networking

[pseudo blade]

Fiber splitters do not need computers or electricity

VDSL2 cabinets need power, and backup power

[hollow marlin]

Im aware

[pseudo blade]

We implemented this after watching the NZ VDSL cabinets in the news because people kept stealing the batteries

And them giving up and building fiber instead

Tbf it was obviously far more about redistributing money to political friends rather than building a good network

[hollow marlin]

There were quite a few reports in my region of the US with copper being stolen a few years back when copper prices were high

[pseudo blade]

I doubt we'll see much theft of fiber optic cables

"Oh boy, I've got long lengths of sharp glass wrapped in plastic"

I'm sure that's real valuable

[waxen saddle]

Already seen it. Though, they mistook it for copper cable.

[pseudo blade]

Not too surprised, though I doubt it's a mistake they'd repeat

[hollow marlin]

Well there is a single copper tracer line in shielded fiber. I mean if you want to risk it for a buck or two.

[pseudo blade]

Huh. Just to find it buried?

[hollow marlin]

Yep

[pseudo blade]

Yep

It really sucks to dig into it, so that makes sense

[waxen saddle]

Lawl. Copper scrappers have no fear. They’ll break right in to a substation and take an axe to the copper ground wire literally causing it to randomly arc several feet to the ground

[pseudo blade]

Fusion splicers are not cheap

Cheaper than I remember them being

But not cheap

[hollow marlin]

Thats why you'll still see pilars with fiber even when they do not include a splice case. Simply open it, strip the tracer and clamp on.

[pseudo blade]

Ah

[swift creek]

howdy, Im now in change of managing a new network at my office. I wanted to create a changelog document for reports. what are some fields or examples I should look at?

[peak cloak]

so documentation?

[worthy ridge]

Does anyone know the radiation pattern of the transmitter

[swift creek]

yeah like date, action, reasoning maybe version number/id

[worthy ridge]

Need to position it for Bluetooth, want it to penetrate floor below ideally

[drowsy fossil]

set it on its side
think of it like a donut with the antenna pointing up the middle of the donut hole

[hollow marlin]

This is referred to as change management. There are some basic templates floating around if you search but it should include:

• Date
• Timeframe of maintenance
• Reasoning
• Configuration changes
• Expected downtime and scope of services impacted
• Post-maintenance validation
• Rollback time and step in the event of unexpected issues

[winged fern]

Hey guys!
I have been having problems with my internet connection lately
I have moved to a different room, so ive got a fresh new lan cable, the issue is that my speeds should be abt 1gpbs but im only getting 94mbps (constantly) which made me think that maybe there is something wrong with my adapter setting on my pc. Im not sure how can i fix that

i can provide more info/ screenshots

[peak cloak]

what's your link speed

[winged fern]

2.5gbps

but im only using 1gbps

[peak cloak]

no it's 100 mbps

your cable is the issue

[winged fern]

but its fresh new

[peak cloak]

¯_(ツ)_/¯

[winged fern]

are you a 100%sure

[peak cloak]

your link speed is only 100

[winged fern]

yeah like im restricting it

its 94 static

constantly

little to no jitter

upload speeds are normal

[peak cloak]

it's either cable or interface on PC or router

link speed doesn't lie, unless you manually set it to 100

[peak cloak]

what spec

[winged fern]

cat5e

[peak cloak]

cat 6? 5?

I've seen some fake 5e cables with only 2 pairs of wires

[winged fern]

i dont really think that its fake

how can i check

[peak cloak]

physically look at the connectors

[winged fern]

mhm

[peak cloak]

how many wires do you see

[winged fern]

1sec

[peak cloak]

can try to take a pic as well

[peak cloak]

looks fine

but can't tell 100% if it's the cable without a cable tester

can you try a different cable?

[winged fern]

Wdym

This is the only one coming to my room

ignore from 58mbps

[peak cloak]

What's the cable plugged in too?

A wall plug?

Switch? Router?

[winged fern]

router

its going into the wall which goes to the router

its less than a 100m

waaaaay less

[peak cloak]

So it is going into a wall outlet

[winged fern]

techically

[peak cloak]

So that cable could be limited

That's in the wall

[winged fern]

yes

[peak cloak]

Gigabit needs 4 pairs to function

100 only needs 2

[winged fern]

and what if its not fake

what could be the prob in my pc

[echo roost]

Have you got another machine you can test with?

[winged fern]

my mothers laptop said 94 too

i think

wait damn

aint no way

[echo roost]

Check the port speed like you did earlier. You are looking to see if it negotiates to 1Gbps.

[peak cloak]

Let me get this straight. Is it going into a wall plug or not?

Or is it one straight cable

[echo roost]

Looks like a cable pulled through the wall.

[winged fern]

okay my dad has a plan ill be back soon

[peak cloak]

That is jank af

[winged fern]

lmao pls no comment

[echo roost]

Well, one less join to troubleshoot.

[winged fern]

there is 2 separte line coming down

[echo roost]

Do both show the same interface speed when connected to your computer?

[winged fern]

illbe back as i said

pls wait

We will test another cable

Tested another cable said that it can do 1gbps

Tf am i supposed to do

[echo roost]

You are going to need to test and repair the other cables.

Or pull new cables.

[winged fern]

but i could do 1gb with the cable

a different piece

what should be the order of the cables

green , brwon etc (ik this is not the righ one)

or does it make any dif

[peak cloak]

depends

[winged fern]

is mine good?

both ends look the same

[peak cloak]

just needs to be the same on both sides, I use B for everything

[winged fern]

wait

this doesnt look right

[winged fern]

.

[peak cloak]

yeah no.. but what does the other end look like

could just be bad manufacturing not following standards

[winged fern]

can it affect anything?

im pretty sure

[hollow marlin]

@clear igloo @waxen scroll I think I mentioned in the past how there is a common point/bottleneck in NY in the Adirondacks where a majority of the fiber is ran for providers. Due to storms right now, it knocked out multiple bundles and we are now down to two remaining geodiverse paths between two large segments of our network. 🍿

[winged fern]

something aint right

the good working cable doesnt even give me 1gb

not even 800mb

its 200mb which should beway faster

tf is wrong with my pc

someone please help

im getting fed up

[peak cloak]

work backwards, can you even get gig connected to router directly right next to it

[winged fern]

well not really

but then why does my mac get better at wifi

what changed

I dont get it

Let me try rebooting the modem

Again made some changes

nope

[winged fern]

The same

[clear igloo]

Fun times 😄

[winged fern]

GUYS ITS WORKING AGAIN

Now its detecting 1gb

I just had to reclamp the wires

Yey

[jade canopy]

so I live way out in the sticks any suggestions on internet ?

no not yet

kinda thats the internet we have right now

alright ill check it out

This is the speed I had when I lived in Dallas

now this is the speed i have since i moved to Mississippi

[manic cape]

But you gained so much in moving there, like not having anybody that can spell the name of your state

[jade canopy]

[tidal flower]

if that's LTE, I've had success in lowering MTU at the router level to improve stability in throughput

[onyx notch]

Hiya,

I've had an idea to convert all my old PCs into small storage devices which I can map as network drives, I still want to operate windows 10 (Hence the reason for me not going with a NAS based and it would mean me formatting another drive for an OS). I've tried using ZeroTier as a solution to use it when I'm not on the same network but It won't apply the new IP when I activate this, any Ideas anyone?

[tidal flower]

Wireguard maybe?

ideally in that situation you'd use a distributed storage solution though imop

[onyx notch]

I looked into WireGuard but I couldn't find where it would match so I could still connect to it without it having a fit

I'm going to have a look into hamachi as that might be a potential temp solution

[tidal flower]

tailscale maybe?

https://tailscale.com/

iirc they have a pretty darn good free plan

[onyx notch]

yeah they do

[peak cloak]

wdym apply the new IP

[peak cloak]

sounds like user error, not really product issue

wireguard is L3 only, so zerotier would work better I think

[onyx notch]

I got suggested ZeroTier as an option so I could use network drives while not being on the same network, I couldn't get into my admin side of my router since my parents forgot the password when the set it.

idk if that makes any more sense

[peak cloak]

yeah I use zerotier myself to remote into network

but I don't understand your issue

[onyx notch]

So when I decide to switch to my hotspot for instance after trying the IP it's provided me through ZeroTier it would say it it's unable to be reached

Both sides can ping eachother but it's just not taking any effect

[peak cloak]

sounds like a route issue

but you say it can ping?

[onyx notch]

Yeah

[peak cloak]

I kinda need more specifics to be able to diagnose. IPs, network layouts, etc.

