networking

[hollow marlin]

DHCPv6 requires the RA. That is where you obtain the O,M flags for DHCPv6

[hidden rapids]

unless you set it to not wait for RA..... 😉

[hollow marlin]

Yeah you can configure DHCPv6 to solicit immediately

[hidden rapids]

and this is how i know there is no RA, which is strange to put it mildly.....
why enable dhcpv6 just to cripple it by not enabling RA? 🤔

[hollow marlin]

It's not crippled entirely, just cripples certain devices

If you look at your Pfsense routing table you should see a ::/0 route if you obtained your /64 or /56 via DHCPv6

[hidden rapids]

i dont think ipv6 can route anything without default gateway.....

[hidden rapids]

nope

(maybe the HE tunnel causing it but idk)

[hollow marlin]

Depends on the device vendor. This is why RA's should be enabled but in cases where it's not, some vendors have configuration to add a default route based on the neighbor address

And v6 does not require a default gateway to route, that simply an endpoint concept.

[hidden rapids]

🤦‍♂️

[zealous ledge]

is this network stuff or just electrical stuff @meager ginkgo

or any of this?

[hollow marlin]

And? Or was your context just from the view point or your router?

[peak cloak]

that looks like possibly coax? can't tell from this distance. Weird to put it outside

[peak cloak]

the green box in the top right may be used for network stuff

[meager ginkgo]

What’s that silver stuff

[clear igloo]

coax most likely

[meager ginkgo]

Black is coax I’m pretty sure

[clear igloo]

It looks like that's just part of the bundle of coax

Maybe got painted at some point?

[meager ginkgo]

ah that might be it

Didn’t think of that

[thick minnow]

https://www.amazon.com/NETGEAR-Nighthawk-12-Stream-Router-RAX120/dp/B07P3FGKYD?dchild=1&keywords=Netgear%2BNighthawk%2BAX12&qid=1630720281&sr=8-3&th=1&linkCode=ll1&tag=reviewsorg-20&linkId=58706df585198e86e0e2a910b2400d8c&language=en_US&ref_=as_li_ss_tl

highly suggest this router.. my at&t router that the tech for at&t came and installed/setup when I got at&t 2.5gb/s fiber plan... crapped out on me today. Wouldn't boot up/power up at all. So I had bought that NETGEAR router for myself last February for my birthday - just plugged this baby in and configured/checked the gateway settings.. and SHES A BEAST! 🙂

[peak cloak]

56

I also realized for the first time my v4 address changed

setup v6 on lan and everything is working fine

with HE I had issues

[rocky badge]

😡

[hollow marlin]

Sweet. I checked and nothing yet

[rocky badge]

i want ipv6

[young olive]

Hi! I have 2.5Gbs fiber now and i'm looking to buy a new switch (I can't connect directly to the router...multiple PC, cable running trough my wall...). But it's like... so expensive 250-300$

Am I missing something or 2.5Gb switch are simply expensive?

[peak cloak]

I found a bunch under 200 USD on amazon

[young olive]

Yeah, so I'm not dreaming.
Guess I will buy this one https://www.amazon.ca/dp/B08XWK4HNT

[peak cloak]

ah CA

[young olive]

Yep, sorry canadian dollars!

[thick minnow]

its not cheap. I'm at 2.5gbs a second with Fiber at the moment. Haven't had it that long but its a huge difference.

[young olive]

Yeah, yeah, was just wondering. Like my 1Gbs switch cost me like...50-60$ few years back.

I was like "Am I missing something or 2.5Gbs is just way more $$$"

[sudden kayak]

yeah gigabit has been the fastest thing available for consumer products for so long that they've gotten prices down remarkably low

2.5 Gbps is still pretty new relatively speaking, and still pretty niche compared to the massive install base of gigabit hardware

so its unfortunately just naturally gonna be disproportionately expensive for at least a few more years until it starts to be the new standard cheap home network speed

[pseudo blade]

I'd rather everyone just skip to 10 gigabit

There are increasingly cost-effective solutions for doing so, 2.5 gigabit is a decade too late imo

[waxen scroll]

it wont happen. cant even get 5ghz in IOT devices

offices and even homes are shifting to mostly wireless now

hell my new sony OLED cant even support 1gbit

I bet that TV linus bought is in the same position

[pseudo blade]

4k streaming doesn't need more than a gigabit and quite often not more than 100mbps

[waxen scroll]

yeah but vendors are ditching 100mbps support

[pseudo blade]

Though I do think that not even putting gigabit in is a bit shit

[waxen scroll]

I get that slow CPU cant support 1gbit speed but come on

[pseudo blade]

More often than not it's just included in the SoC

[pseudo blade]

Vendors haven't ditched 10mbps

I doubt they ever will

[waxen scroll]

I have cisco switches that cant do 10/100

[pseudo blade]

With rj45 ethernet interfaces?

[waxen scroll]

yep

[pseudo blade]

What are they?

[waxen scroll]

would have to dig because I dont remember. They're nexus line cards

that reminds me... @clear igloo you people

you came out with high end line cards for n9k that are some how worse than n7k stuff

has like no TCAM

https://www.cisco.com/c/en/us/products/collateral/switches/nexus-7000-series-switches/datasheet-c78-733366.html

I think these are one of the models (with an rj-45 SFP) that cant do 10/100

I cant find the details on speeds though

[pseudo blade]

Yeah, found a few

[waxen scroll]

I'd like to know why.... licensing? it does not make sense

maybe theres a hardware clock thats just too fast for it?

[pseudo blade]

That has SFP

I know there are some constraints around interface speeds for SFP/+ modules

I've definitely encountered gigabit-only SFP cages

I don't know why that is the case

But I remember seeing them

[waxen scroll]

did you know they basically stopped supporting fexes now? only a single n9k model can be a fex and its $$$$$$$$$

I have huge networks on fexes and now have to deal with refreshing away

go from only having 8 CLIs to deal with to 1 CLI per rack

🙈

[pseudo blade]

Never heard of it

Googling suggests stacking on steroids?

[waxen scroll]

yep, exactly

stacking over fiber with no need to console the switch being stacked

all of your management is in a central location

[clear igloo]

what card?

[pseudo blade]

Let me make a wild guess: Cisco has a cloud solution they'd like you to use instead

[waxen scroll]

actually they just started pushing one, yes

[pseudo blade]

Perhaps a subscription-based one?

[clear igloo]

Everything is a subscription these days it seems

[pseudo blade]

Yep, makes sense to me

[clear igloo]

Although funny enough the licensing, even smart stuff, is still honor based 😛

Aside export controlled encryption stuff, that you need codes and whatnot for

[waxen scroll]

I'm not at work today but if I remember its N9K-X9736C-EX

[clear igloo]

EX was weird

It has TCAM but not near what the FX has

[waxen scroll]

we started loading PBRs for migrations and its falling on its face'

[clear igloo]

but you do ACI too so it might be different compared to NXOS TCAM on the EX

[waxen scroll]

its NXOS

[clear igloo]

Hmmm, it's got TCAM as I've got a few but I know it's more slimmed down compared to FX linecards

[waxen scroll]

its our bridge between ACI and rest of network(tm)

[clear igloo]

the bridge to possible? 😄

[waxen scroll]

it was until tcam

we're doing layer 2 right now for our SVIs

moving to ACI l3 way later

[clear igloo]

Did you carve out the right amount of TCAM from ing-racl space?

[waxen scroll]

we were told dont touch it

we're pushing back to see if we can

[clear igloo]

AHA! That's why, it's got a default carving you need to change for pbr

[waxen scroll]

we are waiting for them to tell us what we're robbing from

So.... what are we robbing from?

[clear igloo]

hardware access-list tcam region ing-racl most likely

or vacl space, I forgot what the default is for that stuff

[waxen scroll]

anyway a strong email was sent to them yesterday

[clear igloo]

lol, I touch TCAM all the time, whoever is telling you not to is an idiot

[waxen scroll]

the advanced services team.. or maybe TAC. I dont know. this has been going on for a while and im not the person infront

[clear igloo]

Although racl would be what you want the most of, PBR does use routed ACLs so maybe someone touched it already and that's the issue

[waxen scroll]

pretty confident its all at defaults. all we did was a COPP tweak

[clear igloo]

Yah, let the higher ups and account team or TAC sort it out, lol

[crisp bay]

so I'm gonna buy a new router (specifically TP-Link Archer C6 v3.2), my use case is to install OpenWRT on there to have more usage out of the router itself (idk how safe is it to not brick it). What I'm worried or curious about is the version of the router, I'm gonna get v3.2 while they support v3 (https://openwrt.org/toh/tp-link/archer_c6_v3), is it gonna work? The router has 128MB flash and 16MB RAM so it should be?

[hidden rapids]

just a reaction to your glaring lack of knowledge, no network can route without knowing where the "gatekeeper" is regardless of ip version....

