#networking

1 messages · Page 7 of 1

humble cloak
#

Im gonna be using it for gigabit lmao

#

But also, fibre cables will probably fit through existing tubing, while copper does not

sudden kayak
#

yes in west & central divisions 😬

thick minnow
#

WTF how so much dang I want it

peak cloak
wooden condor
#

so uhhhh sigh... Is the preferred 2+gb/s home FW/router gonna be pfsense on some box? - I can't seem to find any other reasonable way to do it, my asus ax11000 has a 2.5Gb/s interface it lets you use for WAN but it is basically maxed out in the 900ish range.

glacial linden
#

Got the VPS set up, have the 4c24g ARM instance running, setup as pihole+unbound, openvpn community server, tailscale DERP relay server and zerotier MOON relay server all on the same instance ^^ OCI is awesome. Still under 300MB RAM usage and barely any CPU usage, linux is amazing. I can do a lot more with this stuff too.

Openvpn comm. server (not the access server) wasn't easy to setup the way I wanted it to work, but I managed to make the server and client configs such that I can either use it as just a tunnel to my VPS (w. pihole DNS) and as a route to other friends connected to it, or route all internet traffic through it as well, however I want (2 diff. configs on client side).

Also, ZT Relay server is well optimized, friends now get around 40ms ping to my self hosted minecraft server, no matter what's going on. Next plan is to move the mc server itself onto the cloud and limit it's access through openvpn tunnel only.

So - thank you for this suggestion ... 😄 Helped me out a lot!

#

Just wish it'd be possible to get a windows VM running on it too

wooden condor
#

@sudden kayak @sudden kayak I can neither confirm nor deny an apple pilot taking place that may or may not be using a Korean made smartphone instead of their own....

#

Specifically for 6e

plush stone
#

at the same time... apple already has AX support on the 16" macbooks

#

(I'm communicating through such right now)

#

perhaps they just found it unnecessary for their phones

sudden kayak
#

everything recent has AX (regular wifi 6), but specifically 6E is what the new iphones don't have

#

but yeah my s21 doesn't have 6E, but iirc the ultra does (that is apparently the only thing we could find internally for testing/demoing our 6E hardware)

pulsar thorn
#

Cries in 100Mbps 😔

wooden condor
#

with more people watching today I'll repost, Really want somethign that has the flexibility to possibly be 5gb/s capable as well

so uhhhh sigh... Is the preferred 2+gb/s home FW/router gonna be pfsense on some box? - I can't seem to find any other reasonable way to do it, my asus ax11000 has a 2.5Gb/s interface it lets you use for WAN but it is basically maxed out in the 900ish range.

peak cloak
#

pfsense is less than optimal

rocky badge
#

fortigate 😉

#

@clear igloo @hollow marlin IT still hasn't fixed this issue

#

and its a week

wooden condor
#

I mean I work for Cisco, cheapest I can get anything that has enough power is even more than that lol, at my employee pricing!

#

I have an ASR900 somethign in my garage I could throw at it, but lack of anything other than simple NAT and ACL's will kinda suck

#

kinda mad that asus advertised this 11000AX as 2.5g WAN, and while it DOES let you use it, it falls on it's face after about 1.2 ish

rocky badge
#

lol

wooden condor
#

firewalla?... sigh... I'm just grasping at straws right now

#

I could really burn the house down and just use the built in AT&T "firewall" functions.

clear igloo
clear igloo
wooden condor
clear igloo
wooden condor
#

the licenses are still available, not hardware unfortuantely

clear igloo
#

Yah

wooden condor
#

I mean I have an ASA 5512X sitting in the garage too but seriously this is just my 4 bedroom house here I don't run a lab at the house anymore, this is more like greed at this point ;P

rocky badge
#

@clear igloo I love non VOIP phone call quality

clear igloo
#

It was fun but after a while just meh, keep it simple at home

wooden condor
#

the reality is I need an edge device that will support at least a 2.5G WAN interface and at least a 4g port channel to my switch since I don't have a 10G meraki switch.

clear igloo
rocky badge
#

bad

wooden condor
#

the netgate 6100 will do it, I'd have to find some 10GT sfp's and that may be what I end up doing. I haev a beast of a linux server, tempted to run PFSENSE in a VM, if i were smart I would rebuilt it to an ESX server, but it was supposed to just be my NAS/PLEX box

#

or.... hear me out, I downgrade to 1gb/s symetrical and save 40$/mo

clear igloo
#

So netgate 6100 it is 😄

wooden condor
#

haha likely

#

I have. ghetto amazon knockoff showing up today

rocky badge
#

@clear igloo i just now realized they labeled near the AP

wooden condor
#

I'm skeptical - but it has 4x2.5 so we'll find out

clear igloo
#

Ah, I saw a few of those, a buddy of mine got one recently says it's pretty good

wooden condor
#

will PF sense let me link ag?

rocky badge
#

yes

wooden condor
#

might be okay then...

clear igloo
#

Yah

rocky badge
#

Its intentional i think

wooden condor
#

now I guess I go jack a 93108 out of the lab and throw that in the attic, 10G for everyone!

clear igloo
#

Nice! 😄

#

FX3 I hope

wooden condor
#

93108FX3P is now POE too, can power my meraki AP's lol

#

not sure who the ehll they built that box for, it sure isn't my customers.

clear igloo
#

Yup, 60 or 90 watts, I forget which off hand

wooden condor
#

the meraki 36's only need like 16.

clear igloo
#

I know who :>

wooden condor
#

oh I know who, but it's useless other than one use case, the rest of my web customers tell me to pound sand because the power requirement is MASSIVE on that box, and that's what all the racks have to be scoped for

#

I keep trying to figure out if they will ever get a non P version, I keep hearing "on it's way"

clear igloo
#

Haha, yah, 1900w PSUs I think are the max

wooden condor
#

the cost of getting to 10g meraki, even intenral pricing just is too much.. I do miss being able to ruin my kids days by monitoring them though!

clear igloo
#

Haha, yah, the hardware isn't too bad but the licensing for the switches and firewalls is just x.x

wooden condor
#

I mean even the hardware to get 24x10g ports in a meraki switch, at epp is still probably 3500$ - but MX and MS licenses kill it

#

and the lifetime max is gonna be a problem if I tried to upgrade to mgig/10gig everything

clear igloo
#

yah, especially with mgig all the things

rocky badge
#

@clear igloo <_< this network has so much broadcast

clear igloo
wooden condor
#

oh god please tell me this pfsense setup eventually let's me land in a GUI somewhere... I can't bring myself to go back to writing ipchains

clear igloo
#

Yes

wooden condor
#

it won't let me advance because I don't actually have a WAN interface to give it on my virtualbox...

clear igloo
#

Initial setup is a bit of a pain but once you setup one inside interface you're good

#

Ah, I was thinking you were installing on a physical box for a moment, yah you need two to move past that part

wooden condor
#

I'm assuming it wants to see or receive dhcp maybe? it just keeps me in a loop. I have a physical box showing up, but amazon is like 10pm at my place

clear igloo
#

Even just a dummy interface going nowhere that you set to "wan" with DHCP should work though

wooden condor
#

was just throwing it in a virtual box to mess with it

clear igloo
#

I know I setup my appliance without a physical WAN connected at first so it's possible

wooden condor
#

it only had a single nic in the profile, trying again

#

added a second private only

rocky badge
#

pfSense wants at least 2 NICs or 2 VLAN interfaces on a single NIC for setup

#

So it can set WAN and LAN1

#

@clear igloo @waxen scroll 😳

#

There's a SuperMicro box for Crestron NVX director lol

wooden condor
#

hmmmm, I have this bad ass hades canyon intel NUC just sitting here, can I get 10g interfaces on it somehow, has a bunch of USBC ports.

#

literally on my desk in front of me, been unplugged for 3 months

#

geez, 199$ per interface, cheaper to buy the miniPC lol

#

what do we like for cheap 5 or 10g ports? I really only need a few, and something that is managed and will let me 802.3ad to my house fabric

wooden condor
#

alright well I cheaped out, did an 8port 2.5g qnap which is really all I can run anyway, has 2x10g - will let me agg 4 ports to my meraki fabric with spares.

clear igloo
#

Nice!

waxen scroll
#

@rocky badge computers take over the world.

https://www.youtube.com/watch?v=ec-UctiSM5s

Discover 'Armin van Buuren - Computers Take Over The World' on your favorite streaming platform ▶ https://AvB.lnk.to/CTOTWYA
👾 I'm on Discord! Join my server ➡️ https://discord.gg/arminvanbuuren
Subscribe to Armin van Buuren's YouTube channel via http://bit.ly/SubscribeArmin

Premiered at EDC Las Vegas and a definitive highlight in his sets sinc...