[north atlas]

I'm trying to get a Windows XP machine to talk to my Linux machine though an ethernet cable (no LAN).

I have set the two machines to use 192.168.2.0/24 (1 Linux, 2 XP) and I have added a couple of routes on the Linux box with these commands:
ip r add 192.168.2.2 via 192.168.2.1
ip r add 192.168.2.0/24 dev eth0

When either device attempts to ping the other they can't reach it. The Linux machine can ping itself, the XP one can not (unreachable).

Does anyone have any advice for how to fix this?

[peak cloak]

what did you set as the ips

you should not need to add any static routes

as they should be directly connected

[north atlas]

192.168.2.1/24 192.168.2.2/24

[peak cloak]

yeah, that should work

[north atlas]

I would think I would need them on the Linux machine since it has multiple interfaces.

Wait.

Why in the world does the XP box have an IP of 169.254.112.12 when I set it to 192.168.2.2 in the IP settings?

[peak cloak]

make sure to exit control panel for it to apply

that's an automatic link-local IP

[north atlas]

You have got to be kidding me.

The machine froze for a moment when I closed the adapter properties and it has the IP address now.

[peak cloak]

yeah my coworker told me that, I didn't know and was always wondering why it doesn't work

[north atlas]

The XP machine can ping the Linux, but not the other way around. I tried before and after removing my routes.

[north atlas]

Because Microsoft makes bad choices.

$ ip route
default via 192.168.1.254 dev enp58s0u1u4 proto dhcp src 192.168.1.163 metric 100 
192.168.1.0/24 dev enp58s0u1u4 proto kernel scope link src 192.168.1.163 metric 100 
192.168.2.0/24 dev eth0 proto kernel scope link src 192.168.2.1 metric 101 
192.168.122.0/24 dev virbr0 proto kernel scope link src 192.168.122.1

These are my routes now.

The way the packets don't have an error response, I wonder....

[peak cloak]

windows blocks ICMP by default

[north atlas]

SON OF A GUN

You stupid OS.

We are getting close.

There we go.

Thank you.

Yeesh, updates are kinda slow. I suppose that should be expected from a Pentium 4.

This has PAE. How odd.

[waxen saddle]

How much RAM?

[north atlas]

I think it tops out at a gig.

[thick fulcrum]

You can combine window services into a single owner if you feel confident, it saves around 40-120MB of RAM

XP even though NT was still a bit like 98 - it was really flexible if you hacked at the registry enough

[jovial rain]

Anyone have any suggestions for network cards?

[tidal flower]

What OS are you running? This can impact the suggestion in some cases.

[jovial rain]

Windows 10

[devout ember]

i am confused about how to set up vlan aggregation on proxmox ?

because whenever i turn off the first NIC which is 192.... i lose connection between the nodes. but i set the 10... ip in the host files on proxmox for each node

and i just tried to set up a bond but everything failed

[marsh shard]

can an ethernet port work even if one of its pins are removed?

[pseudo blade]

Maybe if it still has the pins for 10/100

I think you should probably consider fixing your stuff though

[unborn sluice]

btw how did you wreck it

[marsh shard]

my friend jacked the cable

idk how it got removed

although it still does recognize the network

its just that there is no internet connection lol

[unborn sluice]

first time I actually heard of someone breaking the actual port

[pseudo blade]

You'll need to add a network card then or replace your motherboard if it's a portable device

[unborn sluice]

yea, just buy a USB ethernet

[pseudo blade]

Consider replacing the friend as well as a precaution

Can't be too careful

[unborn sluice]

this, or clean their internal parts there might be something wrong with them

[unborn sluice]

ok i'll be careful

[marsh shard]

its a laptop so i think i'll just use a usb-c to ethernet

[pseudo blade]

Sounds like a plan

[marsh shard]

aight thanks

[unborn sluice]

ah the modern port that has a moving part?

i don't really trust the laptop ethernet ports, they usually malfunction on me

thought you meant breaking a desktop ethernet

[marsh shard]

no it's a firm one

can you reach the same speeds with usb-c to ethernet though?

[pseudo blade]

Yes, with a suitable dongle

[unborn sluice]

just remember to buy the gigabit dongle

[marsh shard]

oh yeah thanks

[pseudo blade]

Avoid: USB2, 10/100

[sudden kayak]

theoretically could get a usb 2.0 dongle with a gigabit ethernet chip... still limited to ~450 Mbps by the USB interface but it would be better than 10/100. but don't do that just get a usb 3 gigabit dongle

[pseudo blade]

You can, hence why you should avoid USB2 dongles

[hollow marlin]

@peak cloak I had a maintenance last night redesigning a portion of our v6 and left a ping running in the background when I packed up my laptop. When I got home a re-docked my laptop, I saw the ping start responding. I checked and VZN had a maintenance last night and I finally have v6 on Fios.

[waxen scroll]

w-why did you go into work to do what could have been done remote

[peak cloak]

nice

I'm back without v6 on univ internet

[hollow marlin]

Sometimes I just prefer the office and it's not far away. Also if I would have stayed at home, I would have been cut off from the VPN for 30mins during my maintenance because VZN's work took v4 down as well

[faint tendon]

So one of my Ubiquiti switches was freaking out and restarting if anything was plugged into Port4. Support has me flash to an EA firmware and "try it again".

So I do....And it fries the equipment that was plugged into it!!

Then support tells me to RMA. RMA comes back DENIED! Bout to lose it on these mf.

[sudden kayak]

long shot but anyone else here at SCTE?

[rocky badge]

@peak cloak @waxen scroll i love that my uni has good outside wifi

it’s so nice bc cellular is shitty

[peak cloak]

I don't think there's any outdoor APs here

Cell is descent tho

[rocky badge]

they did an outdoor wifi project 2021 iirc

cisco outdoor APs everywhere

they put them everywhere

[sudden kayak]

that's impressive

mine had "wifi enabled campus" stickers from the early 2000s outside everywhere... but the actual speeds you would get were also from the early 2000s

[rocky badge]

Just got 150Mbps down and 215Mbps up on WiFi

[pseudo tide]

On what router

[waxen scroll]

@rocky badge ipv6 at uni when

[rocky badge]

idk

[hollow marlin]

Per Ookla's request, finally got the speedtest server running with IPv6

[smoky estuary]

Idky I'm having such a hard time finding one but does any company make a 24 port 2.5gb rack mount switch

I'm not gonna blow $2000 on a 24 port 10g

[thick minnow]

hey, any it pros?
i got a virtual switch that worked over nat, i could port forward outside ports from some ip address to a vm and it straightup worked
now it's just straightup broken, no way that i know of to diagnose it, no connection for vms to the outside internet, nothing

[peak cloak]

they support v6 now?

[hollow marlin]

Yep. They reached out last week requesting the update. Testing though, its more reliable to use ipv6.speedtest.net. But that is just due to Happy Eyeballs

[clear igloo]

Interesting, still some browser limitations though over the desktop app, hopefully that gets v6 support one day too

or maybe it's just firefox vs chrome since I got 4.5Gb/s on chrome compared to 3 on firefox

[hardy fractal]

does it make any difference if i connect my devices to a router which its wirelessly connected to neighbors wifi or not?

@ me if answer

[spare plover]

How is this for $150 router? We have all other parts including ram/mb/case/cooler/fans

https://pcpartpicker.com/list/QtwPY9

Also only for 2 PCs

[pseudo blade]

It's hard to have much of an opinion when you've only linked a CPU and a cheap SSD

No idea what internet speed, other service requirements etc.

[spare plover]

sorry bout that

internet is gigabit cable internet

no fiber or anything special

ill expand the list

I am just wondering if it would be decent

at router-ing for 2 pcs

[pseudo blade]

The CPU is ample for that

[hardy fractal]

if it makes any difference from directly connecting all of my devices

[pseudo blade]

If your router lacks a second radio it'll halve its performance, various security concerns

[bronze swift]

Hey guys is an Ethernet physical address used to address the MAC address (48bits/8 bytes) and Ethernet IP address is the one with (32bits/4 bytes)?

[odd maple]

6 bytes for the MAC but yes

[bronze swift]

Thx

[glacial linden]

Mine has amazing internet, as fast as wifi 5GHz can get and over 700Mbps per desktop per lab over ethernet but it has a dumb proxy-only system that needs users to log in for everything and has a crappy DNS blocker that only allows google or something

I was able to bypass it by using SimpleDNSCrypt with Cloudflare DoH config and connect to whatever I wanted, but all system traffic had to be routed through proxy+authentication which meant using Proxifier...