[hollow marlin]

It's odd how my lack of knowledge has managed to advance my career as a network engineer in the service provider industry. So much so that I was lead project engineer for a statewide deployment of IPv6 for thousands of customers.

I guess I should not have put 1000s of hours into understanding BGP/OSPF/EIGRP in depth and should have just used default routes everywhere

[thick minnow]

yall think i'd need mesh for 2,900sqft 3 floors

[clear igloo]

static default routes all the way baby!! 😄

[waxen scroll]

LMAO, honey

Lurick, Juan engineer networks with hundreds of routers and switches.

[thick minnow]

this conversation got me

[waxen scroll]

I've done 300k user networks myself

[thick minnow]

i haven't done a single network 😃

[clear igloo]

We all have to start somewhere 🙂

[thick minnow]

i'm probably going to do a 4 user one soon though

my house

[clear igloo]

The best place to start

[thick minnow]

really just wondering what hardware i should use

[rocky badge]

my current network is a 3 user lol

[waxen scroll]

Yeah just not with ipv6

[thick minnow]

we only got like 10 devices or so but the isp provided shit is horrible

[rocky badge]

i want ipv6 😡

[clear igloo]

lol

[rocky badge]

got 45 dhcp clients rn

[thick minnow]

i have ipv6 💪

[rocky badge]

my isp doesn't give me ipv6 😡

[thick minnow]

less go

[rocky badge]

@clear igloo i still want new switches

but $$$$

[woven fjord]

Any solution to make this dns work, because Google hates when you add a \ to the url

[thick minnow]

no it just hates DoH

in which case there is nothing you can do

[hidden rapids]

Highly doubt that....

[vestal folio]

anyone know why my linksys velop mesh node is limiting my download speed to 200mb when plugged into it via ethernet?
i get faster speeds on wifi for some reason

[woven fjord]

I found alternative, but it says its for the Netherlands but I'll take what I can get

[peak cloak]

He is correct, technically speaking there is no need for default route

At an endpoint yes

[hollow marlin]

That was my point. He said IPv6 cannot route anything without a default gateway. I said that is merely true for endpoint/host.

Out of our 525 core routers/switches, there are only a few devices in which you will find a 0/0 or ::/0

I was trying to explain that with DHCPv6, there is no default gateway field. Its all via the RAs or if your vendor supports it, using the neighbor address on the interface the DHCPv6 reply originated.

[thick minnow]

this guy networks

[waxen scroll]

I warned you

[thick minnow]

?

i never said he didnt

[clear igloo]

You were warned regardless 😄

[hollow marlin]

@clear igloo @waxen scroll We just got approved for the 100G project due to the acquisition due to the increased throughput we are expecting to see once we take over engineering of their network. Time to make use of the 24x100G MX10003 ports finally

[sudden kayak]

this is hilarious sorry. you should at least take like 5 seconds to check who you're talking to before you humiliate yourself

[clear igloo]

Nice, is that 24x100g per card?

[hollow marlin]

Per chassis, 2 cards (MICs) each

MX10k3 are used for our P/PEs. Amazing flexibility in a 3RU form

[clear igloo]

Ah, was about to say that doesn't seem too dense but 3U isn't bad for 24x100g ports

dual supervisors?

[hollow marlin]

Yep or RE's in Junos speak

[clear igloo]

Routing Engines?

[hollow marlin]

Yep

[clear igloo]

Nice, about equal to the ASR9903 then

[hollow marlin]

We have always had the blades but never had the licenses because we made use of the QSFP+ for 10G density and ECMP for geo diversity. If you want it supports up to 144 10G interfaces.

But now since we have the fiber to locations we need, we're going dual 100G between the backbones for the time being

[sudden kayak]

when you say backbones what kind of distance do you operate over?

like metro area or more regional

[hollow marlin]

We operate in the NE US. Majority of our coverage in NY

[clear igloo]

Backbone links go brrr 😄

Lot of speed buffer for now I'm sure but you'll look back in a couple years with 400 or 800g links and laugh

Although for backbone stuff more links is always better than a single fast link

[hollow marlin]

100% this. Makes maintenances and the dreaded backhoes have little impact. 2+ links + LFA + MPLS FRR for the win.

[waxen scroll]

they cheat and use zayo fiber

[hollow marlin]

We actually have use Zayo fiber for our secondary NYIIX peering lol

Of which that transport has gone down twice for 6+ hours in the past 2 months

[waxen scroll]

Yep

We have huge zayo issues

Always attacked by machines

[hollow marlin]

@waxen scroll Scratch that. 4 times in the past 2 months. These are the primary and secondary NYIIX peers. Second light blue line was their optical gear requiring a restart of the chassis. 4th was a broken fiber in their CO, which I believe they even tried to charge us as they had to dispatch their techs to repair it. We don't even have badge access to the entrance of the building, let alone to COLO

[sudden kayak]

yikes...

[errant gyro]

Lan Sharing from windows
And im looking if you guys know a good Android app that can See/Download/Upload files thru Lan/Wifi Network...
Already was searching on Google Play, but im looking for some decent good looking app where i will not have speed limitation when i will not sponsor the app...
Anyone have some app recommendation?

[echo roost]

Ok decided, after 12 years of managing a network i'm tired of the imposter syndrome, i'm going ot start the process to get my CCNA.

[unborn sluice]

It's nice to hope CCNA can solve imposter syndrome

[waxen scroll]

Idk about today's ccna but when I did it I learned really quick that you need ccnp knowledge to actually do network yourself

[unborn sluice]

yup, that's why i said "hope"

[clear igloo]

Yah, today's CCNA is crazy, it's got all the towers involved 😦

[echo roost]

It's a start.

[echo roost]

Yeah, i regret not doing it earlier when it was more focused.

[dusk saddle]

I’m just about to graduate from a college networking program, we went through all of Cisco netacad and did a bunch of other courses like Windows Server admin and Linux server admin, also AWS. That could be an option for you too since those are kind of intertwined.

Takes longer though, 3 years.

Whatever you do, use Anki for your studying, it’s a great free flash card program.

[ripe cargo]

So I'm looking for a cheap wifi extender that can be powered off a USB battery bank, any ideas? Bonus points if it's got its own battery and is water proof. Don't need it to be fast or anything, just need a tablet to stay connected to the wifi to use the security program I need to get into the computer system of a broken excavator that is about 100 yards too far across an open field to connect to

Some dumbass changed the standard security override password without realizing what he was changing. I don't want to have to rip out all the wiring just to reset a password

[thick minnow]

That I know,TP Link and just plug it in outlet

or maybe you can find on amazon some cheap chinese usb powered wifi extender

like this

https://www.amazon.com/TUOSHI-Extender-Repeater-Universal-Amplifier/dp/B07ZYWXB66/ref=sr_1_4?keywords=usb+wifi+extender&qid=1660229584&sr=8-4

but dont know if it works,cant recommend

[rocky hawk]

I have underneath my desk two 10 Gbit ports going directly to my router, but I have multiple devices (two of them 10Gbit, three of them 1 Gbit). I have an 8-port 10 Gbit switch. What would be better - directly hook up my workstation to one of the wall ports, hook up the rest of the stuff to the switch connected to the other 10 Gbit port? Or perhaps hook up both my 10 Gbit devices into 10 Gbit switch and get a second 1 Gbit switch for the 1 Gbit devices? A friend of mine told me it's usually better not to mix 10 Gbit and 1 Gbit in the same switch.

[thick minnow]

NEW VIDEO:https://www.youtube.com/watch?v=wWltASCJO-U

[graceful gyro]

Question about steam caching: is there a way to configure it such that it'll automatically cache game updates when they're available without having to manually download it the first time? (i.e. When my main desktop is turned off)

Some quick googling says no but those results were from a decent bit ago, so I was wondering if it's something that's been implemented since?

[thick minnow]

I want to set up a minecraft server, i have a spare motherboard with an i5 2400, 8gb of ddr3 ram (1333mhz cuz the board limits it to that) that i could use for it, but here is where the trouble begins:
I dont have a wired conection in my room and so i would need to place that near our familly router. My parents turn it off for the night, and i want the server to work 24/7. So my plan is simple, but here is also my biggest concern. I would plug in another routet, and plug the fibre optic cable into it, disable wifi on it, and make it connect to the server and the router than is currently in use that delivers wifi. The only problem is, that the router that would be plugged in after the first one is a fibre optic router too. And so my question is:
Is delivering internet by ethernet cable to a fibre optic router going to work?

• its not about networking, but is a 2400 with 8gb of ram enough for a mid size minecraft server with datapacks?

