networking

[peak cloak]

that's why they are not here

[sage crow]

Idk ab wifi 6e but you can get wifi 6 APs for like $100

[peak cloak]

all the consumer ones jump on it cuz big number better

@sage crow yeah I pointed that out here

[pseudo blade]

WiFi 6e is an expensive prosumer thing at this time

WiFi 6 is just getting cheap now

[sage crow]

Wifi 6 is still sorta at the forefront

[nimble sable]

APs used to be cheaper, because we were all using well tested tech (wifi 5 and wifi 6). The reason APs were cheaper was simply cuz there's less stuff in there and enough businesses were buying them.. With 6e businesses don't want to adopt yet cuz they're slow enough to want to wait for 7. But 6e offers very real MASSIVE upgrades to home users so routers are putting it in

Wifi 6 is basically unusable where i live

[peak cloak]

APs are basically always cheaper, idk what you are looking it

that "AP" you linked isn't an AP

and idk how wifi 6 is unusable, I'm still on wifi 5...

[pseudo blade]

I'm still using WiFi 4+5 and have little incentive to get anything newer because there is no fixed offerings over ~70mbps

[nimble sable]

I know i linked a router. The AP equivalent is https://www.netgear.com/ca-en/business/wifi/access-points/wax630e/

[sage crow]

Same and content

[nimble sable]

I live in downtown Toronto. In a large building surrounded by office networks that are powerful enough to drown out my wifi5 and 6

6e has been insanely better

[pseudo blade]

Sorry I seem to have missed at what point a cloud-managed business AP was like-for-like a consumer router

From a different brand no less

[nimble sable]

That's my point is there's no consumer 6e AP

They're all prsumer

[peak cloak]

well consumers don't usually buy APs

[nimble sable]

Or business class

Unifi has a 6e AP too which is $300

[thick minnow]

Ima fucking sue my WiFi provider wtf

[nimble sable]

Yes basically same price as the axe5400 router

[peak cloak]

with much more features

[nimble sable]

Ok let me rephrase

Given the market conditions right now, and living in Canada. I find 6e routers to be either more readily available and at least at the same price. What am I losing by going to an axe7800 router (like Asus) vs axe7800 AP like Netgear business class stuff? Given I'm just an individual

[peak cloak]

nothing really (as long as same spec)

[nimble sable]

Cuz it's insanely difficult to find good APs

[pseudo blade]

Firmware differences, whatever the spec sheet says

[nimble sable]

What the hell am I going to do with 4x4 on 5ghz?

[pseudo blade]

Read the specs

[sage crow]

Just cause it’s not wifi 6e doesn’t mean it’s not a good AP

Lol

[nimble sable]

That's besides the point I'm shopping for 6e

[nimble sable]

Ya the routers are usually not sensible for me, like only 2x2 5ghz

[sage crow]

Well the 6e market is still fairly fresh soooo good luck

Most consumer routers have just started offering it within the last few years

[nimble sable]

So this is just a weird thing cuz the market is fresh?

Presumably in a few years 6e APs abound and cheaper?

[sage crow]

Yes when wifi 7 comes out

[pseudo blade]

I don't even own any 6e-capable devices

I will in a few weeks

[sage crow]

Same unless it comes with options for lower frequencies

[nimble sable]

Ya i need to upgrade my tablet right now using a USB 6e thing on it

[carmine moss]

it's also not really widely adopted wifi6e most devices are only 2.4 and 5ghz still not a lot on 6 ghz wifi 7 will change that tho

[nimble sable]

I went from frequently dropping wifi can't play 4k consistently to 2.3Gbps on WiFi anywhere in my house

[pseudo blade]

I'm in no rush, the only new-ish WiFi feature of interest to me is WPA3

[nimble sable]

This is another big reason for me wanting newer wifi devices ya

[peak cloak]

something sounds wrong

[carmine moss]

pretty much atm is just run your wifi 5 or 6 ap and get a wifi 7 when wifi 7 is finalized as some brands are launching wifi 7 devices before the spec is final

[nimble sable]

Let me put it this way. Going from my old wifi5 unifi to 6e has been a bigger change than the time i went from crappy 1080p monitor to totl 4k oled

[nimble sable]

Yes obviously lol. But i gotta live with said wrongness

[sage crow]

Luckily I live on a farm so I’ll never need anything but wifi 5 lol

[nimble sable]

And since when are we judgy about adopting new tech that's unnecessary? This is the LTT server right?

[peak cloak]

it's expensive

[carmine moss]

also pretty much only expensive phones support 6e and some laptops not most laptops

[nimble sable]

Anyways, i think what's happening is businesses don't care about 6e as much as regular folks do

So even prosumer space is lacking, waiting for 7?

Idk if I'll buy into 7 for at least another year or two, when's the thing expected to be finalized?

[carmine moss]

as the business laptops don't support 6e and 7 is a giant change vs 6 that's currently used

[nimble sable]

Phones moved to 6e REAL quick

[sage crow]

I don’t see many consumers caring about 6e lol most people don’t even have wifi 6 yet

[long scarab]

my network appears to be down

[nimble sable]

I think what 7 might bring is more 6e

[sage crow]

It’ll buff

[nimble sable]

Yea is mostly marketing isn't it? At a prosumer level i thought there'd be more interest in it

It's an entire GHz of wifi no more stupid dfs

[pseudo blade]

Very creative mounting solution you have there!

[sage crow]

Tbf most business just have wired infrastructures.

Their is wifi yes but for most of their tech it’s wired connections

[nimble sable]

It depends? A lot of offices give employees laptops

[long scarab]

mhm yeaa, good thing it's not my equipment
i'd be fuminggg

[nimble sable]

Then there's like stores, stations and stadiums

[sage crow]

Obviously not a big need for 6e tho

[pseudo blade]

I don't like big wall cabinets like that, I've had to get stuff in behind one on hinges and I was terrified it'd do that on me

[carmine moss]

also wifi these days for laptops but they are on lease and mostly using older nics for stability vs going bleeding edge with probably early adoption problems

[nimble sable]

Funnily enough my office laptop was the first thing that had 6e on it

MacBook pro

[sage crow]

Yea most of those laptops only support 5ghz band

At most

[carmine moss]

macbooks are not the norm for laptops in companies most are hp and then dell etc

[nimble sable]

Ya. And even then the real thing about 6ghz is the space. And businesses don't real care

It's ppl living on overly congested areas who will benefit the most

[peak cloak]

my dorm just upgraded to wifi 6

[nimble sable]

So why bother at all? Just stay at 5ghz forever. no one cares or wants it?

[carmine moss]

wifi 7 will have double the channel speed and more density and have the 6 ghz spectrum so buying into 6e is time to swap again in a year

[nimble sable]

But realistically 7 won't be ready for consumer use till 2025 at least

How many devices are gonna have 7 antennas in 2024

[carmine moss]

it's getting the first conumer devices later this year wifi 7

[nimble sable]

Yes but, first gen devices though

[carmine moss]

still will be easier to get then 6e

[nimble sable]

Right. But that's what I mean. What y'all said seems like business don't care cuz they all just wired and consumers can't benefit. Most consumer devices are wifi5 not even 6 tbh.

[nimble sable]

See that i think is dumb too. I had an old wifi5 AP. And wanted to upgrade. I just skipped 6 went to 6e. Could've waited a bit and went to 7. Going from 5 to 6 is kinda weird too. For the exact same reasons that ppl are waiting for 7

6e was finalized in 2020...3 years later and we still barely have it deployed. That's what I'm trying to understand...ok wifi7 is announced now etc but why isn't there even a small tiny bit of market ask for 6e?

AIl the totl routers have 6e today. But prosumer products, nothing

[sage crow]

If you’re so worried about it just dish out the money for a 6e AP lol idk what to tell you

[nimble sable]

I'm trying to understand

What makes the jump from 6e to 7 better than the one from 6 to 6e?

[sage crow]

There just isn’t a high demand for it lol

[nimble sable]

Yes but why?

[sage crow]

Cause 7 can utilize 2.4 & 5ghz at the same time

Without losing connection at longer ranges on the same ssid

[nimble sable]

I mean, that's true for any new tech it's gonna be better than existing

[sage crow]

It’ll be better then any previous version of wifi lol

[nimble sable]

Why did ppl wait 3 years for 6e but aren't gonna wait for 7?

[sage crow]

Cause older devices will be able to utilize it

[nimble sable]

Ooh... Older devices use some of the new tech?

[sage crow]

You’ll have 2.4,5,and 6ghz in 1 ssid

If that makes sense

[carmine moss]

6e is fine if you have a lot of devices that can use it and no brick walls between your rooms. but it's just most people don't have the need for that. as it's not like 5ghz is quicker then most internet plans people have

[nimble sable]

I mean, i have that now

[nimble sable]

The main thing about 6e isn't speed but the frequency

It's weird that everyone didn't immediately jump on it

Wifi7 wasn't a thing in 2020

Wait... Covid? Maybe cuz covid

[sage crow]

Idk techtips channel made a video about wifi 7 advantages i don’t remember what it said tho

Their was something significant over 6e tho

[nimble sable]

I think i got my answer, pretty sure it's COVID

[carmine moss]

the thing is also 6ghz compadible devices auto connect via 5ghz even if 6ghz is there and wifi 7 is a bigger jump as it can just swap from 6ghz to 5ghz to 2.4ghz more seamless

[pseudo blade]

6e is just 6 on the 6ghz band, 7 has 320mhz channels and more features

[nimble sable]

6e was released during COVID. A time where business where down scaling but consumers where going the other way. Thus more consumer 6e and by the time business were ready to buy new shit 7 is gonna be thing.
This explains why 6e wasn't adopted in 2020. When 7 want a thing. 6e offers 160mhz in most places 160mhz on 5ghz is impossible

[sage crow]

Sure that works

[nimble sable]

Of course the tech industry thinks other countries don't exist so...

[carmine moss]

also the main thing 6e gives is just 6ghz which in europe makes no sense as people want range with brick walls in an appartment it makes some sense but it's just not a lot of people have devices that use it still as most people are on 2 year old phones that are low to midrange if not older devices

[nimble sable]

Iirc iphone will straight up not connect to 160mhz wide

[sage crow]

I dont think they care lol

[nimble sable]

Oh..hmm yea.