And Proxifier sure can route everything through itself -- effectively bypassing every single executable/app based firewall filter in existence since all network traffic is being made by Proxifier.exe (or whatever) and all apps connect through it somehow (idk, localhost?)

= Very very insecure. They had SMB completely open on their network and actually netbios-named a system to indicate that it stores all the grades for all students for the current year 🤣

If someone wanted to be malicious, it was like giving away smb exploits like candy. Also - proxy = no proper automatic updates either on windows so... Pick your exploit. Any kid could go watch some vids on youtube, make a kali linux VM and jump in

This has been the case even before eternalblue and other exploits were known

[snow elk]

How to run a network, episode 0.5

[spare plover]

Alright good, thanks

[neat whale]

There any setting in my network adapter card that would make my voice cut out a lot in games?

Thing I don't get is my ping isn't high at all when it happens.

It was below 60 ms.

[neat whale]

Everything else seems to work fine. But voice appears to be funky.

[odd maple]

Do I want Wi-Fi or powerline? Internet speed of 300mbps, one ceiling and a wall, less than 10m distance I'd say

[neat whale]

Ethernet overall is superior to WiFi

[meager ginkgo]

Neither if you can. Have any coax/cable outlets?

Lookup MoCA, if you don’t want to run cable

[odd maple]

None

[meager ginkgo]

What country are you in?

[odd maple]

Germany

[meager ginkgo]

ah okay. That makes sense

[odd maple]

Router can do wifi ac at the most (866mbit)

[waxen scroll]

@clear igloo https://www.youtube.com/watch?v=3CDOSj8fZA4

what happened to MUH ubiquiti?

[clear igloo]

they don't have muh 100g 😄

[jade canopy]

I live in the country part of Mississippi and the internet we have sucks but no one else will come out this far is there anything i can do about it

[clear igloo]

become millionaire, buy government officials, fix internet
Beyond that, nope 😦

[jade canopy]

tragic

[peak cloak]

starlink

[jade canopy]

not available yet

[pseudo blade]

Hard to screw up at 10 meters on WiFi, I don't recommend powerline over WiFi in this context unless you have concrete walls with rebar or something

Easy way to test if WiFi's fine is to just try a phone or something

If you get >100mbps you're better off with that than powerline in my experience

If you can get a cable run instead that's ideal

[pliant gyro]

it's been suggested I bother you lovely people about this...

Sooooooo. I'm watching them try to get this fiber cable from one building to another, and did I miss something?

I thought they had solved this with the ubiquity wireless transceiver thing?

[odd maple]

Should be brick. Cable would have to be like 30m with the way I'd have to route it and it would not pass on aesthetics
My phone refuses to connect to the 5ghz network but gets 144mbps on 2.4. Was thinking about a wifi card with a movable external antenna with a 1m cable or something

[pseudo blade]

Hm, not ideal. If you need greater throughput considering the ceiling I'm still going to recommend you get a cable ran, through the wall if possible. Repeaters unfortunately aren't ideal unless you can find an ideal middle spot and spend good money on a device with two 5ghz radios

[waxen scroll]

nah you can get fiber

it'll just cost you and you'll have a contract

[pseudo blade]

Government officials are probably cheaper

[waxen scroll]

LEC perfectly happy to run fiber if you pay some install

[pseudo blade]

Gigabit fiber here is >$1000/month, I know a deputy premier was bought to pretty much allow a national park to be ruined for $5k

[waxen scroll]

ive closed lanes on our roads because i've ordered fiber lol

[odd maple]

Ouch, is that for business? 1000/500 is like 90€ a month here

[pseudo blade]

Australia

Residential plan upload speeds only go to like 40mbps max, and in this area they will not run fiber for it here so copper download is 70mbps max

Only businesses need upload, you see

[odd maple]

Move to new Zealand?

[pseudo blade]

Don't tempt me

[waxen scroll]

gaben lives there doesnt he

[pseudo blade]

He did, idk if that's still the case

I don't keep track of his home address at all times :P

[peak cloak]

it sucked

[odd maple]

Apparently you can get "gamer hyperfibre 8000" for 299 a month there

[pseudo blade]

I know, and I want it badly

One of my coworkers at my last job was in NZ and had a high speed plan

[pliant gyro]

Did they talk about that anywhere? I had been thinking of doing something like that on a pretty rural property...

[pseudo blade]

That being wireless links?

[spare plover]

I have a question regarding networking. Is a C2D Q6600 (lga775) good enough for gigabit to two PCs as a router? Got plenty of ram to go with it. Also, could it possibly handle 2.5?

Thinking of using this dude but swapping in an ssd

[thick minnow]

i got a virtual switch that worked over nat, i could port forward outside ports from some ip address to a vm and it straightup worked
now it's just straightup broken, no way that i know of to diagnose it, no connection for vms to the outside internet, nothing

[hollow marlin]

Well, the first question is always, what changed?

[thick minnow]

now as far as i know, nothing

but i'm not the only person with administrator access so anyone could have gone in there and bunged it up

there's no record of anyone saying they have though

but what i can say for sure is i haven't changed anything

[peak cloak]

you need to describe the setup a bit more, what works, what doesn't. Troubleshooting works by diagnosing where the problem is

[thick minnow]

so it's an internal virtual switch with a nat network set up
i don't know of any troubleshooting steps but i did run ifconfig in one of the linux vms that had previously worked and discovered it could not get an ip address

[peak cloak]

is there a dhcp server setup? is it statically addressed?

what do the dnat rules look like?

we need specifics

for all we know, it could be a simple number change. No one will know without specifics.

[thick minnow]

statically addressed

[thick minnow]

where do i find that?

netnat static mappings?

[jade canopy]

[lavish granite]

Does anyone here know how to route all internet traffic from a computer through a SOCKS5 proxy with authentication? (Meaning the proxy has a password) Bitvise does not seem to work at this moment.

[waxen scroll]

The internet options in control panel?

[lavish granite]

Does not offer an option to input a username and password

[lavish granite]

When using the bitvise client I get the "Connection not allowed by ruleset" error

[worthy sand]

Anyone familiar with unifi? Im trying to configure my network for a static ipv4 and im kind of stumped

[lavish granite]

I just got it to work through proxifier nvm

[rancid acorn]

Do you mean for your ISP IP? Or local IP for other connected devices?

[pseudo blade]

Gigabit definitely, 2.5 gigabit's probably not going to happen if you want NAT or configuration flexibility. Power consumption is unlikely to be ideal.

[spare plover]

how much power do you think? 60W?

decided not to NAS if I do do it

[hollow axle]

38 seconds into LTT's video about running cable and my head hurts... 8 fibers can do 4 x 42x800gbps....

[peak cloak]

1 fiber can do terabits technically with muxing

[hollow axle]

BiDi is messy

[pseudo blade]

It depends on your specific setup, CPU stepping and the like so hard to say but the CPU alone will comfortably use over 100W to do the work a modern low power CPU might do for 10W, and it'll draw quite a bit at idle too

[peak cloak]

that's not what mux is?

[hollow axle]

If you are using a single fiber you are using it bi directionally

[peak cloak]

my bad, I meant as one pair

[hollow axle]

Big difference

[pseudo blade]

Half duplex is messier

[hollow axle]

We actually have a couple situations where we do CWDM and have each direction on a different lambda, poor man's BiDi

Also, who buys a spool with that few strands? The cost is the labor so it's normally easiest to like pull a 96 strand

[spare plover]

Really? Even though it's not a high end one (for the time) and not a Core?

[hollow marlin]

12 strand is common for runs in these situations. I'm not sure why they went with such a low count though

[spare plover]

alright yeah q6600 is 95W

idk if its e6600 tho, that one is 65w

[worthy sand]

My ISP labeled it 'gateway' ip address and unifi calls it 'router' in the static ip config. That caused the confusion. Im up and running now, thank you!

[pseudo blade]

TDP != real world power consumption, it's often exceeded

I don't think the q6600 had great idle power consumption either vs. modern chips, though I looked at a ton of online info about it and it seems everyone sucked at calculating idle power draw back then because they kept including a GPU and using total wall power draw from the result

I doubt a q6600 actually idles at 120W

Also you're saying e6600 now? yeah you can definitely give up on 2.5 gigabit

[spare plover]

Alright

Idk which it Is

I know 6600

Could buy a faster 775 C2D for $18

Could a Q9550 do 2.5?

@pseudo blade

[hollow axle]

As someone who had a q6600, don't bother anymore, it's to old

[spare plover]

Should be fine with a router not a PC

Ik it’s slow

[pseudo blade]

You might struggle to saturate 2.5 with NAT

Buying a newer 775 CPU for building a 2.5 gig router strikes me as inadvisable, if you're buying parts anyways try to find a used PC that's less than a decade old instead

Even a J4125 is faster

[snow elk]

guys, is it just me or are the youtube rstp servers down?