[carmine moss]

you need to have the router on that has the cable coming in from the isp most of the time that is the isp box and swapping that for your own isn't easy depends on the isp most consumer isp's block it tho

as for those specs depends on what you expect of it it can run a mc server tho minecraft really wants high clockspeed on the cpu and 8gb of ram is enough for at least a lot of connections for sure if it's just friends

[thick minnow]

Instructions unclear, ate toilet paper

But for real

[carmine moss]

so the cable that comes in to the main router needs to be in there you can really swap it out

and if you plug a cable into the router and into your own router it won't work if the main router is on and you will have trouble port forwarding as double nat

[thick minnow]

I can easily swap the cable between the routers, im asking if a router that normally gets the connections from the fibre optic will work if it gets connected by an ethernet cable

[carmine moss]

depends on the router but the way you would want it is the router you have now is the router and you disable the wifi on that and leave it on 24/7 and use a different router on it in acces point mode

and you need access to the main routers config to port forward for the server

[meager ginkgo]

sounds like you should figure out why they unplug the router at night first

you’re over complicating it..

[thick minnow]

They fear hackers that could hack in during the night, magicial radiation or some bullshit
Its all about wanting to ground all pc's for the night and having excuses cuz why not

[meager ginkgo]

💀

If your parents are worried about that I don’t think they’ll like you setting up a server

just my 2 cents

[carmine moss]

you should tell them unpluging it is really bad for the device but yeah if you setup a public minecraft server at home that's how you will be open for hackers

if you just want a server for friends yeah it's okay. also that the router restarts every day will make your ip address change as well it's out for multiple hours and your ip is probably dynamic

[meager ginkgo]

My IP is dynamic through AT&T and it hasn’t changed in 4 years (since we got it)

usually that’s CGNAT that consistently changes

[carmine moss]

it most of the times changes if your modem is gone for minimum 2 hours

tho it depends on the isp some have it at 4 hours or longer

[meager ginkgo]

my internet has been out for 4 days once

[carmine moss]

and depends if you swap the router also

well depends on the isp a lot

i have had my ip chance ones but was as swapping hardware out from the isp but still not good to have it unpower for sure if you run a server

[rocky badge]

@meager ginkgo 💀 I forgot the creds to these airos devices

[meager ginkgo]

💀

[rocky badge]

i don't have the passwords saved anywhere

[meager ginkgo]

damn

that sucks…

[peak cloak]

Same

My IPs never changed except for 2 days ago

When they deployed dual stack

[peak cloak]

No reset?

[rocky badge]

it's remote

[peak cloak]

Oh

Password manager time..

At work every single credential to various clients is in 1password, kinda scary when I first got access to it

[sudden kayak]

sso is the real answer

problem is that a lot of commercial/open core apps set up their pricing so SSO is only available on the max price "enterprise call for a quote" plan

if a vendor is trying to make basic security features a paid addon instead of a fundamental part of the design it says a lot about their (lack of) appropriate attitude towards security

[rocky badge]

https://sso.tax/

[sudden kayak]

unfortunately a lot of our infrastructure is on cloud foundry (🤮) which doesn't seem to have sso support

it's a mess idk who decided to go with it originally but now it's too ingrained in our network

[peak cloak]

Can't really do that on network devices no?

[sudden kayak]

i mean, sure why not? you should be able to! but yeah you generally don't have that option. one decent option is to have bastion hosts with SSO in front of that, or set up SSO for ssh auth in some way

https://smallstep.com/blog/use-ssh-certificates/ you can do this with SSO

that said, I'm not a network engineer - and there are other solutions for network devices that work fine in practice

[peak cloak]

I mean a lot of this stuff is not just network

It's a bunch of various logins for random stuff

I guess we could setup sso for all our WordPress sites

But is it really worth it?

[rocky badge]

Most of the time for me

my only stuff that's SSO is public facing

https://mail.google.com/a/ryois.me
https://sso.ryois.me/aad/aws
for example lol

[peak cloak]

I guess I could bring it up, but why fix it if it's not broken

[rocky badge]

both of those go to MS for SSO

[sudden kayak]

i mean, yes in an ideal world everything is in SSO

it's not (just) about user convenience, it's about a single source of truth

[rocky badge]

I try to use MS for auth wherever possible though

[sudden kayak]

(minus break glass kind of procedures of course)

[rocky badge]

i have ldaps back to azure for vsphere and shit on prem

not exactly "sso" but same idp

[peak cloak]

Yeah, we could look into it. I think we have at least 50 websites

[rocky badge]

Windows Logon requires TOTP & your password (same as azure ad)

WiFi is also using azure ad

[peak cloak]

Azure goes does...

[thick minnow]

I think i just have a static ip lol

ip never changed until we got a new modem

[rocky badge]

then nobody gets WiFi! :P lol

but as long as you don't have to reauth, you should be fine

[thick minnow]

(or router? i have no clue which one matters in this case just the stupid isp combo)

[rocky badge]

but the way i have it setup, it doesn't go down bc azure went down

[sudden kayak]

unfortunately it's pretty unlikely that they actually have given you a static IP for free - usually they want to charge you for that. they probably just have their DHCP set up to automatically give you back the same one on every renewal unless you change MACs

[peak cloak]

A project I suggested to to get a lot of the sites static

To save on server costs

[rocky badge]

lol

[peak cloak]

I experimented with sso locally with authentik

It's nice, but another thing to maintain

[rocky badge]

If the MS login requirement is being shown because of Cloudflare Access, i can access it internally without MS auth

but if the app is redirecting to MS, the only non MS auth is probably a local login (if enabled)

[thick minnow]

Sorry to interrupt but I'm looking for a new router as we are going to be switching ISP's soon and want a good router without paying $200 for what is likely a extremely bad router

Things I'll be doing

Mainly streaming game dev while being connected to a computer via RDP and also streaming on my own personal device as well.

Downloading movies (legally through apps like Disney+ and the like)

Streaming movies and other general things most people use there internet for

It must be able to do gig speeds and would like to but not required run custom firmware (dd-wrt specifically)

[peak cloak]

How much does ms sso cost?

[rocky badge]

$0

By default, a maximum of 50,000 Azure AD resources can be created in a single tenant by users of the Azure Active Directory Free edition. If you have at least one verified domain, the default Azure AD service quota for your organization is extended to 300,000 Azure AD resources.

https://docs.microsoft.com/en-us/azure/active-directory/enterprise-users/directory-service-limits-restrictions

you don't get the fancy Azure AD security features like conditional access and branding without a subscription, but that's included in some M365 subscriptions

but technically my tenant is Azure AD Free

[peak cloak]

Ah

[north atlas]

My server can only be accessed when my laptop is on, does anyone have any idea what might be causing this?

[unborn sluice]

your laptop is secretly your server

[thick minnow]

It will be just for my friendgroup so dont worry

• i may just link a domain cuz why not, if i do that even is someone from outside gets it they will think its hosted on a hosting service

[pseudo blade]

Being told little, we know little. Either: You were running your services on said laptop and whatever you thought your server was happened to be incorrect (So you can fix by getting a real server and running your stuff on that), or you started them on the server using SSH and with your SSH session, which means they'll die when your session does.

[sudden kayak]

wait wtf i could've sworn i looked like 3 months ago and it was $5/usr/month... is this new? or is there somewhere else i have to look to get this free edition?

[vestal sundial]

My guess is this part: "If you have at least one verified domain". The calculator prob wont count it. I need to check my Azure too 🤔

[pseudo blade]

It's been free for a few years, at least since 2019.

Found people online talking about it in 2016

[peak cloak]

you need ms 365 tho

@sudden kayak

[sudden kayak]

wait so ms 365 includes the second tier right? but i thought this was the first tier

Azure Active Directory comes in four editions—Free, Office 365 apps, Premium P1, and Premium P2. The Free edition is included with a subscription of a commercial online service, e.g. Azure, Dynamics 365, Intune, and Power Platform.

that second sentence makes it sound like any paid azure service also gets you a free AAD tenant?

[north atlas]

The server is on 192.168.1.207 with a bunch of services running, the management console is at 215 and my laptop 163.

This didn't happen until yesterday.

[cinder marten]

Hi can someone help me with some internet stuff?

[sudden kayak]

yes this is the channel for that - just describe the problem and someone will probably be able to help

[north atlas]

I've honestly never heard of this happening and I have no idea what might be causing this.

[cinder marten]

I recently got fiber from frontier and the guy gave me a eero 6 .Which is in our living room.He gave me a second eero for my room.But the problem is i get half the speed in that eero and the guy said its cause they are in close proximity and they competing.Now my question is it better to have the one eero in the living room and connect my ethernet to that so that i dont get any packet loss or higher ping?or do i connect it to the eero in my room?

[peak cloak]

oh yeah

not just 365

[meager ginkgo]

You are going to need to keep the eero in the living room. Try moving the eero in your room closer to the main eero.

If that doesn’t work, consider using moca if you have cable tv jacks in your room/living room to hardwire the eero in your room

[cinder marten]

So the eero in my room is gonna have packet loss issues?I dont mind the reduced speed,my main concern is ping and packet loss

[sudden kayak]

theoretically i wonder if that includes like. a single 1k text file in azure blob storage or something 😂

[sudden kayak]

the specific IP addresses aren't really the important thing, but how is everything connected & laid out? wifi, Ethernet, moca? are things plugged directly into your gateway or do you have any switches etc?

also what is the server hardware wise

[north atlas]

Ethernet and switches.