[lone sun]

🤔 How do I force my PC to assign an Apipa address? I thought simply disconnecting it from the router/modem would do it, but it didn't work.

[peak cloak]

there needs to be a link

needs to attached to something still, like directly to another PC

[lone sun]

I figured it out, just gotta do the ipconfig /release command. I'm trying to trouble shoot an issue with someone else. He already had an I.P address before.

[golden edge]

There's probably someone here who has experience with Xampp, right?

I've been wrecking my brain trying to figure out vhosting, which I got working.

But now I'm getting error 403's on every single one of my websites. I've searched the internet but everyone seems to have their own opinion on how to solve this, I'm probably missing something obvious.

Anyone up for helping a fella out?

P.s. going to bed now, will see y'all's answers in the morning if you tag me, thx!

[knotty plover]

Hi, I have Two Linux servers
#1 forwards the traffic by iptables
#2 has OpenVPN Server
How do I configure the OpenVPN to use the #1 VPS and data goes to #1 VPS then #2 as a VPN

let's say #1 VPS has access to #2 and client only to #1
So we wanna forward the traffic so that client can use #2 VPN

any help would be appreciated

[icy bone]

So I got a TP lInk powerline Ethernet kit that fits my needs and it seems to be working well. However, the reciever end's RJ45 slots all had their clips snapped off out of the box.

The actual LAN connection is still working fine atm but would it be worth the hassle requesting a replacement recover on warranty? Could the lack of clips cause issues down the line?

[opal pagoda]

take pics

[surreal edge]

any idea what is this thing
and why sum of data usage of all apps is not equal to 140gb

[lavish hollow]

a speedtest

[soft wolf]

… it still works

[knotty plover]

I did this

I did it and connected through TCP with OpenVPN trough VPS 1 to VPS 2

now everything is fine except for 1 thing
The profile works in windows, connects easily, but in phone, it shows TLS handshake error, why?

with the same ISP

with OpenVPn

already connected with no issues

but doesn't work for phone

[soft wolf]

:0

[knotty plover]

Hey! can you help me why the configue fails on phone client?

[soft wolf]

No

[knotty plover]

It gives me this error only for phone client

On windows, it's ok

[magic rapids]

what are you all using for monitoring your network - basic up/down status and same goes for isp? majority of the tools appear incomplete or need money for additional sensors. My network is mostly unifi with gateway router being sonicwall

I did into writing a PowerShell script using gpt and it worked great but I wanted to check what is out there

[peak cloak]

Doesn't unifi have that

I just look at router stats, if anything I have alerting for if power is down (ups is online) but that's it

[sage crow]

I'd like to have one but don't really see the need for spending hundreds of dollars for a ups

Most of the important stuff i would have to worry about corrupting is on big USBs or a NAS 🙂

[radiant shell]

It's going to be a good day when it involves these

[long scarab]

can you show me how to do thattt

[magic rapids]

I just looked at smokeping for the first time and the master/slave concept reminds me of zabbix. I know they are different. Looking more into it. Thank you

[pseudo blade]

Nagios is... ok and free, just pick a visualiser for it. Beats a powershell script and you can use nagvis or whatever to turn it into a graphical map.

[peak cloak]

Got one free from work

Just had to replace battery

[vale marten]

Hey, anyone know of a decent powerline adapter that works on full 100-240V range? I have a friend in the US that can save me a good chunk of change by getting one there, but my country uses 220

also, looking up spec sheets of popular ones has given me inconsistent results, sometimes amazon product pages disagree with brand product page, etc

[pseudo blade]

How cheap are you expecting? Here in Aus they're ~60EUR, I'd be shocked if you'd really save much by the time it's went halfway around the planet.

[knotty plover]

Set up any kinds of open VPN on Linux 2
Tunnel SSH from VPS 1 to VPS 2
Edit config to the address and port of VPS1
Port forward VPS 1 to VPS 2

I found the issue also, my app wasn't updated

Enter the following cmd to setup Local Port Forwarding: (VPS1)

ssh -p<Abroad SSH Port> -N -f -L *:<VPS1 Port>:localhost:<Abroad OpenVPN Port> <Username>@<Abroad IP

You must use TCP protocol to make this work with SSH.

I used this open VPN installation for linux VPS 2:

https://github.com/angristan/openvpn-install

apt update && apt upgrade

curl -O https://raw.githubusercontent.com/angristan/openvpn-install/master/openvpn-install.sh
chmod +x openvpn-install.sh
./openvpn-install.sh

it's very easy to install, port forward VPS 1 any port you like (must be open on firewall if there's any) to the OpenVPN port you set on VPS2

10mins work

[knotty plover]

it's a weak signal for 4.5G right?

can't find a good place in my room for it

this is fake though

my max speed is 80Mb/s now, if I had better signal it could go above 100

[sage crow]

Seems overly complicated

[knotty plover]

ah, a bit better

[knotty plover]

actually it's the easiest way

[sage crow]

Why are you using 2 servers?

[knotty plover]

ISP banned direct connection to VPS2

so you need to route internal VPS to that

[sage crow]

Use a proxy

To connect to the vps

[knotty plover]

doesn't work, ISP banned everything

[sage crow]

Wottttt

[knotty plover]

VPS, VPN etc

yeah

[sage crow]

That’s dumb

[knotty plover]

yes, it's been 8 months like this in Iran

it's going to be China #2

[sage crow]

oof you live in iran

[knotty plover]

clone

[sage crow]

Sorry my friend

[knotty plover]

yeah

it's ok bro, I'm stuck, wish I could leave

I lost the +

wt* ISP

[sage crow]

Tragic. Luckily im in the US so my internet data is much easier to secure

Doesn’t mean it’s 100% but eh

My isp is too dumb to get through the 256 bit encryption that OpenVPN has lol

[knotty plover]

wow haha

[knotty plover]

the fact that you can connect to a VPN and without that nothing is banned says a lot

here I need VPN for work, VPS for paypal, and much more issues for eveything

[sage crow]

Oh yea haha it’s much more lax here luckily

[knotty plover]

Crazy amount of Packet loss on VPNs

no matter what ISP

[sage crow]

Wow that’s nuts

I have fiber so nearly perfect connection. I just wish it was a bit faster

[knotty plover]

haha, the issue is not the way of connecting, they add loss to upload mostly on propose, to not let people send thing outside, its very fine for links that are inside

[sage crow]

Yea

I’d do my best to leave 😂😂

Sounds like a shit hole

[knotty plover]

I'm doing it, it's worse than it sounds, we got starlink with my friends and can't use it

they check on streets to find it and take it from you

then they use it themselves

[knotty plover]

Let me show you an example

this is from phone 5G no VPN

this is with VPN

[sage crow]

Dam

[knotty plover]

the same connection

[sage crow]

Is the vpn in your country

[knotty plover]

no, VPN is outside to remove restrictions

they slowed VPNs to hell

and VPS, any external IP

before these issues at worst VPN would slow me down 5-10%

now it gives me 5-10% of full speed

and if you call ISP:
Test in speedtest without VPN

• you see, it's fast, nothing wrong

[knotty plover]

so this is kinda the fastest way to connect now

until they ruin them too

[sage crow]

I see

Rip iran

[vernal crater]

can you use TOR?

Probably even worse speed as you probably need to use a bridge

[knotty plover]

I'm not sure, should test, currently I was sure ssh goes fine between VPS 1 to VPS2

I'm thinking of making Ovpn client + server on VPS 1 and Server on VPS 2

that might give me faster speeds than ssh

but I don't know how

[vernal crater]

I would atleast download the TOR browser, before they can somehow get around banning all VPNs (which is basically impossible, but you never know)

[knotty plover]

Oh thanks for the suggestion, they may do it as soon as they have enough servers to support all country and apps , websites etc, it's a copy of china firewall so far

[vernal crater]

if you are super paranoid, you can also get I2P, which is basically like TOR, but only on hidden pages that end with ".i2p", it is however pretty hard to setup, but they can literally never ban it as it is peer2peer and only viewable inside the ecosystem, it does lack alot of websites, but it does have a wikipedia front end, a youtube front end called invidious and a email client

[knotty plover]

Hmm, I don't know about it at all, must learn, never heard i2p

[vernal crater]

https://www.youtube.com/watch?v=wGIh5tQcw68

this video goes over the install on windows

[knotty plover]

Thanks!

[vernal crater]

do it in a browser you dont use

like if you are on chrome try it on firefox or something

[haughty spruce]

Hi guys. I am using laptop as a Home Assistant (Debian with supervisor) for my hut. I have a DWM-222 4G LTE stick in it (interface usb0, ip 192.168.0.2) and home network (interface enp5s0, ip 192.168.1.100). I am trying to setup forwarding so I can access the LTE stick's web GUI (192.168.0.1:80) in from local network (e.g. on url http://192.168.1.100:8080). I am using ufw firewall.

I tried to do the forwarding by following steps:

• Enabling ip_forward in nano /etc/sysctl.conf
• Adding port forwarding: ufw route allow proto tcp from any to 192.168.0.1 port 80 forward to 192.168.1.100 port 8080

Sadly it does not work...

I also tried setting up iptables rather than ufw rule by:
iptables -t nat -A PREROUTING -i enp5s0 -p tcp --dport 8080 -j DNAT --to-destination 192.168.0.1:80
iptables -A FORWARD -i enp5s0 -o usb0 -p tcp --dport 80 -d 192.168.0.1 -j ACCEPT

And that also not work.
Any idea what is wrong?

[marble zealot]

Hey guys! I'm looking to make a wireless home network between 2 pcs via FTP server! Is this a viable thing to do??? What would be the best route to take when setting up a home network? There would be at maximum 2 pcs and an Xbox using it, would also want it to be a private network within my house

[knotty plover]

Hi I use windows sharing in local, easy and fast for everyone, + user and pass
You can limit the access to read only

[marble zealot]

Any idea how I'd do that? Sounds viable for my household, it's mostly for music sharing between devices, trying to filter the need of getting new devices 😂

[knotty plover]

choose music folder and share
with advanced sharing you can set permissions etc
if you only want it for PCs
but for Xbox
you must setup a media remote
again possible with windows

[marble zealot]

Perfect!

[knotty plover]

in network and sharing center

[marble zealot]

Legends thank you!

[knotty plover]

you will use the path it'll give you in file explorer to get access to it

from another PC

[marble zealot]

Ahhh okay yeah, that's easy! Would I be able to set a "shared folder" in a directory and share multiple sub folders or will I need to share them individually??

