networking

[frosty stone]

Use whatever the ISP provides, don't bother buying anything for such a connection

[coral marlin]

Because Germany is still like 70-80% still on DSL infrastructure ....

[coral marlin]

And pay a monthly fee for it ? Pass

[silent flax]

have you considered starlink instead of DSL ?

but most of the time sadly ISPs set special stuff only their own DSL modem sends

[vast saddle]

lol. Apparently 16K QAM was looked into for DOCSIS

That’s a pipe dream in my opinion

Gonna need an extremely clean signal for that. Like 55-60 dB SNR

16K QAM has like 14 bits per symbol. Again need a very very clean signal to decode that.

[fallow wing]

guys, do you reckon this wifi module ships with antennas?
I looked at other shops selling the same SKU, nobody bothers to mention if it ships with or without, nor links a compatible antenna kit
https://www.reichelt.com/fr/en/shop/product/wlan_adapter_m_2_2230_card_wi-fi_7-416834

[nova glacier]

doubt it. The wholesale price of the module alone is around $18-18.50. Kits are going to be around $30-40

[fallow wing]

damn

[vast saddle]

Ok so it seems like the best case scenario for DOCSIS is 4K QAM.

But you need to do Node + 0. No amplifiers to add noise to the signal. Increase SNR to about 44-46 dB or so

[fallow wing]

https://amzn.eu/d/3V76ZVk

reckon that'll run wifi7?

doesn't explicitly state W7 but lists "5.8GHz" as supported

[vast saddle]

lol weird how it says 5.8 GHz and not 6 GHz

[fallow wing]

[nova glacier]

5.8GHz is not 6GHz (6GHz-7.2GHz). "tri-band" is the term to look for, not double band.

alternatively look for 6E. 6E antennas are the same as 7.

If you already bought that m.2 card, you'll also need to buy w.fl/ipex4/mhf4l/amc4 to rp-sma pigtail cables (or an antenna that uses w.fl/ipex4/.... but those are typically internal antennas and with fairly short leads)

[coral marlin]

Eeeeh. Not a terrible idea, however I live on the 4-th floor and would avoid making my balcony have a starlink satelite hung up if possible. I'm just looking for a cheaper DSL capable router.

[silent flax]

you need to figure out if ISP even allows that, or if you can. As i said before, for example we had a VDSL capable ASUS router, but only the ISP router could connect to the ISP, because it was doing something special/weird to set up IP connectivity. So you might not be able to avoid it

[coral marlin]

As long as the router is capable of retrieving DSL connection details for my provider it will be fine 😄

[fallow wing]

god damn it
there's always something missing
this is SMA, not RP-SMA https://amzn.eu/d/1wKbaIs
this is UFL1 (none of the ones you've mentioned) to RP-SMA https://amzn.eu/d/cLLkYqz

[fallow wing]

triband antenna always yield some antenna on a magnetic base, not the screw in, foldable antennas I'm looking for

looking for what I want is surprisingly more of a pain in the ass than I thought

OH??

https://amzn.eu/d/4Vnx62x

I found something!
it's a pack of 5 but its the same price so honestly, I couldn't care less

[nova glacier]

Why does that matter? The ones with a magnetic base allow you to place at a more ideal location to enable a stronger signal. To be clear, tri-band isn't really a choice. If you want the new 6GHz band of WiFi 6E/7, it has to be tri-band.

[nova glacier]

Wrong connector. That's u.fl

[nova glacier]

This one claims MHF4, which would be correct but also claims u.fl and lists the u.fl frequency spec of DC - 6GHz. That's not suitable for WiFi 6E. It should be DC - 8GHz(or 12GHz) for MHF4

[nova glacier]

Your Amazon links lead me to France Amazon, but if there's a better digikey location than France I can find these again for you
https://www.digikey.fr/en/products/detail/pulse-electronics/W9037BD0100/9838693
https://www.digikey.fr/en/products/detail/joymax-electronics/TWX-614XRS3B/24371995

[topaz patrol]

Thanks, $LLM

[fallow wing]

I know, I just want antennas that can be folder back down behind the case, not a chunky magnetic base

[fallow wing]

Ah

[fallow wing]

Lemme see that

Oh neat, that looks perfect
I don't know if 100mm is enough though

[nova glacier]

As long as you understand the consequences of having antennas occluded by a big metal case. If your WiFi signal is strong it won't matter though

[fallow wing]

It's to go in a 22cm cubic case, the antenna holes are at the top, the mobo is at the bottom

[nova glacier]

I can find longer leads

[fallow wing]

I see a 200mm version

[fallow wing]

Oh yeah, don't worry about it
That's also partially why I'm going for the overkill, it'll perform better than just basic wifi 6 antennas

[fallow wing]

is it just me or is the website crapping itself ?

loading pages is excruciatingly slow

[nova glacier]

It's not just you lmao. I was wondering the same

[vast saddle]

DOCSIS 3.1 is still solid imo. Especially 5-204 MHz upstream DOCSIS 3.1 (high split)

[fallow wing]

Just in case, I got the 250mm ones, considering the placement of the E-key slot, that should be juuuust enough l

[vast saddle]

https://www.reddit.com/r/CableTechs/s/npPXlKNHeo

Lmao. Adding an antenna to coaxial cable is just begging for ingress to happen

[nova glacier]

Yikes, polluting the upstream spectrum with a VHF antenna is awful. Everyone around them must've had such dodgy upload

[vast saddle]

Yes. Because you just dramatically increased noise funneling

The unwanted noise gets amplified and then goes to the node and then the CMTS sees lower SNR/MER. Reducing speeds for everyone off of that node

[nova glacier]

upstream is already so damn limited too. sad to see. I wonder if I've got any clown neighbors doing something similar.