▶ Play video
rocky badge
#

@waxen scroll @clear igloo

clear igloo
#

reboot all the stuff

shell saffron
#

Does anybody know how to bridge the LAN port on a Mikrotik device running RouterOS 7 to the wireless? Using a Groove52 ac and trying to use it was a wireless AP and router to run a mixer but in the default Home AP and WISP modes that seem like they would be the best options I am unsure how to bridge the single LAN port so I can communicate to the wired device I need to acce3ss

#

The only modes that offer to bridge the LAN are supposed to be used to bridge networks wirelessly (aka the antenna is set for P2P mode, not broadcasting SSID

ember basin
#

had this issue over multiple devices and os's, failure to ssh when on battery, or just on wifi, depending. whenever i go around the router or via ethernet it's fine, but strangely enough phone hotspot via the same wifi also works? is this a driver issue or a router issue?

tidal frost
#

Learned about SANs today. Saw something in a picture about them then hit google. Trying to actually visualize the difference from a nas. Like i get it, but only mostly. Would something like Whonnok (or however you spell it) be considered a SAN? Or is it just a term noone really uses anymore

slow pivot
#

SAN is usually more block storage over network providing storage to servers etc whereas NAS is providing network shares/storage to end users.

#

Admittedly the difference seems to be more blurred these days

tidal frost
#

The backblaze article i was reading just made it seem like a nas but with so many features you needed another machine to handle metadata

slow pivot
#

Right, block devices are basically drives :)

tidal frost
#

Like it says you mount them as local storage too, but im pretty sure i did that with my Unraid server already in windows. I may have technically added "shortcuts to different directories on the nas" or whatever but it functions the same

slow pivot
#

So think iSCSI for example, is something a SAN would deliver and the backend might be dozens of servers and hundreds of drives for a single disk mount

tidal frost
rocky badge
#

@peak cloak @hollow marlin My university literally just disabled the firewall for the student center building.

#

Because we are having issues with latency sensitive applications (gaming).

#

(The firewall is causing the issue and not having it on is "fixed for now")

slow pivot
tidal frost
#

I guess why i dont hear it much/at all anymore. No reason to confuse users with something like that. Just call it "the server" if its beyond nas capabilities and be done with it

unborn sluice
#

San

tidal frost
#

Or im just not in the space that uses it. Either way.

slow pivot
#

Eh, it's all good

dry bronze
rocky badge
#

I finally have a second hop of 10.0.2.37 though

dry bronze
#

Unless maybe it's a proxy that isn't inline

rocky badge
#

Which I never had before

dry bronze
#

Ah

rocky badge
#

I wonder what it is Thonk

lone sun
#

🤔 When does pinging the loopback address become relevant for trouble shooting? This one dude claimed it can be pinged to see if the NIC adapter itself is working, but I'm not sure how true that is.

waxen scroll
#

all it tells you is all links to the router are probably dead

#

it will not tell you a single link is dead

#

proper way is to ping loopback to check if the router is unreachable and SNMP or syslog to determine if there are single link issues

lone sun
waxen scroll
#

if its a router at a remote site and its the only one, ask local contact to verify power, possibly reboot, and then call ISP

#

if its at a site thats still online, check the devices its attached to for port status. if up, is there a mac address learned? is there arp learned?

#

is the config wrong, does it need to be on another vlan

#

if you dont have a loopback that means you need to use multiple interface IPs to manage the device and thats a pain in the ass

#

if one goes down that IP wont work, so you need to use the next IP

#

with a loopback theres no problem like that

lone sun
#

🤔 I mean, I'm not sure I even follow. 😅 Like, what if the loopback address is unreachable for your own personal computer or laptop? @waxen scroll

waxen scroll
#

They're not used on hosts. Only network equipment

lone sun
#

And that's why some claim the loopback should be pinged first when troubleshooting connectivity issues? 🤷‍♂️

#

😂Damn, its a lot of bad info out there about the loopback. Kind of feel sorry for it.

#

Very confusing.🙃

rocky badge
#

@waxen scroll @peak cloak
1GB of RDP and 477MB of MC

bright forge
#

Got a question, my ISP provides a 400mbps connection (typically actually 450mbps), and I have had no issues for the past several months. Recently I noticed though, the connection specifically over ethernet has been on average 80-90mbps or less. This has me confused because I haven't found any issues with out cables, including damage or crimping. I haven't had any issues with packet loss either which I assume would be the case if a damaged cable was causing signal degradation. Does anyone have any ideas? Is it possible the ISP is throttling devices connected over ethernet? I haven't tried plugging other devices I don't normally use in yet.

waxen scroll
#

Milim is so good ❤️

bright forge
#

lol

waxen scroll
#

next season gonna be lit

bright forge
#

indeed

#

My issue is resolved, after checking each possibility I have found out that its the port on my router
for whatever reason port 1 is now at a reduced speed while any other port is fine

waxen scroll
#

you used the same cable?

rocky badge
pseudo blade
#

I'd be inclined to blame the cable anyways

#

You can check the pins on port 1 I guess, if one of the pairs is bent or dirty that might do it though idk how that could be the case if it failed suddenly while connected and in use

copper laurel
#

Maybe the port is set itself to half duplex but it's more likely to just be the cable I'd imagine

peak cloak
#

GTA as in the game?

#

but for ISPs it all depends on availability in your area

#

yeah idk, it's heavily area dependent

#

ik for the US the FCC kinda has a list of available ISPs at an address although it's not accurate all the time

#

it's like that most of the time, just don't expect the promotional price all the time

unreal mango
peak cloak
#

from my uneducated POV sounds like they just don't know what they are doing?

#

but then again it's zayo

waxen scroll
#

yep. both sounds like they dont know what they're doing and zayo is like D tier provider

#

"about 40% of traffic goes directly through HE." HE is also bottom tier from what I've heard

#

@clear igloo the comments section LOL

rocky badge
#

@waxen scroll I wish NDI was more reliable

peak cloak
#

What are like the top ones?

latent sonnet
#

how can i set up a ddos protection?

peak cloak
#

Raw TCP, HTTP(S)?

latent sonnet
latent sonnet
peak cloak
#

You can get free http ddos protection through cloudflare

#

TCP for game? What game?

latent sonnet
peak cloak
#

You can have a look at tcpshield

latent sonnet
waxen scroll
peak cloak
#

I'm not made of money....

wooden condor
#

Just.gonna go on record and say F sonos and their BS implementation using spanning tree.... Are they serious with that crap?.

waxen scroll
clear igloo
mild turtle
#

Hi everyone. In need of some advice. I do astrophotography and I use a mini computer that uses raspberry pi 4 and some software. It function on my phone using a WiFi connection but the problem is that I have to within ten foot for it to work. I'm at the point where I have everything set up and working at a permanent position. I wanted to run an Ethernet cable outside but considered an idea and then realised that if lightning struck near by that would cause issues. I'm under the impression that I would need to use armoured. I was going to bury it but I'm thinking because of the bends it would just be easier to run it through some PVC. Advise, please and thank you.

normal abyss
#

whenever i goto browse the internet my browser is low as shit doesnt matter which one. Internet speed is perfectly fine. I dont get it.

icy barn
#

Looking to replace my rogers router with something nicer to get full speed on my 1gbps connection. Currently max speed on wifi is around 250ish mbps but wired is 1g

#

Does this look good for 129CAD?

sudden kayak
# mild turtle Hi everyone. In need of some advice. I do astrophotography and I use a mini comp...

i've never dealt with that kind of scenario, but my understanding is that armored cable is more about physical damage and probably wouldn't do much for ESD protection... this kind of thing is a much better bet (and waaay cheaper to boot) https://store.ui.com/collections/operator-accessories/products/ethernet-surge-protector

waxen saddle
#

So apparently, running hyper-V disables multicast. Anyone know of a solution other than to remove Hyper-V?

open radish
#

can anyone recommend any good wifi cards preferably around £50 or under? i’m clueless 🙃

sudden kayak
#

i just grabbed the tp link one https://www.amazon.com/TP-Link-Bluetooth-Ultra-Low-Archer-TX3000E/dp/B07ZV2CJL2 and it seems to be fine. no particular glowing endorsement or detailed review but it's a solid option

#

it's an intel chipset so it should be pretty reliable and driver support should be great

#

sorry you can tell how little i actually care as long as it does the job. but it seems totally fine

#

the part about intel chipsets is true for both so they should be very solid

#

afaik the only difference is external antenna on a separate little stand vs just sticking directly out of your pc

pseudo blade
# mild turtle Hi everyone. In need of some advice. I do astrophotography and I use a mini comp...

The best solution to this if lightning is a serious concern in your area is probably to use fiber media converters and run multimode fiber if the cost-benefit makes sense for your use case. Second best is an optoisolator which is basically that scaled down, you'd want one at both ends. Do keep in mind your power cables if you're running power out to the Pi as well. Probably overkill and none of this helps if your pi eats a direct lightning strike though in the case of fiber optic it won't be its fault

knotty gulch
#

a cheap amall 1Gbit switch

pseudo blade
#

How many ports?