[knotty plover]

if you do share a folder all subs will be shared too

then you take path

[marble zealot]

That's amazing stuff!

[knotty plover]

enter in explorer

and will see shared folders

[marble zealot]

That's great news! Thank you @knotty plover you've saved me a good few days of attempting this without advice!

[knotty plover]

it's possible to connect through any android and iOS etc

you just need SMB

for connection

[marble zealot]

SMB??

[knotty plover]

a protocol like FTP

not like but
a file manager that has SMB

for example xiaomi file manager has it

You'll give it IP, user pass, and dang, you'll see everything

[broken depot]

can I change my IP without VPN or restarting router?

I cant use VPN since thats the problem and I tried to restart router but it doesnt do anything

[peak cloak]

No

[opal pagoda]

call your isp and they can change it

[broken depot]

they said they cant remove VPN

[thick minnow]

ISPs don't care if you run a VPN or not. They can't change your VPN. If you want to change your ISP's IP assigned to you, you need to login to your router, and try. Most sites don't hardcode your address, but they do cache it, so when your modem/router logins back in a few hours later, you always get the same one. I have no idea how long that cache timeout is for your ISP. Could be weeks.

If you asked them how you can get a different IP address for your home router, maybe they can help you. That might not be a common request they have scripts in place to handle though.

most VPNs use IP V4 UDP or TCP packets to carry the tunneled traffic to the far end. Intermediate routers just see that as data, and rately filter/block it.

I know using Wireguard is rather trival to pass through a firewall.

One UDP packet rule on the server, and everyone's good

Some VPNs use TCP ports 80 and 443 to mask VPN traffic, so ISPs will just think it's web traffic.

[sharp sparrow]

Unless they actually want to provide in-depth QoS and use DPI on customer traffic, in which case it is easily profiled (depending on implementation). But generally what's said here is accurate.

[thick minnow]

even if they do, DPI won't work on vpn traffic. But if it's https, how can they really know otherwise? It's all encrypted traffic to the middleman.

[sharp sparrow]

I can only speak in detail as to what was possible a decade ago when I last worked at a telco, but we could absolutely identify generic SSL-encapsulated traffic over 443 vs actual https, using a ridiculously overpriced PacketLogic appliance.

[thick minnow]

I know SSL isn't really secure, but the only way past it I'm aware of uses fake root ssl certs and a middleman that decrypts all the client traffic to inspect it. We use that at work (zscaler).

when we create new VMs, we have to add and trust the zscaler root cert to use things like yum or apt

[sharp sparrow]

Yeah, we weren't doing any MITM stuff with our customers, but we could 100% identify ssl encapsulated generic traffic vs https

[thick minnow]

I last worked at a telco in 2004, 19 years ago, and it was a wireless phone division, not landline. But they didn't have extraordinary capabilities as far as monitoring goes.

[sharp sparrow]

iirc we didn't have any sort of in-depth insight as to what was going on within that https stream, but we could classify it as https vs just ssl encapsulated traffic

[thick minnow]

https and ssl use the same TLS encryption protocol. It's a recognizable protocol, but the only difference you might have seen was port number used to transport it.

IMAPS uses 993 (imap over ssl)

I forget any others

you can't tell protocol beyond ssl unless you assume the port number is correct

[sharp sparrow]

It's been 13 years, my recollection of details is fuzzy at best. I could be misremembering, but quite sure we had classification in place to de-prioritize non-https TLS traffic ¯_(ツ)_/¯

I remember for certain that we used a PacketLogic appliance, which was ultimately replaced by custom snort implementation with offloaded log analysis

[thick minnow]

At Cingular wireless we were happy if it worked at all.

went through the whole WAP phase and everything. It was ugly

[sharp sparrow]

lol. We were a multi-state POTS telco that also did DSL, Cable TV, FTTH, and WISP depending on region.

and of course frame relay

[thick minnow]

Our parent company forced us to use their frame relay network where possible, and we hated it, because there were cheaper options

the wireless company was not regulated like landline, so we were more cut-throat

[sharp sparrow]

At my location, we were largely left to our own devices, and used ATT for our main transit, with a couple others that I forget

we were the most profitable sub-company under the overall telco parent, with the vast majority of our customers being WISP

[thick minnow]

wow

wireless

[sharp sparrow]

Those numbers got WAY prettier after I proved UBNT could be a viable replacement for the Airspan WiMAX we were previously deploying

[thick minnow]

sprint?

[sharp sparrow]

nah. Parent company is Otelco

[thick minnow]

I hadn't heard many companies implementing wimax

[sharp sparrow]

Alabama, Missouri, Maine, some other new england states

[thick minnow]

It was an attempt, but doomed, I guess

[sharp sparrow]

We did, and it was stupid expensive. Something like a quarter million per base station, with dual HA 120deg sectors on each

and only ran like 150 customers per BS

[thick minnow]

When I started at Ameritech Cellular (northern midwest cities) we did analog, then cdma. Then SBC wireless bought us, and switched us to tdma, then GSM/GPRS, then LTE, it got ugly

[sharp sparrow]

I led the research and deploy of an all-UBNT system to replace it on new areas. Dropped our capex by like 99% on those, lol.

[thick minnow]

I moved to the wireless data team, supported the phones/PCs browsing the internet. It was fun for a long time.

[sharp sparrow]

The funny part of course is that speed and reliability went UP, along with customer count per tower, while cost dropped like a rock

[thick minnow]

for wireless, yeah, 4g and 5g save the company money and add capacity. sure.

[sharp sparrow]

One of the side benefits of working there is that you got a free connection of your choice (not including frame relay) from the services we offered

[sharp sparrow]

This was 2.4ghz and 5ghz ptmp wireless instead of 3.5ghz? wimax

[thick minnow]

I was spoiled for a while. Had a 128KB ISDN line in the 90s for ISP access. It was great.

[sharp sparrow]

I chose wireless for my employee connection. 30ft mast on my roof, 90 meg symmetrical unfiltered connection 😄

[thick minnow]

no, 4G and 5G use the same 700/800/900/1700/1800 bands the cell phones use

5G adds 5GHz and above, optionally

[sharp sparrow]

yes, this was ubnt equipment, not 4g/5g at all.

Purely data traffic, no voice

[thick minnow]

the bands never change, maybe expands into new ranges, but the 700/850/900 bands will be used for cell phones for the known future.

They were 2g, then 3g, now 4g and 5g

[sharp sparrow]

mmhmm. I am describing ptmp wireless on 2.4 and 5ghz, between our tower equipment and leased cpe at the customer side...Not their phone or anything

[thick minnow]

Maybe you mean home wireless ISP access?

not sure what ptmp is

[sharp sparrow]

point to multipoint

[thick minnow]

oh, yeah, of course

so yes, ISP access

[sharp sparrow]

It's just specialized long-range high gain wifi gear, used for last mile

At the time, could do just under 100 meg at 30 miles with nlos, for a couple hundred bucks capex

[thick minnow]

I wasn't aware they used the actual wifi bands for that traffic. But okay.

[sharp sparrow]

yep! not just bands but also protocol

[thick minnow]

so more like repeaters, not routers

[sharp sparrow]

If you had enough gain on your home gear, you could absolutely connect directly (technically)

[thick minnow]

wifi-to-wifi routers

and lan, of course

[sharp sparrow]

but nobody does, unless they are rocking a yagi or something

[thick minnow]

That's what I thought they did. Setup a huge multidirectional tower, then setup yagi's on people

people's houses for the weaker send signal

[sharp sparrow]

Customer lan -> CPE (combo router + WAP + backhaul to us via secondary directional antenna) -> our base sector -> fiber back to our CO

[thick minnow]

there's my yagi

[sharp sparrow]

No need for a yagi for these, they were directional panel antennas. Pretty small.

[thick minnow]

same difference

both are directional

[sharp sparrow]

For higher frequencies, yeah, basically

[thick minnow]

cool

thanks for the clear explanation. been fun.

[sharp sparrow]

No problem 🙂

[sharp sparrow]

https://store.ui.com/collections/operator-airmax-devices/products/nanolocom5
Typical CPE we would use.

Pretty sure they switched out to an updated model with more customer features, i.e. integrated customer wifi AP, but that was after I left

[thick minnow]

I get gig fiber symmetric for $70/mo here from AT&T, so I'm not interested in WISP at this time, but will keep it in mind if the situtation changes.

We've been talking about retiring to the sticks, where the taxes are lower, so it's still interesting

[sharp sparrow]

yup. gig fiber symmetric for 10/mo here. My only wireless interest these days is 4G/5G with yagi's as my backup connections

[thick minnow]

that can't be in the US then

no way

[sharp sparrow]

I have unmetered 4G/5G data from 2 different providers that don't share their towers, one for 10/mo the other for 50.

[thick minnow]

unlimited wireless data (for my family phone/tablet plan) costs $40 per device

[sharp sparrow]

We get dedicated data-only sims (unmetered) for 10/month each, up to 10 per account 😄

and 50/month with a different mobile provider, up to 5 per account

and no, I am no longer in the USA. This is in Sweden.

[sharp sparrow]

My speedtest results there are mobile, not fiber 😉

[thick minnow]

My point is $70 US per month gets me fast speeds

[sharp sparrow]

aye

[thick minnow]

Sure Sweden is different.

[sharp sparrow]

We only deployed WISP stuff to areas that weren't viable for high-speed wired. Lots of that in Missouri.

[hollow marlin]

ewww...🤮

[sharp sparrow]

We're doing exactly that once our youngest is done with school. Still in range for FTTH, but will do 4G/5G for backup connections (to two different providers)

[sharp sparrow]

I mean, 2008, what ya gonna do? 🙂

[hollow marlin]

Just glad it was pretty much phased out before I got into this field. MPLS

[thick minnow]

I build the first MPLS network Cingular Network ever used. Since they got replaced, maybe the ONLY MPLS network they every used. Consisted of 3 core nodes, and a few VPN edge nodes in distributed locations.

[sharp sparrow]

Nice, nice.

[thick minnow]

The marketing people heard the buzzword and wanted it in 1 month. I managed it in 6 weeks, and that was pulling a rabbit out of a hat.

learning all about VRF and whatnot

[sharp sparrow]

My biggest wins back then were the ubnt implementation, a zimbra implementation for corporate mail, custom firmware for cisco linksys consumer ip cameras, and a ridiculous amount of automation and introducing the company to virtualization. Reduced our 200+ bare metal server room down to 5 servers, improved perf and reliability...