[hollow marlin]

Downdectector shows reports of live streams down. Do you mean RTSP instead even though neither apply to YT?

[thick minnow]

https://hastebin.com/ejosagifot.txt could this be related?

[peak cloak]

oh it's windows...

[thick minnow]

i'm sorry

[snow elk]

are those upnp queues?

why do you have 22 externally open lmao

at least tell me its with a pubkey

not via password

[snow elk]

im not talking about the spanning tree protocol

[thick minnow]

it is

[clear igloo]

RSTP is rapid spanning tree
RTSP is real time streaming 😛

[snow elk]

oh yes

[thick minnow]

wdym

[snow elk]

BRUH I MISTYPED IT LMFAO

[clear igloo]

lol

[snow elk]

yes sorry

real time streaming protocol im saying

[clear igloo]

All good, lol, I was wondering if you'd catch it

No issues here that I see with youtube live streams though

[peak cloak]

youtube tweeted about it

[snow elk]

maybe its central/eastern europe only

[peak cloak]

it's fixed now

https://twitter.com/TeamYouTube/status/1573362658283343872

TeamYouTube (@TeamYouTube)

hey creators! we’re aware that some of you may be having issues with livestreaming right now

you should be good to go if you make a new livestream, but we’re currently working on a permanent fix & will keep you posted ❤️‍🩹

follow along for updates here ➡️https://t.co/mtuHYksBA6

Likes

184

Twitter · Sep 23, 2022, 5:24 PM

[snow elk]

yup just read

[peak cloak]

https://twitter.com/TeamYouTube/status/1573366862024675329

TeamYouTube (@TeamYouTube)

whew! okay, everything should be working smoothly now with livestreams🎥

go live, have fun, & we’re here if you need anything⭐️

Likes

138

Twitter · Sep 23, 2022, 5:41 PM

[hollow marlin]

Yeah I assumed it was a typo. That said I don't believe YT (or most live stream platforms) use RTSP

[snow elk]

the cloudflare pop in my country is stuck, the ttl is stuck

updates to the rdns table on my ns dont update to 1.1.1.1 but update to 9.9.9.9

can you guys see if 1.1.1.1 gets the hostname for 193.31.28.9 ?

[peak cloak]

; <<>> DiG 9.16.1-Ubuntu <<>> -x 193.31.28.9 @1.1.1.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 51433
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;9.28.31.193.in-addr.arpa.      IN      PTR

;; ANSWER SECTION:
9.28.31.193.in-addr.arpa. 86400 IN      PTR     aylink.redtrap.org.```

[snow elk]

yup

just my country pop

[peak cloak]

are you doing @1.1.1.1?

[snow elk]

yep

[peak cloak]

what do you need rdns for?

[snow elk]

well thats not the only thing

my domains dont update either

as in.. A records

Same for 8.8.8.8

this is 9.9.9.9

and its not the only ip this one works on 9.9.9.9 as well

and

correct:

incorrect

weird that only dns with PoPs in romania have the issue

as in 1.1.1.1 and dns.google

9.9.9.9 which doesnt have a pop in romania, it has one in frankfurt, works perfectly

my isp's dns has the same problem 🤣

[velvet fjord]

is it good considering the fact my family is streaming a movie ?
Over wifi, not right next to the router and one floor above

[ornate jungle]

As @mystic latch said above, how "good" something is depends on your needs. If you can do what you need, then it's good. If you can't, then it might be upgrade time. Note that most things online don't require more than 25-50 Mbps to function properly. I'm not saying "nobody needs 500mbps speeds" - just that faster speeds are mostly beneficial when download large files.

[twin mist]

hey can i add a external harddrive on TrueNas but this harddrive is almost full do i will lose data?

[peak cloak]

depends how you configure it

[twin mist]

can you tell me or give me a tutorial video or side? cant find anything 😦

[peak cloak]

https://blog.victormendonca.com/2020/11/03/zfs-for-dummies/

you basically need to know zfs

[twin mist]

allright will look into that thanks a lot

[velvet jolt]

What brand or model router is good for home use and potentially making a home server?

[rocky badge]

@peak cloak @waxen scroll this low latency video over IP is so good

[pseudo blade]

What kinds of services are you likely to run?

[velvet jolt]

Maybe a vpn and file server

[velvet jolt]

I'm not looking for anything crazy. Budget around $150

Or $100

[pseudo blade]

Considered just getting a Pi/using an old desktop?

[peak cloak]

Mtik?

I mean it's not great for a server

[pseudo blade]

I'm not crazy fond of Mikrotik's SMB implementation

It'll do VPN just fine but I can't recommend using one as a fileserver

[peak cloak]

Me neither, it's ok

[pseudo blade]

And they are cheap

[velvet jolt]

Yes I'm going to use an old desktop. I just need a router because my ISP provided one can't port forward and the tp link is capped at 100mbps no matter what I do

[pseudo blade]

Need much in the way of Wifi coverage?

And what speeds do you need?

[velvet jolt]

More coverage the better? We have two routers but one is connected to cable in wall to the one I want to replace and in access point mode

Our house is decently long

I prefer WiFi 6 and our speed is 300.

[pseudo blade]

$100 doesn't go very far

I'm tempted to suggest the hap AX2 just to see how far you can get with one

[velvet jolt]

No matter how much I research and reset and change qos settings and follow tp link instructions, it won't go past 100mbps

[velvet jolt]

I could do $150.

[pseudo blade]

You know what? I'm going to suggest this and putting your fileserver on a desktop https://mikrotik.com/product/hap_ax2

If you want better, find a 4 chain Wifi 6 router for more money

[thick minnow]

what you guys say, should smart TVS be on a seperate VLAN the computers?

[shrewd relic]

I am completely lost. I have ports allowed in my local server's firewall, and both TCP/UDP port forwarding done, however, when I use an external scan to check if the port is open, it either times out or says it's still filtered. Yet, when I have one of my friends attempt to connect via IP:Port, it works, but not with hostname:port.

My endgoal is to be able to use my no-ip DDNS hostname for my friends to connect into the local server (it's a game server) so that I don't have to deal with my ISP and getting a static IP. Any help or direction would be appreciated.

[stark otter]

is this normal receiving 5 requests on my nginx web server?

i just saw this at school and i rushed back to my apartment to check my rpi

nevermind, it was a loopback moment

[peak cloak]

Well dig your hostname to see it's value

Google has a dig tool, search Google dig

[shrewd relic]

I did, hostname resolves to the correct IP

[peak cloak]

Well it should work. Try after 24 hours. See if the hostname resolves to the correct ip on friends machine

Could be cache

[shrewd relic]

hostname does resolve to the right IP on friend's machine

[waxen scroll]

@rocky badge Linus: omg we can do 100Gb x4

me: DWDM? 100Gbx32?

@hollow marlin they used mikrotik 😦

[clear igloo]

@waxen scroll DWDM 400G? 😄

[waxen scroll]

they're never going to buy ciena

[clear igloo]

lol

[waxen scroll]

i am curious why they were quoted $100k/m for a PTP

obviously fiber is in the area sooooo

or was that per year? idk still seems high

[clear igloo]

I think due to permits and stuff? i don't remember

[waxen scroll]

he says the reason they need it that fat is so 20-30 people can work... lol

are they all video editing with remote files? wtf

[clear igloo]

nope, lol

[waxen scroll]

man ive seen whole campuses use less than 1gb

[pseudo blade]

Tbh gigabit internet, an ipsec tunnel and "make a copy of what you're working on or go to the main office to edit" would probably be ample

Or use proxy media

It sounds like they're putting devs and engineers in there more so than editors anyways and from what I hear a plain gigabit connection's not very expensive

[clear igloo]

Exactly, it's not really video editors going there

[shrewd relic]

It seems to me that instead of trying to rent a 100G metro-E connection, they should have instead asked how much to rent 2 dark fibers there in-area. That quote for 100k/m seems waaaay too high for that

then if they wanna push high data, use a Ciena 4200 DWDM platform, or I think even the Coriant 7200 nano can do multiplexed OTU-4

[tawdry owl]

Kinda cool how there can be three hundred forty undecillion ,
two hundred eighty two decillion ,
three hundred sixty six nonillion ,
nine hundred twenty octillion ,
nine hundred thirty eight septillion ,
four hundred sixty three sextillion ,
four hundred sixty three quintillion ,
three hundred seventy four quadrillion ,
six hundred seven trillion ,
four hundred thirty one billion ,
seven hundred sixty eight million ,
two hundred eleven thousand ,
four hundred fifty six hosts on ipv6.