#

Does it need to be managed?

knotty gulch
#

no

knotty gulch
pseudo blade
#

Frankly those are commodity parts, just buy whatever's cheapest on Amazon/whatever if price is your only concern

#

Just... don't assume it has STP

knotty gulch
clear igloo
#

spanning tree

pseudo blade
#

Spanning Tree Protocol

knotty gulch
#

oh ok

pseudo blade
#

AKA don't flood my network with an stream of broadcast packets if you plug the thing into itself/otherwise make a loop

knotty gulch
#

ok

open radish
knotty gulch
#

Lol

fallen helm
#

I have a mesh network (Google) If I connect my PC or PS5 direct to the AP its blazing fast like 350mbps, but when I use this D-Link switch I bought it drops to under 100mbps the switch is advertised as Gigabit but doesnt look like it is , using cat 7 cables from AP to switch and from switch to both devices, can anyone recommend a good switch that will give me the same speeds as if I was connected to the AP?

limber river
wooden condor
wooden condor
peak cloak
#

ik my roku only has a 10/100 interface

wooden condor
#

well I Notice the xbox's all drop to 100 meg when they "sleep" too - but from a manufacturing perspective, 100mb/s phy costs more than a 1gig phy, I'm literally on a call right now about this same issue lol

peak cloak
#

only 10/100, must be cheaper

limber river
#

@peak cloak yeah, I've noticed my smart tvs and some other equipment only have 10/100 ports still. This isn't generally an issue as streaming audio or video on a single device only needs 100Mbps max. 4k@60fps maxes out at 51mbps.

peak cloak
#

yeah, it's never been an issue for me either

limber river
#

@wooden condor i can see where an Xbox dropping to 100 might be a problem.

wooden condor
# limber river <@222482269829332992> yeah, I've noticed my smart tvs and some other equipment o...

10/100 phy chips believe it are not cheaper - their use is so limited they get spun at significantly lower quantities, today I can buy 10k 1gig phy chips for less than I can buy 2k 10/100 phys. It baffles us at people still spin 10/100 devices. There are significant features that don't work properly at 10/100 - for example, modern cisco MGIG switches have a significant feature drop off if an interface drops to 10/100 - AVB being a big example.

peak cloak
#

I mean they must be if manufacturers use them, surplus or something

wooden condor
limber river
# wooden condor 10/100 phy chips believe it are not cheaper - their use is so limited they get s...

I know nothing of the pricing, but I work in the industrial sector and 10/100 is still the defacto standard for most industrial communication bus protocols (Ethernet/IP, EtherCAT, Etc). Almost all the hardware we buy, thousands of drives a year, all have 100Mbps speed. I would imagine companies still putting 10/100 chips into their products at consumer level signed very long licensing deals for acquiring the hardware.

wooden condor
#

but if i were to buy them TODAY, and look at something like a Marvel PHY, they are more than 2x the cost - now the one thing that probably is also holding them back is just simply respinning hardware design to support a new phy.

#

we see it a lot in industrial controls from rockwell for example - or even in the entertainment industry where because there is no need for more than a 15mb/s stream to an IP speaker, there is no reason to respin it and support a new phy

#

but the actualy cost of the phy itself is definitely not cheaper.

limber river
wooden condor
#

but with things liek the sonos ARC, and new subs, those designs are all jsut years old, it's weird to me they started with an old tech.

#

Meh, rockwell uses a ton of Cisco stuff, I like them a lot actually from a controls perspective, they are probably the most modern of them at least lol.

limber river
wooden condor
#

well don't talk shit about their BOP network, i designed that! lol.

limber river
# wooden condor well don't talk shit about their BOP network, i designed that! lol.

I think my biggest problem with Rockwell is that very few people in the entire company actually understand what it takes to implement their hardware in a real production environment, and when you find problems with it (which you inevitably will), their answer is almost always "too bad, we may fix that down the road in a few years". The other problem I have with them is the fact that they release alpha-level hardware/software to market, then flat-out refuse to do anything to fix it, forcing their distributors and implementer partners to come up with very expensive, elaborate work-arounds......but now I'm just ranting.

#

Take, for example, their network switches. They are 'supposed' to be Cisco rebranded hardware. What they don't tell you is that for whatever reason they didn't license all the software features, so the switches actually have less functionality than their equivalent cisco counterparts. Once you run into this limitation, you either have to change out all the hardware (with significant 're-stocking' fees for the stuff that you can't use) or you have to come up with band-aide workarounds to go without the features.

#

Ok....I'll stop now.

wooden condor
#

I mean that's just generally manufacturers as a whole though isn't it? The development cycle is obscenely long for hardware solutions so if a. partner/distributor can work around that .

#

They aren't supposed to be, they actually are cisco switches, and if you have that problem, DM me, lol

#

they are LICENSED with only a specific set of features like all cisco switches

limber river
wooden condor
#

I jsut mean in general, like it's an issue with Cisco too

#

not that this every happens

#

but if cisco releases a product that has a shortcoming

#

it theoretically COULD take a year or more to fix through our dev cycle

#

and often by the time we've fixed it partners or even our sales teams have figured ways around the deficiency

#

that of course never happens

limber river
limber river
# wooden condor I mean that's just generally manufacturers as a whole though isn't it? The devel...

I understand that too an extent, but there's a difference in the level of 'work-around'. Using Weiss linear motors on allen bradley hardware, for instance, requires the addition of a filter (Capacitor and ferrite core) in the feedback cable. A simple and effective workaround, if a little bit annoying. Using an Allen Bradley linear motor in a vertical orientation on an Allen Bradley controller requires building an elaborate counterweight system because the motor can't physically hold up it's own weight for more than an hour without a drive thermal overload.

pseudo blade
#

Plus there's the "tried and tested, sufficient for the use case, permits reuse of a hardware platform" argument

#

Lots of home IoT/"smart" stuff runs on really crap hardware because it was cheap/easy/they could get away without doing something new

jade canopy
#

can anyone help me port forward lol im so confused

limber river
#

@jade canopy what's your issue?

jade canopy
#

and im trying to port forward for destiny

peak cloak
# jade canopy so my problem is know what to put in these boxes

Internal IP Device is the IP of device you are forwarding to, Internal Port is the port you are forwarding to, remote address you can restrict what IPs to allow, you can just do *.*.*.* like it says for all. Remote port is the port to listen on I think

jade canopy
#

when i pull up a port a list for destiny it looks like this am i supposed to use tcp or udp numbers

peak cloak
#

I guess they want both

#

port forwarding for games is a mess I don't bother with

jade canopy
#

lol ok thanks for the help

snow elk
#

Hyall. does anyone know if zigbee relays over the same wireless band or does it switch bands ?

#

It supposedly says it's on chnannel 6/2.4ghz

sudden kayak
#

iirc zigbee can use both 2.4ghz and 900mhz ish depending on region

snow elk
#

europe

#

i think 900 is licensed in europe

#

yeah just checked its mainly used for 4g long bands

#

hmm okay

#

i was wondering since due to neighbors i have quite the interference and i thought maybe if it stays on one channel across all lights it would be better

#

i was wondering if anyone here has attempted at running an ids on 10 gig uplinks?

#

and if i were to do it the custom way what would be the hardware requirements

#

i was thinking of vyos running suricata

#

currently i have an udm pro but it does not handle more than 4gbps with ips turned on with the ruleset almost full because in reality its not full even when you select everything

#

a friend of mine said suricata at 10 gbps on a 5900x ate up 1900% CPU (24threads) while running 10 parallel iperf3 tests

#

and he didnt have the entire ruleset

#

best bet is proabably to wait a bit for ARM servers to become more popular then make one on an ARM host

wooden condor
#

I mean I'm having to gimp along with some half ass celeron j4125 box, that still hasn't arrived from amazon

wooden condor
#

biggest complaint is really I have to basically get off my 100% meraki stack, back to open source shenanigans since even at employee discounts I can't afford to upgrade my own house lol

snow elk
#

My biggest fear is having to learn VyOS after using BIRD for so long

#

I mean it's the same concept but I need to redo my automations

#

I don't think VyOS can run as a flowspec client?

#

But at least it should be able to reflect flow tables

#

flowtab4 and flowtab6

wintry temple
#

So I was watching Linus’s new video about Plex media storage server thing, and I was wondering can you use it to access files without having to download them and stream them from your server from states or hundreds of miles away?

wintry temple
#

Would I have to leave the server on all the time?

peak cloak
#

well idk how linus does it, but I use a zerotier or tailscale to access my hosted services from anywhere

peak cloak
wintry temple
#

Ok thank you

peak cloak
#

@rocky badge they have POE enabled on dorm ports....

#

Plugged in router in my friends dorm, no power yet and it booted up...

rocky badge
rocky badge
#

@peak cloak @waxen scroll 😐 The AV racks room has two doors, because the racks are in the middle and you can't get to the other side of the room, but the doors are keyed differently and nobody knows what the door that can get access to the front of the rack is. We've tried every key in the building, the master for the building, IT key, utility keys...nothing.
You can get into the door that gets to the back of the rack but not the front LOL

thick minnow
vale salmon
#

anyone found the cheapest 20gb mobile plan in australia? been trying to find one for days

#

also someone explain to my dad that opening up the mc port (25565) is not the worst thing in the world for our internet... i keep asking and he keeps on saying no because "we are going to get hacked"...

vocal pebble
#

Just don't tell him.

snow elk
#

do an off-site tunnel

thick minnow
#

hello network guru's I need a bit of advice:
I have a ISP router (gr241ag) a D-Link DIR880L and 1 unifi AP.
I wanted to get a Unifi managed switch like a 8 port one or 16 to go "crazy" but they are crazy expensive for my home use case.
So I looked at this one TP-Link TL-SG108E
Is it decent?

how should my networking be?