[hollow marlin]

Well it's definitely not a buzzword in todays world

[thick minnow]

I'm outta the WAN game these days. Went back to Sr Linux Admin with no on-call duty.

WAN work paid well, but was too stressful.

[sharp sparrow]

Better place to be, tbh. I'm upper level management over software dev these days

[thick minnow]

where I work now, my team only supports high end products, so no adding printers, users, stupid stuff like that.

I was promoted to Directory at SBC Wireless, and begged to go back to Sr Engineer WAN. I got it. The HR dept was funny. They told me I'd have to give up the $1k/yr raise I got becoming a Director. Uh, yeah. fine.

Director

[sharp sparrow]

lol, ouch

[thick minnow]

$1k/yr moved into an office, never heard what's going on, felt disconnected, had to deal with PEOPLE which sucks. I hated it

boss wouldn't give me budget control. It sucks

sucked

But he let me go back, and moved me onto the wireless data team, which kept me going for the next 4 years.

[sharp sparrow]

TLDR for me is that I was working 55-60 every week (by choice) and raking in that sweet sweet OT. Ultimately I was bringing home more than the GM. Corporate overlords decided that was no bueno, and eliminated OT for the entire sub company I worked for. Offered me a $10k flat raise instead. I laughed, gave 90 days notice, and moved out of the country

[thick minnow]

I built their 2G WAP, then 3G and 4G support backend network. managed the firewalls, the dns, all that

WAP required a proxy server called a wap gateway. We bought Nokia's product to support our customers. It was fine, for the few years wap was a thing

[thick minnow]

Hi! Has anybody wondered if networking is actually "Hacking"? Because PuTTy and Linux seems so.

[pseudo blade]

Your question is nonsense, and no different from asking if "owning a keyboard" is actually "hacking", because they do be typing on that thing and it has all the naughty letters on it

Law-abiding citizens do all computing tasks on their smartphones and tablets only!

Has anyone wondered if Call of Duty is "Terrorist communication software"? Because Voice chat and shooting walls for decals seems so

God I wish we could do cool shit with the internet, terminal emulators and mainstream server+smartphone operating systems like banking, communicating with like-minded people or playing games with friends rather than just crimes

[plucky pollen]

whats that supposed to mean lol

[thick minnow]

I ment Kali.

[peak cloak]

kali is just a software

there are tools that can be used to infiltrate, but putty and linux are not at all hacking tools

[waxen saddle]

Putty and Linux are no more hacking tools than Windows and CMD/Powershell. It's just a different OS and a different interface. 🙂

[knotty plover]

Help, every single LAN port on my PC has packet loss
I updated All drivers
changed LAN Cable
Wi-Fi goes with no issue

ping from LAN looks very fine, upload speed is broken + Packet loss

[knotty plover]

You may not believe it but changing ports of each router fixed the issue

what could cause a router get issues with a specific brand LAN port?

[drowsy fossil]

Intel 2.5g is bugged, could that be it?

[knotty plover]

Hmmm these are my LAN Ports:

it actually got fixed once I connected it to Intel port of my MB

the issue was with Realtek

but then another one got fixed by Realtek

I really don't know why, this is not normal

they should work by any LAN Port

I Use Multiple ISP and LAN so these stuff bother me, I use one internet for upload, another for PC, third one for gaming, forth one as a backup

once one goes wrong everything ruins

[broken depot]

is it possible to somehow block or hide vpn?

my ISP uses vpn and cuz of that I cant join certain game servers

[opal pagoda]

contact isp about your problem

[broken depot]

I think they use vpn to distribute internet

[fallow coral]

Got my first networking cert, 2 more to do

[rare locust]

I just got Spectrum internet. Is there any reason I shouldn't go with a modem & router combo? Don't recall learning about drawbacks of having 1 vs 2 pieces of hardware

[sharp sparrow]

(Potentially) less flexibility/freedom if they are a combo unit. If you just lease a modem from them, you have the freedom to run your own router, i.e. openwrt/opnsense/pfsense, if you want

[rare locust]

if I buy my own combo unit though I should be fine. My two concerns are customizing my LAN with my own router, so that I can segregate it. The other issue is removing a piece of hardware from the desk that I don't need. No use in using their modem and router if I can just use my own combo

[sharp sparrow]

I have never had a combo docsis + router that I was happy with, but that's me.

[rare locust]

I've never used one, but I don't recall hearing of any drawbacks. That's what I was looking to hear 😄. Wondering if there are any issues or drawbacks with a combo unit vs two separate pieces of hardware. Can't imagine why but idk

[sharp sparrow]

In my experience, you get far fewer options on the router side of things with a combo unit. Depending on what you mean by "so that I can segregate it" and the model of the combo unit, that may be an issue.

[rare locust]

More with subnetting and keeping my IoT off of the same subnet.

[peak cloak]

I have never seen an all in one that can do subnetting and vlans

[sharp sparrow]

Quite pleased with my rb5009. Was quite pleased with my opnsense vm before that.

[rare locust]

I saw some reviews on combo units that they had issues with Spectrum - I just called, only requirement is DOCSIS 3.1. Is it just not possible for an all in one to do subnetting/vlans or is it just something rare? I'd rather just have the ability to segregate if I had to make a compromise, but ideally I'd like to clear up some desk space too.

[sharp sparrow]

Back when I worked at the telco/isp/wisp, we used the cheapest CPE that we could negotiate a bulk deal on that met our minimum requirements. Some noname $5 routers for example 😄

[rare locust]

I don't want to buy a switch and a WAP too lol, guess I'll just end up going with a router and eating desk space. I appreciate the insight!

[sharp sparrow]

Your general rule of thumb (though there are some exceptions) is that the fewer pieces of kit you use, the fewer options and features you have available (or the less performance, or both)

Omada stuff is solid

I retired my opnsense + unifi stuff and just run a rb5009 for my router and a 3 unit deco setup for wifi

[rare locust]

Yeah I don't have a tiny rack and I don't plan on building out too much in this house - I wanted to try and save what little desk space I have left but it's okay. My biggest concern is that I can't log into an admin interface or even download the Spectrum app to do any segregation. I'll just replace the router with my own hardware.

and keep the ISP modem

lol true but then I have to move my cert frames up the wall too. I'm just going to end up laying the modem down and putting the router on top and calling it a day lol. Just trying to have my cake and eat it too

[sharp sparrow]

Or 3m tape it to the underside or backside of the desk, depending on your layout

3m VHB is really, really strong stuff

[rare locust]

Rather not risk cosmetic damage to their hardware and having them charge me out of the blue. It's all good, I appreciate the insight from everyone. I didn't have the need to segregate in my old apartment but now I plan on installing some IoT so I'm looking to put this networking knowledge to use. Good to know that combo units aren't the best solution for me though

[proud sky]

45.93.16.42 - - [19/Apr/2023:20:06:27 +0200] "GET / HTTP/1.1" 200 3854 "-" "libwww-perl/6.67" "-"

wtf

[pseudo blade]

Draytek's line of modem-routers can I believe, though only for VDSL. (They're feature-complete I guess but they still kinda stink, just less than ISP modem-routers)

[distant wedge]

Should I get a UDR or a UDM? Just looking to replace the router I have right now. I'm really not a fan of it.

I don't have many devices other than my phone that can connect to Wifi 6

[drowsy fossil]

Get the cheapest one that fits your needs

[thick star]

i just factory reset my pc and put other parts in, specifically new ram, new ssd and new hdd. and my wifi on pc isnt working. despite my ethernet being plugged in

[drowsy fossil]

#1027757333117415424

[hardy flame]

Anyone have the Netgate 1100?

I've tried to update it but it says the update it too big

[manic nova]

You guys should probably avoid tmobile's internet service

There's no one else on the network right now, it's just me on my phone

[thick minnow]

what do u do to achieve this

[manic nova]

Just run an internet speed test with nothing else using the internet

[thick minnow]

no i mean

1.01mbps

[manic nova]

That's the actual internet speed I'm getting right now, that's just how they measured it

[thick minnow]

genuinely impressed u can use discord rn

lmfao

[manic nova]

Phone data

Turned the wifi off on my phone

I have unlimited on my phone plan because of this

[thick minnow]

honestly just plug a fibre line into ur charging port, should fix the problem

[manic nova]

We don't have fiber in my area even

[thick minnow]

jesus

[manic nova]

We have one single monopolistic isp

And all they have is adsl lines

That break every month

[thick minnow]

i switched from having two fiber lines coming into the house with a max bandwidth of 25mbps and switched to another isp and they ran coax but my bandwidth went to 1.5gbps

so i mean

[manic nova]

That's some terrible fiber service if all you got was 25mbps on two lines

[thick minnow]

RIGHT

like whats the point

[manic nova]

Did you have actual fiber to the house or was it some stupid fiber to the local sub station crap

[thick minnow]

nah it was to the local box down the street

[manic nova]

That's what my isp's thing is, they ran fiber to the local sub station but run adsl to the houses

[thick minnow]

im pretty sure the datacentre was fiber too so idk why my area only had a max of 25mbps

[manic nova]

Yeah thats achievable on adsl lines

Not that we have that in my area anyway but it can do it

Crap was limited to 15mbps

[thick minnow]

whos ur isp rn

[manic nova]

Currently tmobile's thing over cell service but we switched to that from my local isp Frontier internet

[thick minnow]

might as well use starlink

[cunning crag]

Latency

[manic nova]

It would probably be more reliable

[cunning crag]

And it’s not

[manic nova]

Not that cell service is any better

[cunning crag]

It’s more consistent usually than starlink

[thick minnow]

i would believe so

[manic nova]

Yeah but it would be way faster

[cunning crag]

Have friends that are forced to use it and they hate it

[manic nova]

Like actually usable

[thick minnow]

i mean its like running a ton of proxies using starlink

cuz it has to switch from one sat to another

[pseudo blade]

The specs aren't crash-hot but certainly enough to fit a router distro, not sure why 8GB of flash would be insufficient.

[cunning crag]

Also you have to pay extra for an Ethernet port ???