It's a poweredge.

[clear igloo]

Did the gateway on the server change to point to the laptop for some reason?

[north atlas]

The laptop and server plus a other things are connected to one switch, that switch is connected to a second one with other devices connected which is connected to the router/switch/modem.

[pseudo blade]

Do you run Linux on it?

[north atlas]

I didn't change any settings on anything until the problem started.

Yes.

[pseudo blade]

Do you manage it via SSH?

[north atlas]

Yeah, or the iDRAC if needed.

[pseudo blade]

Do you start your applications from your SSH session, or use a service manager like systemd?

[north atlas]

The crazy thing is, you can't access the iDRAC with my laptop sleeping either.

I use systemd, docker and libvirt.

[pseudo blade]

Use a machine other than your laptop or server, ping the server, ping the laptop and then get the MAC address from arp for both.

It must be in the same subnet.

[north atlas]

I'll have to look up how to do that and borrow a computer later.

It would make sense if ARP caches got corrupted.

I did power cycle the switch both of these devices are connected to thinning that might fix it.

I'm planning on turning all of the networking stuff off and then back on later in the day, but I'll check ARP first.

[meager ginkgo]

Ping I’d recommend either running a cable to the main eero or using moca

[cinder marten]

What is a moca?

[north atlas]

IP over coax.

[thick minnow]

or a raspberry pie could be configured to run a simple website with the help of something like Ubuntu server for arm

[pseudo blade]

I'm not sure how a Pi or what you can do with one is relevant to those troubleshooting options, but ok.

[thick minnow]

I was just saying that could be a solution Meagus

to get it off there laptop and onto another device of some sort

[pseudo blade]

They said they have a Dell PowerEdge

[thick minnow]

oh alright never mind then

I apparently can't read lol

[meager ginkgo]

If you have a coax internet port by both the frontier eero in the living room and one by the eero in your room you can rewire the coax and run Ethernet through it with $40/each adapters

You would need to locate where all your coax goes and connect it together. It likely goes outside by your utility meter

It sounds more complicated than it is lmao

[thick minnow]

Hey y'all so I'm looking at WiFi 6 routers meant for streaming and can anyone give me a opinion on a

NETGEAR R6700AX WiFi 6 router (it can do up to 1.8 GBPS at least according to the listing and only costs around $80)

[meager ginkgo]

that 1.8gbps you will never get. Lol. In simpler terms all the “AX1800” AX3600 etc is just marketing

realistically on a good client I’d expect 300-500

mbps

out of a good AX1800 router

[thick minnow]

ya alright well we are going to be going with Century link which is known for getting really close to there proper speeds and I'm honestly just looking for a good streaming router that can do 2 streams at once

[meager ginkgo]

What speed from CL?

[thick minnow]

and I'm talking about twitch streaming

940MBPS

that's what I'll be paying for at least

[meager ginkgo]

Are you streaming or watching streams?

[thick minnow]

streaming to twitch

[meager ginkgo]

Also - if you can’t hook anything up to Ethernet 940mbps is extremely overkill

[thick minnow]

ya but I also plan to do a lot of torrenting (mainly linux distros and other legal things to torrent like out of copyright movies)

or just movies that never had a copyright in the first place

[meager ginkgo]

If you’re using WiFi you’re going to be limited by that unless you get something with 160mhz or 6ghz band

The client and the router have to be both 160mhz capable / 6ghz band capable

Cost adds up quick 😉

hence why I don’t recommend gig for most people

[thick minnow]

ah ya we are a small game studio though so uploading large projects to the cloud without taking 4 hours would be very nice

[meager ginkgo]

I’d highly recommend trying to hardwire the pcs then whatever way you can

Or spend more on a WiFi 6e router and WiFi card for each pc

[thick minnow]

alright uh except for 1 problem it's in the cloud and my computer can't be hardwired (no ethernet jack)

[meager ginkgo]

laptop?

[thick minnow]

yep

[meager ginkgo]

You can get a USB to gigabit Ethernet adapter

it’s around $15-30

I was explaining earlier how to use coax cables for Ethernet if that interests you

[thick minnow]

so without buying a usb type c (mac) to ethernet adapter I'm stuck with WiFi

and I would have no way of plugging in a coax cable into my PC

[meager ginkgo]

They make coax to Ethernet adapters

but if you’re uploading lots of stuff I highly don’t recommend wifi

It costs more money than it’s worth.. even wiring a place with Ethernet would be less

[thick minnow]

oh well once we switch (due to Century Link being fiber not coax)

I'll look into that unless we have to send the router back and everything

[meager ginkgo]

You don’t need to have active coax. It’s actually better if it’s not

[thick minnow]

ah I was talking about using the cable from the old router

[meager ginkgo]

👍

[thick minnow]

unless we have to ship it all back as it's a ISP router

[meager ginkgo]

But yeah - if you’re a game studio (no matter the size) I’d highly recommend some type of wired connection

it will benefit you greatly

[thick minnow]

yep I had a usb type C to ethernet adapter (+ it had stuff like HDMI and a few USB ports on it)

[meager ginkgo]

I have a thunderbolt dock (usb c with more bandwidth) at home and it’s great

[thick minnow]

but don't know where it went when we cleaned and reorganized the place

[meager ginkgo]

One cable and everything connects to my M1 MacBook Air

[thick minnow]

nice I can't afford that space as I don't have a desk atm (place is only 215 Square Feet)

so I'll probably just get a good but cheap (probably from Anker) adapter that can do ethernet and HDMI and a few other things like that

[meager ginkgo]

is it an apartment studio or something similar? MoCA may not work then

all of the cables probably go to somewhere you don’t have access to

[thick minnow]

oh and USB is going to be awesome as I have a USB hard drive inclosure

it's a micro studio

so a bit smaller then a normal sized studio

and yes once I get on SSI I am out of here

or HEN which ever comes first

[meager ginkgo]

Ah. I mean 215sqft is a pretty small space, I’d just run some temporary Ethernet cables

[thick minnow]

ya but I'm probably going to be moving out of here in a year maybe 2 at most (depending on when HEN finally opens back up)

or depending on when I get SSI

as I'm planning on moving to a 2 bedroom apartment (for me and my roommate/co-owner of our small studio)

[meager ginkgo]

I wouldn’t worry about WiFi then.. just get some cheap cat6 cables off of Amazon and run them somehow that doesn’t damage anything

you can use the ISP router if you wish.. range shouldn’t matter much

[thick minnow]

we have 1 that came with the router

[meager ginkgo]

just make sure it’s long enough and at least CAT5e

And you should be fine

[thick minnow]

and we are literally on a shoe string budget (living on food stamps atm)

oh it is

[meager ginkgo]

Totally understand. 🙂

WiFi should be the least of your worries then

[thick minnow]

yep

and our WiFi isn't bad it's about a 100MBPS down (get usually around 113MBPS) and 10MBPS up (usually get around 11 MBPS up)

[meager ginkgo]

Just remember, wired is ALWAYS better than wireless, only in rare/ unusual circumstances is it better

[meager ginkgo]

Not bad.

[thick minnow]

yep I know and after I move I plan to buy a few cheap cat5e cables and run them (probably with some command strips as not to damage the walls) to both of our computers and if I can get a 3 bedroom then I'll just run them into our office space

/guest bedroom

[meager ginkgo]

sounds like a good plan.

[thick minnow]

and then I'll buy a proper docking station that can do everything I need the only thing is I think this computer has thunderbolt 3 as it's from 2018

[meager ginkgo]

if it’s a newer Mac it definitely has TB3

Any Mac with USB C also has thunderbolt iirc

[thick minnow]

wait a minute I can buy us both a docking station

1 normal USB (as my friends laptop doesn't have any thunderbolt ports)

and

1 TB3 docking station

and I just realized so we have a old computer that is acting as our next cloud instance and that can be hooked into ethernet at all times

as to make sure it never goes offline unless the router dies

oh and what speed would you recommend for 2 simultaneous twitch streams as I am a penny pincher lol

[meager ginkgo]

anything even 100mbps should be fine with fiber as long as you wire them

100megabit would be my lowest recommendation. Ping and everything will stay the same no matter the plan. Only thing that changes is your speeds

[thick minnow]

okay

but I thought for streaming upload was more important then download

[meager ginkgo]

It is. But you said it’s fiber right?

Fiber should be symmetric.

[thick minnow]

if your doing twitch or youtube and ya it will be fiber and alright (the lowest plan I can get with Century link is 200MBPS with fiber)

so I'll go with that

[meager ginkgo]

yep sounds good

only time I’d recommend the highest plan is with cable or dsl internet

[thick minnow]

ah alright

thanks for your help Blueion

I do appreciate it

[north atlas]

How do I check the ARP stuff from Windows?

Found it.

Looks fine from this machine. The mac addresses match.