[shrewd relic]

and using it would probably solve my issues

[waxen saddle]

For a completely private fiber connection, to pull permits, get buyoff from property owners, roll a crew, and install the fiber underground, $100k doesn't seem that unreasonable. But per-month? I'm certain they really didn't want to do this job, and priced it to discourage them or make TONS of money off of gullible people. AT&T did this to my workplace once - or tried to anyway.

Feds had already payed for installing fiber to the area, but we didn't know that yet. So we were getting quotes from 3 different vendors (AT&T was one of them) and AT&T lied to our faces and had quoted us for rolling brand-new fiber.
We decided to go with a different company (not knowing all this) and that company, discovered AT&T was scheduled to roll fiber within 3 months and they had to wait for that so they could link in to it. We were gobsmacked to be sure. And I swore off anything AT&T for the rest of my life.

Anywho, all I'm saying is companies are no stranger to trying to screw people over.

[waxen scroll]

I've had crews rolled for 3k/m

But that's with contract and early term agreement

He has fiber today so there's no way they can't get point to point

The best part about it is they can't just charge you for speeds

As long as those optics work on single mode fiber do whatever

[willow burrow]

Sorry if I'm kinda behind, but like... Does LMG have actual network engineers, etc. on staff? I've found myself asking that when they had the fiber install with the Ciena, when they replaced the router in what appeared to be the middle of a workday, and when they decided to do their own fiber run.

[peak cloak]

I highly doubt it

[clear igloo]

Nope

[peak cloak]

which is why it sucks

[clear igloo]

Aside Jake and Anthony acting like them from time to time

Anthony has some experience I think but beyond that nobody with actual experience and knowledge in depth

[willow burrow]

Maybe I'll buy a screwdriver during the next WAN Show and send a merch message asking if they have any plans to. I find it really puzzling when they're not employing Cisco, Juniper, etc. Not that the stuff they're using isn't working for them, and I've heard a lot of good things about PFSense and Ubiquiti, but man... I wish they'd grab somebody who could at least give insight into the stuff they're looking at or working with.

[wet dune]

The new LTT screwdriver is amazing

[shrewd relic]

tbf, and sorry to you cisco people, but it seems cisco does enjoy wiffing their own farts a bit too much at times.

[waxen scroll]

They're still at the point one sysadmin could handle servers and network but they don't even have that

[south mist]

does anyone have any info on this

like on how to connect it to stuff

it comes with these connectors
one on the left is from the antenna and the one on the right is a adapter to PL-259

these cables are called “type N”

It also came with a Pl-259 to BNC adapter

[pseudo blade]

The connector's N-Type. The cable's coax of some sort. Your antenna's missing the cable based on the hole, they usually come with it soldered on so I suspect it's probably been torn out.

If that is the hole for the cable you're likely best off to scrap it and get another

If it is just a hole and the antenna comes out somewhere else it's a high gain yagi in a weird tube-shape - just point the business end where you want the signal to go

[pseudo blade]

Fixing that kind of stuff is content to them, so they don't have a proper one

Seems so far the dysfunction hasn't been sufficient to convince them to hire someone to do routine maintenance/planning vs ad-hoc IT, though if they're expanding to more buildings that's going to start punishing them quite a lot.

Like doing a wireless link to provide connectivity back to the main office on a shared /16 vs. A dedicated link, so outages/broadcast storms now affect multiple buildings

[south mist]

full picture of the thing

[pseudo blade]

That is female N-type. Have a radio to connect it to?

You adapt it to work with whatever radio you're using.

It's a fairly robust connector, manufacturers have not yet tried to torture us by terminating directly to u.FL

(I think u.FL will break if you glare at it too hard)

[waxen saddle]

Sys admins and net admins don’t make for good stories. And stories drive videos. Videos drive views. Views drive revenue.

[pseudo blade]

Pretty much what I said

However as they add developers/LTT labs they'll have an increasing number of staff meeting that definition

[south mist]

the seller says it’s for wifi

[pseudo blade]

Before long eventually the question will be "Is getting a video of making this and it breaking plus saving an FTE worth more letting 60, 80, 100 staff sit idle while we make that"

[pseudo blade]

Yes. A WiFi radio with an external antenna connector is necessary to use it.

[south mist]

wifi radio???

[pseudo blade]

Unless you just want it to jazz up your desk

[pseudo blade]

It doesn't have any brains, it's just an antenna. You can't just plug it into your switch and off you go, you need a device with a compatible WiFi radio to use it.

[south mist]

I know it’s just an antenna

[pseudo blade]

Why did you ask, then?

[south mist]

what do you mean by wifi radio

[south mist]

I don’t know how to set it up

[pseudo blade]

If this is not obvious to you, I'm going to suggest you return it as you don't know what you've purchased

[south mist]

🗿

can you at least send me pictures or Wikipedia articles on “wifi radios”

[pseudo blade]

https://mikrotik.com/product/RBGrooveA-52HPnr2

They sell fully integrated products also, which are cheap, more convenient and come in 5ghz offerings.

Ubiquiti also sells similar products.

But at this point I have no idea what your desired outcome is, one yagi by itself is not terribly interesting or useful.

[thorn island]

quick question, so on speedtest sites it states that my current wifi speed is 70mb/s. I start a download and its fine and everything until around like a minute later and it slowly dips down to 20mb/s constant forever. anyone know why this may be?

[whole scarab]

is it possible to bridge my androids tether and hotspot networks together ?

i need to connect my vr headset -> phone via hotspot and then phone to laptop via tether

and the laptop needs to be able to see the vr headset

[keen phoenix]

is there anyone here that know windows server really well?

if so dm me please?

[waxen saddle]

Just ask your question. 🙂

[keen phoenix]

Well I cant seem to get my file transfers to go at fulll 1gigabit speeds the vm virtual hard disk can do 500 MB/s according to crystal disk mark but i max out at 300 mb/s which i should be getting 1000 mb/s that is what my network is rated at

I know it is a windows server issue becuase i made some changes and the speed increased but i really dont know what i am doing

[waxen saddle]

Transferring 1 file or several files?

[keen phoenix]

about 140 thousand files

[waxen saddle]

Windows transferres multiple files slower because it has to create the file information for each file. Test with a single large file.

[keen phoenix]

gee i dont even know if i have any really large files at least anythign over 2-3 gigabytes

they are all smaller video files

[waxen saddle]

A 3 gb file should be fine to test with

Or 7-zip store files (no compression) in to a larger bundle

[keen phoenix]

I just transfered 1 5 gig iso and it was at 340 megabits persecond

stable

[waxen saddle]

SSD on both client and server?

[keen phoenix]

how can in he imortale words of leanardo de caprio pump up them numbers

no ssd to hdd

[waxen saddle]

HDD might be part of the slowdown.

[keen phoenix]

i just tried to my boot ssd and the same thing

i went ssd to ssd

[waxen saddle]

Hmmm

[keen phoenix]

i know it is not disk speed on either end

it is something with my network

but i really do not know what

[waxen saddle]

How about client to bare-metal?

[keen phoenix]

what?

oh I dont have any servers with bare metal everything is virtualized

Im using esxi

[waxen saddle]

Gotchya. What about VM to VM?

[keen phoenix]

I will test that right now

the nic on the windows server is vmwares vmxnet3 driver

[waxen saddle]

VM Tools is installed?

[keen phoenix]

Yes

oh btw I am on server 2019

and i am currently running 8 gigs of ddr3 ram on the vm

i dont think it is memory becuase when i start the transfer my memory is not going up at all it stays at 2 gigs

[waxen saddle]

I’m not sure where the issue is at yet. I’ve used Server 2003 and 2008 on ESXi and had better transfer speeds. Though, I don’t currently have access to them.
Did you do the VM to VM file transfer?

[keen phoenix]

same thing

[pseudo blade]

You're not using a USB2 NIC by any chance? @keen phoenix

On either side

[keen phoenix]

no the vmware vmxnet3 driver no usb

[pseudo blade]

Or is this all happening in one physical host

[keen phoenix]

the file server can get about 500MB/s on the share drive when i do crystal disk mark

[pseudo blade]

Is it one physical host running both the server and where the files are coming from?

Or is it another computer?

[keen phoenix]

yes

one host with the drives in raid 0 i know not good for data protection going to esxi

and then the virtual machines have vmdk assigned to the datastore

[pseudo blade]

What is the physical NIC on both sides?