[thick minnow]

wtf

type of madness

[manic nova]

They don't even have one? Or just for an extra

[pseudo blade]

Yeah Starlink does that now

[cunning crag]

It’s just for one

[pseudo blade]

It has a proprietary port you have to adapt

[manic nova]

Wait I thought they were poe can't you just use a poe switch?

[thick minnow]

elon scamming the masses

[hardy flame]

after some digging. apparently I have to do a fresh install and I have to contact Netgate to get said install.

[pseudo blade]

I'd just run opnsense tbh

[peak cloak]

oh yeah their home cell

they keep advertizing it here

[manic nova]

It's garbage

[pseudo blade]

But if you pay for pfsense, you pay for pfsense

[manic nova]

Don't get it, it used to be great and then sometime around the mint mobile sale it went downhill fast

[peak cloak]

that was v1

v2 is pretty shitty with ports

[manic nova]

Ah got it, I haven't looked into it at all since then

[pseudo blade]

It's just a big fuck you really, doing what they're doing is more expensive

[peak cloak]

there isn't a ethernet port on the router which is really stupid

hopefully oneweb and amazon put out something competitive

[pseudo blade]

It "has" an Ethernet port but it's a proprietary connector

[peak cloak]

yeah, it's stupid

[manic nova]

Is it just using the ethernet protocols?

[pseudo blade]

Yeah I think the adapter just has magnetics in it or something equally trivial

It's otherwise all there

[hardy flame]

pfsense is free

[manic nova]

Yeah I guess they have to make money somehow with how had the service can be

[pseudo blade]

Lol not what he's running

[hardy flame]

I mean you can pay for it and get the + version

[thick minnow]

its a cloud based firewall?

[hardy flame]

but thats mostly for their support

[hardy flame]

pfsense can be ran on hardware or cloud

[pseudo blade]

Plus isn't free, open source or good imo

[peak cloak]

pfsense is meh

[thick minnow]

on a local mechine or on netgear hardware

[hardy flame]

all Plus is good for is support

[hardy flame]

I got it running on a VM

as well

[pseudo blade]

False, their source code they provide is old

[peak cloak]

I mean for sat it's pretty good

[hardy flame]

Just depends on what your trying to do with it.

BGP routing. Forget it

[pseudo blade]

I don't think anyone was going to do full table on 1GB RAM regardless of routing distro

[hardy flame]

nope

can with default tables

[inner cloud]

Is it possible to connect to wifi and Ethernet simultaneously and only let specific programs use the Ethernet net connection?

[velvet jolt]

It seems if I enable IPV6, multiplayer games work at first, but stop working after a while or a restart. Pretty much every game. Only way to fix game is turn off ipv6

[clear igloo]

pfsense plus is free for now

[pseudo blade]

For now

Considering their generally poor attitudes and plentiful other options I remain disinterested. (Have a look at what happened with Wireguard and traverse the iceberg from there)

Before anyone rushes to tell me so, yes I know that Tac-lite is free for life with Netgate appliances and do not care

[clear igloo]

Yah, well I'm moving off pfsense soon anyway 😛

On 22.x (plus) and 2.6 and earlier you can install third party packages like ZenArmor
In 23.01 and likely 2.7 you cannot, at some point they blocked third party packages in the transition to FreeBSD 14 and when I went to reinstall ZenArmor and it kept failing I reached out to the folks at sunnyvalley and they told me that fun tidbit 🙂

[hollow marlin]

If I recall when Mikrotik announced v7, they demonstrated running full tables on one of the hEX models with 256MB of memory with something like ~50MB left. Which is impressive even compared to the big vendors. I still want to try it on my 256MB variant of the AC2.

[clear igloo]

BGP table all the things!!

[static moat]

Does anyone here have the WR-902AC? i need to check if im able to change the WAN device name, because i can only see it in one of the 3 modes the travel router operates in.

This is only available when the router is in 'router' mode, but the UI TP-Link emulator from their website im using to check seems to be bugged (missing text, non-functional buttons etc.)

[gusty storm]

I have an older version of one of these and yeah for me it's the same. I use it in AP mode and there's no host name option while it's there in router mode.

[static moat]

ok perfect, do you have the older light blue model

[gusty storm]

This one, but mine actually has a green light

[static moat]

ah right

do you still have it with you now to test?

[gusty storm]

I'm using it right now as an AP so yeah

[static moat]

ok, idk if youll have internet access whilst you play around

but first, what modes does it have?

does it have WISP mode?

/hotspot mode

[static moat]

ok do i need to write all of this in 1 message

or will you still ahve internet

[gusty storm]

I have a seperate router so it doesn't matter

[static moat]

ok, first which mode has it so you can change the WAN name

wireless router?

[gusty storm]

Wireless Router for sure as I checked

I'd assume client and repeater don't, not sure about WISP

[static moat]

ok, first enable WISP mode, restart and configure it by connecting it to your router

then, do you know how to access your main routers webUI?

[gusty storm]

what do you need me to do

[static moat]

on the main router?

[gusty storm]

mhm

[static moat]

first see if you have a setting to change the WAN name of the device, in the mini routers webui

the main router is to just check the name that it sees the mini router as

[gusty storm]

I can't actually get into the mini router, internet access works through it but it doesn't seem to have an IP address I can see at least

[static moat]

???

whats this then

[gusty storm]

Yeah, but when I changed the mode it restarted

[static moat]

it takes time to restart

[gusty storm]

I know how it works, I have internet access through it, it just doesn't have an IP address

[static moat]

wait we can check

open commmand prompt

type ipconfig /all

find the adaptor your using, and see what the 'default gateway' is

[gusty storm]

Okay nevermind, my phone and my PC are showing different IP addresses. I'm in now. Host Name is an option on WISP mode

[static moat]

perfect, thats all i wanted then

thank you so much

on the tech channel the other dude pointed out that in the manual, it shows wisp mode having that

but before you go

can you send a picture of where you see that setting exactly?

[gusty storm]

Network > WAN

[static moat]

is it under 'advanced' ?

in WAN?

but yeah thanks anyways

you can set it back to AP mode

[gusty storm]

There's no advanced tab on this one, it's just at the bottom of all the options

[static moat]

yeah thats fine

thanks so much anyways for your time

have a nice day

[gusty storm]

happy to help

[static moat]

yeah some dude on the tech channel helped me like you haha

except he just went looking through the user manual and found that in the WISP mode (hotspot setup its called now)

it did have the name changing feature

basically the TP-Link emulator for hotspot mode for that model is bugged

because it doesnt have it, and also when apparently in 'hotspot' moded, it says its in router mode

[gusty storm]

I see, I'm gonna hang onto my little one for a while, I'd love the same thing but faster but they don't make them like this anymore

[static moat]

wdym? what about this one that i have been talking about

i have one very similar to your where its just plugged into the wall thats it

but this one is arguable better since it can be powered from a powerbank, but more importantly, it can be powered from a socket that is e.g. hard to get to an needs a cable to get to it

[gusty storm]

I suppose, I just like it going straight into the outlet and having 2 ethernet ports

[static moat]

lol

like this one then

i do prefer for it to not be directly at the socket. for example i struggled to plug inethernet cables because it was plugged in to a socket that was barely above a table on the wall

it just gives it more position options when you can have a cable attatched to it froma socket rather than it directly into the socket

the cable can be as longas you want

[gusty storm]

Yeah that's fair, I have mine on an extension lead so it's in a pretty convenient spot

[static moat]

yeah, so it would be better to not have to waste an extension lead, just use a cheap charger and a USB cable i think

[gusty storm]

I don't really use mine as a portable device so it doesn't matter to me, it's plugged into the same extension lead as my PC and switch and anything else

I just like it being small and not as crippled as the mesh stuff that's available nowadays

[static moat]

yeah i get what you mean as its simple just 1 plug ect.

[static moat]

kind of racist to assume it colour, it might also identify as green??

who are you to say its not blue 🤨

[gusty storm]

technically their own pictures have both colours

[static moat]

😄 😄 😄 😄

im trolling dude dw

[gusty storm]

not sure what happened here

[static moat]

yeah strange, maybe they messed up the stock photo

maybe the editor got the light and it was off

so he had to fill it in or something

[gusty storm]

🤷

[static moat]

thanks again anyways, i have work to do

have a great day

[static moat]

oh yeah last thing, i was going to ask you to change the name and check on the main router for what it says, but as the DHCP only expirses like every 1-7 days typically, it will still have the old name likely untill it gets a new IP lease

[golden edge]

Hello all, I have some virtually hosted websites on my network which I would like to open up to the rest of the word. I've been told Cloudflare is the safest way to do it.

I've had issues connecting it tho and I can't seem to get it working. It asks me to add a subdomain which don't exist on a my of my sites.

I'm kind of a network noob so all help is appreciated, thx!

(Pls tag or dm)

[neat mango]

Is atlas vpn better or windscribe?

[devout scaffold]

Neither, Mullvad and Cloudflare WARP are the top two

[peak cloak]

what are you using? cloudflare tunnels? and what type of website/server is it

[cobalt trellis]

So I have a second desktop setup as an Ubuntu Server. I am trying to make it a game server and have pterodactly panel on it but the issue is I can only ssh to connect on my local network and not remotely. I have got a static IP Address from my ISP and believe I have done the port forwarding correctly. I have an ASUS RT-AX88U router running Asuswrt-Merlin 388.2. The only issue I can find is my wan is still private but after caling again my ISP they said my public IP connects on a 1:1 with my wan so not sure if its still the wan being a private address being the issue.

Do I try and ask them to give me a true public facing IP address and get rid of the private wan?

[golden edge]

Cloudflare tunnels yes, they are two virtually hosted websites on an old optiplex 390

[peak cloak]

what webserver? also what type of sites? wordpress? just plain html?

[golden edge]

With webserver do you mean what I'm hosting them with? Cuz then its Xampp, and plain html.

With some css here and there

[peak cloak]

yes, so xampp is apache. So you will need to add the domain name of your cf tunnel to your vhost config

[golden edge]

Ahhh okay, and that would be instead of the domain I'd normally use for it.

Is that also why Cloudflare wants me to add a subdomain?

[peak cloak]

wdym by add subdomain, what context is this in?

like as in DNS, or a vhost?

[golden edge]

So when I try to set up the tunnel in the Cloudflare tunnel via the Cloudflare interface i can add the domain it listens to, and the IP address it redirects it to. On that same page you can also add a subdomain and a /extension (don't remember what they're called), if I then try to save it with only the domain name it complains about it already existing (no such tunnel already exists), and it tells me to add a subdomain to it.