ISP port 1-3 to living room things like tv/console/tvbox then port4 bridged to the DIR880?
or just bridged to DIR880 and let it do all the work and connect all to it + the new switch?

limber river
thick minnow
#

will that cause any issue or its wtv?

peak cloak
#

I think you are confusing vlan and subnet

peak cloak
#

double-nat is something you want to avoid

snow elk
#

I ve seen cases where the isp modem does PPPoE and it assigns the UDMP the allocated ip from isp

#

So UDM gets it's ISP IPv4 via DHCP

peak cloak
queen salmon
#

do i plug a wireless access point into my network switch by ethernet

peak cloak
#

yes, how else would you do it?

mild turtle
#

I have a cable tester because my brother was having issues. I plugged on end in and then the other into the remote. It's showing 7-8 as a solid colour. I read the instructions multiple times and was confused. A video I saw said it should cycle from 1-8. The thing is him and I both get an internet connection just fine. Was would complain about high ping. Every single cable shows the exact same thing, including a brand new cat6 I got today. What's going on?

mild turtle
#

First time using it. Just bought a battery and got home to test the cables.

peak cloak
#

also

mild turtle
#

It came in a kit that I bought about a year or so ago

peak cloak
#

could be a short in the cable

#

but you say it's working fine

#

A cheapo tester won't be able to help with ping issues

#

it just tests if the pairs are fine

#

no shorts, and everything is 1 - 1

mild turtle
#

I wanted to make sure the cable wasn't dodgy which I was hoping this tester than came with a kit I had would check that.

My brother has been playing games and talking to his friends, so I'd assume a dodgy cable wouldn't let him do that?

waxen scroll
#

@hollow marlin hit a nasty cisco bug

#

it would process a TTL=0 packet and send it right back to where it came from

#

made like an 18Gbit or something loop of TTL=0 packets

echo roost
#

Just picked up my Fortigate 60F for home! Config time

#

😮 no rack mounts.. thingiverse please save me.

waxen scroll
#

@clear igloo virtualization in 2022;

#

@rocky badge lol I hear there's a flood of companies trying to run away from VMware this quarter

glass pilot
#

@waxen scroll I meant, sorry

agile leaf
#

Would this be considered fast

ocean pivot
agile leaf
#

K ty

mild turtle
# peak cloak could be a short in the cable

Tester doesn't work. I borrowed one from someone local last night where I saw his working. All the cables show them being completely fine with his one. I used my one again and showing the same thing. Going to see if I can get a replacement. Bought it over a year ago but only just used it. You never know, they might send me a replacement.

clear igloo
hollow marlin
shadow glacier
#

Im doing some research but im stuck as Solarflare was acquired by Xilinx and then Xilinx was acquired by AMD.

Basically im trying to find if any of these cards(excluding the BASE-T ones) support 10GBASE-LR Transceivers because I currently have a SFN5122f and it wont link to my switch using a LR 1310nm transceiver on both ends. The switch is not the issue as it detects the SFP module.
Any research you do would be greatly appreciated as I am completely stuck when it comes to finding documentation.

----------------------------

The drivers, utilities and applications contained in this package
support the following adapters:

-   Solarflare Onload server adapters:
    -   Solarstorm SFN4112F SFP+ Server Adapter
    -   //Solarstorm SFN5111T 10GBASE-T Server Adapter
    -   Solarstorm SFN5112F SFP+ Server Adapter
    -   //Solarstorm SFN5121T 10GBASE-T Server Adapter
    -   Solarstorm SFN5122F SFP+ Server Adapter
    -   Solarflare SFN5322F SFP+ Precision Time Synchronization Server
        Adapter
    -   Solarflare SFN6122F SFP+ Server Adapter
    -   Solarflare SFN6322F SFP+ Precision Time Synchronization Server
        Adapter

-   Solarflare Performant server adapters:
    -   //Solarstorm SFN5151T 10GBASE-T Server Adapter
    -   Solarstorm SFN5152F SFP+ Server Adapter
    -   //Solarstorm SFN5161T 10GBASE-T Server Adapter
    -   Solarstorm SFN5162F SFP+ Server Adapter```
unborn sluice
#

nice

#

What do you want us to do? Tell you the password?

rocky badge
#

@clear igloo @waxen scroll yummy IP

clear igloo
#

yummy apipa 😄

rocky badge
#

@clear igloo @waxen scroll IT fixed the latency & packet loss issue in the firewall but they did not elaborate

waxen scroll
rocky badge
#

😂

#

are we sure its an ASA?

waxen scroll
#

I thought you said it was

rocky badge
#

I mean, I just assumed since they are all Cisco

waxen scroll
#

my job is all cisco but we use palo

#

nobody wants to use ASAs

rocky badge
#

Provide and manage network services through specialized (Cisco) devices including: Traffic filtering devices, VoIP Gateway, wireless networking, Wireless LAN controllers, management and monitoring devices, etc.

waxen scroll
#

if they need expensive consultants to fix their constant network issues, juan, lurick and I are available.

rocky badge
#

Starting at $80,000; commensurate with education and experience.

#

for sr network engineer

waxen scroll
#

lmao what

rocky badge
#
waxen scroll
#

no. current market is $130-140 base + 5-10% bonus + all the usual benes

rocky badge
#

115+ HSU Buildings, 18+ remote sites, 10+ medical facilities. Manage 221 communications rooms

waxen scroll
#

Open Date 06/27/2022

This is why its stil not filled

rocky badge
#

💀

waxen scroll
#

for 80k you'll get an average engineer who probably is coming from a NOC. they could probably do the job but not in the senior way they expect

#

@clear igloo "including: I0S updates" lol 0 not O

rocky badge
#

yeah

glass pilot
#

Probably so they don’t get a bunch of iOS devs on a keyword match

#

Cisco wrote Internetwork Operating System long before the iPod and iPhone (they also already had a product called iPhone before Apple)

#

But they more or less let apple have those names, and I can imagine the algorithm just seeing iOS and spamming mobile devs with that posting

hollow marlin
# waxen scroll nobody wants to use ASAs

My most experience with FWs are with Juniper SRX but having had to assist a few customers with their ASA and experiencing the CLI... I do not know who would ever want ASAs.

waxen scroll
#

its not even the CLI its the centralized management or lack of

#

other products have a controllers with your rule objects and you can make one update that affects many firewalls

#

with ASA thats not really a thing

rocky badge
#

@waxen scroll @clear igloo 😩

waxen scroll
#

@rocky badge why they blow public IP

rocky badge
#

we get publics on wired

#

the uni has 151.141.0.0/16

waxen scroll
#

I hate universities.

#

@rocky badge ask them for ipv6

rocky badge
#

lol

peak cloak
#

2 ports in a dorm, one for each person

manic cape
#

I just switched internet providers yesterday. Upon initial install, the guy said speeds of both up/down could be low for a bit, but would eventually go up to full speed 200/200. It's been about 24 hours, and it's still sitting at 50/50. Is that actually a thing, or was he lying to get home?

waxen scroll
#

lying

waxen scroll
#

problem is i'm a network eng so I started grilling him. "oh really?"

#

I hate how comcast sells plans with "1-3 devices", "5-10 devices". How many people fall for that scam

manic cape
#

Yeah I know that stuff is garbage. Was just hoping I didn't have some guy rewire the apartment for nothing

#

I must have just got an idiot installer, everybody else who switched from Spectrum to Ziply in my area love it

waxen scroll
#

they probably just screwed up on the back end. support can probably fix the setting

manic cape
# waxen scroll they probably just screwed up on the back end. support can probably fix the sett...

Ziply: "I'll transfer you to our technical department. Be rest assured. Our technical department will definitely help you. Please stay connected."

...

Ziply: "Hi! How may I assist you today?"

Me: "My internet speeds are slower than I am paying for."

Ziply: "I am so sorry, I wish I could help you in this but it looks like out of our support boundary and as we are from billing department we don't have access for further assistance , I kindly request you to please contact our voice team for better assistance bye"

#

y i k e s

waxen scroll
#

wow

#

rude

manic cape
#

Should be fun! Is there any harm in plugging my desktop directly into the cat5 cable coming out of the wall to test if it's a router issue? I want to cover all possible bases before I wait on hold for hours

waxen scroll
#

no, but its possible that you need to power cycle the modem after doing so

#

my modem locks to one device until rebooted

manic cape
#

Unfortunately, I don't have access to the modem. It's ONT down in a shared electrical closet for this whole apartment complex. An ethernet cable just plugs straight into the WAN port of my router

#

I don't even know if it is a conventional modem

waxen scroll
#

dunno then. if it doesn't work that's probably why. I dont have experience with ONTs

#

I imagine they have to handle device changes gracefully

manic cape
#

Well, thanks for the advice, I'll see what happens when I get home. I just wanted to make sure I wouldn't get flooded with viruses of some sort

waxen scroll
#

as long as you set the network to public when the question comes up it should be good

normal abyss
#

Hey for some reason both my of internet browsers are slow but internet speed seems fine

sudden kayak
#

i mean yeah that doesn't sound like a network issue then

#

try checking over your extensions & plugins, fully quit your browser and launch again with one tab and see what happens

glacial linden
#

Can I add a new NIC to my VM and bind my webserver on it's IP yo port 443 and 80, while another program uses the same ports everywhere else?