[rocky badge]

No

[rocky badge]

Its always been like this

To use Azure AD, you never needed a subscription

[thick minnow]

turns out we are going to be doing after I get some reviews Ziply Fiber as according to the Century link website the most we can get here is 6MBPS which can barely run a stream now days

just hope our ethernet jack is good enough lol (it should be but this place feels like they cut so many corners it's not funny

[north atlas]

Any working connection will be faster, Ethernet starts at 10.

[sudden kayak]

basically any fiber will be waaay faster than DSL

that would help a lot

[cinder marten]

I'll just get a long ethernet cable and run it to the living room eero from upstairs or might call the guy to come back and move the eero from living room to upstaris

[sudden kayak]

neat, good to know. i was thinking about self hosting keycloak or something but AAD is less headache

[peak cloak]

They say you need to pay for something no?

[rocky badge]

no

Azure AD is free lmao

you just have a modest 50K object service limit without a verified domain

[peak cloak]

I'll try it later

They way it's worded is kinda weird

[untold summit]

Not sure who might be able to help, or if there is anyway to fix my issue. I get 1000 down, 40 up yet downloading a game from Epic Games downloads at most 500kbps and Steam never makes it above 5mbps. I'm connected via ethernet as well so don't know where the bottleneck might be. When I do a speedtest I get 800mbps on average but downloading games is so slow. Fall Guys took about an hour to download and it's not a large file game.

[slow pivot]

If anything was using your upstream bandwidth, that will have a negative impact on your downloads

[untold summit]

That's what confuses me, I did it after restarting my pc so no other application was running, however in the bedroom where my partner has her setup, she gets far faster downloads than I do, she was able to download Witcher 3 in 5 minutes

[ebon wasp]

Please describe the network situation to me?
How are your PC and your SO PC connected to the router.

[slow pivot]

Yeah a network description would help, but you already have two setups you can compare and try to track down what is different about your setup that is impacting your downloads

[rocky badge]

@clear igloo finally labeled my rack

i still need to order longer fs patch cables to match with the other ones i have

the other end for the runs lol

fs bags tho 😩

[clear igloo]

that's a lotta packaging!!

[rocky badge]

@clear igloo

I shutdown any ports not being used lmao

[clear igloo]

Good, best practice 😄

[rocky badge]

I also do that at clients too lol

if they want to enable more ports, that's change request LMAO

[clear igloo]

Nice

[naive badge]

if I have a coaxial in the wall under my desk and I wanna connect directly, do I need a full router and so on or can I get away with just plugging in a modem and wiring my pc to it directly? and on the topic of finding a modem I've been checking thrift stores but I've only really seen routers which do not have the coax in the back, that's not really a question tho, I just thought that was interesting

[waxen scroll]

nah

you need to sell him ISE

[rocky badge]

@clear igloo

holy shit VMware download servers are crazy

[waxen scroll]

wot

its still free?

broadcom does not have their claws dug in yet

[rocky badge]

Yeah

I can download ESXi/vCSA/vSphere stuff with my account

[waxen scroll]

my server stopped being supported by vmware like.... 3 versions ago

i've been using workstation to use VMs on demand instead

[rocky badge]

6.7.0 runs on my R620 while 7.0.3 runs on my DL360pG8

[waxen scroll]

i have an r710

[rocky badge]

The R620 could run 7.0.3 if I had a H710

instead of a H310 Mini Mono

[waxen scroll]

also have H700

[peak cloak]

Do you have an existing modem?

[naive badge]

yes, but in the other end of the apartment, I'm moving in with my great aunt for college and if possible I don't wanna mess with the existing setup

[clear igloo]

give it time
crab only knows he's dead when dropped in hot water
bring water slowly to boil with crab inside and you have good meat

[rocky badge]

pls hurry

[clear igloo]

power outage

[rocky badge]

UPS

[clear igloo]

battery malfunction!!

[rocky badge]

lmao

woo

[clear igloo]

Nice!

[peak cloak]

Then no you can't without buying additional service

What you can do however is use moca

Add a filter to where cable enters, and then use moca to transport the output from the router/modem back into the coax and to your coax port

[naive badge]

so it doesn't matter that there's already internet going to the apartment, I'd have to pay for the particular coax want to use to get service?

I mean I do have access to really long ethernet cords, but I'd kinda like to avoid that option

[meager ginkgo]

Most of the time yes in that scenario

Now if it was your OWN house you could use MoCA, but since it's an apartment unless you have a structured media panel you're SOL

[naive badge]

I mean I find a cheap modem at a thrift store I'll probably still try it, may as well if I can

but like I said, I see far more routers than modems second hand

[peak cloak]

Yes because second modem = basically new line

[naive badge]

probably also cuz of the "return our hardware" part of most contracts for internet

[peak cloak]

Service is per modem basically

I just have own router and modem/ont is isp

Worst is the combo units

[naive badge]

like what my parents have that I need to reboot at least once every month

that doesn't have a reset button for some reason

[peak cloak]

goal is a year

[tired imp]

Friends! Just got my first "real server" and it is pretty old!

Also it looks like it was once property of ubisoft

hmm, I thought the pictures would be nested together

Even if it is old, the network card is gigabit, two working 700w psus, I think I can make it work as firewall/router thing

I am checking the specs, it uses DDR2!! Damn it is old

This probably belongs in the "trash" in the US, but here is Brazil everything is so expensive, it was the best I could get

[peak cloak]

unfortunately, you will probably be paying a lot for power

it's basically junk at this point

from what I read it's around 300w idle at best

[tired imp]

It is still being sold at double what I paid in our "ebay"

But yes, it can draw a lot of power, I think the processor predates turbo boosting, so it is locked to its base clock

But seriously, if I take its PCI express network card, and the couple HDDs that are inside, I have made the money I spent 😅

So I am not too worried

[tired imp]

As I am pretty new, bought this one to learn and fail, can I put another processor there, that isnt the exact same as the other one?

Just checked online, that is a NO 😛

[sudden kayak]

you can think of it as the coax in the wall/outside being all "outside" your house - each modem gets provisioned with one public IP address and that's what you're paying for. everything else is sharing that one public IP with a gateway doing NAT (at least for ipv4). if you want a second modem, you'd have to pay for a whole separate second internet plan & it would be a separate network (barring site to site VPN setups which are a whole different beast)

it's not that you have to pay for each coax jack separately - it's just that the modem is effectively the boundary between the public Internet and your home network

[peak cloak]

^

it gets complicated with moca where you are basically injecting your network on a separate frequency

than dociss, which is the internet "in"

[sudden kayak]

right moca is where you put a filter on the place the ISP's network comes into your house - and then you can use separate moca frequencies as your LAN inside the house

[vast parrot]

hi guys, im not very skilled in the networking area but I need some advice on VPN tunnneling to set-up a coop game session with my friends, does anyone have any basic guides on setting up something like this?

[north atlas]

Update on my networking woes.

I have rebooted every piece of networking equipment with a power cycle and the server still can't be reached when my laptop is sleeping.

What in the world would cause this?

Any ideas @pseudo blade?

[turbid estuary]

90% of that stuff is re-usable in a modern system! You should def do a modern re-work using the same case and as many of the same components as you can.

[north atlas]

Some more information from debugging this.

The machines on the same physical switch can talk to the server when the laptop is sleeping but not the WAN, while the other devices on different switches can not talk to the server but can talk to WAN.

[tired imp]

Any good videos on that friend? That bay thing where I can shove HDs is SO AWESOME, is like having a NAS 😄

[turbid estuary]

Just replace the motherboard and use a modern one. PSU and all the rest should be re-usable, apart from ram, CPU, And MoBo, since your replacing it.

I think it's E-ATX FF.

[tired imp]

I will look into it 😄 Thanks!

[turbid estuary]

Just make sure to measure your motherboard to see the exact size and then get a chart of motherboard sizes to see what FF it is.

[tired imp]

Just checked the insides, the RAID controller is a daughter board instead of a PCI card 😢

[turbid estuary]

Im pretty sure there are PCI to PCI-E adapters.

[tired imp]

it is as fully custom board

custom conector and everything, the conector is on the underside of the daughterboard

I would need to buy a HP Raid PCI controller

tomorrow my power metter is arriving, if this sucks too much energy I will sell its parts, its 700w power supplies are pretty valuable

[turbid estuary]

Sure. You could keep the case and turn it into a custom server though!

[tired imp]

Yes! I will try to use every bit of it

1 - Check the power usage
2 - Check if I can make the fans spin a little quieter by setting the target temp higher

3 - see how this goes 😅

[turbid estuary]

Mhm!

[tired imp]

Every part that I google is mad expensive, this is supposed to be literal trash but people try to milk a buck out of then knowing it is probably some big company looking for spare parts

this is just going to be for experiments, it is 100x cheaper to just put a PC in a 2u/3u/4u box 😛

[north atlas]

Oh

my

god.

My laptop dock DOSes my network when my laptop goes to sleep.