[opal pagoda]

one of many reasons to move to PON

[vast saddle]

Yeah. DOCSIS 4.0 can help with upload given the wider upstream spectrum although best I can see for DOCSIS 4.0 is 7 Gbps upload with the full 5-684 MHz upstream and thats aggregate.

[vocal plume]

im in highschool and i want to do something in IT as a carreer so i want to get a home server to mess around with but idk what to get, idk if i should get like a old office mini pc, a mini pc, or like a mini server rack. i lowkey have no idea. my dad said he would contribute a couple hundred bucks apperently

[opal pagoda]

if budget is 1-200$ get a following in this order of priority:

1. older business pc, if you are space constrained get one of these
   https://www.servethehome.com/introducing-project-tinyminimicro-home-lab-revolution/
2. managed switch
   either a new mikrotik switch if noise and power consumption is of concern or a used cisco catalyst switch (c2960x/c2960g) basically something with IOS on it
3. a cloud vps - its few bucks per month and easy way of geting a static IPv4 or IPv6 address

1. will allow you to play with virtualisation, various diffrent operating systems and services
2. will allow you to create vlans, trunks, some routes
3. vpns, cloud infrastucture knowlege, reverse proxies

[vocal plume]

i think i could get away with 400-500$ and i lowkey kinda want to build another pc

[opal pagoda]

you can always buy more if you like it but i just listed the basics

maybe you will find specific direction you want to move to

for example building a NAS is often associated with homelabs but i would disagree as once you make it you cannot really make changes to it and play with it without worrying about data loss

nas becomes "production" and not lab

[lean palm]

If I had to start my lab over with $500 I’d buy a used dell server, load it with 64gb ram and 2tb of storage for $250. Then I’d buy a Cisco/Aruba switch for $100, then spend $50 on a firewall of somekind (used fortinets can be found for that/sophos xg), then the rest on a little rack build or wireless gear.

I’m building this from a networking perspective. You could definitely use the $100 for a nuc and a couple 2tb hdds for a small nas that will stay up while you work on your server.

[wooden copper]

good wifi 5 acess point? is an access point what i need to make my wifi good? i get 500mbps in one room and 10 in the other

[shut stag]

anyone here have a 10in rack they would be willing to share? im making my own right now and would love some ideas on what to add

[peak cloak]

need more specifics

could be wall type and you just need more access points

[nova glacier]

wifi 6 became normal across phones, laptops, and desktops in 2020 with many flagship-class devices getting it in 2019. Unless you go with a refurb/used product, there's also little to no savings to go with wifi 5.

[wooden copper]

yeah i need more access points, don’t know what brand or whatever is good

[opal pagoda]

best multi AP deployments are with controller
cheap: omada, ubiquiti
expensive: cisco catalyst, meraki, rukus etc

[vocal plume]

Sorry i should have also said that i want to run some game servers like up to 3 at a time is there any specific requirements i should go for to be able to have these game servers and be able to like mess around with it

also what exactly is the point of a switch? isnt it just to have more ethernet ports?

[ornate jungle]

Yes, but also... managed switches let you configure VLANs, do more advanced QoS stuff, or power PoE devices. That said, if you don't need any of these things, you don't need a managed switch.

[pseudo blade]

VLANs mostly. Tricks include being able give VMs isolated networks for security without needing extra switches and being able to connect them between physical servers. Can also use VLANs almost like extra ethernet ports on VMs and break them out on switch ports

[peak cloak]

Yes, extend a l2 network

[pseudo blade]

Personally I'm just using an inexpensive Mikrotik router with an integrated switch and that connects directly to my server because five ports (one for WAN/internet) is presently enough for me.

I can run many networks over it due to VLANs

But I am increasingly tempted to buy something multi-gigabit capable thanks to recent LAN transfer speed inconveniences (and work offering to pay for two gigabit internet - utterly pointless for just me, but how can I resist?).

I'd love fast Steam downloads and no other benefit because most CDNs seem to cap out at 100mbps anyways

(400mbps up > 500mbps I guess lol, not that I can upload that fast to most targets either)

[opal pagoda]

Yes it matters, every game server has minimum requirements listed
Which game server do you want to host?

[opal pagoda]

Yep, physical hardware is not required at all for a homelab. Lots can be done on a already existing pc with hyperv

[wooden copper]

do you know what model from ubiquity i want?

[wooden copper]

https://www.amazon.co.uk/dp/B08ZK15LWW

thoughts?

[pseudo blade]

Honestly? Pretty terrible.

No backhaul radio, 2x2 5ghz means even no-mesh speeds are uninspiring, Amazon's subscription bullshit in the software, and of course WiFi mesh speeds are just kinda bad due to the inferior architecture

They're that cheap for three for a good reason.

It has roaming and centralised configuration over a set of cheap WiFi extenders and that's about it

[wooden copper]

hmm, i’ve used the eero 5 before with no issues, i get 1 gig in the router room and at worst 400mbps in the furthest room

[wooden copper]

i’m not buying for myself now this is for someone else’s house

they currently get 1 gig in one room, and 15mbps the next

[pseudo blade]

Yeah you'll probably beat 15mbps in another space but you're not getting real gigabit on it even in the same room

The satellites halve the speed compared to an equivalent bridge when used to transmit - at best.