#

Ubuntu 22.04 and this is the last idea I have before going for a separate VM

#

Stuff tries to bind on all interfaces and idk if this idea's going to work

peak cloak
#

It's per an IP so yes

#

If you restrict the ips

#

The better solution is to use a reverse proxy

snow elk
#

HaProxy is really hard to fingerprint as well

#

And, it's very light, as well

cobalt forum
#

is there a way i can host an assetto corsa server over ipv 6?

blazing raft
snow elk
#

Nope, I used the ConBee dongle

#

There is an integration with it

thick minnow
#

hello guys I have a DynDns, and if I go to app.abomy.com it works and opens my webapp(its hosted on windows) But I cannot reach any of the webapps that are containers on docker with the same method
TLDR i can reach windows apps but not docker containers

#

any idea what can it be?

snow elk
#

You need to do port address and network address translation on the host

thick minnow
#

any guide or what i could follow?

#

kinda new on networking and docker

snow sable
#

Probably should do an NGINX proxy so you don't actually open ports to the internet.

peak cloak
snow elk
#

first port is the listener IN the container itself and the second one is the port that's going to be open on your computer s NIC

#

Otherwise, just create a docker bridge network and connect the containers to that

#

They will then get their own IP addresses in your lan

rocky badge
#

“just use 2 udmps for ‘HA’”

#

“active and passive” bruh that’s literally a cold spare

waxen scroll
#

well it looks like they dont have it plugged in

#

so yeah, network outage

tidal flower
#

So much for no network outage

thick minnow
#

and it works for the windows apps (all besides heimdall)

#

since heimdall is a docker container it doest reach it

thick minnow
rocky badge
#

@clear igloo EYES

#

network good between uni and home

clear igloo
#

33ms, not too shabby

rocky badge
#

on wifi too

#

CS building -> Main Campus -> internet

snow elk
rocky badge
#

¯_(ツ)_/¯

snow elk
#

I have 20ms to Frankfurt lol

#

I mean, it's the US

rocky badge
#

ok

peak cloak
rocky badge
#

i already have 6ms to the first hop gateway lol

snow elk
#

Yeah well it's wifi

#

What wifi standard is it

rocky badge
#

Yes 🙂

#

WiFi 6

snow elk
#

Oh ax

#

Mmh

#

Can you trace the route to 74.119.149.1?

#

I saw it gets 90 Ms from Chicago

#

Pretty good for GSL

#

@rocky badge

thick minnow
#

If u have guidelines

snow elk
#

Why? That's perfectly feasible @thick minnow

#

What you already have set up

#

You just need to make sure you specified -p 8989:8989 while starting the container

peak cloak
#

because the setup you have now won't work for accessing externally, which defeats the whole purpose of dynamic dns

thick minnow
#

But I can reach it outside of lan

#

I have a wireguard vpn

peak cloak
#

via vpn, then yeah that makes sense

thick minnow
#

I just can't reach the containers

peak cloak
#

what's "cloak"

thick minnow
#

To show sonar. Abomy..... Instead of 192.168.2.1....

#

Just a ip and port cloak nothing more

peak cloak
#

yeah disable that

#

I feel that's the issue

thick minnow
#

and why does it work for the others

#

BUT ican try

peak cloak
#

yeah because it's proxing

#

so it can't proxy to a LAN ip from their web servers

thick minnow
#

disabled not working

peak cloak
#

; <<>> DiG 9.16.1-Ubuntu <<>> radarr.abomy.freeddns.org
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53609
;; flags: qr rd ad; QUERY: 1, ANSWER: 12, AUTHORITY: 0, ADDITIONAL: 0
;; WARNING: recursion requested but not available

;; QUESTION SECTION:
;radarr.abomy.freeddns.org.     IN      A

;; ANSWER SECTION:
radarr.abomy.freeddns.org. 0    IN      A       162.216.242.206```
peak cloak
#

also, this is a web redirect

#

so actually it may not, idk

thick minnow
#

do you think its better just ot reverser proxy it?

peak cloak
#

obv it fails for me

peak cloak
#

setup a reverse proxy

thick minnow
#

traefik?

peak cloak
#

an easy one is nginx reverse proxy manager

#

has a web ui

#

never used traefik

snow elk
#

damn I wish npm ran in my lzct

#

Lxc***

#

I should consider updating to proxmox 7... Umm. Be right back

thick minnow
#

dumb down plz 🙂

peak cloak
thick minnow
#

thx, I will have a nice evening now 🙂

ebon sierra
#

I think this is a networking issues.

Im trying to setup a port forward. I have everything correct on the interal side, that I know so far, and I am using a Linksys Smart Wifi router. Currently I am in WV, but my external IP says that I am in Chicago, IL, and I am trying to figure out why that is, becuase when I normally setup servers at home, it is simple Xfinity has port forwarding tools for games, and the external IP actually works. I confirmed already that I can join the server on the system that it is hosted on.

I contacted Linksys and ISP, but they were no help.

Anyone know how I possible could find the correct external IP if that one is wrong.

peak cloak
#

Just the first 2 octects is enough

cunning lion
#

Anyone see what's wrong with the Official guide?

peak cloak
#

yes

cunning lion
#

Nintendo really needs to hire some PROPER Networking people

dire meadow
#

So I have a custom x86 router running openwrt, which is doing awesome and supports everything I need.
However, I am going to be moving soon and also in the unique position to pick up some dual port SFP+ PCIe cards for extremely cheap; wondering if it might be worth it to grab them?
Initial thought was to install one card in the router, another in my server, and then I could pick up a media converter if I needed one for connecting up my desktop switch or direct connecting my PC.

My big concern is idk if openwrt would support these cards, and I have minimal experience with fiber networking. I also wonder if the cards would support generic Cisco 10gb SFP+ modules?

tidal flower
#

although they are targeted at Linux setups instead of Windows, the software itself that you are running seems to be better suited for that kind of 'headless' setup.

#

might also be worth looking at docker compose with SWAG or Nginx Proxy Manager, although I will say SWAG seems to be the easiest way for a beginner to get into reverse proxying. First I'd recommend moving all of your applications to docker, then serving everything internally (on the docker network) and accessing via reverse proxy from anywhere beyond there; of course with some kind of authentication enabled at every level of your setup, be that basic auth, authelia, or application auth itself (I'd go for basic auth if you're just starting out)

thick minnow
#

the thing is I cant reach any container from my VPN

#

just the windows apps

cedar igloo
#

Mail Server Question:
Are some email usernames (maybe not the correct term) more likely to get sorted into SPAM than others?
Excluding the content, configuration etc. Just purely by having that email address.

E.g. is marketing@domain.com more likely to be sorted to spam than john.doe@domain.com?

#

Networking was the channel I thought was most likely to know the answer as I've seen mail server questions here before

tidal flower
#

Although this is the perfect case for a reverse proxy, as others have said.

peak cloak
#

Maybe?

#

Like like if it google in the name maybe they'll mark it as spam

#

But the primary methods are DKIM, rDNS, DMARC, and SPF checks

#

Also checking if the sending IP is on a blacklist

pure tendon
#

Does anyone know how to make it so you can get to the webui of your modem from hosts connected to the router?

Like assume that i have a host connected to a router. That router controls 192.168.0.X. The router connects to the modem which has an ip of 192.168.1.100 ... If i connect directly to the modem, i can get to the modem's webui, but if i connect to the router, i can't get to the modem's webui.

#

I can't change the modem's ip unfortunately. I also tried to change the router to control 192.168.X.Y instead of 192.168.0.X... but i still couldn't get to the router's webui

#

I also tried doing a static route in my router to help: ... but that didn't do it either

pure tendon
#

On the router itself, its kind of funny: i can ssh in, but then i can't nc or ping the modem either. ... I can send an ARP though and get a reply

#

the ARP reply's mac matches the modems mac address so that seems ok

peak cloak
#

It should be upstream, not your router

pure tendon
#

Is the gateway just the host that can go through the static route?

unborn sluice
pure tendon
#

like change the gateway to what?

peak cloak
#

The isp router

#

What's the gateway rn

pure tendon
#

192.168.0.1 = router. 192.168.100.1 = modem

peak cloak
#

Not for PC

#

No, for the router

#

Can you check the routing tables on router

pure tendon
#

like the wan ip?

#

default gateway is blank in the router's webui:

peak cloak
#

Yeah it gets it from DHCP

pure tendon
#

oh ok so the public ip

peak cloak
#

No

#

You may find it by doing a trace route

pure tendon
#

traceroute to where?

peak cloak
#

Anywhere

pure tendon
#

Tracing route to GT-AXE11000-22A0 [192.168.0.1]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  GT-AXE11000-22A0 [192.168.0.1]

Trace complete.
#

unless you mean somewhere external

#

Tracing route to api.ipify.org.herokudns.com [3.220.57.224]
over a maximum of 30 hops:

  1    <1 ms    <1 ms    <1 ms  GT-AXE11000-22A0 [192.168.0.1]
  2     8 ms    13 ms    13 ms  96.120.14.77
  3    16 ms    10 ms    10 ms  96.110.159.161
  4     9 ms     9 ms    11 ms  96.216.129.18
  5    19 ms     9 ms    11 ms  96.216.129.21
  6    12 ms    13 ms    13 ms  be-36431-cs03.sunnyvale.ca.ibone.comcast.net [96.110.41.105]
  7    13 ms    11 ms    11 ms  be-1312-cr12.sunnyvale.ca.ibone.comcast.net [96.110.46.30]
  8    12 ms    14 ms    13 ms  be-303-cr12.9greatoaks.ca.ibone.comcast.net [96.110.37.178]
  9    14 ms    14 ms    13 ms  be-1212-cs02.9greatoaks.ca.ibone.comcast.net [68.86.166.145]
...```
pure tendon
#

yep

#
                                       192.168.0.1```
fading spire
#

hello, i can i make my net faster its lower than average when its at night time for some reason.

fresh shoal
#

I'd figure out networking nerds here might be a good chance. I've come across some scam attempts on my relatives, it involves the scammer telling the user to run netstat on the computer. And the scammer would go on and say there's many hackers already logged onto the system.