That explains all of the symptoms.

Can managed switches throttle stuff like this and report it?

[turbid estuary]

Yeah but free PC case.

And HDD's/SATA SSD'S.

[turbid estuary]

How did you even find that OUT?!?

[shadow bluff]

lmao your dock can send multiple fake packets attack or sum

how did that dock even dos'ed your network

[turbid estuary]

Mabye drivers

[sly token]

Suggest me some WiFi routers.

[pseudo blade]

What kind of area do you need to cover, and at what speed?

Have a budget?

Any features needed?

[peak cloak]

Probably a packet capture

[peak cloak]

Thing is servers are pretty custom

[pseudo blade]

Interface counters is a very easy way to do it

[north atlas]

I noticed the lights on a switch were going bonkers.

[grave perch]

I am trying to make a mc server and I want to make it secure via the firewall how would I do that?

[rocky badge]

@clear igloo Edgecast CDN is so shitty

[forest stream]

Any recommendations on what to use to setup an access point to increase the wifi coverage across the house? I am looking for something that meshes in with the current network and does not need to be separately connected to

[normal gorge]

BRUH why are domains so confusing

[dusk saddle]

What so confusing about them?

[normal gorge]

seeting them up on a pc and all the connection and all that

[dusk saddle]

You making a virtual lab?

[normal gorge]

no its a pc its windows server r2

2008 r2

[peak cloak]

In windows server it's overcomplicated for a newbie

If you are talking about ad

[dusk saddle]

Did you set up pdc role?

[peak cloak]

Really all you can do it only allow the mc port

[dusty solar]

we pay for 300mbit internet, often get 350-370 and have download speeds that exceed that in steam and stuff

anyone know what is happening here?

[peak cloak]

Just isp rate limiting being generous I guess

[dusty solar]

could be

but you would think our modem/router that we got from isp would hard limit that?

and that has only started recently going above our paid speeds

[peak cloak]

No

From what I understand it's on isp's routers, not at the customer endpoint

And it's usually not just a simple hard limit

[dusty solar]

i see

well lucky me then

[sudden kayak]

it's a combination - your modem gets a bootfile from the CMTS that tells it how to rate limit

but usually it's also happening in other places

also yeah typically we provision like 20% over so that you're sure to get the speed you're paying for, even if there's some packet loss or reduction in speed

[dusty solar]

i see, thanks for the explanation

[stuck oar]

Any advice for a decent .ca registrar?

[jovial vale]

i found an old router in my basement and i was wondering if i could plug it into my ethernet cable upstairs in my room (running from a router we already have plugged into our modem) but it has 2 coax cable spots and i wanna know if i can use it without them plugged in

[sudden kayak]

unfortunately it depends - if it's something from your ISP it may not have the option to set it up in AP mode and turn off NAT or DHCP. if that's the case, plugging it in will mess up your network

if you do have the option to configure it as an AP, it should work fine without the coax plugged in, just ignoring the modem functionality

unfortunately if it's old, it might not be worth using - depending on age it could make things worse

[jovial vale]

im not sure what an ap is, its just other than my gaming pc all my computers are in my room and i wanna be able to run my nas, mc server, and xbox at the same time

[sudden kayak]

ah then you just want a switch

an AP is essentially a "wifi broadcaster"

[jovial vale]

none of my pcs up there have wifi they all use ethernet

[sudden kayak]

if you already have ethernet then yeah you just want a switch they're like $20

example https://www.amazon.com/Ethernet-Splitter-Optimization-Unmanaged-TL-SG108/dp/B00A121WN6

this is a perfectly good one (in fact i have several) but there's nothing special about the brand or model. just get any gigabit ethernet switch (5 or 8 ports depending on how many other things you want to plug in)

from what you said 5 is technically enough but the price difference is so small that its probably better to have a few spare ports

[jovial vale]

alright

thanks

[sudden kayak]

no prob!

[peak cloak]

gandi, porkbun?

[stuck oar]

never heard of em, thanks!
Anything stick out about either?

[stuck oar]

Porkbun does not do .ca :/

[meager ginkgo]

att is upgrading us to XGSPON / multi gig I think | update: just appears to be installing new service 😞

[turbid estuary]

Then again you can just use like

a Super small ff PSU and like

A threadripper CPU and mobo

Or whatever

[sudden kayak]

he's talking about existing rackmount servers

i.e. they are not compatible with standard PSUs and mobos and you can't really use the parts in standard PCs

[grave perch]

Would port forwarding do that

[peak cloak]

What Andrew said, yeah you can use whatever for a server. However hardware like dell poweredges are pretty custom and not standard

Can really put in any old atx motherboard without adapters and such

And some functionally won't work, such as the front little display

[peak cloak]

Yes

But a basic port firewall won't protect against any exploits within Minecraft itself

See log4j

[north atlas]

That wasn't a MC exploit.

Does anyone know of a decent guide for setting up wireguard on my server for Android and Linux clients.?

[peak cloak]

Correction: exploit in mc

[peak cloak]

Doesnt wireguard give a qr code you can just scan on android

That's what I did

[rocky badge]

yes

[north atlas]

Exploit in a library that Minecraft used. It was a really stupid one too. .-.

MC itself is actually fairly resilient to attacks, I've been modding it for years.

Interesting, I didn't know it was so well integrated into Android.

[north atlas]

I don't see anything for WG.

[rocky badge]

Use the app

[peak cloak]

That's not wg

That's IPsec

[north atlas]

WG is a VPN and this is the "add a VPN" dialogue.

[turbid estuary]

Still.

[rocky badge]

WireGuard isn't in the OS

[peak cloak]

Yes, but it's not supported by android natively

[rocky badge]

https://apps.apple.com/us/app/wireguard/id1441195209?ls=1
https://play.google.com/store/apps/details?id=com.wireguard.android

[north atlas]

I wonder if there's kernel support. How do you check that?

[rocky badge]

WireGuard is in the Android Linux kernel but its not accessible to the user

The WireGuard app on Android does not use the kernel module

[north atlas]

Those two things are mutually exclusive.

If it's an enabled kernel module it's accessible.

[rocky badge]

The WG kernel module requires root, which Android does not allow the user to access.

[north atlas]

Mine does.

[rocky badge]

Then why did you ask ¯_(ツ)_/¯

[north atlas]

Because I haven't done WG stuff and I assumed someone might know of a guide, sorry I asked.

[peak cloak]

Use the app, it's the easiest way

[rocky badge]

idk, if you knew there was kernel support it didn't seem logical to ask if there's kernel support.

[turbid valley]

Blob is such a networking nerd

[rocky badge]

@peak cloak @meager ginkgo I'm finally setting up redundant DNS

[meager ginkgo]

finally lmao

[sly token]

Actually recommend me some brands. I'll look into the models according to my needs.
The area to cover is couple of rooms. The speed isn't much to mention. Will upgrade a bit in the future. Budget is under 150$. Mid range or below routers. No features needed but wouldn't mind any.

[old magnet]

Question, we seem to have router issues here at home, we have to regularly reset it, running a r8000, but I'm thinking we just might not have a router capable of handing our traffic. There can EASILY be 6 active wired connections, and 6-10 wireless. We regularly pin 300mbps service. (checking 3 peoples usage (3 wired, 2 wireless) are at nearly a tb/month. Any sugestions/advice?

[snow sable]

You on the latest firmware on it? less than 20 connections isn't all that much honestly.

[sudden kayak]

yeah a higher end consumer combo router should be able to handle that kind of traffic

could be a firmware issue, or something thermal - where is it located?

[old magnet]

Thats what I've always figured, but I have always had issues with routers. I can't update the firmware, as there is a permemant dns issue past the one I'm using that's basically denied by netgear. Only thing I can think of is that this router might just be crap.

[old magnet]

Basement, center of the house, half way up the wall. I ran all my own wire, crossed power at 90, avoided it where I could, disconnected unused runs at the switch. Removed the ISP router/modem from the loop so this one runs right off the oni. We are currently thinking of just replacing yet another router.

[sudden kayak]

yeah that doesn't sound like a hardware problem then? maybe it's just crap, or maybe the firmware is bad

you could try openwrt or something? if it's supported

looks like it's supported but with caveats about broadcom wifi support? https://openwrt.org/toh/netgear/r8000

[rocky badge]

@clear igloo i hate how stuff handles 2 dns servers

[clear igloo]

poorly in most cases 🙂

[rocky badge]

dns1 vs 2

[clear igloo]

Yup

[rocky badge]

most clients don’t even use dns2 unless dns1 doesn’t respond

[peak cloak]

What do the specs say should happen?

Round robin?

[sudden kayak]

i think officially it's supposed to be dns2 is a fallback for clients? iirc

[clear igloo]

Yah, I think it's somewhat down to the OS implementation for a lot of things rather than a spec in this case also

[peak cloak]

Yeah, ik it varies a lot.