[keen phoenix]

the nic on the client side is the motherboards built in nic an I219 made by intel

and the vm has its vmxnet3 driver which is vmwares driver

[pseudo blade]

vmxnet3 is not the physical NIC

[keen phoenix]

Intel(R) Ethernet Connection (11) I219-V

well there are 4 physical nics

hold on i am finding

HP Ethernet 1Gb 4-port 366i Adapter

[pseudo blade]

So the hypervisor's pretty old

[keen phoenix]

6.5

[pseudo blade]

Try setting up iperf and run a test over the network between the two.

[keen phoenix]

hold on

please wait i am donig it

bandwitdth is 343 mbits

[pseudo blade]

With iPerf?

[keen phoenix]

yes

[pseudo blade]

Well that tells you that you can safely ignore your disks as an issue.

[keen phoenix]

well now i need to knwo what is beign fucky wucky with my network and why

hmmmmmmmmm the plot thickens

[pseudo blade]

What's between the two devices, hardware-wise? Switches? Routers?

It really screams USB2 to me

[keen phoenix]

a cisco switch a pfsnese router that is it

[pseudo blade]

What's the pfsense router made of, and is your traffic routed through it for these tests?

If it's all on the same subnet you can ignore the router

[keen phoenix]

yes it is it is an old supermicro prebuilt thing

can i run iperf on pfsense?

[pseudo blade]

Yes

[keen phoenix]

how would i do that?

[pseudo blade]

https://docs.netgate.com/pfsense/en/latest/packages/iperf.html

The docs there also raises another possible cause - firewall and routing performance of the pfsense box itself

But running iperf both ways from the router will give you a good indication of where the issue lies

[keen phoenix]

i just tried ti to my router i went across it both ways 1 from the client side and one from the server side and the client going to the server network was 350 Mb/s

and the server goign to the client was 250mb/s

interesting

[pseudo blade]

Pull CPU usage on the router while performing iperf from server to client

[keen phoenix]

it is 50 percent

[pseudo blade]

Does the router have two CPU cores?

[keen phoenix]

it has 10

[pseudo blade]

Router sorry

[keen phoenix]

the router has 4 though

[pseudo blade]

Is all the load on two cores?

[keen phoenix]

oh sorry 2 i lied hahaaahaha

[pseudo blade]

Is one core maxed and one idle when running the test?

[keen phoenix]

where od i go to check that

[pseudo blade]

SSH into the router, run pkg install htop, then run htop

If that does not work, it is likely your router has not been updated for a very long time

[keen phoenix]

im sorry for taking ur time i am learning alot though

[pseudo blade]

Also if stuff is singlethreaded it's probably not been updated for a very long time

[keen phoenix]

it is running 2.6.0

the latest community edition

and i cant find htop

[pseudo blade]

Hm.

Just run top then

Look for processes exceeding 90% CPU

[keen phoenix]

is that on the gui or cmd?

[pseudo blade]

If any

Terminal/cmd

[keen phoenix]

can i run iper continously?

like is that -t?

[pseudo blade]

Try -tinf

It might work if rando dude from stackoverflow is right

[keen phoenix]

yup

[pseudo blade]

Tom wins this round

[keen phoenix]

i think i found the problem

[pseudo blade]

What did you find?

[keen phoenix]

read for urself

it is not a cpu speed issue but i think it might be a some sort of queing issu

e

[pseudo blade]

CPU speed or config issue

[keen phoenix]

i do not know i am not experienced enough in pfsense to tell

hmmmmmmm

[pseudo blade]

If you are implementing traffic queues that would definitely do it, those are expensive

[keen phoenix]

im not currently

[pseudo blade]

What CPU does it have?

[keen phoenix]

Intel(R) Atom(TM) CPU D525 @ 1.80GHz
4 CPUs: 1 package(s) x 2 core(s) x 2 hardware threads

[pseudo blade]

Not very powerful, though it should be tuneable above that speed

[keen phoenix]

so what would i need to do i am not really experienced in this field even though i ahve a networking degree

im still green

[pseudo blade]

The if_io_xx process using 100% CPU is your network driver

So pretty much scrap pfsense or scrap the router if you want your fileserver on a different subnet

[keen phoenix]

well i have a layer 3 switch

[pseudo blade]

That would be ideal

[keen phoenix]

i have a 3560x why dont i just do layer 3 routing

that thing has like 100gb/s total throughput

[pseudo blade]

If you don't need sophisticated firewalling why not

[keen phoenix]

well i just need the firewall for a firewall and vpn

and i have a cisco 2901 for voice duty

i think i will use the layer 3 switch and then use pfsense as an edge router

[pseudo blade]

Seems reasonable enough to me. Hope that helps with your issue, seems likely.

[keen phoenix]

yeah if not can i dm u beuase i still think there might be somethign funky with either the nics on either end or something else

but i will test the switch out tomarrow

[pseudo blade]

If I'm available I'll answer.

[keen phoenix]

thank u

I just sent you a dm so your in my list

[pseudo blade]

Ok. It's probably fine to just ask here though, and then others can assist if they are interested/available and I'm not. I don't give free SLAs, after all.

[vivid belfry]

bell 8gb symmetrical is 135/month..... finally canada has a good internet plan

[snow elk]

expensive

bell: "Sorry for the 135 price tag!!"

Very sorry!

[slow pivot]

8gbit symmetric?

[sudden kayak]

that's pretty bonkers

ours is like $300/month plus i think $1k installation fee for 3Gbps at the very most :(

although that is going to improve massively very soon

[vivid belfry]

Yes

No, I'm assuming it's going to modem -> router - > switch

So modem -> router..?

[waxen relic]

Yes

All using Ethernet

I gen a DNS error if that helps

[peak cloak]

G3100 is a router not a modem

[waxen relic]

@peak cloak yes it’s both

[peak cloak]

no it's not

[vivid belfry]

All I can say is make sure you enabled bridge mode.. everything else is above my paid grade

[waxen relic]

Required be ISP aka A-hole

[peak cloak]

it's not tho

verizon fios

I have fios at home, I use my own router

[waxen relic]

That’s not helpful

[peak cloak]

anyway when you loose connectity

can you ping like 1.1.1.1?

[waxen relic]

Bridge mode will disable my security settings

[peak cloak]

yes... because it's no longer a router and can no longer apply firewall

you said you have a router behind the g3100?

if you don't, then don't enable bridge mode

a router will do firewall by default

the g3100 is it connected by ethernet or coax?

[waxen relic]

Both the cox

[peak cloak]

the coax may be the issue tbh

[waxen relic]

Cox keeps my Cable on

[peak cloak]

cable tv?

[waxen relic]

Yes

[peak cloak]

oh yeah, hmm.

I heard fios was going all ethernet for gig installs, but idk how they handle tv

[clear igloo]

Probably going IPTV boxes or something

[opal kraken]

Will a docker container isolate malware like a vm?
From my understanding (correct me if i'm wrong), a vm's allocated space is what the vm sees and nothing else. hence why the malware doesnt spread outside the vm. And when the vm is deleted, everything within that space is deleted as well.
Is it the same for a docker container (or other types of containers) ?

[glacial linden]

• Trying to make DNS over TLS (DoT) and DNS over HTTPS (DoH) work on my server (Ubuntu 22.04)
• nginx forwarding the requests to pihole
• I can make queries locally by manually doing a DNS query on port 853 (DoT)
• can't make any queries externally (Android 11 Phone, Chrome/Firefox)
• can't even see the port as open through anything (windows ping / android pingtools / etc, times out)
• empty nginx logs on serverside.

• made sure ports are open in all (ufw, iptables, cloud firewall incoming rules)
• have used the same set of rules to allow Port 53
• DNS on port 53 is working perfectly

Any ideas on what the problem might be?

I also tried using stunnel instead of nginx. Same result - local queries work but external ones are dropped somehow, empty logs

[peak cloak]

Containers share the kernel with the host as I understand so it's less secure for running something untrusted

[peak cloak]

Why nginx

Just point to the server no?