Ofc I knew it was bogus, luckily relative was smart enough to doubt and asked me about it. I just told them it was BS. But I couldn't really give my relative a reason why it was bogus since I had no idea what the netstat command entails.

#

If I ran it on my Surface it'll look like this


  Proto  Local Address          Foreign Address        State
  TCP    127.0.0.1:49690        phox:49691             ESTABLISHED
  TCP    127.0.0.1:49691        phox:49690             ESTABLISHED
  TCP    127.0.0.1:49692        phox:49693             ESTABLISHED
  TCP    127.0.0.1:49693        phox:49692             ESTABLISHED
  TCP    192.168.17.203:62564   91.108.56.185:https    ESTABLISHED
  TCP    192.168.17.203:62566   ec2-54-187-160-31:https  ESTABLISHED
  TCP    192.168.17.203:62708   sd-in-f190:https       ESTABLISHED
  TCP    192.168.17.203:62709   sd-in-f119:https       TIME_WAIT
  TCP    192.168.17.203:62710   sd-in-f132:https       TIME_WAIT

If I had to assume, it's telling me what 'foreign address' i'm talking to for web content?

crystal oriole
#

for any content really

fresh shoal
#

I know 127.0.x.x is the local address, 192.168.x.x is the gateway. But what I can't decipher is what the heck is my local address connecting to

#

I guess it's just talking to itself it seems?

#

Since my hostname is phox

#

That's my guess. Sorry I'm very noobish when it comes to networking lol.

snow elk
#

If you mean doing PPPoE then you will only see a point to point to the nearest ISP node

#

@peak cloak isn't this what csm is asking?

peak cloak
#

Ik what they mean, since I had a similar situation

snow elk
#

Well does that gateway just spoof TTL?

#

Modem I mean

peak cloak
#

It's not a gateway

snow elk
#

Modem

#

I don't get it

#

Router.. sorry

peak cloak
#

I honestly still don't 100% percent know how it worked

snow elk
#

Yeah well

#

He says he has his wan on the main router as lan on the moden

#

But the moden spits out rfc1918 isp

peak cloak
#

But in theory anything that isn't in local network will be forwarded upstream

snow elk
#

ips*

peak cloak
#

No, you don't understand

snow elk
#

Let me read again one second

peak cloak
#

I had this same situation if I read correctly. When I connected to modem I would get a public IP via DHCP. However I could still connect to the modem's webui via 192.168.100.1 I think it was

snow elk
#

Maybe it's ISP forwarding back

peak cloak
#

No

snow elk
#

Ye no

#

OH so dhcp is passed through the modem, from the ISP routers?

#

Aka his .1 in the subnet he s in

peak cloak
#

No?

snow elk
#

Or whatever idk

#

He says he gets a public wan ip while connected to the modem

peak cloak
#

The modem isn't doing any routing or nating

#

@hollow marlin I think i remember asking you how it works a while back.

snow elk
#

Ok. So it's just a network terminal

#

For converting the coax/dsl to ethernet

#

So bridge mode

peak cloak
#

Yes, a normal modem

snow elk
#

It could be link local

peak cloak
#

What?

snow elk
#

I don't see how accessing 192.168.100.1 would work if the routing is done already at the isp

peak cloak
#

It's not

snow elk
#

You said the modem doesn't do any routing/nating

peak cloak
#

All traffic goes through modem. Modem would pickup any traffic destined for 192.168.100.1

peak cloak
snow elk
#

Ohhe

#

Oh then he just has to write in a static route for 192.168.100.1 in his main router to go to his ISP node or first hop after the router

peak cloak
#

Yeah that was my idea

snow elk
#

Cuz it shouldn't by default route rfc1918 anyway

#

Yeah

#

I understood now

hollow marlin
hollow marlin
pure tendon
#

To be 100% clear about the network layout:

#

192.168.100.1 is the modem... there are no settings to change anything on it. It's a Motorola MB8611. 192.168.0.1 is the Router which all devices connect to. It's an Asus GT-AXE11000.

If i unplug the router from the modem and plug a computer directly into the modem, it can go to 192.168.100.1 to get to the modem's webui

#

The issue is that devices connected to the router (once its plugged back in like the diagram), devices can't get to the webui for the modem (192.168.100.1)

snow elk
#

I don't understand. Does your 192.168.0.1 router get a public WAN IPv4 address or an rfc1918 private IPv4 address allocated by the modem (otherwise known as double Nat)

pure tendon
#

it gets a public WAN IPv4 as far as i can tell

#

in the router settings it says 'WAN IP' then it lists my public IPv4

snow elk
#

Sounds like a bridged modem

pure tendon
#

I disabled all static routes, renewed my ip configuration... and now i can ping it but and tracert to the modem, but can't tcp/GET it

#

Tracing route to 192.168.100.1 over a maximum of 30 hops

  1    <1 ms    <1 ms    <1 ms  GT-AXE11000-22A [192.168.0.1]
  2     2 ms     2 ms     2 ms  192.168.100.1

Trace complete.```
snow elk
#

But wait, can you connect both your router and your PC to the modem at the same time?

pure tendon
#

nope, the modem only has one ethernet port

#

(and that normally goes into the router)

sudden kayak
#

I mean you really shouldn't need to access the modem configuration in normal usage

snow elk
#

Well this means the routes are good for upstreaming to that but are you sure the router you have SNATS to itself instead of the local lan ip?

pure tendon
#

agreed... though i have a particular case where i'm trying to get something from the modem webui

#

its not supposed to. According to the manual/webpage it should still be accessible via a router

sudden kayak
#

i checked, my LAN is currently a /24 with the modem on 192.168.100.1 (i.e. in 192.168/16)

#

dunno if that's coming from the modem w/ some kind of ARP manipulation or if the router set that up for convenience

#

i can ask around internally but idk i think it's probably hard to nail anything down because it depends on the modem vendor and all bets are off for COAM equipment

snow elk
#

so you re saying your main router is routing 192.168.0.0/16 ?

#

the whole subnet, then the 192.168.100.1 modem just appears as there in the already existing one?

sudden kayak
#

the subnet is just /24

#

then some arp weirdness seems to be passing through 192.168.100.1?

snow elk
#

you can pcap it

rocky badge
#

@clear igloo @waxen scroll i love the overly complex crestron setup to let students plug in switches/consoles/laptops lol

#

behind it is DM NVX Video over IP

clear igloo
#

lol, can't make it easy

rocky badge
#

and tbh you can’t tell it’s video over IP

#

the latency is so low

#

network, encode, and decode

#

HDMI TX goes into the decoder directly but we can also route it over the network to the main matrix and send to any destination

clear igloo
#

Nice

rocky badge
#

@clear igloo :(

clear igloo
#

rip, no speed for you!

rocky badge
waxen scroll
#

@clear igloo I have to interview someone who put ISDN on their resume. Should I ask hard ISDN questions?

clear igloo
#

Yes

waxen scroll
#

they put python so im going to ask about it too

#

"why would I use a method?" or "why would I use a dictionary instead of a list?"

#

some person who edited someone elses script will trip on that much

sudden kayak
#

the crestron shit is so annoying it's been nothing but nightmares at work

#

we have this crazy multi media demo room/studio with a fancy crestron setup

#

they put it in when they built our current building and it has literally never fully worked

#

maybe our AV people are just incompetent idk

#

but from everything I've seen it's like a rats nest of weird proprietary stuff that can't coexist with anything else (but claims to be able to)

rocky badge
#

@waxen scroll ❤️ Dante

alpine heath
#

can someone explain a little bit about p2p connection? like if u play a game with no region control i would assume that both of the recipients have equal delay on the other hand, if u play in a game with region control and it was specified to be in asia between an eu player and asia player, would it prioritize the asia player being dominant instead of being equal in delay? i edited it to be more understandable

unborn sluice
alpine heath
snow elk
#

Covering a hole in the wifi coverage with this

snow elk
#

Do you want to use an existing router manufactured by a known brand or from scratch?

#

Cheapest way is an intel NUC or something that has two interfaces

#

Any linux box works

#

You can install pfsense if it's beefier or something lighter like openwrt

#

No, just overall

#

It's similar to ddwrt

#

Do you have an access point already?

clear igloo
#

But having your own still has to go through that one

snow elk
#

you could turn that into a dumb AP with ddwrt or openwrt and set this as the gateway

clear igloo
#

Do you want local LAN speed or internet speed fast?

snow elk
#

If you dont need VLANs or anything advanced, you can go to openWRT or ddwrt although i dont think ddwrt works on nucs never tried it it could please let me know if im wrong

clear igloo
#

Then just get a switch

#

5 port gigabit switch is like $20

topaz flame
#

then probably any layer 3 switch would do if you don't want your packages routed trough the router

snow elk
#

Yeah a switch is the best for this purpose

#

If your main router only has a FE port you can use that as its uplink and the rest of the devices on the switch will be gbE

clear igloo
rocky badge
#

@clear igloo I wish they gave us more yellow ports in the AV booth :(

#

(yellow ports = AV network)

snow elk
#

What is your family's router?