I don't know if that makes a whole lot of sense. I can take some screenshots tomorrow to exactly show what i mean

Also I'm very much a networking noob so excuse me for not knowing most terms

[sinful anchor]

heeyyooo guys can someone help me quick, i've got like a http server hosted on a ip but to access it i need to set the pot not like 165.54.1.564 but 165.54.1.564:84321 and how can i change that so the ip is the directly the http server ?

[pale hatch]

internet icon isn’t showing on windows 11 restarted my pc and it dissappeared any fix?

[waxen saddle]

Http defaults to port 80. When port forwarding, if you can, forward port 80 to 84321.
Beware though, automated bots and ne’er-do-wells are constantly looking for web servers to hijack.

[golden edge]

@sinful anchor Exactly this, i checked my logs after leaving it on for a week and got 100s of connections from all over the world even though it's a .nl site, I'm now trying to figure out Cloudflare

[pseudo blade]

If a different port is your final bastion of security you deserve what you get really

Lay out the welcome mat but scramble the letters so people don't know it's a welcome mat

[rocky badge]

@clear igloo bruh I actually hate AVB

[clear igloo]

Why?

[rocky badge]

finding switches that support them that don't cost a bazillion dollars

[thick minnow]

Hey, i want to set up a Proxy server on my windows machine (Create a proxy server that i can connect to) How can i do this?

[pseudo blade]

As in a forward/SOCKS5 proxy? If your goal is just indirect connectivity I'd highly recommend using VPN and NAT instead as this leaves TLS intact.

[thick minnow]

I want to make a proxy server and use it on another windows machine

[waxen scroll]

I dont get it

[rocky badge]

netgear's cheapest is $600, cisco's is well...cisco 3650 lol, extreme requires additional licenses on top of the switches all just to get 3 AVB devices to talk to each other which isn't worth it at that point

[waxen scroll]

im not sure I understand what an AVB device is

[rocky badge]

https://en.wikipedia.org/wiki/Audio_Video_Bridging

[waxen scroll]

oh, is that the thing that extends HDMI over ethernet?

[rocky badge]

yes-ish

it does hdmi and audio

but requires switches that support it

[waxen scroll]

RIP layer 2 only

if it was multicast you can make a cheap router do it

[pseudo blade]

Eh, it looks interesting but people send AV over regular tcp all the time and 99.9% of the time it's good enough

I'm not saying it's useless, just that I can see why budget switches wouldn't bother

[waxen saddle]

This had nothing to do with security.

[pseudo blade]

It wasn't written to appear as two independent statements, so I assumed you were warning against using port 80.

[sinful anchor]

Thanks ive just done it

[pseudo blade]

I will say though - Port 84321 is far more secure than any port <=65535 because it's invalid

[waxen saddle]

It was a warning on exposing web servers to the open Internet.

[pseudo blade]

...Though that said...Perhaps this comes from ignorance, but I don't really care much for all the special-snowflake AV tech shit, nothing I've seen done professionally with it was actually more reliable than off-the-shelf stuff and usually to the contrary.

[mighty wind]

Honestly I just used netgear switches for our Meyer AVB gear. Worked fine

Even the Switches QSC sells for their AV over IP system are just netgear switches

Programming Cisco and Arista switches for massive AV networks is usually just managing PTP domains and turning on DSCP profiles for the AV stuff. so for a flat AV network that has nothing else on it any switch will probably work fine. If you have multiple vlans and other things on the network you probably want something that can do QoS.

IGMP snooping also helps

[rocky badge]

AVB is different

but I wish this system was Dante

I prefer Dante over AVB lmfao, doesn't require any special switches

only if you're using multicast flows, otherwise its just mdns discovery with unicast data

[hollow marlin]

I looked at the standards and I am still not sure why it requires all the switches in the domain to support anything other than essentially CoS. The standards should only really pertain to the hosts

[rocky badge]

From the vendor: Connecting any Tesira server-class AVB device to any non-server-class AVB device (EX-IN, EX-OUT, EX-AEC, EX-IO, EX-MOD) requires an AVB switch.

[hollow marlin]

I read that it's required, I just don't see why

[rocky badge]

🤷 and i hate it lol

[hollow marlin]

Yeah there is no need for the network to be involved. What's more sad is they are fairly recent standards still tying to push the limits of L2

[drowsy fossil]

Avb basically reserves the path for the stream if it is asked for it and thus is able to guarantee the data transmission without increasing the amount of data transmitted like TCP would
It also insures the packets arrive in order across different priorities

[sacred yew]

anyone know why my switch refuses to output over serial? the thing works fine after i factory reset it but I just cant connect to it. Is there anything obvious for check? I made a serial to rj45 adapter cuz I'm not paying a fiver for that and I have checked the pinout at least 10 times and its all good. I am running a linux mint and have tried using screen minicom and putty all with no luck. What am I missing>

[sage crow]

https://tenor.com/view/vincent-vega-john-travolta-pulp-fiction-looking-around-where-gif-16582709

[long scarab]

Is there any 3D models for a NAS cage?
Basically I'm trying to repurpose my RPi4 as a better NAS but right now I'm using flash drives lmao
I don't want to spend a whole ton of money, so is there any way i can make one myself?

[glacial linden]

Serious question -

Does Cloudflare use python-httpx module or go-http-client to get home directory of any registered domains or scan them?
That and various Intel Mac OS X x_x_x versions?

Just filtered the entire history of my nginx logs and turns out a LOT of repetitive and obvious bot attempts at reading unprotected resource requests come from Cloudflare's IP ranges, even requests that have my server's external IP after https (which shouldn't even originate from cloudflare)

Any ideas on what this might be?
My domain name is private and no one knows anything about it.

I have a python script that instantly adds iptables DROP rules if a bad request is sent... That might be why some devices can't access parts of my website when testing things.

[dense edge]

Does anyone know some shit about fiber optic cables? I got a number of questions and want to have a go at mechanical splicing, and maybe even fusion splicing if I can get a good ebay score.

Also I want to make a 300 foot run from one building to another and it needs to be buried. There will be a water pipe run and figured if going to the effort of trenching for the water pipe, might as well also run a fiber cable along with it.

(pings welcome since I don't hang out here that often )

[vagrant echo]

Is there any good way to get ethernet access to a room without running an Ethernet cable throughout a house?
Or is using a bridge my best bet?

[peak cloak]

moca, if you have coax cables already

[vagrant echo]

What's that?
I have minimal experience in networking, sorry.

[peak cloak]

it's ethernet over coax

coax looks like this

[vagrant echo]

Ah, okay. So coax is generally what is connected to the modem, no? But the port can also be used for ethernet (MOCA)?
Also, I don't have COAX in the area I want to add ethernet to. Ethernet over AC is too inconsistent, correct?

[peak cloak]

yes, moca can go over the same cable at the same time as dociss (what modem needs).

Yes, powerline is pretty inconsistent

if you can moca close enough you can ethernet the rest of the way

[vagrant echo]

Unless there's a coax port in a room next to the one I want to add ethernet to, I don't think this is viable.
Unfortunately, I probably need to stick with WiFi and an old router as a WiFi -> Ethernet bridge.

[opal cape]

get the drill out

[thick minnow]

is there anything i can use on windows / linux that'll act as an IP phone? i've been playing around with my cisco router and wanna see if i can call an IP phone, i already have working FXO and FXS interfaces

[thick minnow]

found an app called zoiper but it just gives me error 408 so i dunno if i messed something up or its just not compatible

[frank pier]

i need some help, for a project im trying to do we need to try construct a network for a school, but im not sure on what server to use can anyone help?

[forest pasture]

Hey all from ltt, does anyone have any experience with packet loss and why it is caused ? i need some help my packet loss is way out of hand at the moment and im not 100% sure what to do.

[distant wedge]

Cut, put on shrink tube and the boot (if applicable), strip, clean, cleave, open the latches, put splice in enclosure, put in machine, splice. A good splicer will tell you that your cleaves are either good or bad, or that they're contaminated. Make sure if it tells you that it's contaminated that you start over. Don't feel the urge to cleave it again. Cut it, strip, clean cleave, splice all over again. Once the fusion is done, it should be able to tell you the loss on the fusion.

Slide the shrink tube over the spliced wire carefully, slip it into the heater, heat it, then cover it with the remaining hardware from the termination end, and cross your fingers that you didn't f up. Alternatively, test your splice with a ruby red to make sure you're getting a good enough light level.

I used a sumitomo fusion splicer when I worked for an ISP. Expensive machine, but there are cheaper alternatives. Make sure you understand what you're getting into and what you need. I'm sure someone else will chime in as required.

Also, make sure you understand your differences between SM/MM. Splicers can do SM and MM, but I've only ever worked on SM

Also make sure if you get the fusion splicer used that it comes with the holders. You need the holders otherwise the splicer won't be able to move the splices together

[hearty coral]

I have a coax switch

Laying somewhere arround here

Lmfao 😂

[peak cloak]

No such thing

There's splitters

[pseudo blade]

If it's only dropping outside your network it's on your RSP/NBN Co, or you're saturating that network.

If you're paying for 25/5 or whatever and have a download going that saturates that, expect packet loss, and the fix for that is shaping your own traffic so that latency-sensitive traffic is prioritised.
If it always does that you're not left with many options other than raising it with your RSP, switching communications technologies or dealing with it

I'll be honest and say I find NBN to be enough of a pain in the ass to deal with for what you get that I use 4G exclusively

[proven spear]

I'm planning to upgrade my wireless networking card for my laptop and I'm between the Intel AX411 and the Intel killer AX1650x

which one should I go for?

[distant salmon]

first one is 600 mpbs faster but the second one has built in bluetooth, which you will probably need on your laptop

[proven spear]

doesn't both have built in bluetooth?

[distant salmon]

the double connect version does

but not the version you named

it appears that double connect is not just a name but actually a different version, but they are the same cost

[proven spear]

The AX411 I'm talking is this one but I don't know which one is it

and this is the Killer AX1650x

[hearty coral]

Same thing😄 basically

[dense edge]

Do you have a $200 budget recommendation for 100 meters of direct bury armored OS2 9/125μm SMF preferably with the ends pre-terminated with LC/UPC?