[glacial linden]

Because I'm also hosting a website on the same server

[glacial linden]

wdym "point to the server"

[peak cloak]

I understand doh

[peak cloak]

Ignore me, I thought it was local

[glacial linden]

Guides that I found on DoH with nginx are outdated and for ubuntu 18, and rely on nginx nodejs, can't install that since some repo signature or something isn't right on ubuntu 22

Not sure if it's related to nginx not being present, since local queries on that port are working

also I tried tcpdump on port 853 for DoT and saw packets reaching the server... but nothing on logs so quite sure its not a firewall problem

When I had just 1 desktop, I used to run pihole locally with simpleDNScrypt... don't feel like keeping 3 separate docker instances of pihole on all 3 windows devices I have

[waxen scroll]

sounds like your domain name is not set up to use that server for its DNS

since you made DNS entries for it on your local network your server does not need to ask for the domain's DNS server

[glacial linden]

do have a noip domain name with ssl/etc done with certbot and https working

seems like I do need nginx's nodejs module after all for DNS over HTTPS

I have nginx 1.18 for some reason so I have to install nginx njs module 1.18 as well for arm64

and nothing - no curl command etc was working... So I manually downloaded the .deb file from nginx website and copied it over to server using WinSCP SFTP

[glacial linden]

I can access the noip domain (and nginx home webpage) from anywhere, so it's not just a local record ig

If the queries are reaching the server but nothing's showing up in access log when external queries are made - what can the problem even be... that's what is most confusing

[sudden kayak]

my parents have fios w/tv and apparently they are very reluctant to let them go full ethernet

not sure if that's because they don't want to take on the expense of replacing STBs with IP boxes, or some actual limitation

although now that i think about it, they said their STB was broken so maybe they'll finally replace it and let them go Ethernet only

then i can get rid of their shitty actiontec router

[waxen relic]

I found that my G3100 was updated now my Ubuntu will not connect

The Linux machines are not getting internet from my g3100 router

Could putting a new device in between them fix it?

[vale storm]

My student dorm house management limits the internet speed per client to some arbitrary amount. Is there a way to like plug multiple inputs into a router (like dual WAN but it uses both simultaneously to double the speed) to make my own subnetwork?

[sudden kayak]

there is a way but the catch is it involves a server on the other end

i.e. there's no way to make any individual connection go over two different WAN connections and have it magically appear as a connection with the combined speed to the other end of the connection (a server or website or whatever you want the doubled speed for)

you have to connect to another server that you control, and that turns them back into one connection to the destination site

[vale storm]

Basically like a VPN?

[sudden kayak]

so in other words you'll need to be pretty comfortable with advanced networking and running your own server

yeah pretty much the same concept but two VPNs that go back to the same place and get combined again

[vale storm]

Yeah, okay...

[sudden kayak]

also if it's a dorm internet policy they'll probably notice and catch you anyway

[unborn sluice]

Yea okay

[sudden kayak]

so I'm not sure I'd recommend it in your situation

[vale storm]

Reason why I'm asking: I get 20 Mbit/s down and 11 Mbit/s up per client. I'd want my own subnetwork so other people in the house can't see my devices and so I can have my own set up with regards to inter-device connections and stuff but if the router is seen by the network as one client, all clients in my subnet have to share that bandwidth.

[vale storm]

Well, I have 5 or 6 devices anyway

So it wouldn't make a big difference.

Whether I connect them individually to the wifi or just run that VPN thing

[vale storm]

Oh, and those speeds are at 4:30 am where no one is using the network.

[pseudo blade]

There is a trick that might be good enough - get your router to request say 4 IPs with different MACs, then loadbalance your client's connections between them. Won't give you a faster single connection speed but it will make threaded downloads faster and permit multiple applications to use different ratelimits, improving overall experience

[pseudo blade]

For the clients behind the router, up to that number would get an equivalent or better experience, most of the time.

[wind knot]

Sounds like a shit college

Who does that

[peak cloak]

It's common practice to speed cap clients

Like mine prob has at least gig, prob 10 gig or more

But I get 200 Mbps max

[vale storm]

It's a private dorm...

[vale storm]

We only get 500 Mbit/s to the house and there's 40 people living here, so yeah.

[wind knot]

We have a gig in each wing which is split between whoever is on at the time

[vale storm]

This is Germany though so our network infrastructure is still stuck in the 1990s

[wooden condor]

does anyone have a small form factor PC that either 1. has 2x. 10gb/s ports, or has room for a PCIe x16 or x8 card for a multiport 10g card? Something NUC or smaller sized.

I bought a 4 port 2.5gb/s box that I put pfsense on, but really want something a bit faster.

and so far best I can find is a smallish intel NUC

but they are STUPID expensive.

[ruby bramble]

You wont get something with dual 10g smaller than a nuc

Best you’ll get is an itx build

[dry bronze]

could look at something like a lenovo m920 tiny. has a pcie port but think you have to do some case modifications to fit a 10G nic

[wooden condor]

There’s a bunch of no name 2.5g and 5g multiport boxes but none of them are 10g yet. I’ll look at the 920 when I get home, ultimately it’s gonna be an Ubuntu box on kvm running Cisco FtdV so complete overkill for my home network lol

I could run on esx too I suppose

[wooden condor]

Which is what I have now. I built the mini NAS that Linus did a while back but upgraded the processor and memory significantly I thought about building another one just would want a smaller case since I don’t need 6xSata

[sudden kayak]

some of the the 1L chassis volume USFF machines from HP, dell, lenovo come with single slot PCIe options

you can put a dual 10g card in them

[sudden kayak]

exactly

some cards fit without any modifications

[wooden condor]

the card I'm using is an intel 540AT2 - it has a half height rear panel, and it's a short card -

https://www.amazon.com/gp/product/B01HMGWOU8/ref=ppx_yo_dt_b_search_asin_title?ie=UTF8&th=1

@pseudo field can you recommend any models specifically to look at.

she is... I will concede that point

dell has a decent selection of SFF, don't see an USFF options

[hollow marlin]

@rocky badge @peak cloak Quick, you have 6 hours to build a small scale SP network from scratch and configure all required service. Go!

[waxen scroll]

☁️ icon. done.

[clear igloo]

You need two clouds for redundancy, task failed

[ripe coral]

Was watching a video on multi area ospf configuration and bro just started praying

[ripe coral]

Also im studying for the CCNA and shit, i understand most of this but what the actual fuck is going on here and whats the point

[waxen scroll]

its just a study network for a CCIE-like test

[gritty tundra]

Any one know any good wall sockets for gaming

Ethernet

[waxen saddle]

Pretty much any from a place with good reviews.

[drifting raven]

I'm trying to figure out what a second hand Dream Machine Pro would be worth. Ran for about 1.5 years with low load.

Reason I'm asking: the eBay prices are outrageously expensive for a used router. Usually more than the sticker price at the Ubiquiti shop...

[hollow marlin]

It's one of the practice labs for the JNCIE-SP. Thats just the physical topology.

[ripe coral]

Pray i never have to take that test any time soon

[waxen scroll]

you wont! certs are getting less relevant for jobs

not to hate on @hollow marlin or anything, its just what I've experienced

its good learning but employers dont really care or check validity most of the time

if you do tell me you have a CCIE or equal, I'm telling HR to look into it though

😄

lots of CCIE liars

[zinc badger]

what do switch layers mean, like layer two switch or layer three switch
https://store.ui.com/collections/unifi-network-switching/products/unifi-switch-48
like this one says its a layer 2 switch

[hollow marlin]

Oh I don't disagree. Im mostly doing for a personal goal and the bonus pay raise for having an IE level cert. With all the sketch "testing centers", the value of the cert has lost most it's meaning.

[waxen saddle]

A layer 2 switch is your basic, standard, default “switch”. A layer 3 switch incorporates some or all of the functions of a router - which is a layer 3 device. Layer 3 switches are great for routing packets between vlan’s (for example) without tying up a router acting as a gateway to say, the Internet.

[wooden condor]

Anyone with a cco account can validate your status, or there are some active lists but they wouldn’t show expiration or attainment dates

[wooden condor]

I would say this depends on where you want to work, if you want to work for a partner or solution provider high level certs are still valuable both in terms of pay and helping the partner qualify for status… I would agree that the practical knowledge through studying though is still far more valuable

[zinc badger]

i think i get it

so like layer three switches take some of that stress off the router

[waxen saddle]

…and for more efficient routing too.

[zinc badger]

would i plug aps into a layer 2 or three switch?

[peak cloak]

Depends on the setup

Intervlan traffic yeah

If configured to do so

[peak cloak]

Both would work,but you don't need l3 if you are asking that question

[neat whale]

Why does my router appear to branch the 5ghz connection to the Ethernet?

my PC is saying "Connected to (redacted)-5G".

But its hooked up to the Ethernet

[unborn sluice]

because it is connected

[peak cloak]

Found this

https://superuser.com/questions/1316481/how-does-windows-decide-the-name-of-ethernet-lan

The other way I think it can get name is via dhcp name

[neat whale]

I don't have my wireless on fyi

on my PC

[peak cloak]

But did you one time?