#

If you're lucky enough for it to be supported you can flash openwrt/ddwrt onto it

rocky badge
#

they only gave us enough to have everything plugged in with no extras

snow elk
#

No pressure

#

You can look for your router here

rocky badge
#

:(

clear igloo
rocky badge
#

and i would think about adding a switch if i knew if it wouldn’t affect anything

topaz flame
#

I mean if you just want to connect the two you could in theory add a second network card to your pc and assign a static ip to them, see the jellyfish video

rocky badge
#

@clear igloo did u see the dante stuff

peak cloak
#

Any switch will work, as long as you aren't doing routing between subnets

rocky badge
#

@hollow marlin have you seen this extreme switch before

#

10gb & power on rear

topaz flame
#

( attached a timestamp )

peak cloak
#

Ltt

#

Wouldn't take advice from them...

clear igloo
rocky badge
#

idfk

#

i thought extreme stacking was more than 10g

#

and why fiber for stacking

clear igloo
#

depends, I know some cisco catalyst switches do that with front panel ports, it's weird though since you'd think dedicated stacking ports would provide more bandwidth

rocky badge
#

i know the extreme summit switches my high school had were 22 gig stacking

rocky badge
#

hmm

untold latch
#

Moving this from the public-chat
I recently revamped my old ASUS desktop and turned it into a NAS using TrueNAS Scale. It seems to be running okay and I have SMB sharing set up. Yesterday I installed a couple 8TB Seagate IronWolfs to have some actual storage (Rather than the 32GB thumb drive I was using to test) and now I'm in the process of transferring all of my data from a 4TB External drive to my server. The problem is that my transfer speeds are painfully slow, barely hitting 12MB/s. Is this normal or is there something that may be wrong that could increase my transfer speed?

#

Oh heckin' yeah, disabled WiFi and hitting almost 100MB/s now. Thanks @waxen saddle!!

rocky badge
#

@clear igloo

#

chungus /20 on wifi

clear igloo
#

lol, yah, almost surprised it's not like a /19

rocky badge
#

i seem to be isolated on the AP

#

@clear igloo Thonk

#

1 hop to 1.1.1.1

#

first hop is literally just 1.1.1.1

clear igloo
#

lol, disable all the internal hops 😄

rocky badge
#

17 to google 8.8.8.8

clear igloo
#

wot, lol

rocky badge
#

yeah it’s so weird

#

1.1.1.1 is the only one i’ve seen do that

clear igloo
#

Hmmmm, that's pretty strange then

rocky badge
#

and it’s not any cloudflare

#

it’s just 1.1.1.1

#

not even 1.0.0.1

#

@clear igloo huhhhh it’s just wifi

clear igloo
#

interesting, I wonder if they use it internally for something and advertised it by accident

rocky badge
#

wired

#

wifi i can’t hit 1.1.1.1 website so yeah

clear igloo
#

that's even more odd, lol, maybe a 1.1.1.1 loopback on a controller or something by accident but that should still be hit by wired unless they're airgapped routing wise or something

rocky badge
#

wired we get public IPs on 151.141

#

WiFi we get NAT behind 216.145.71.x

clear igloo
#

hmmm

sudden kayak
#

i wouldnt be surprised if someone forgot 1.1.1.1 is a valid address and just decided to use it internally

snow elk
#

they proabably set up a dns server in the building

#

and gave it 1.1.1.1

#

and statically routed 1.1.1.1 via that

#

and that dns server proabably caches / logs traffic

alpine heath
waxen scroll
#

especially on ASAs

#

I would also use 1.1.1.1 for testing myself

queen salmon
#

what os should i install on my nas thats very power efficient and easy enough for a idiot to use

#

also still an operating system that can be used

#

like for web browsing

deft jungle
#

Physical networking question. I can pickup wifi on my desktop. Am I able to share or output that signal through the Ethernet port on the back, to a second wifi router to use as a repeater?

paper sky
# paper sky Yes

Depending on the os, it can be really easy or kinda painful. Depending on whether you want your pc to nat or not, you need to bridge the 2 network interfaces or masquerade the incoming requests. In linux Bridging is really easy, in windows i‘ve never done it. I know it‘s fairely easy to use the „share network“ function in the adapter properties, but i don‘t have a windows machine on hand right now to check

rocky badge
#

it's just WiFi only, wired 1.1.1.1 works

waxen scroll
#

Yeah. Probably using it as a captive portal IP or something

unreal valley
#

Does anyone know if I would be able to bypass the router function on a "NBS AT&T BGW-320 500" and keep the modem? I was thinking in terms of having a pfsense box for better security if I was going to be hosting vms and servers that would be using a lot of bandwidth. I didn't think my ISP router would be able to handle the network traffic if I was hosting all of that from my house. (I have gigabit internet)

still vault
#

you can always not use the LAN ports

iron canopy
#

how should i remote connect to a server on a different network

unborn sluice
#

it was answered there

unborn sluice
iron canopy
#

?

snow elk
#

Proabably forwards to 1dot but it could be a guest DNS with some rules set

queen salmon
#

anyone know what i should do after this

halcyon dirge
#

Hi, anyone using "Flame" as their dashboard with nginx reverse proxy?

My problem is, that my custom css is not applying outside of my local network.

unborn sluice
#

might be a local network custom css

terse anvil
#

Whats the best wifi 6e router

snow elk
#

I do

#

But I don't use a custom css

#

If you have the cache just restart nginx

clear igloo
halcyon dirge
#

I'll try it

terse anvil
#

$179.99

snow elk
#

what was the price for the u6 enterprise?

#

you could get away with just getting a 6e capable AP

#

Nvm that's 275 euro

sly lark
#

Does does tp link ac750 re230 support wifi 6?

sudden kayak
#

its in the name

#

AC750

#

so no

cinder plank
#

Hello, I have a TV box from a friend that I don't trust as being secure. Given that a LAN has no other devices what is the difference between being in a DMZ and not being in a DMZ? (DMZ setting is in the ISP provided router with no settings other than to add devices)

waxen scroll
#

DMZ usually just forwards any traffic to the device from the internet without firewall or port forwarding rules

cinder plank
misty inlet
#

Hello. I have an old router which has a little usb port, and I'm hosting a local ftp on it. I have made it so that my main router is wirelessly bridged to this old router, so I can also access it's interface and everything. Problem is I need to forward that ftp server to the web, and I've tried doing it on my main router through the internal ip of the router that is hosting the ftp and port forwarding that, to no avail. Is there a better method to this? It doesn't work when I port forward on the router that's hosting either. (Please give me a ping if you respond)

peak cloak
#

Dont expose ftp

#

VPN into your network

pseudo blade
#

Plus FTP in general kinda sucks on that front, being unencrypted and all

#

I agree with using VPN, or add your files to cloud storage - or at least get a modern build of openWRT on the router so you know what you're dealing with and idk... SFTP and cert-based auth?

#

If it's too old for up-to-date openWRT, it's too old to be exposed to the internet

cinder plank
#

what does this mean for a device that i connect via the dmz?

clear igloo
pseudo blade
#

Using a DMZ is functionally equivalent to forwarding all ports not already forwarded to something else.

cinder plank
#

So the local (local to the dmz) ports become public ports?

pseudo blade
#

Kinda?

#

For your use case, a DMZ is less recommended than forwarding explicitly the ports you need.

#

I assume you do not have complete control over the device's firewall and operating system.

#

If you put it in a DMZ, you are likely to expose services you don't intend to expose, which poses a security risk.

cinder plank
#

I guess a vlan would be the recommended setup?

pseudo blade
#

I'm confused. You said that the TV box was the only device behind the router.