It seems there are two techniques commonly used for terminating the ends, one involves simply using a cleaver to make a clean cut and inserting it into a connector housing.

The other method more involved, sticking the fiber into the connector housing after it was filled with an adhesive, then nicking the end sticking out the end of the fiber sticking out of the ceramic ferrule and pulling it out, followed by sanding, lapping, and polishing procedure.

The first technique seems a hell of a lot easier! Anyways I am gonna play around with this. I bought a puck, kevlar scissors, fiber stripper, a pack of 30 LC connectors, polishing kit, fiber microscope, etc. And some short lengths of cheap(ish) OS2 to have a play with cutting and terminating.

[dense edge]

I might set up an eBay watch list for one parts/broken for cheap and see if I could fix it.

What are some good and bad brands and things to look for in an arc fusion splicer?

[distant wedge]

The mechanical splices are good if you're doing it temporarily. Permanent splices are better done with fusion splicing. The gel they use for mechanical splicing is okay, but it can wear down after a while.

As for brands I've only ever used sumitomo so I can't speak for any others

A good set will have the replacement arc ends (I forget what they're called) and come with everything you need from wipes to cleaver to tech snips etc

[dense edge]

You have any recommendation for fiber suppliers? FS appeared to be a good choice and I was about to buy their custom length of preterminated OS2 that mentions direct bury in the listing, but the shipping was the cost of the cable itself!

[distant wedge]

FS is a good supplier. I haven't used them, but I have been recommended them in the past

[dense edge]

Would this be any good for direct bury? Not explicitly in the listing tho. https://www.amazon.com/dp/B0BC12Z7YF

[distant wedge]

It's not a brand I'm familiar with so I have no clue.

The problem with fiber is you're going to need the tools to actually determine that you didn't mess up the cable when you bury it. You'd also need to make sure that if someone were going to do locates that they'd be able to find your cable as well so they don't hit it

I don't think I've seen anyone do direct bury for fiber without running microtrenching a plastic conduit for it

[sharp sparrow]

If you're gonna trench anyway (without a fiber trenching machine, I have no idea what they are actually called, last used one in 2010) might as well lay conduiit

[dense edge]

Well I just received one of the tools...

$75 💀

[distant wedge]

I have no idea what that is

[rose marten]

hi ive got 2 questions. First im in contact with alot of my local streamers and pro gamers on teams and such and they havent been able to stream and play games at all but ive had them tell the up and down and it all seems fine but when ever they try to stream or game they either get high ping and there stream just looses connection but they are to use there browser and boot up the game its just the ping is awful

this is all from Florida btw and Georgia is closet server

[dense edge]

It's supposed to be a specialized microscope for inspecting the end of the fiber for scratches, cracks, and other defects.

[dense edge]

Google bufferbloat, the first site that comes up does a more compresensive speed test. Pay attention to latency and jitter, and how they change under light traffic to heavy traffic.

[dense edge]

Oh that distribution is very strange.

What ISP? What modem?

[rose marten]

listen its bad i dont like them at all, im with spectrum rn and its one of there modems its not a 2 in 1 they are sperate modem and router

[dense edge]

make and model?

[rose marten]

um let me see real quick

[dense edge]

both your modem and your router.

[rose marten]

Modem En2251, router SAX1V1S

[dense edge]

Certain DOCSIS 3.1 modems feature a notoriously bad Intel PUMA chipset, you can read a bit about here. I don't know about your specific modem, as the datasheet for it does not detail which chipset it uses. Other online sources seem to suggest it uses the better regarded Broadcom chipset.

https://approvedmodemlist.com/intel-puma-6-modem-list-chipset-defects/

[dense edge]

I would try to rule out those latency spikes by removing the router from the loop entirely. Plug in your computer directly into your modem. Make sure in windows, you close all open ports, I think this is done most easily setting it to "public network" setting. Perform the bufferbloat test again. and see if it is different.

[peak cloak]

also just an fyi, bufferbloat itself is often not an issue and not really controllable by the end customer

[dense edge]

Probably true, but the bufferbloat test shown above does a good job of showing latency spikes in a visual way.

[peak cloak]

yeah

[dense edge]

I also like to use tools like ping, nmap, iperf, etc as a linux user. But those require a bit more knowledge.

[rose marten]

Its not even running now

[dense edge]

are you able to ping 1.1.1.1? how much knowledge of networking do you have?

[rose marten]

Not alot but let ne try

With it connected to my modem through ethernet

[dense edge]

Yeah you need to get the network configuration working. Go into your network manager and I think windows has a wizard to set it up for you. You probably want to use DHCPv4 instead of static, you should close all open ports, configure the firewall to block all incomming traffic (setting the network to public, Windows will do that for you)

you can also look at the routing table to see which interface are mapped to which IP address ranges. Then configure DNS to use the gateway IP or cloudflare 1.1.1.1. Google DNS is 8.8.8.8

what does ipconfig return @rose marten

[rose marten]

Wdym?

Listen im not good with internet

[dense edge]

run the command

[rose marten]

Lmaoo

[dense edge]

on the PC plugged into your modem directly.

[rose marten]

Uh it opens a progam then it immediately goes away

[dense edge]

open cmd or powershell, and then run the command.

(your not much of a power user I guess )

[rose marten]

Bro i got no brain when it comes to this stuff

I only know surface level stuff

[dense edge]

Oh shit I forgot it includes your WAN IP, sorry for making you dox yourself

[long scarab]

oop

[dense edge]

It's got a public IP tho... so it should work

[rose marten]

Nah this a tech discord, ik yall wont do anything with it,

[dense edge]

Strange that the subnet mask is set to /16

[rose marten]

Second question though im gonna be getting a gig up and down soon should i switch to a brand name router snd modem, and if so which ones you guys recomend*

Spectrum sucks i cant even get fiber out here

[dense edge]

Oh actually this is a link-local IP address, it is some bullshit that Windows likes to do when it can't reach a router on the other side.

Basically it is randomly generated and useless in this case.

[rose marten]

Dang

[dense edge]

and your with comcast and now I know where you live

(assuming that was actually your public IP)

[rose marten]

Lmaoo

[dense edge]

Oh just to be sure, you did plug your computer into the modem, right? not into the WAN port on the router?

sorry for the dummy check, but figure I'd ask!

[rose marten]

Yeah i did i made sure of that lmao

[dense edge]

Put it back the way it was when it was last working so you have internet, and then search what your public IP is online. You can literally just google "my IP" and google will tell ya.

[long scarab]

it was

[dense edge]

(they like tracking you closely, recording everything about you 🧐)

[peak cloak]

That's not public

[rose marten]

2603:9000:b600:c8c:e50f:9a2e:c4ce:91e2

thats my public

[dense edge]

Oof, that's IPV6

[long scarab]

aren't IP addresses supposed to be dynamic by default? I've had the same IP for the last 3 years

[peak cloak]

Depends on ISP configuration

[long scarab]

Comcast basic home internet shit

[peak cloak]

ISPs get a pool of IPs, and they can assign them however they want

[rose marten]

Bro is it worth it to switch providers

[long scarab]

depends really

[rose marten]

can i dox my self or does tit really matter?

[dense edge]

I figured that out already when looking it up.

[rose marten]

i live middle of no where

[long scarab]

you live in dollar general

[rose marten]

im not gonna show my adress

thats a little to far

[rose marten]

closest point on the map near me

[dense edge]

ISPs have been known to divulge a surprising amount of information without first verifying the identity of the person calling and asking questions.

[rose marten]

Frontier cant even reach my house

[long scarab]

with Comcast or Xfinity (whatever tf they are) you can't even call on behalf of someone because of so many security checks

[dense edge]

Yeah you are being assigned an IPv6 address, IPv6 is a bit more complex than IPv4, and I don't know much about it. When you plug your machine into the modem directly, I guess you will have to enable IPv6 routing as well, and your ISP will assign you an IPv6 address and range.

[peak cloak]

You should be assigned both a v6 and v4

Unless they are using some other transition tech

[dense edge]

I would not be suprised if ISPs nowadays are forgoing IPv4 entirely, T-mobile 5G home internet seems to do some strange shenanigans with their network built using CG-NAT and IPv6 bridging.

[rose marten]

i changed my ethernet cable

still bad lmao

[dense edge]

Your ethernet cable is likely not going to change much. As long as it negotiates to 1GbaseT or better, it is not the bottleneck.

I assume you are using the router in the loop.

Can you log into your router and see the IP address it is being assigned? I'm a little suprised when searching online you only got an IPv6 address.

The fact the latency spikes up into the hundreds of milliseconds is IMHO unacceptable. And it might be that shitty router to blame.

in the router settings you might find ability to disable wifi or change the QoS settings to prioritize traffic to your PC, either by port/interface or by MAC address.

[rose marten]

i dmed you my internet stuff, sorry i had a loing talk with my dads friend about politics

and i kinda got caught in it

[dense edge]

Nice! #trump2024

[rose marten]

LMAO, he was callin out biden and about how stocks suck rn

[dense edge]

Well he ain't wrong, national debt is insane. Banks are struggling due to changes in monatary policy, causing bonds to lose value and banks being forced to sell them at a loss due to recent bank runs.

But that is off topic for here

[rose marten]

lmaooo

but honestly do you think i should get a new modem and router, that is not from spectrum @dense edge

[dense edge]

I can't get the thing to work

Nevermind, I just got it working!

The focus on it is VERY finnicky, it has a SUPER narrow depth of field

[bold drum]

[thick minnow]

Anyone but Trump or biden. Need someone calm and "young" by politician standards. So like 50

Makes it easier for the rest of the world

As a brit

[shrewd tundra]

Anyone that knows about Cisco routers can help me?
I'm trying to set up a NAT inside a network, but I think the NAT routing is wrong because I get no translations and internet doesn't work.

[clear igloo]

You need to define ACL 5

access-list 5 permit 192.168.0.0 0.0.255.255 any
would do it for all subnets

[shrewd tundra]

Thank u it works

❤️

[glacial linden]

Does anyone know of a good simple API that can allow me to do a WHOIS IP lookup on any IPv4?
I'm looking to find their entire allocated subnet so I can simply block entire ISPs when I'm dealing with bots trying to do fake SSL handshakes with my webserver

Number of API calls per day won't be more than 500, the script I wrote to autoblock any unauthorized/unexpected access takes 2 seconds to permablock these bots

I've already blocked entire subnets from hurricane electric, digital ocean, linode and other VPS ranges... My server will never need to communicate with them and if I ever need to, I'll just whitelist 1 specific IP and keep the rest of it blocked

[peak cloak]

https://lookup.icann.org/en

Can find asn, and block it

[glacial linden]

is it free to use? (for up to some no. of queries?)