[wooden copper]

can you recommend an alternative? ubiquity seems to only sell wall or ceiling mounted options

[fallow wing]

got the antennas and leads :)

was much faster than I thought it would take, considering where they came from

certainly did not expect to be the first part to show up, hell, I expected it last

[opal pagoda]

What do you actually want?
Hardwired wifi or mesh

[wooden copper]

i dont think they have any way of getting ethernet around the house, so just wifi mesh i guess, but if the ap had an ethernet out on it that wouldnt hurt

[vocal plume]

like pretty much anything me and my friends are feeling. probably the most intisive game would probaly be pal world or minecraft with lots of mods

[silent flax]

64GB RAM in $500 price range is now a distant dream 😄

[lean palm]

I bought a 64gb server for $120 the other day

Granted ddr3

[silent flax]

used 32GB DDR4 ECC RDIMM go at around $80/piece, retail UDIMM is even worse. 64GB DDR5 goes at $400 new for cheapest

[lean palm]

If you’re okay on older platforms ddr3 ecc is still cheap

[silent flax]

personally i can live by with the ~720GB of RAM i have in my systems, but others aren't so lucky

[smoky sleet]

just installed docker on my home server theese ram shortages be hitting ☠️

[proud coyote]

why do you have a full desktop on that server?! That to me looks like it's GNOME's activity monitor

[smoky sleet]

cinnamon and because idk wtf im doing lmaooo

i have another 2gb stick somwhere i just need to find it

[proud coyote]

Ohh yeah that will explain the high RAM usage

[smoky sleet]

tbh it isnt that bad i have pi hole running on there awell

[proud coyote]

For such a system I would probably genuinely go with TinyCore or something lightweight. Or Debian server or the like

[smoky sleet]

high lol

[proud coyote]

I have Discord and Kitty open and my OS isn't even RAM-optimized at all

[smoky sleet]

well it is a good idea that just sounds like more work

[proud coyote]

I mean, yes... but it would run so much better

[smoky sleet]

ill just hunt down a working stick of really slow ddr3 the core 2 quad cant comprehend my 1600mhz sticks lol

oh shit i just found it you think it works it was under my dresser lol

[proud coyote]

Yeah 1600MT/s will be a tough ask for that. If you can find some 983MT/s, that should do

[proud coyote]

probably is fine

[smoky sleet]

hopefully ik i have a single faulty 2gb stick somwhere in this house but idk if it was this one or not

also i like how badass amds igpu names sound lol

hawk point 1

back to work have a good one ill update you on the ram stick when i get home

[honest merlin]

what app is this? looking for a network monitoring app

[proud coyote]

I was proving a point about why using a GUI is bad for RAM usage

[mild whale]

unused ram is wasted ram.

only becomes a problem when it's all committed and unable to free any more.

[vocal plume]

Is Like a dell optiplex 5060 ssf a good start for a home server?

@opal pagoda

[last cedar]

optiplex is not bad guy, i had two before it

just need tune rams and ssds

[smoky sleet]

his point was that my dumbass has 2gbs and still has a gui lol

[mild whale]

gotta start somewhere

no shame.

I have a few servers (mostly single board computers,) with 4gb

[stuck grove]

anything can be a good server

depending on what you want to use it for, and what performance you expect

[smoky sleet]

im kinda cheesed i didnt know older hardware couldnt just automaticcly adjust ram speeds i have extra ddr3 but its 1600mhz so way to high for the core 2 quad i used to have an i5 7500 (so it could do 2133 ddr4 or 2400 i forgort) and i put 3200 ddr4 in and it just underclocked it

[smoky sleet]

the 2nd 2gb stick is ded lol im still stuck with 2

[nimble sable]

So the one on the left is Amazon.ca, the other is Amazon.com... how is that possible?

[ornate jungle]

Link to products on each site please?

[nimble sable]

https://www.amazon.com/TP-Link-Ethernet-Thunderbolt-Compatible-UE302C/dp/B0DSCDGD4G

https://www.amazon.ca/dp/B0DSCDGD4G

I bought the one from Amazon.ca works amazing, I was looking up amazon.com. To link to a buddy

[ornate jungle]

Huh wow. That is indeed a strange situation. They're both sold by Amazon, too.

Perhaps the units sold in Canada aren't subject to tarrifs or something, so they can be cheaper?

[nimble sable]

Yea that's my first thought, if it was made in china or EU

Finally Americans can get the feel of what it's like to shop from Canada lol

[frosty stone]

The Canada store one is specifically sold and shipped from Amazon Canada so yeah it's the tariffs

[nimble sable]

china tarrifs in USA? dang.
Also this thing is REALLY good, didn't expect this

[vast saddle]

https://www.reddit.com/r/Comcast_Xfinity/s/Jz7CiQNrBE

DOCSIS 4.0 coax cable Speedtest from Comcast.

XB10 WiFi 7 gateway.

[dark hollow]

Comcast xfinity must be slacking or breaching because not on fios but direct cable to pc is been half that throttling like ping misters for the past few years even on restart new cable WiFi box. Spikes , crazy ping cappings.

[opal pagoda]

yes it is good, it even has some pcie slots for adding network cards or gpus

[vocal plume]

Alright that’s what i think I’ll go with to start then

[nova glacier]

1300Mbps down, 40Mbps up is the cap for most of Xfinity's network (with various plans with less than that available). The network upgrade stats aren't public but it's probably at best 1% of the network upgraded to DOCSIS 4.0 needed for 2300/2200 Mbps.

If you're on a DOCSIS 3.0 upstream, it is expected to have very variable and high ping. It's just the nature of it.

[vast saddle]

Yeah

DOCSIS 3.0 upstream is just SC-QAM channels I think

QAM was 16 or 64

[nova glacier]

OFDMA really saved ping on wireless (wifi 6)/docsis (3.1). As much as higher data throughput is nice I feel like in day to day usage OFDMA is really the saving grace.