[willow hinge]

What should I do to get started making my home network more like a commercial network

[meager ginkgo]

Wire CAT6/6A in your home

[modest mirage]

change your network to a class A network, divide things up in different VLANs, have multiple WiFi SSIDs for various device groups, use something like RADAR for authentication on your network, buy commercial grade networking equipment (not necessarily in this order)

[rocky badge]

classless 😉

[sudden kayak]

buy an actual /8 forget residential ISPs

also you need at least a juniper mx2020 for your home network

[rocky badge]

FoMoCo you don't need that /8, give it to me

or DoD, you don't need that many /8s

Xerox used to have 9.0.0.0/8 but gave it up

[sudden kayak]

who's gonna be the first to pull off a classic heist movie but steal a /8

[rocky badge]

HP used to have 15.0.0.0/8

AT&T, Apple, FoMoCo, Cogent, USPS, Comcast, Prudential have /8s

DoD has 14 /8s

[sudden kayak]

i think we only have one /8 but a couple of /12s

oh yeah you already said that lmao

[waxen scroll]

I have a /16

the higher ups want to sell half of it and dont even have ipv6 working

[clear igloo]

You mean RADIUS?

[modest mirage]

oh yeah, my bad!

[clear igloo]

😛

[modest mirage]

in my defense, I've come across the option and briefly looked at it - pointless for a home network, at least my home network 😂

[normal berry]

Ok, im moving into a place and I will be a bit far from the Modem and wifi, so i thought of using some poweline adapters, BUT. Im just curious does it still work if the internet and the room im in are on separate circuts?

[modest mirage]

yeah, it should, although it's optimal on the same circuit - expect some latency and slower connection

[rocky badge]

@peak cloak Have you moved in yet lol

and are you still taking a router

[peak cloak]

No

In 8 days

[rocky badge]

dang, mine's in 4, Thursday

[peak cloak]

Yes

No ap for now

[rocky badge]

I've decided to not

[peak cloak]

I might as well, aren't using it

[rocky badge]

my friend got lucky

He got a room with an AP in it

[rocky badge]

imagine not having radius

[peak cloak]

Pointless for me too

Just a pita I don't want to maintain

[modest mirage]

idk why I would bother ngl

but also I haven't even bothered separating stuff to separate VLANs, so there is that 😂

[peak cloak]

I do have vlans

Cameras

Wan servers

Main lan
Guest

[rocky badge]

@peak cloak I wonder 👀

dual "WAN" router, tunnel back to home

Combine two student's internet bandwidth allowance into one network

for 200/200 instead of 100/100

I can get at least 300/300 to and from my uni and home

[sudden kayak]

you guys are both moving into college dorms for the first time right? @peak cloak @rocky badge good luck

[rocky badge]

[meager ginkgo]

Just make sure you get a good set. Not the cheapo sets you often see under $80

[sudden kayak]

they're probably fine for like... sub 300 mbps

but yeah definitely get the nicest set you can afford

[meager ginkgo]

The cheap ones I’ve seen are like 100mbps Ethernet ports and only pull around 25mbps on that port lol

[sudden kayak]

they should work on different circuits but you might have to try multiple spots

[meager ginkgo]

I’ve seen power line pull 300+mbps though on nicer adapters

[sudden kayak]

oh really? i guess i haven't seen the really really cheap ones my bad

[meager ginkgo]

yeah I usually don’t recommend powerline if you can avoid it though

[rocky badge]

i had powerline for a while

putting a router in wifi to ethernet bridging mode was faster

then i finally ran cat6 in the house

@meager ginkgo @sudden kayak The dorms have fucky networking lol

it's so interesting

you're on a /26

[meager ginkgo]

lmao

[rocky badge]

Each student is on their own /26

[sudden kayak]

wat

[rocky badge]

you have your own PSK because the APs are doing PPSK

[sudden kayak]

that is so weird lol

[rocky badge]

Apogee calls it Personal Area Network

its basically a VLAN

https://www.apogee.us/

https://www.apogee.us/residential-networks/

They are using Ruckus APs

The university still owns the IP ranges used by Apogee (64.189.140.0/23)

but they have a PTR of Apogee's domain

[peak cloak]

In the older dorms at least each room gets it's own public

[rocky badge]

i fucking wish 😩

[peak cloak]

Firewall still

[rocky badge]

All of Apogee is NAT

and the uni's main wifi network NATs too

But they are blocking multicast and arp and shit between clients

[sudden kayak]

that is such a weird setup. i feel like it would be significantly easier to just operate like a regular residential ISP with each building or floor getting its own LAN with some kind of client isolation

[rocky badge]

@peak cloak this is what I love though

Uni -> Home

[sudden kayak]

that's not bad at all

[rocky badge]

It's not managed by the uni at all

[sudden kayak]

oh yeah i mean like - it would be easier for the uni to just do it themselves

[rocky badge]

Apogee is managing it all so I guess as far as the uni is concerned, they don't care

The uni used to provide resident network

[peak cloak]

The wifi is shared and you can't have your own ap technically

[rocky badge]

but ITS got tired of supporting it

[sudden kayak]

right

[sudden kayak]

i think my school did something similar but i got out of the dorms asap so it was several years ago

[rocky badge]

dorms are cheaper than apartments/etc around the area

[sudden kayak]

actually this sounds familiar enough that it was probably also apogee, or someone doing something very similar

[rocky badge]

Apogee is like the main one yeah

[sudden kayak]

oh weird. i wanted to get out of the dorms asap precisely because they were like double the cost of the apartments in the immediate surrounding area

[rocky badge]

The cost of apartments in the area went up a shit ton

[sudden kayak]

or like the same cost as a much nicer apartment in a nicer part of town

[rocky badge]

uni housing didn't go up at all

[sudden kayak]

yeah i guess they already own all the buildings and just operate the dorms as a service to students

[rocky badge]

MyResNet Start Here captures MAC address and gets SSO iirc

Then you connect to MyResNet-5G/2G

[sudden kayak]

i think some schools (mine included) are actually primarily real estate investment organizations with just a little education on the side

[rocky badge]

😂

[peak cloak]

Housing at mine goes from 3000 to 6000 a semester depending on the hall and room

[rocky badge]

$3k???

[peak cloak]

Yes

[sudden kayak]

that sounds convoluted but I'm sure it's the best solution given the multitudes of non tech savvy students moving in all at once on the same day

[rocky badge]

to $6k????

[rocky badge]

Yeah

[peak cloak]

It's like 5,400

[rocky badge]

They have a hand out explaining how to join net

[peak cloak]

For a private room

[sudden kayak]

oh yeah private rooms are expensive

[rocky badge]

oh double rate

[peak cloak]

Cheap

[rocky badge]

And I got one of the nicer dorms

[sudden kayak]

i ended up paying like $1100/month if you average it out over the time you actually stay there during a regular semester

[peak cloak]

It's like 4000 for a newer double

[peak cloak]

Apartments in the area are like 1000ish a month

[sudden kayak]

that was for 4 people in a suite with our own bathroom but shared two person bedrooms

i got a solo studio apartment in a nicer part of town for $100 less

[peak cloak]

But you need to stay on campus till 21 apparently

[sudden kayak]

ahhhh that's the racket

[rocky badge]

I'm helping with my uni's esports team lol

[rocky badge]

oof, i'm not required to live on campus

but its just easier and cheaper

[rocky badge]

they have a shit ton of network drops in the room lol

[sudden kayak]

that's how they get you lol... but if it's actually cheaper why not

[peak cloak]

Yeah

Also like the required meal plan

[rocky badge]

Look at all of those network drops

[sudden kayak]

my bf's little brother is also starting college in the fall and he has a similar requirement. kinda turns it into a racket even if the actual tuition is a decent deal

[rocky badge]

24 in that pic alone

[sudden kayak]

amazing

[rocky badge]

i wouldn't be surprised if that room takes up a whole 48 port or more

[sudden kayak]

i wonder if they actually knew it would be a network heavy room when they designed the building

[rocky badge]

They did

[sudden kayak]

even if they couldn't anticipate esports in particular

[rocky badge]

It was in the redesign of the center

This entire building was renovated in 2020

[sudden kayak]

ohhh yeah that makes sense then, easy to fix

[rocky badge]

Its packed full of tech

WiFi 6 APs, drops everywhere, TVs with student accessible HDMI/AirPlay, plenty of power, etc

[sudden kayak]

great I'm moving in

[rocky badge]

bruh the wifi is so good too

200-300Mbps when packed

[sudden kayak]

damn

[rocky badge]

the whole place is littered in APs

One room alone has 10 APs

Surely the TX power is turned down though

[willow hinge]

What is the first thing I should do to make my home more like a commercial network

As I want to get into network architecture

And haven't the slightest clue where to start

And my whole home is wired

[pseudo blade]

I'd start with a server. Doesn't have to be much, an old PC or Pi will do. Put a router in so you can isolate/secure it from your home network and give it a dedicated subnet. If you have Windows Pro licenses, set up Samba and AD on your "server".

