most databases are nowhere near accurate and in practice has similar results in reduction of bot activity as simply disabling ICMP replies.

[echo roost]

the mistakes in GEOIp is a real pain in my ass a lot of cases, not for security but mainly because rich people want to watch netflix for their home region, but the value for dropping based on region is not high, but it's not zero. A lot of this is to do with what is the use case of your firewall.

[magic badge]

My mute is over, im free to speak about my new modem

I got a new modem

[echo roost]

yay!

I jus tfound out the lead time for new firewalls is 12weeks!!!

[clear igloo]

only 12 weeks? That's pretty good

[echo roost]

It's better than cisco apparently

some of their gear was quoting 300days.

[vale fable]

hello, i need help

i have 2 servers with diferent apps

proxmox, web page, etc

and i need to be able to use proxmox.domain.com

to go to proxmox

and web.domain.com

to go to web

how i could do it

[sudden kayak]

you should just be able to create two A records in your dns provider's control panel

unless there's some other reason that wouldn't work

but we'll need more detail probably

[clear igloo]

I've seen lead times from 12 days to 300+ days

Juniper is pretty bad too, something like 80 weeks at one point

[echo roost]

ouch.

i don't mind so much as im upgrading early, but it's going to be headache when i explain to finance it might hit next years budget.

[maiden rapids]

My router died and I was kind of glad because I wanted an excuse to upgrade to wifi 6. Costco had a set of 6E mesh routers (deco AXE5300) for 350 dollars.

Setup has been easy (other than the hell that is switching all zillion of your devices over to new wifi).

Did a little testing and I am seeing no difference between ethernet backhaul and 6E backhaul, and I'm getting the same speeds at the satellites as I am at the main even though there are many walls.

Very happy.

[pseudo blade]

You should try living in Australia

Business next door is using a Cisco 887VA

It's as fast as their internet can go

[thick minnow]

yall i need router reccomendations

fairly large-ish house

[maiden rapids]

See my above post if you want to go with wifi 6E.

[thick minnow]

we dont have any cable runs so no mesh

and 6e is a bit overkill lol

802.11ac is probably fine

[maiden rapids]

Ah, well I have VR so I wanted to make sure I can take advantage of upcoming wireless abilities that may be tied to 6E.

[thick minnow]

https://www.newegg.com/asus-rt-ax55/p/N82E16833320470?Description=router&cm_re=router-_-33-320-470-_-Product

i'm probably going to go with something like this

[maiden rapids]

Also, you wouldn't need cable runs for 6E mesh as the backhaul is handled via several 160 MHz channels in the 6 GHz band.

[thick minnow]

thats pretty expensive anyway

[maiden rapids]

Truly. Though if you go with orbi 6E the entry is about 1500. This one is a budget 6E, lol.

[thick minnow]

wtf

[maiden rapids]

I used Asus routers before and they are pretty solid.

And with the one you have selected, if you decide your coverage is not sufficient, you can grab a second asus aimesh capable router and add it to the system.

[thick minnow]

does that support wireless backhaul

looks like it does

yeah I think this ones is probably a pretty good choice

[maiden rapids]

You do want to think about at least getting wifi 6 though.

[thick minnow]

the one i linked has wifi 6

802.11ax

[maiden rapids]

Oh good...nvr mind then.

Yeah, getting a new wifi 5 system right now would be nuts, wouldn't it.

[thick minnow]

yeah they basically dont exist lol

aside from very budget options

[maiden rapids]

I've got one in a closet I can't even give away, lol.

[thick minnow]

yeah i've got an XB7 right now and its kinda trash

we got it for free though so i dont care too much

[maiden rapids]

We have nearly 3000 square feet on a single story with a 1950s style "drywall" that you can't knock holes in. It has a concrete and chickenwire backing. The 6E is the first time we've been able to utilize wireless backhaul without significant signal degradation.