[vast saddle]

Yeah. OFDMA is more robust for sure. Can absolutely achieve higher QAM (like 1024 QAM)

DOCSIS 4.0 takes this a step further by doing more OFDMA channels at 1024 QAM (or even 4096 QAM if there’s no amplifiers)

[nova glacier]

technically it's OFDM on downstream since it's one to many vs OFDMA for many to one, but practically same thing under the hood

[pulsar dawn]

I wish in uk I got more than 1gbps

[rocky pecan]

For anybody curious the gateway fiber is for sale for 180 from ubiquiti rn 10 for less than 200

[rigid schooner]

a bit of a weird question

I am thinking of using a router I have as an extender but I also need it to act as a switch, I am wondering if it is possible to connect to my pc and server as a switch without the internet while still acting as an extender? I was feeling a bit creative so I made this art to explain what I mean (it shouldve been a white a background but I forgot paint now has transparent background)

[opal pagoda]

so you want one network between that pc and server (wired) and a separate wireless network that will be extended

[rigid schooner]

yep

but without my pc using the internet connection from the extender router

[opal pagoda]

if you want to be naughty you can set a static ip of a diffrent subnet on interfaces of pc and server

or you can just connect them without any switch

[rigid schooner]

let me ask an entirely different question, can I stop internet from ethernet in windows but keep local network data?

[opal pagoda]

you can set a wrong gateway on device you dont want to access internet

or better way is to get a firewall

[rigid schooner]

ok Ill see

thanks

[vast saddle]

Yeah I would do a firewall

[rocky badge]

Any ideas on how to do 10G site to site VPN without spending an ass load amount of money? Used stuff...?

[topaz patrol]

Mikrotik!

:P

[rocky badge]

idk if I would actually be able to get close to 10 though

[topaz patrol]

a 2216 might be able to do 5 or 6

[pseudo blade]

...I've never tried multigig but I've done gigabit on garbage... I'd go for a low core count, high clock CPU on WireGuard on Linux

Seems people online are doing it

[rocky badge]

yeah that was my backup plan is to just get some short depth 1u with a good cpu

bc my potato VM 4c on a xeon gold can do 10gbps wireguard

[pseudo blade]

I like Mikrotik but... no

[rocky badge]

to whatever my friend has on his end

[pseudo blade]

Well I reckon that's a good hint

[rocky badge]

Between us on the Internet

We want to do 10Gbps between us lol

or is it even worth doing something with encryption

hop 2 is my ISP's Calix E9 hairpinning

[pseudo blade]

I reckon most alternatives are just going to suck for various reasons

Win somewhere, lose everywhere else

[rocky badge]

I wonder if I could do something like a vxlan

[pseudo blade]

Can't see why not but I can't comprehend why you'd need it 🤣

[rocky badge]

why not

[pseudo blade]

Is it "cheap" or "my friend's datacenter (I also own a datacenter)"

[rocky badge]

lollll

Friend is building a room in his basement for his rack and I'm gonna put my rack there too so my rack isn't in my apartment

But I would like to keep 10G access to stuff at my place

[pseudo blade]

You can run subnets without running vxlan

That said I can't see why you couldn't do it

[rocky badge]

UDMP IPSec VPN

[pseudo blade]

If you have kit that allows it just point it through the tunnel and hope for the best

[rocky badge]

WG VPN on my server

[pseudo blade]

Yeah the little ARM CPUs won't cut it for 10 gigabit

[rocky badge]

UDMP WG

[rocky badge]

yeah lol

I could get some Catalyst 9300s

[pseudo blade]

A pi 5 is faster lol

[rocky badge]

uh

lol

[pseudo blade]

OK so we've thrown out cheap and are firmly into "inter-datacenter"

[rocky badge]

LMAO

I can buy cheaper c9300

[pseudo blade]

Excellent. I'd be delighted to offer you paid consultant services appropriate to your equipment choices and... budget...

[vast saddle]

lol $5,100. Not cheap

Does look like a nice switch though

[pseudo blade]

Cisco is always spendy

[rocky badge]

bc I meannnnn

a VXLAN or similar is enticing since I could do l2

[pseudo blade]

Honestly I think the CPU might suck too much

On that

It's rather slow and uninspiring

[rocky badge]

I don't want Nexus tho since that's loudddd

Arista /s

[pseudo blade]

How about one of the minisforum boxes with SFP+ or a blank PCIe slot?

[rocky badge]

also a last resort

I guess I could do VXLAN on linux

idk how perf would be

[pseudo blade]

The CPU cores are much better than most used servers

And you don't need parallelism for your ask

[rocky badge]

If I downsize my rack to 3-4u I can also shove it in my under stairs closet lol

[trail iron]

https://www.amazon.com/D-Link-AC2600-MU-MIMO-Wi-Fi-Router/dp/B0711TPTZL
Is this router good for $15? Is it better than the spectrum provided router

[nova glacier]

unless you've got some ancient deprecated spectrum leased device (which they'd let you replace for free if you do), no. Everything spectrum currently offers is significantly better.
That device also became EoL as of March 29, 2024, so it very inadvisable to use.

[trail iron]

Oh thanks. I assumed stuff from spectrum was crap

[nova glacier]

Leased stuff is almost always acceptable (ISPs are incentivized to minimize support calls), just a rip-off to be paying monthly for.

They cost around $100-200 outright, but you'll be paying $10-15/mo and would've paid it multiple times over by the time an upgrade is needed

Though while they're not outright shit, they are usually still mid

[worn stump]

dumb switch arriving tomorrow. can't wait to hook the SFP up and pray it solves all my problems, both networking and in life overall

[waxen scroll]

what about them? I just ordered a ton

I love that they boot in like 60 seconds

nexus takes 5-10min

[clear igloo]

Why when you shut the MLAG domain on one side does it not bring the ports down causing MAC flaps in the overlay 😛

[waxen scroll]

I dont use MLAG, we're an ESI shop

[opal pagoda]

vPC here

[silent flax]

luckily here the ISP router is only 1.9 euros/month

[nova glacier]

ig if they expect an avg lifespan about 5 years or so that is technically enough to get something decent enough, but without any profits. American companies couldn't imagine missing out on such a lucrative profit stream lmao

and also important is that they can leave it out of the price they put on adverts

[silent flax]

they give you this router (in UK it is called Virgin Hub 5, here it is "Giga Connect Box 6")

one 2.5Gbps ethernet port, three 1Gbps ethernet ports, coax uplink for up to 2.5 gigabit internet (but only 1.2 gigabit is available here)

[coral marlin]

Does anyone have a crash course on "Load Balancing" with nginx ? I'm confused as to how this works for a pre-existing web server...