[peak cloak]

https://opendata.icann.org/api/v2/console

[young rampart]

so I've setup tailscale on my free oracle vm, are oracle able to see what sites I visit when I'm using the vm as an exit node?

[sharp sparrow]

https://bgp.he.net/
https://ip-api.com/

[glacial linden]

Yes they can see it, but I don't know if they do that for sure. Try finding out what their iptables rules are, using iptables-persistent, you can see all the saved rules by doing cat /etc/iptables/rules.v4

I'd recommend keeping full self-made backups of your entire instance on your own hardware. Oracle deleted my entire VPS for no reason with no explanation and said I violated some terms of service/use, but they won't even bother explaining exactly what, and I lost my entire setup and a lot of data. They say "free forever" but if you start actually using it free forever, it's upto them to simply delete it all if they decide to do so. I never did anything that would go against any terms of use btw.

You can't even go for a lawsuit against them because in their policy, they mention something along the words - it's their service and they can terminate access to it without any explanations/liability at any point in time (read the policies for the exact words used)

[sharp sparrow]

They don't need to put iptables rules on your vm to monitor your network egress if they want to...

[glacial linden]

Can they do that if I setup the VM to use dnscrypt with DNS over HTTPS for everything?

[young rampart]

tbh i don't really understand the output, should I remove the ips and send it here? or are the ips important?

[sharp sparrow]

Technically speaking, they have full and direct access to the memory in use, at the host level, so anything that is memory resident is visible. Technically. From a practical perspective, I massively doubt they bother, we certainly haven't in any virtualization host I have ever worked at.

[glacial linden]

the IPs will most likely be 169.254.x.x which cant be accessed from anywhere outside of that VM instance specifically. Comments -m comment --comment See the oracle provided... etc will lead you to docs. If they're doing this I doubt they'd want anyone to know

[young rampart]

https://pastebin.mozilla.org/8se3qWdq

[glacial linden]

Yup scanning stuff from memory would be a huge waste of resources, given they let users use upto 24GB RAM on the ARM A1 instance for free. I think they still do collect data though, cant be sure of what exactly

[sharp sparrow]

We never did at any of the places I worked, doesn't mean they don't. Free tiers are usually a loss leader to get people into the ecosystem, in the hopes that they pay up for bigger stuff later ¯_(ツ)_/¯

[young rampart]

(not related) the arm cores are surprisingly powerful too, managed to get 2 seconds per frame on aom lavish (cpu preset 4) with 4 cores

[sharp sparrow]

(super not related) arc a770 is surprisingly decent on linux, with enough work 🤣

[glacial linden]

Yup true... I was a complete fan of OCI until they deleted everything for no reason... If they hadn't done this, I'd be recommending it to everyone and I'd also use it myself if I ever needed a VPS. Now, I'll never use any service from them directly because who knows when they decide to just yeet it all. Even if you're a paid customer or a large company, going for a lawsuit against them is pointless.

This reminded me of the fact that Oracle sued Google too (and lost that one, thankfully)... they're insane and would rather sue/set up laws in their favor. I guess "just because they can"

[glacial linden]

They're still far far weaker than my Intel i5 2310 (from the first crappy prebuilt I ever owned myself, way back in 2012)

[sharp sparrow]

For personal stuff, I just run a bare metal cluster at hetzner. Keeps it simple, and only 20ms from me.

[glacial linden]

but if they suit your use case, nice

[sharp sparrow]

390TB usable, 384gb ram, 3x xeon w-2245, 3x gigabit, around 450 a month

[young rampart]

it's probably the best free tier on any cloud provider i've ever seen tbh

[young rampart]

rich

[sharp sparrow]

Not particularly. This is the cheaper option, with how expensive drives are on this side of the pond. ¯_(ツ)_/¯

[glacial linden]

I'm quite far away from EU/US so 😬 had to go with free tier on AWS for a small start. I ended up setting everything at home myself, sort of my own webserver with a VPS located in the closest city to mine. No power backup or data backup and additional 10ms ping for any users I have, it ain't much but its all I got 😄

[young rampart]

I currently have 2 Xeon E5-2620 v2 vCores, 2gb ram, 2tb hdd and 1gbps unmetered for 6 euros per month xdddddddddd

[glacial linden]

what... how.. where... 👀

[young rampart]

my friend collocated a server and sells privately

[sharp sparrow]

I ran everything at home before this. Luckily (I guess)? for me, my server got lost (and ruined) during shipping to a colo facility in Amsterdam. That made me decide to not self-host anymore, and just lease what I need 🙂

[glacial linden]

ah that sucks... I went with the home setup because I have a lot of self owned hardware that I could use from other locations... The cost of owning + running at home feels like it's 10x to 20x less as compared to getting the same spec config from cloud providers (from what ive seen)

[sharp sparrow]

Was a dual e5 2690v2, 256gb ram, 8gb hgst zeusram, 24x10tb, with a dedicated gpu...I forget which, was probably a gtx 780, may have been a 980ti

[glacial linden]

Wow... that was quite the server

[sharp sparrow]

At home I do still run a little ryzen node to power my game streaming (in-home). At the moment, ryzen 5700x, 128gb, arc a770, and some 5tb hdd's. Pending a swap to xeon w790 and the addition of a 6900xt/6950xt/7900xt/7900xtx and 4x 8tb u.2 nvme drives

[glacial linden]

awesome 😄

[young rampart]

hosting from home sounds painful - imagine trying to do something and your entire port gets saturated by someone being an idiot on one of your services

[sharp sparrow]

That's what QoS and secondary connections are for 🙂

[young rampart]

i didn't know that was possible

[sharp sparrow]

I have gig/gig fiber, 600/50 cable, and 2x 4G/5G unmetered connections

[young rampart]

can't even use ethernet on my nas because it's impossible to route a cable to my room, so I cope with wifi

[sharp sparrow]

I am confused on how it is impossible to route a cable to your room 🙂

[glacial linden]

You'd still need either static IP (very annoying to deal with ISP for that + quite risky), or go for some tunnel service. Cloudflare tunnel is nice, also have ngrok and playit.gg if you need specific tunnels only, and all of it can work for free to some extent, it'll work well if any of these services (or maybe something else) has a location near your server

[young rampart]

rented apartment, so I can't drill holes to get the cable to my room

[young rampart]

i think my isp charges an extra £5 a month for a static ip, not too bad

[sharp sparrow]

They make stick-on conduit, it's what I use here in this apartment.

I have it along the baseboards

[glacial linden]

• you'd need a dedicated server/work room where no kids, no pets and no one else is allowed to enter 😂
  And power backup too. A UPS, and if you can get it to fit/work/etc, a generator as well

[sharp sparrow]

I don't think anyone here is actually advocating for any professional hosting out of their home.

[young rampart]

my parents won't be happy no matter what approach i take 😂

[glacial linden]

Not professional at all... just secure and usable with least amount of cost 😌

[sharp sparrow]

Best to just research and learn until you are out on your own

[young rampart]

i thought of getting powerline adapters, but saw that most people barely get 100mbps with them

[sharp sparrow]

mmhmm.

CF ZeroTier is quite slow, at least it is for me.

[glacial linden]

I drilled holes 🤣 in a house on rent, owners will deal with it when they find out 😂

[sharp sparrow]

By which I mean "approx 250Mbps"

[glacial linden]

Cloudflare Zero Trust? or ZeroTier One?

[sharp sparrow]

I have drilled plenty of holes in my walls. At this point I mostly just don't feel like whipping out the hammer drill anymore. Our walls are steel reinforced concrete.

[sharp sparrow]

ZTO.

[young rampart]

https://dasans.com/in-en/product/h660gm/ my isp provided router 🗿

i've never even heard of this company before

can't find much about them online either, seems like it's mostly used in eastern europe

[glacial linden]

ZeroTier One establishes direct connections afaik and it's been faster than tailscale from my experience... but my entire throughput never went over 100 Mbps outside of my local network so idk how good it is at higher speeds

[sharp sparrow]

I get gig in both directions without, 250ish with, testing the same location in both cases

[glacial linden]

ah that's a lot... did you also try native wireguard and how well that works? might be encryption/decryption overhead causing systems on either end to not utilize the most of network bandwidth

[sharp sparrow]

I get almost wire rate with wireguard :p

[glacial linden]

oh in that case, try tailscale too... ZTO doesn't use wireguard iirc, they use a custom implementation

[sharp sparrow]

I have no reason to use anything other than WG internally :p

[glacial linden]

Tailscale uses wireguard but it's relay servers use HTTP 101 protocol switches so relay is always slow

[glacial linden]

oh then all good...

[sharp sparrow]

I was testing ZTO for non-internal purposes

I can just do WG from my edge to the cluster

[glacial linden]

Sounds great 😄

[sharp sparrow]

I was just giving anecdotal experience with ZTO 🙂

[glacial linden]

Yup, nice to know, I have yet to earn enough to afford 1 Gbps fiber plans, etc... maybe someday ill get a chance to experience working on all this backend stuff with a lot of powerful hardware 😌

[sharp sparrow]

My fiber is €10/month 😄

[young rampart]

that sounds like eastern europe xddddd

mine costs £35 a month

[sharp sparrow]

Not eastern. Nordic.

[young rampart]

ah

i heard in romania you can get full gigabit for 10 euros too

lmao

[sharp sparrow]

€50 for 10G in Stockholm.

This is €10 on my phone

[young rampart]

i'm guessing docsis?

[sharp sparrow]

no. Mobile phone.

[young rampart]

i get 300mbps upload on my phone xd

[glacial linden]

Mine is $15/month but for 100Mbps 🤦‍♂️
1 Gbps costs 10 times more

• taxes too 😂

[fickle hamlet]

Which one will increase my ping in game?

I use Wi-Fi

[peak cloak]

Nothing?

[long scarab]

why do you want increased ping-

[pseudo blade]

Which page of my car's instruction manual will make it accelerate slower?

I use 91 octane unleaded

[strange cloak]

fill the intake with leaves and wood