#

What LAN are you trying to isolate from?

cinder plank
#

I was asking from that single device perspective for comparison sake.

neat whale
#

Anyone know how I can go past 512 receiving buffers? My PC seems to love to restrict me.

cinder plank
#

The LAN is a home network

pseudo blade
pseudo blade
neat whale
cinder plank
pseudo blade
peak cloak
pseudo blade
neat whale
#

Windows 10 Professional 64 bit

pseudo blade
#

So you've opened ncpa.cpl, selected the adapter in questions, went to properties and then selected... I think it's adapter properties?

neat whale
#

Yup

pseudo blade
#

Going from memory here, having breakfast

#

Ok, so you see the adapter setting in question?

cinder plank
neat whale
#

It gives me the same error for changing transmit buffer

pseudo blade
#

What error?

cinder plank
neat whale
#

Let me take a screenshot

peak cloak
pseudo blade
peak cloak
#

Your router may not have the ability

pseudo blade
#

^, If you have to ask, 99% chance it can't I'm afraid

#

It's not a common home feature

peak cloak
#

Yeah no

#

I can easily do it on mine

cinder plank
pseudo blade
#

What's your router though?

neat whale
#

@pseudo blade

pseudo blade
neat whale
pseudo blade
#

Or hardware, or both

cinder plank
pseudo blade
#

Your intent is to port-forward the TV box?

cinder plank
pseudo blade
#

Or just plug it in and use it?

cinder plank
#

just use it

pseudo blade
#

Oh

#

Well in that case why are you concerned about the TV box?

cinder plank
#

i am not worried about the risk to the box. i am worried about the risk to the rest of the lan

pseudo blade
#

Is it from an unknown source?

cinder plank
#

yes

pseudo blade
#

Hm. All I can suggest is either putting a small router between it and the rest of the network preventing the tv box from accessing anything local, or replace your router with one that can do proper network segregation like vlans or multiple LANs

#

These are cheap and cheerful if you just want something to act as a firewall for one device: https://mikrotik.com/product/RB931-2nD

#

Only 100mbps though

cinder plank
#

*can't

pseudo blade
#

You add a new private IP range for the TV box, set up NAT so it can get out of the subnet, set up a firewall rule to block outbound connections to your outer LAN's IP range, bind the management interface to only be accessible from your outer LAN

cinder plank
#

I have an old home hub 5 that i could maybe put openwrt on to do this? would that work?

pseudo blade
#

If it can run openwrt I can't see why not

cinder plank
#

Would it need multiple NIC's to be setup correctly, or is the switch in the router sufficient?

pseudo blade
#

Ah yes

#

If the switch is manageable you'll be fine

#

If not you can't perform isolation

cinder plank
#

they look like this

#

it has a wan port and lan ports

#

would they be configurable in openwrt?

pseudo blade
#

I have no idea but that WAN port suggests it probably has at least two interfaces connected to the router's CPU

#

Or it's a managed switch

#

Either way it'll work

#

I doubt the vendor-supplied firmware will help you here though, it's a rather backwards ask vs. a regular home network. It'll need openwrt or something

peak cloak
#

Like my er-x has an internal switch, but you choose what ports the switch is connected too

cinder plank
#

going back to the dmz feature in the ee router. If the tv box doesn't have any open ports would that mean it is safe to put in the dmz instead?

peak cloak
#

Matter of both hardware and software

pseudo blade
#

If openwrt has switch drivers it'll be fine, and with that layout I'd give it a 90% chance the WAN port is discrete

peak cloak
#

Yeah I would be surprised if it wasn't

cinder plank
#

(i think its one of these, ill have to find it) https://openwrt.org/toh/bt/homehub_v5a

cinder plank
pseudo blade
cinder plank
#

Oh, i see. your talking about a vpn in the conventional sense?

#

not a vpn service?

pseudo blade
#

Yes

#

I meant if you wanted to remotely access the untrusted device and were concerned about its security versus online threats, use a VPN and don't port-forward

cinder plank
#

I see. No I'm not connecting to it remotely. I assume it has no open port, I am yet to check. If it doesn't then is it safe to put it in a DMZ and rely on its own security/lack of open ports?

pseudo blade
#

A home router's DMZ feature does not provide additional security, it just pokes a giant hole into your network

cinder plank
#

please can you explain to me what a giant hole is/means for security? isn't it only a (all ports open) hole to a specific device?

waxen saddle
#

Just do port forwarding and if you can, set up your Internet-facing services on a separate network, fire walled off from your internal network.

#

Ideally, you want your attack-surface to be minimal.

cinder plank
#

I don't want to remote access anything. I just want to separate a device such that it can access the internet but can't access or be accessed by anything on my LAN. The router has minimal features (only Port forwarding, VPN, DMZ afaik). I am trying to understand if simply putting the device in DMZ would achieve what i want.

cinder plank
waxen saddle
#

Some “DMZ”’s are just “what IP should I forward unsolicited connections to?” Others force you to create a separate network. So… it’s really up to the manufacturer how they define “DMZ”

cinder plank
#

So the putting a device in DMZ doesn't necessarily stop that device from seeing other device on the lan? I thought that was the purpose of a DMZ?

waxen saddle
#

Depends on how the router handles it. I’ve seen some that actually isolate the DMZ from everything else, and others that only let you specify an internal IP on the local LAN and do no isolation at all.

#

Run a test and see how yours handles it.

cinder plank
#

okay. is the test simply, can i / can't i ping LAN devices form the selected dmz device?

ember basin
#

hi, im trying to get wireguard pivpn setup. i seem to be able to connect and use the vpn via local network, but traffic isnt going through on non local network. the server is recieving udp packets, but the client doesnt seem to receive from the server. i checked port forwards and everything seems fine though?

ember basin
#

it seems to transfer enough data to get the "last seen" on wireguard updated

#

but does not succeed handshake?

neat whale
#

There a way to purposefully sabotage a cable internet connection to make it appear slow to convince someone to switch to fiber internet?

waxen saddle
neat whale
#

I don't mean "throwing the router down" or anything criminal. I mean is there something in the router admin settings that I can tweak.

#

Like the slowest lane of traffic

unborn sluice
#

no malicious activity

hollow marlin
pseudo blade
#

I am uncertain about the legal implications (quite possibly if you're trying to impact the person paying for the connection) but for me there's moral ones also.

unborn sluice
pseudo blade
#

lol that'll go great

unborn sluice
pseudo blade
#

Seems obvious to me

neat whale
#

I'm not a kid

hollow marlin
#

Thats my guess as well

neat whale
#

We split the bill each month.

pseudo blade
#

Oh. Well in that case pay for your own fiber.

unborn sluice
#

couldn't you say you're okay with paying more to upgrade

neat whale
#

They don't agree. They think its fine as is.

pseudo blade
#

Pay for it yourself then.

#

If it costs too much to do so... oh well guess you don't need it that badly then

#

Pay for the fiber, tell them you won't pay half for the cable, offer to split the fiber

#

Be prepared to pay the full price if they say no

unborn sluice
#

yea, if you're not a kid. then talk to them like adults and convince them

neat whale
#

I've tried.

neat whale
pseudo blade
#

Sounds like a you problem, and not a networking one ¯_(ツ)_/¯

waxen saddle
#

Have them pay the same, you pay the rest.

pseudo blade
#

Yep, can do that

unborn sluice
#

indeed my point, cover the upgrade

neat whale
#

The main beef is the installation costs.

pseudo blade
#

Offer to shape them to cable speeds if they pay what they pay now, full speeds if they do half

#

Sounds like your price to pay

#

You care about it

#

They do not

unborn sluice
unborn sluice
neat whale
#

But its spectrum. And I keep getting host crippling ping spikes in NeosVR.

#

The issue isn't continuous.

pseudo blade
#

Again, this problem only impacts you

unborn sluice
#

yea, sounds like a you problem so just cover everything then make them pay the same price

waxen saddle
unborn sluice
#

might be a bee on the otherside of the earth

waxen saddle
#

Microwave turned on?

neat whale
unborn sluice
#

Someone breathe and affected the cable

neat whale
#

Besides it happens when they're not home too.

unborn sluice
#

tbh, I agree with them. Why would I want to pay more if the current one is fine and can do internet things

waxen saddle
#

Does spectrum OWN the cable lines in your area?

neat whale
#

I think so

waxen saddle
#

It can make a huge difference if they do or don’t. Comcast owns all the cable lines in my area. Anyone other than Comcast can provide service, but not near the speed and reliability that Comcast does. They literally are in business fueled by hatred for Comcast.

pseudo blade
#

I uh... may have implemented network queueing in a previous household to prevent Netflix from saturating the link while downloading segments and sending my ping to 500ms and above before

hollow marlin
waxen saddle
#

…and that this appears to occur even when the roommate is away.

pseudo blade
waxen saddle
#

Can’t pin this down to roommate activities.

pseudo blade
#

Agreed

#

Could even be your own machine, steam downloads or the like

#

Failing that, if the solution is fiber, so be it. Just be prepared to pay for it

pseudo blade
#

Nowadays I'm getting ~150mbps via mobile broadband or 70mbps via vdsl which is vastly preferable

waxen saddle
#

Time to run a proxy cache server

pseudo blade
#

I can't cache all of Netflix.

neat whale
#

Vdsl?

pseudo blade
#

Especially not at 3mbps

#

Do you know what DSL is?

neat whale
#

I know what DSL is

pseudo blade
#

It's that but faster.

#

And asymmetric so faster downloads than uploads.

#

It still sucks compared to nearly any other technology

#

...Unless your cable networks are really long and oversubscribed

hollow marlin
#

Having been an engineer responsible for xDSL, it sucks just as much in regards to troubleshooting

pseudo blade
#

lol

#

Trust me I know

#

I still can't believe my country's government payed many billions of dollars for the incumbent ISP's copper networks so they could use them for VDSL rather than build fiber

#

As the faster solution in the mid 2010s because ADSL sucked, mind you

#

Threw out a full fiber build to save money, to spend billions on a ancient telephone network for VDSL

hollow marlin
#

Knowing the cost, it is much cheaper in the short term. Fiber/hardware is cheap. Labor, not so much

pseudo blade
#

Nothing's cheap if you have to dig it up soon after to replace it

#

VDSL had no room to grow and with runs up to 1km it couldn't hit 25mbps often

hollow marlin
#

Thats why I mentioned short term. They never include the future upgrade paths, but more importantly, how expensive it is to maintain copper