Like does this mean that I have to create a copy of my existing web-app and setup nginx on both of them to setup load balancing ? Any help is apreciated !

[vast saddle]

Lmao. There’s literally a glass shortage going on

We aren’t making enough fiber optic cables to meet demand

Some people say oh why not build more fiber production factories. That is possible but it’s expensive

[clear igloo]

Sand shortage too

[nova glacier]

corning was actively building a new plant in gilbert, az that was slated for 2024 but I'm not finding anything about it opening. Just articles from when it was announced in 2022. I hope I'm not being overly optimistic, but maybe they forecasted the AI demand and delayed it to make it even bigger

[vast saddle]

Yeah

[nova glacier]

I'm sure the reality is that got delayed for more typical reasons. It feels like every large construction project these days gets delayed

[waxen scroll]

we wanted off VPC/MLAG because of all the issues/considerations with VPC

it burned us too much. its hard to do hitless upgrades

hard to upgrade hardware with limited outage

I think they did an OK job with it on ACI but thats not a traditional VPC config like an NX-OS

if you switch to EVPN you cannot mix and match MLAG. its not a fully open standard thats implimented the same on all vendors

since EVPN does ESI you would be crazy not to, unless you have 1000s of port channels

[twin pier]

any specific reference you're referring to that says that? Initially I'd interpret that to mean using nginx as a load balancer

For example you can have nginx be a reverse proxy for a service, but with multiple servers on the backend, so it can route different requests to different backend instances, splitting the traffic load

Are you trying to achieve something specific?

You would just have one nginx pointing to both web app instances

[pseudo blade]

You'll need workers to balance between but not necessarily separate copy of the app files - so you might bind them to different ports, run them on different servers etc. etc. but that depends on you.

The NGINX side is easy. Here. Docs:

https://nginx.org/en/docs/http/load_balancing.html

There's a HTTP example in there, but doing it with HTTPS is just a matter of reading the relevant documentation to set that up

For example if I wanted to run 3 copies of Python's built-in HTTP server as my "app" and was only using the loadbalancer to exceed some sort of limitation in that I might run

python -m http.server -b 127.0.0.1 8080
python -m http.server -b 127.0.0.1 8081
python -m http.server -b 127.0.0.1 8082

and then configure all three as upstream servers for nginx

[pseudo blade]

Ideally if they're loadbalancing they don't hold any state so you don't need separate copies unless they're on different servers or if you've went with Docker or the like.

I need to get around to trying Podman.

[ornate jungle]

I'm not familiar with Nginx specifically (once an apache user, always an apache user) but you can use Nginx to balance server load between multiple identically configured servers. Which yes, does mean that you'd need a way to replicate your app / service / code across multiple different "servers", virtually or physically.
https://www.youtube.com/watch?v=a41jxGP9Ic8

[coral marlin]

I just need to setup one server for load balancing hehe

[ornate jungle]

You... can't... load balance... with one server. That isn't possible. That's like asking one hard drive to be redundant.

[coral marlin]

I know. But my boss doesn't 😅

[ornate jungle]

Tell your boss. Gather evidence of how this works and submit it to them. If they still demand you setup load balancing, make them sign something or reply to an email confirming they understand you've told them how it works, with evidence. If they continue being a doofus, prepare 3 envelopes.

[twin pier]

Just set up 1 upstream then and I guess that's what they want

[pseudo blade]

You can load balance between multiple singlethreaded servers on a single box though - JavaScript and Python servers for example. Done for greater performance.

The question is if you want reliability out of it

Because obviously you don't get that on one box

[ornate jungle]

Yee. Hence my mentioning of " virtually or physically." But - spot on. You won't get the same level of reliability if all the "virtual" servers you're load balancing existing on the same hardware when the bare metal server dies because you only had one hard drive in it. 😉 Performance could be one reason to do this, depending on the hardware.

[pseudo blade]

Tbh if I wanted reliability and scale (and had control of my applications like this person does) I'd be reaching for k10s and doing my load balancing in that

I reckon if you're half serious about scaling and fault tolerance that it's a worthwhile investment

Certainly its own learning curve... but what's IT without learning?

[pulsar dawn]

I recently ordered a contract for 1gbps broadband, since the modem is gonna be on my desk, is there any point in getting a router for my Xbox?

[peak linden]

Im looking at some custom length Ethernet cables and server racks. Is there any specific brands good for those i could look at?

[amber urchin]

If you're talking gigabit absolutely terminate your own cables. 10 gig isn't a bad idea either if you have some experience and can keep the pairs twisted properly until the connector/punch down block.

[peak linden]

I have the tools i need for terminating my own. Just need to find some stranded copper Ethernet cables and a server racks. Just dont know if there is a specific brand i should look at for one or both of those or just see what i can find on amazon

I want to see if i can find a server racks with metal casters. If i cant find metal casters, i will just skip the casters

[pseudo blade]

Your question doesn't make sense?
Modems != routers but modem-routers exist. If you have a router/modem-router already you don't need a second one.