[thick minnow]

nice

3000 sqft single story wtf

thats crazy

[maiden rapids]

I live in a hurricane prone swamp, so basements don't exist here, so at most people have 2 stories. Most homes here are single story.

[thick minnow]

we have 2800 with 3 but the third is pretty small (2.5? floors)

[maiden rapids]

The sprawl of a large single story makes mesh almost mandatory.

[thick minnow]

yeah certainly

[sudden kayak]

mesh means no cable runs - so if you really can't run anything, that's your only good option

also i really don't recommend buying something AC based in 2022

if you already have xfinity stuff the xfi pods are probably the cheapest way to get good mesh set up

[cedar sapphire]

how far are you from New Orleans? hahaa

[maiden rapids]

about an hour north

[vast parrot]

hey guys for uhh no particular reason does anyone here know how to deny all ssl certificates on a chromebook... (asking for a friend) ;)

[pseudo blade]

1. Your question doesn't make sense
2. If I take it to mean removing all TLS/SSL certificate authorities... that will break your ability to use the internet.
3. If I take it to mean you wish to remove a certificate authority for your school's proxy server... That won't stop TLS decryption and inspection, just stop you from using the internet.

[vast parrot]

sorry...kinda new to this whole web and networking thing, what i wanted to do is something that refuses digicert certifications for websites

[pseudo blade]

Why?

[vast parrot]

to help with my contributions to my project at home

so uhhh... can anyone help?

[unborn sluice]

Why

[vast parrot]

oh yea its cos i wanna mess with someone

itll be funny on my side

[lethal tiger]

nah too edgy

[raven relic]

How reliable are wifi extenders? My bedroom was fine on 2.4G, but I may have forgotten the password so I’ve been using only 5G

The 5G only has some reception in my room

Also can wifi be quicker than Ethernet? I have like a 30m Ethernet cord running through my house to my pc

[chrome pollen]

sorry, did you just ask if wifi could be faster than ethernet? 🤣

anyways, personally, i dislike extenders, but i understand that people aren't as fortunate to have the option to run actually ethernet in their residence

so if extenders are the only option, then yes, they are diffidently better than nothing.

however, i do wonder if your house/apartment was small enough, maybe buying an access point (a better one than the one if your router) could be an option

[raven relic]

Well like my phone uses wifi, and my pc used eathernet

So the phone is my problem

My pc Ethernet is speedy

But my phone is abysmal

[raven relic]

I live 1 floor above the router and like 20m to the side, so only a few layers of wood in between

[chrome pollen]

hm, alright. if you have the budget, i would get a unifi ap, plug your ethernet cable from your computer into it, then use the secondary port on it to daisy chain to your pc. this way you still have ethernet to your pc, and also your own ap up where you are

[waxen scroll]

@rocky badge ubnt did a good job hiding firmware downloads

hard to find on the main site

[thick minnow]

hello if someone can help i have a problem with my laptop when i be at a google meeting or anything else like google the internet seemed to disconnect and connect when i troubleshooted a massege showed up and it was somthing like that ' your device dosn't response for direct access'

[chrome pollen]

could you copy the original error message?

[thick minnow]

your device dosn't response for direct access

[chrome pollen]

uhh, the original

like, copy and paste

[thick minnow]

i can't thats a diffrent pc

[rocky badge]

huh

[thick minnow]

but i transulated it from france to english and was like that

[chrome pollen]

take a picutre?

oh

[thick minnow]

ok i will try

[waxen scroll]

theres no firmware link on the main site anymore. I had to google for a URL

[stark flame]

is a rocket lake pentium enough for pfsense?

[thick minnow]

I mean it can... Wi-fi 6e vs 100/100 cable

[thick minnow]

https://getoutline.org/
just heard about this, it it good? can anyone share their experiences?

[chrome pollen]

:/ smart mouth

[devout ember]

if im trying to keep the same ipv6 local address on a phone would i just uncheck stateful

[broken hearth]

If I use smart connect in my TP-link Archer A6, is there a way to connect my PC to 5GHz band only always and use smart connect all other devices like mobile phones which are carried to different places inside my home?