[neat whale]

Possibly

[peak cloak]

No... Why would it

[neat whale]

I can toggle settings for each connection though. Individually.

[waxen saddle]

You can connect to Wi-Fi and Ethernet at the same time. Windows by default will prefer the wired connection over the wireless.

[neat whale]

I don't have wireless on

[unborn sluice]

You can connect simultaneously to wifi and wired though

[bitter goblet]

do any of you guys know of a free debrid so that I can bypass the download speed limit on upload haven

[unborn sluice]

doubt

[bitter goblet]

why

[near pike]

Hello, today I redid my network system

modem -> deco x20 -> network switch -> deco x20 -> pc

all are connected through ethernet but i've been having a lot of drops in internet connection
is the above layout of my net

previously I had

modem -> Archer A7 router -> deco x20 (access point mode)

it was working fine but for the last two weeks or so I've been getting a lot of connection issues and lag in game

a spectrum tech came out and said that it was the router causing issues so I switched it out for a spare deco x20 i had

can anyone tell me what could be the issue? I also replaced the modem as well

[velvet jolt]

Our ISP router gave us an IPV6 IP address. I got a new ASUS router and it now gives us IPV4. Is it worth it to enable IPV6?

[unborn sluice]

do you need 6 IPs

[zinc badger]

What am I doing wrong 😭😭

I swear there the same at both ends

[uneven gulch]

@zinc badger You are crimping the strain relief on the wire. The sleeve has to go behind the strain relief. It is possible to break or short a wire in this way. That is at least one possibility.

Make the wires a lot shorter (or push them further through) until the sleeve of the cable is behind the indentation on the plug.

[peak cloak]

^

Some more tips

When you strip the outer jacket give yourself like 2 inches

Straighten out all the pairs

Then align the colors

Idk how to explain it but I like "wiggle" it to get everything straight and aligned right next to one another

Then cut off amount needed

And itll be straight and slide right in

[split forum]

can someone explain to me why Ap isolation would be in data link layer 2 of the osi model or how it relates to being in layer 2?

[dire meadow]

Does anyone know if Cisco GLC-SX-MMD sfp modules are compatible with Intel X520 PCIe NIC?

[sudden kayak]

when you say AP isolation.. you mean client isolation? or something else

[split forum]

Yeah

[sharp holly]

Hi guys, I'm in grade 11 and i have a network homework, I'm not sure how to do it, could some of you help me please?

[sharp holly]

ok, I'm just not sure what to do
I'll send a picture of the worksheet

[peak cloak]

Yeah so create 3 subnets

[sharp holly]

idk how to...

[clear igloo]

Well then I guess you need to learn subnetting

[sharp holly]

can someone teach me, or like walk me through it?

[clear igloo]

I would suggest googling variable length subnetting (VLSM) and go from there and see where it leads you

[sharp holly]

okay

[clear igloo]

figure out how many subnets you need to break the /24 into
figure out how many hosts each smaller subnet from the /24 needs so you can accommodate all the hosts + gateway address

[sharp holly]

ooh okay

thank you

[clear igloo]

and remember this, largest to smallest 🙂

[sharp holly]

okay thank you again

[waxen scroll]

Jodie's tho

That format actually looks like Jodie's lol

[thick minnow]

Can i get lancache and adguard home onto the same listening port. I tried port 81 and port 444 for tcp and udp for lancache and it doesnt seem to be doing any caching. No files being generated and no memory usage increase at all when downloading from steam.

[peak cloak]

No, you can only bind one program to a ip:port

You can run a reverse proxy however for http

Or just change the Adguard port

[thick minnow]

thats true ill just change the adguard port

lancache seems to be finnicky

[thick minnow]

@peak cloak It worked. But i ended up knocking out my internet connection in the process lmao

cant change the adguard port

[peak cloak]

Well you can't change the DNS port

You can the webui port

[thick minnow]

and for some reason now i cant use the dns server on my pc

everything says that a dns probe is possible

[waxen saddle]

The fat version of lancache has a built in DNS resolver. So it acts as a perfectly viable DNS server.

[thick minnow]

I see. Problem is now is that i cant see if it works since i dont get internet when i connect to the dns

i set everything back to normal but now my pc is spazzing out saying that dns probing is possible even though its the exact same settings

[waxen saddle]

Write out your DNS hierarchy.

[thick minnow]

192.168.1.208 is the server. server is connected to the router 192.168.1.29 and thats connected to the gateway

[waxen saddle]

So your PC has the DNS set to “…208”, and …208 forwards DNS to …29? And …29 forwards DNS requests to your ISP?

[thick minnow]

yea

[waxen saddle]

Set your computer’s DNS to 192.168.1.29. Are you able to resolve hosts after making this change?

[thick minnow]

wait i figured it out

the outstream port for the adguardhome dns was 54

its suppoosed to be 53

[waxen saddle]

Nice

[thick minnow]

Sad thing is though is that im back to square one with the lancache deployment now

[waxen saddle]

Just work out where it will sit in the DNS hierarchy.

I recently re-arranged mine. Used to be:
PC > Lancache > pihole > router > ISP.
… but pihole started throttling requests from lancache because it was forwarding over 1,000 queries/minute.

Moved the pihole in front of the Lancache. And voila, problem solved.

[neat whale]

Anyone have any good recommendations for fiber routers? I prefer netgear. Amazon won't show what type router to filter, and all I keep seeing are cable routers. I'm wanting a combo all in one.

[peak cloak]

no such thing really

and it all depends on ISP

because unlike DOCISS (cable), there is no set fiber standard for everyone

verizon fios for example has their ONT which terminates the fiber and just gives me ethernet to plug into

optimum on the other hand forces you to use their router/ONT combo and you need to put it in bridge mode

and the cable ones are modems + routers in one

[peak cloak]

Getting into the prosumer market I see

[neat whale]

Eh. Just need a basic-ish router. Still great speeds but not too high tech. It would have to be compatible with MetroNet

[pseudo blade]

You have an ONT provided by your ISP, so you're only dealing with ethernet. What speeds do you need?

[crisp bay]

question since it's networking related: can I output Docker container network usage (inbound and outbound), while the Docker is set on Host mode (no isolation)? Of course to Grafana so it'd be ideal in json format..

[zenith folio]

What are some nifty programs you guys use on a Windows Server

[wind bramble]

I got neto swoot

I dont have the 10gbe nics doe so its slow

[pseudo blade]

As few as I possibly can, for licensing and security reasons

[sly zealot]

Hey guys 👋

Home NAS question here

So i am going to build a home storage and media server
what i have in mind is i want to install openmediavault for creating samba shares and install nextcloud to use with mobile devices and install plex for media streaming

How can i do this ? Currently i am thinking of installing openmediavault iso on my old pc and then adding nextcloud and plex on top of it

If you guys have any other suggestions , i am here for them
My constraints are - A super old dual core PC , 1 tb hdd and will make it 4 tb in future
I dont want my NAS to be SUPER fast it will be mostly used for storage and maybe some light media streaming
also , i want to access my nextcloud instance from anywhere , how can i do that ?

[dusty robin]

Hello, I am currently using a WIFI network, and for the longest time i didnt have any issue what-so-ever.

but, for the past few days, im having huge lag / ping spike while playing games and even watch youtube videos.

I'm gonna take guild wars 2 as an example, every minute or so, my ping spike up to 6k (goes from 40-70 to 3k-6k).

would anyone know how I could check my internet stability? or a way to fix it?

Thanks, robert

[meager ginkgo]

are you using a cable modem?

DOCSIS

[dusty robin]

im not really following you

[meager ginkgo]

How does your internet come into the house? Fiber, wireless, coax?

[dusty robin]

I think its fiber

[meager ginkgo]

alright then it’s not the issue I was thinking of..

Hmm

Have you tried restarting the router?

[dusty robin]

oh yes multiple times

[meager ginkgo]

It could be WiFi interference, not really sure to be honest

Can you test via an Ethernet cable?

[dusty robin]

i forgot to mention that im pretty far from my router

[meager ginkgo]

if you have something blocking the signal and you’re on weak signal already that could be why

Any new furniture or anything you can think of?

[dusty robin]

a wall

[meager ginkgo]

you added a wall?

[dusty robin]

well yes and no

i added a room

where the clothes are at

[meager ginkgo]

That’s probably why..

[dusty robin]

i forgot the english name

[meager ginkgo]

Closet

[dusty robin]

ye that

[meager ginkgo]

not much you can do unless you get a router with better range, get a mesh system or wire your computer

my easiest recommendation would be to buy a mesh system

[dusty robin]

Are those expensive