There's more complex versions of that answer but I doubt you're asking homelab stuff based on the question

[pulsar dawn]

na haha i think it is a modek router kinda thing, it has wifi and ethernet

modem

but thank you for your answer

[copper cedar]

Hey! Im really hoping someone can help

I woke up today to find that one of the 2 APs in my home is not delivering any internet traffic

local network traffic works fine (e.g. going to 192.168.1.1 or using direct connect in the unifi app)

the second AP works perfectly fine internet is beautiful

I am at a complete loss at what to do here

Ive tried rebooting everything. AP, Cloud Gateway, NBN box. even unplugging all connections between the ap and the gateway

Also tried downgrading firmware from beta to stable (currently on beta for a different issue that unifi are troubleshooting with me)

oh yeh no somethings heavily wrong with the AP. cant even get a stable SSH connection to it when on the second AP

[hexed flare]

Are any of y'all networking or truenas wizards? I just hooked up a 10Gb network between my desktop and server and it's not working properly

[opal pagoda]

You need to provide more info, we do not have crystal balls 🔮
Take photos, draw a diagram and explain what's wrong

[hexed flare]

I was going to once someone actually responded since this chat is dead lol. Anyway a simple config reset fixed my issue.

Now I need to upgrade my ram tho lol, 32GB ram isn’t enough to hold all those files for a consistent 10Gb transfer it seems.

[shut stag]

32gb but a 10gb connection??

i only have a 1gb connection and im running 64gb ram

[hexed flare]

32GB was plenty for me previously, but now is the time to upgrade lol

[pseudo blade]

Well that's pretty damn disrespectful of our time and effort, isn't it?

In future: Ask your question upfront, or simply don't bother. Else you're putting unnecessary burden on us to have to figure out what you actually want.

[hexed flare]

I’ll make sure to take discord more seriously next time lol

[potent kayak]

I recently got a home server and am currently tinkering around with it a bit. I have now managed to set up a Minecraft server via pterodactly and Wings and would now like to make it accessible to friends. The plan is to use classic port forwarding via NGNIX as a reverse proxy to the Minecraft server. To do this, I'll use a domain via DnyV6. Things like IP geoblocking will run on the proxmox host to only allow IPs from my region. Then, of course, not using the standard ports, whitelist on the Minecraft server, SSH non-root access and only via key on the Minecraft VM, the Minecraft user has no root rights and automatic updates everywhere. Is that enough for a start, without VLANs, are there any major security flaws that I have so far?I'm just getting started, so please no overkill solutions, just a Minecraft server for now.Thanks for your tips.

TLDR:
Minecraft server via DDNS domain exposure:
-NGNIX as reverse proxy
-fail2ban
-Geoblocking
-SSH security
-non root user
=> Is that enough for a start?

[twin pier]

why use nginx (i assume in tcp forwarding mode) instead of just exposing the minecraft server port directly

[potent kayak]

increased security ig, i read that a reverse proxy is a really good idea to not openly expose the minecraft server. Is it overkill for TCP traffic?

[twin pier]

it does nothing in this case, and there's no way to avoid openly exposing the minecraft server (other than segmenting the network i.e. with a vpn)

the main reason you would do it is if you had to poke through a firewall by forwarding traffic from a public server into a private netwokr

[potent kayak]

okay, i already set it up, so it doesnt hurt and it is going to be usefull for nextcloud and the other stuff in the future, but else?

[pseudo blade]

Nah, NGINX is just forwarding everything. What you're actually doing in that specific setup is adding something that can break.

(So in a way, it can hurt a bit if it offers no other practical benefit)

[potent kayak]

Yeah okay, but is the rest a good idea or also overkill?

[pseudo blade]

Hm, let me re-read

Looks like a start.

Non-standard ports I'm mostly indifferent on, but make sure the admin interfaces are not exposed online at all.

[potent kayak]

Maybe i am bit parranoid

[potent kayak]

Only over tailscale

[pseudo blade]

Simply don't. Use a VPN or similar if you need access to them remotely.

Good

[potent kayak]

And firewall so it can be only accessed locally and over VPN

[pseudo blade]

Well in that case what's the point of custom ports for what's left? (Just Minecraft?)

You'll have DNS SVR records and whatnot right?

[potent kayak]

I thought just dont choose the standart ports as a very, light protection against bots

[pseudo blade]

Doesn't offer much if anything if it's a public service anyways

Whitelisting and fail2ban are already a good start

My personal one's on a monitored VM on my server with isolation from my home network - I have a dedicated VLAN for the VM running some security agents reporting back to my utterly overkill management server, live kernel patching and whatnot

No management interfaces facing the internet means minimal attack surface

[potent kayak]

I cant do VLANSs with my router and using pfsense on my server is too much right now.

But yes all Management Panels are only accessible locally

Its also a server in a VM, running with non root access

[pseudo blade]

Get a decent router then. My aging Mikrotik hEX has paid for itself multiple times over when I've found myself wanting security for whatever weird network stuff work has me dealing with in a given week

[potent kayak]

i am going to buy either a Fritzbox, or build my own

[pseudo blade]

Didn't even cost much when I bought it for my uni capstone lab in like 2018

[potent kayak]

all the features like, VPN in the router, DDNS build in, VLANs are worth the money

[pseudo blade]

Yeah it does all of that and cost me like 45EUR

The only things that annoy me is that it's too old for container support, I didn't pay the extra $10 for WiFi and it barely does gigabit

But newer stuff exists now

[copper cedar]

lol so i hate my life fr fr

whatever issue that was going on with my AP was resolved long ago in the morning

what I didnt know is that the NIC on my Lenovo Laptop (from work) is faulty (its only a few months old)

you have to get it exactly right for pings and traffic to go through

nudge it a tiny bit and bam offline

so im here troubleshooting an issue on why the AP didnt have any internet traffic, must have fixed it with whatever i tried (replugging cables? switching ports and back? who knows what got it working)

and im here thinking the issue is still happening all day because my laptop was showing no pings when using the cable that connects to the AP

I should have honestly picked up on it where when the 1 time I tried connecting it back to the ap and it worked, but plugging it back to my laptop failed again

i feel so dumb lol

so yeh, whatever caused my issue this morning is inconclusive. What I do know is I gotta call lenovo to repair the NIC while its under warranty lol

[potent kayak]

container support on the router, what do you do there?