[carmine arch]

Aren’t there seperate 5ghz and 2.4ghz networks or is that just for their access points?

[broken hearth]

Yes, there are separate 2.4 and 5GHz networks, but when smart connect is turned on, the router shows single SSID and the router automatically connects with either 2.4 or 5 Ghz, depending on the strength, range which is good for mobile phones which is carried around inside the home. I do not have any access points, only the router

[waxen scroll]

@rocky badge

[rocky badge]

nice

one boat i was on had meraki

[waxen scroll]

Fancy

[rocky badge]

moynihan @waxen scroll had so many aps lol

2 meraki and one cisco catalyst in that pic

[waxen scroll]

I'm going on a new carnival ship in October. I wonder what they have

[rocky badge]

the meraki was moynihan and cisco was amtrak

[rocky badge]

shitty sat internet lol

i wonder if the aps would be any good

[upbeat belfry]

Hey guys, I’m looking for 2 ethernet cables for my gaming setup but I don’t know how to choose one, I’d prefer a 2 pack but I get that that’s being picky. Could anyone give me a recommendation? And if I’m in the wrong channel lmk

[chrome pollen]

well how long you need it

just buy one

make sure it's not cca

pure copper is 👍

[peak cloak]

can't go wrong with cable matters cat 6

[upbeat belfry]

Not long, around 3 feet

[upbeat belfry]

Maybe closer to 5

[pseudo blade]

If it's compliant, it'll work

At 3 feet, it's hard to screw up as long as you have electrical connections

[rocky badge]

im loving the fs cables i bought

fs cat6 is so good

[pseudo blade]

Tbh they could probably pull a fast one and switch your conductors for salty water at 3ft

[peak cloak]

why exactly?

[rocky badge]

the strain relief boot, cheap, and they come in tons of colors

[peak cloak]

I need to get myself some patch cables for patch panel -> switch

right now it's just random cables I have around and they are too long

[rocky badge]

their slim ones and then the regular ones

[livid aspen]

slim is nice, but I much perfer 3'. Like you can transfer all the patch from one switch, to a new switch, and have enough slack stuff in the new switch, after taking out the old switch.

[livid aspen]

monoprice has cat6a for less. But I haven't had a chance to test their cat6a cables.

[barren flax]

I have already registered with netacad but it shows that there is no account can someone help me

[sly lark]

Ok so

Can a raspberry pi zero or pico host a website?
@ me answer please

[pseudo blade]

Pi zero can, the Pico's answer is far more complicated with a simple answer of "no" and a complicated one containing a yes and many caveats

If you're asking this particular question just work with the simple answer

[unborn sluice]

If you're looking for a cheap way to host, consider the regular sized pi

[pseudo blade]

I'd suggest that also, though with scalping and wholesale lead times of a year on a Pi 4 (resellers here want $240 for an 8GB kit, can't buy just the sbc) I'd suggest AWS Lightsail, DigitalOcean or Linode as alternatives

[drowsy fossil]

Or used cheap pcs

[granite horizon]

+1

Lenovo Tiny or sth goes a looong way

[rocky badge]

@waxen scroll

[waxen scroll]

🤔

[rocky badge]

got the fortigate rack mount

[zealous ledge]

xfinity, windstream, viasat, ultra home internet, those are my options what should i get

[rocky badge]

Xfinity

[zealous ledge]

ok

tha k you

[rocky badge]

Unless windstream is fiber

[zealous ledge]

its not

we dont have fiber avalible

i dont think

[rocky badge]

then xfinity

[sudden kayak]

if windstream is DSL then you're definitely not gonna get anywhere near 1Gbps ?

this looks like a third party site right? they probably have either miscategorized it as DSL, or their speed tier data is very wrong

[rocky badge]

windstream has fiber options

[sudden kayak]

ah so the categorization on that site is probably wrong

if they have fiber where you are that's probably the best option, otherwise xfinity