Preferably set up a hypervisor on the "server"

[radiant needle]

This is too low level for me and I have no experience with androids NFC. I stumbled upon this while searching for this 'NFCC message' being somehow possible over socket connections, since it said something about these messages being layer 4 in the stack. But then I saw this: https://android.googlesource.com/platform/system/nfc/+/android-8.1.0_r18/halimpl/pn54x/hal/phNxpNciHal.c#2294

All I know is it's to do maybe with firmware updates I think over NFC? Then the line number I linked is a function called phNxpNciHal_china_tianjin_rf_setting

[pseudo blade]

What are you trying to do?

[radiant needle]

This code also has methods to set clock, turn display and device on/off and write to ROM. Regardless, NXPLOG_NCIHAL_E("GET_CONFIG_RSP is FAILED for CHINA TIANJIN"); lol

[radiant needle]

If you're talking to me, I'm trying to find a way to proof of concept a CVE that affects android 10,11,12 at the very least. It's an unchecked write and has potential to execute code remotely apparently

[pseudo blade]

You're probably better off in #development (or waiting until you actually find solid evidence of a vulnerability and then responsibly disclose it rather than posting here)

[radiant needle]

But there's no practical known exploit yet. It took me to this file https://android.googlesource.com/platform/system/nfc/+/master/src/nfc/tags/ce_t4t.cc

Which I have no clue about what's happening there, but it's nfc-related and a quick search said its some sort of networked 'objects' being sent

Nah I'm not going to bother asking and dev questions on this. The target was going to be my phone because it's definitely vulnerable. Minimally over network like my laptop opening socket connection to whichever port listens for this stuff. If it at all exists and is open.

If there's something listening on all androids in some nfc service for these nfc messages on tcp/ip, that would be kinda dumb. Means you can basically 'tap' over network without actually tapping

Oh derp. It's AIDs which are hardware embedded sometimes. The protocol is lower than network or on the same level max.

Mentions of sending frames somehow but I don't see anything for MACs. Just AIDS and memcpy

[tiny sonnet]

Hey guys, I'm looking for some help. I currently have 1100Mbps (down) on my internet, but I am still using the modem/router from my provider, they don't provide any customisation to the router really at all. So I want to get a new one that can allow me to change setting easier, prioritize certain devices manually, add a vpn, and such. Do you have any suggestions my budget is around £4-500 ($483-604) I only use Ethernet mostly.

[severe zealot]

Internet works completely fine until i open a game with a medium amount of internet requirements. I have 500~ megabytes of download speed and its only MY pc that disconnects while a game is open.
This is not game-specific. if it was, this problem would've been solved long ago.
Video is an example of scrap mechanic and chrome.
this issue has plagued me for so long and my friend told me to get help here
i feel like i've tried everything in my knowledge to fix this but literally nothing changes.
I know its router-specific, because this issue doest happen at my dad's house.
(and yes i have tried the blatantly obvious router restart numerous times)
If you want some more evidence just ask

[peak cloak]

best troubleshooting would be a packet capture

to see what is actually happening

[trail garden]

Do you guys know of a small tool (for windows) to change adapter mac address and actually restart the adapter ?
I found a batch script called ChMac but it seems to fail when it tries to restart the adapter

[waxen scroll]

did you run it as admin?

[trail garden]

I did

it makes use of devcon and it doesn't seem to be doin much

[severe zealot]

how would i do that?

[peak cloak]

what you can is install this program called wireshark and record when you try to access a website

save it and you can dm it to me

[severe zealot]

kk

[unborn sluice]

kk

[waxen scroll]

jaja

[severe zealot]

[tropic knot]

Hey network enthusiasts! My company, a small NYC-based video post production facility, is looking for a sysadmin/network engineer/all-around computer person and I was wondering if anyone might have some advice on where a good place to post a job opportunity like this would be. Our needs are a little unconventional due to our size and due to our video post production focus - we've tried the mainstream channels like LinkedIn and Indeed with mixed results. We are really hoping to find someone enthusiastic about tech and would be excited about what we are doing.

[waxen scroll]

im in F500 networking and we have the same issues. It takes a very long time to find/hire in this market. You might have faster results using 3rd party recruiters. Probably going to be expensive though. At least if the person is bad its easier to end that relationship and you can take bigger risks on people who are on the fence skill wise

[tropic knot]

Appreciate that insight! Thank you!

[waxen scroll]

I also exclusively find jobs using linkedin. I'm not sure about others. Either I found it and applied or a recruiter reached out cold

Last time I tried other sites I got calls about selling insurance

[tropic knot]

That’s also super helpful, really really appreciate it.

[tropic knot]

Oooooof

[echo roost]

Any quick firewall alternatives. Was looking at picking up a couple of netgate hardware platforms but out of stock in all but the small sizes.

[peak cloak]

Fortigate?

[echo roost]

was trying to avoid expensive licensing as i have no doubt i will forget to renew in a few years. but it does seem the next most likely.

[modest mirage]

could use pfsense though, but it sounds like you're more after the hardware than the software?

[echo roost]

Yeah i really wanted to try pfsense hardwre platform

I haeva pfsense forewa;; running in the network already for local stuff but was after a hardware platform if i could

[modest mirage]

you can also repurpose an old PC, assuming you have network cards in it supporting it

ahh, I see

is it gonna be any significant difference compared to an ok computer with a good network card?

[echo roost]

Only in the amount of effort required for the setup.

[rocky badge]

ngl I would never deploy pfSense in a business

[peak cloak]

Never really liked pfsense

[echo roost]

I'd buy the netgate boxes for the lab. I like pfsense on random hardware for quick projects that i can rip back down again. Never used them outside of an engineering environment.

[rocky badge]

fair yeah

lab its probably fine but prod i'd never

[echo roost]

Looks like im going down the fortigate route though as netgate don't have much stock. I've never used them before.

[rocky badge]

:P I am using a fortigate at home

[echo roost]

you like? Most of my experaince is either with big cooperate stuff of opensource.. never much in the middle.

[rocky badge]

Yeah

[echo roost]

cool, will grab one to learn on and one to install. 60F model

[modest mirage]

how much do you really benefit with a enterprise grade firewall solution at home?

let's say in comparison to a Dream Machine Pro's built in stuff

[rocky badge]

i had a udmp

replaced it with a fortigate 40f

the fortigate has better firewall capabilities, vpn, and traffic inspection

not to mention reliability

[modest mirage]

my UDMP has been pretty solid, but I guess we're still talking in comparison to

[pseudo blade]

I'd say that depends on what you want it to do lol

[rocky badge]

mine would constantly drop packets

[modest mirage]

ah, haven't really checked packet loss, but haven't really noticed anything off either

I was planning to do some more with my home network, like separate VLANs for starters

[rocky badge]

Default deny > default allow firewall

(the udmp is default allow between lans which is annoying)

[modest mirage]

I think the UI is annoying overall with configuring VLANs in the first place

[rocky badge]

fortigate firewall config UI is way nicer

[modest mirage]

dang, my past month traffic

[rocky badge]

UDMP/UniFi

[modest mirage]

this looks so much nicer to work with from this screenshot, but it's probably a user "error" on my part, or lack of effort 😛

[hardy python]

Aye, don't let me catch you slippin your public IP out. I may break your router lol.

[rocky badge]

none of those include the public IP?

[hardy python]

I know

[hardy python]

They're LAN IPs

[rocky badge]

Fortigate just has more config options too

[echo roost]

I have never found a vlan GUI that works the same way my mind works vlans.

[modest mirage]

full send! my IP is 127.0.0.1

[pseudo blade]

My IP is 127.0.0.1-

[hardy python]

Loopback IP

[pseudo blade]

lol

[hardy python]

lol

[echo roost]

pfff.. my ip starts with 192 which is higher so it must be better

[rocky badge]

💕 fortigate

[hardy python]

192 is a C class IP

a Private IP

[pseudo blade]

I can give you the IP of my CGNAT

[modest mirage]

I remember trying to setup Fortigate VPN on macOS for my job, and man was that a nightmare 😂 I ended up giving up lmao - though that's more an issue of outdated Fortigate software I believe

[rocky badge]

SSL VPN is so nice

[echo roost]

Not all 192 addresses are private.

[modest mirage]

yeah, that thing didn't work on my Mac

think I got it working on Linux though

[rocky badge]

Web access SSL VPN is so nice too

[echo roost]

Mac's latest native vpn stuff seems to have even worse support than it used to have

[rocky badge]

Access internal shit from web browser without VPN Client

[modest mirage]

yeah, it does look pretty nice

[echo roost]

I look forwrd to trying it out

[modest mirage]

can you use Fortigate stuff without a subscription?

[rocky badge]

i don't have any

[modest mirage]

oh, nice

[rocky badge]

I also have a S2S IPSec to my friend's Fortigate

[modest mirage]

how many kidneys do I have to give up for a 10G Fortigate router/fw?

[rocky badge]

$2.5k