[pseudo blade]

A lot less now I have a dedicated hypervisor, but I wanted to run a little router-related program on it - and if it had more RAM like the newer ones probably something like Pi-hole or a personal Discord bot

[potent kayak]

Pi hole is going to be on my server.

[pseudo blade]

And fair enough

[fickle lily]

looking for network switches . see 24 ports switch . thinks why would i need a 24 ports switch lol. i only have like 2 server 1 poe wifi and 1 Laptop

[pseudo blade]

You can of course buy smaller managed switches for a reasonable price. Unmanaged ones in five or eight-port counts often sell for under $20.

[stuck grove]

5 port gigabit switches you can find for like 10-12 if you look

[pseudo blade]

Personally if I'm buying something I want managed

But I have some small unmanaged gigabit ones people have cast off over the years that I somehow ended up with

[fickle lily]

yea . i will be looking for8 ports managed switch

[waxen scroll]

fr fr

[bitter thistle]

Can I install OpenWRT on a MiniPC and use a USB to Ethernet adapter with it? My MiniPC only has 1 Ethernet port.

[stuck grove]

yes

[pseudo blade]

Anything's possible but I've never had especially favourable outcomes from the USB ones.

What you might be able to do is put an ethernet card in one of the M.2 slots if you have one spare

-Or in the case of the HP ones they'll take one via FlexIO

[bitter thistle]

Not possible this MiniPC is literally just that... a minipc

[pseudo blade]

And?

It'll still have whatever IO it has (usually more than you might expect) and "Mini PC" is a broad category, hence why I advised looking into it a bit more. It's worth checking what the board actually offers - we don't know because you haven't told us

[vale yew]

Any travel router recommendations? Looking at getting the Beryl 7 when it comes out but I'm wondering why it still doesn't have the 6ghz band....

[pseudo blade]

Tri-band is a tall ask in that form factor

Can't say I've ever seen one.

Perhaps the Banana Pi line? (R4?)

[vale yew]

eh i mean it can be a bit bigger

not going in a pocket or anything

[vale yew]

will look into it! :)

seems a little... bare bones LOL

perhaps im looking at the wrong thing but this seems more suited for a home router

[pseudo blade]

You can buy kits with cases and whatnot

But yes you're correct it's a big boy

If you need 6ghz speed maybe just use ethernet

[vale yew]

(yeah i did see the 3d printable stuff after)

[pseudo blade]

I'm looking at aluminium cases

[vale yew]

the plan was to hijack hotel ethernet and plug in the travel router and have the 6ghz band mostly for future-proofing

[pseudo blade]

This kind of thing https://a.aliexpress.com/_mqNavY5

[vale yew]

(and penetration stuff doesnt really matter when all u need if your hotel room)

[pseudo blade]

But yeah as said smaller with tri-band is not something I've heard of

Look how big just the WiFi 7 card in this thing is

[vale yew]

lol

yeah unfortunately might be too bulky for travel, perhaps more compact manufacturing of triband stuff will get better in the future

i might just get the Beryl 7 then tbh, unless there's something better not from GL.NET that idk about

[pseudo blade]

I don't think the Beryl 7 has launched yet

[vale yew]

yeah i meant when it comes out

i dont want to get the other travel router they have since its qualcomm and those have iffy mainline openwrt support

although if the Beryl AX goes back down to $99 i might just snag that

[rocky badge]

@waxen scroll @clear igloo Private Ethernet is not cheap from this ISP

[waxen scroll]

I've bought ethernet in russia for $3,000/m

[rocky badge]

I got quoted over the phone $3500/mo/endpoint for 2 gig

[waxen scroll]

is it DIA?

[rocky badge]

?

[waxen scroll]

BGP to get internet

[rocky badge]

no

it's metro Ethernet

private Ethernet

[waxen scroll]

ooohhhhhh

that seems reasonable, depending on the specific situation

[rocky badge]

The sites are 3 miles apart lol

😭

And this all bc my friend and I want l2 between our two places LMAO

[waxen scroll]

someone has to pay for the construction in both buildings and the equipment

[rocky badge]

yeah :(

[waxen scroll]

you do know comcast business can do L2 over coax

[rocky badge]

I mean at that price

[waxen scroll]

I dont know what comcast charges but you should just do that because its probably cheaper

[rocky badge]

I'm probably just gonna get some equipment that can do vxlan or something and use our existing 10G connections lol

bc we both currently have 10G from this same ISP

[waxen scroll]

does the ISP have a business side? the home side is going to be too stupid to know those things

[rocky badge]

Yeah I was talking to their business side for this lol

Residential doesn't offer any of these services

[waxen scroll]

then the cost is insane when they can just tag

[rocky badge]

Yeah we both have fiber at the two locations from them already

the build out is already done

they already have a fiber poking through both of our walls

We're on the same node even lol. Our fibers go back to the same place

There's a tower that's LOS with both of us

I wonder how much it would be to lease part of the tower LMAO

[waxen scroll]

I would think a lot

[opal pagoda]

lmao then just s2s vpn it

or do you really need l2 connectivity?

[rocky badge]

It would be nice to have but for $2400/mo no

[opal pagoda]

eh i have 10 site full mesh s2s with each site having 2x isp's
not once someone asked for l2 connectivity

[rocky badge]

I know it’s business tier so like support and sla and shit but

I get 10g internet for $149, this would literally be them tagging a vlan to a port between two things on their network lol

[opal pagoda]

do you have static ip on both sides?

[rocky badge]

I’m assuming they are going to be reusing the existing fiber that’s at the premises already

[rocky badge]

No

The janky-ish solution to get L2 is wireguard or something + vxlan lol

Because my friend is literally one hop away to his public IP

[nova glacier]

Private ethernet usually implies dedicated resources, so it wouldn't be using the shared PON that I presume your 10g is on

[rocky badge]

They haven’t mentioned anything requiring a fiber build out

[opal pagoda]

you can mux in dedicated wavelenght for DIA

[nova glacier]

I'm aware of that. I responded to a statement that said it would just be VLAN tagging their existing connection

[rocky badge]

When he pulled up my info on the phone he was like “oh both sites already have 10g residential so that’s no issue getting metro Ethernet services for both”

Cheat code: work for the ISP and just do this /s

[nova glacier]

Yes, but they're still dedicating resources to you, allowing you to bypass the shared PON equipment. I don't think there's a regulated definition of "Private Ethernet", but that's almost always what it means ime. It requires new equipment install in the ISP PoP/CO and equipment at each location, but will use the same fiber.

[vast saddle]

Yeah

[rocky badge]

I mean yeah probably

We are 3 miles away from each other 😭 LMAO

[opal pagoda]

3 or 300, same shit to the ISP

[rocky badge]

I know

[opal pagoda]

maybe just ask for a public ipv6 on both sites and wireguard/ipsec them together

[rocky badge]

I’m gonna see how much business 10g + two statics would be for the one site and I keep my residential 10g and wg+ vxlan between the two lol

I could do v6

I want one site to have two public v4s though

[opal pagoda]

do you have it already?

[rocky badge]

?

[nova glacier]

Maybe you could see if there's a fiber network you could lease a segment from. Put 800GbE coherent optics through it lmao

[opal pagoda]

ipv6

[rocky badge]

No

[vast saddle]

Coherent optics my beloved

[rocky badge]

Although I haven’t even tried really setting up v6

[opal pagoda]

when i attended NOG in my country and guys asked ISP's about IPV6 they literally laughed

[vast saddle]

Would probably use ZR for 800G coherent optics. Idk why you would use ZR+ unless it’s for longer distances.

[rocky badge]

I wonder how much the 5mbps metro Ethernet would’ve been lmao

$200?

[opal pagoda]

per day maybe

[rocky badge]

All of this just so I can put my servers at my friends place lol

[opal pagoda]

they could literally create an ACL to allow you 2 to reach eachoder via cgnat private ip

[rocky badge]

Yeah if we had a private IP between each other I could just route between us

Honestly when I move my stuff out and to friends place I might downgrade from 10g to 3

Save $50/mo on internet

I’m scared to hear what 10g business is gonna be

Because 10 symmetrical is listed as “dedicated internet access” and includes 1 static already

[vast saddle]

lol 1 gig/100 Mbps 10 gig/100 Mbps

Didn’t even bother upping the upload speed just a bit

[rocky badge]

*Remote sites can be connected with partner carriers.

[opal pagoda]

https://tenor.com/view/that's-too-bad-too-bad-south-park-bad-you-can't-gif-10736990129620720850

[rocky badge]

@opal pagoda OOOOF

that's not even the symmetrical plan

[opal pagoda]

https://tenor.com/view/jerry-laughing-gif-3676435433606054883

[opal pagoda]

5 y ago i tried to buy a business offering from ISP and was told to beat sand as you dont have company registered

price increase from consumer one wasnt too bad

[rocky badge]

Oh yeah they said "we don't care we'll give it to you" lol

[pulsar dawn]

Need a type C to Ethernet for my laptop anyone know a good one? And a 10gbps Ethernet pcie for my spare pc

[pulsar dawn]

Spare pc will be used as a storage thing, using trunas

[stuck grove]

basically anything with an intel chip is good

[pulsar dawn]

U can get an intel chip in a a type c to Ethernet what

[stuck grove]

there has to be something doing the conversion

[pulsar dawn]

Ah yeah

[vale yew]

looked into this a bit more

I'm unsure if 6ghz travel routers are even legal in the US given the current FCC regulations on 6ghz so that may explain why there's only 'home internet' type devices

seems like there's only a handful of devices that even support 6ghz on openwrt currently anyway

[vale yew]

unless they want to add AFC i guess..

[nova glacier]

it's taken a long while for even phones to get 6GHz hotspotting, despite them having the GPS and sufficient lockdown necessary for AFC

[vale yew]

Yeah maybe they could be VLP to avoid the AFC stuff

you don't really need a huge transmit distance with a travel router anyway

[nova glacier]

that's true, though I'm not sure how equivalent VLP regs are globally. That's probably just enough of a regulatory burden to discourage companies from doing it on a "travel" product

[nova glacier]

phones though should be trivial af. I bet companies won't backport the functionality to more than at best one gen old despite there being no reason.

[hazy lake]

when you spend so much on mesh wifi to cater many devices for it to overwhelm when there are many devices

[steep tartan]

hello guys, i got a problem with my direct lan cable speedtest being slower than wifi? any fix on pc, my mobo also has the latest lan drivers

[nova glacier]

use a different cable

[steep tartan]

no on my laptop is diff story, its a cat 8 cable, my mobo is X870E aoruos elite ice wifi7

also its a 100 ft cable going direct from basement to 2nd floor router

[nova glacier]

Is it incredibly thick, hard to bend, and have metal shielding on the RJ45? Most cat 8 is counterfeit because it's for 40GBASE-T, a standard that doesn't actually exist so you'd never actually know. Please try a different cable

Real cat8 should be marked cat8.1 as well if it was using RJ45 (8P8C)

[steep tartan]

it was this one

did i get scammed

[twin pier]

eh

[nova glacier]

that looks unreasonably thin for legit cat8. ugreen isn't a cable manufacturer so it's just some random manufacturer being rebadged, which could change from batch to batch making reviews/rating less meaningful
Stick with cat6a from cable manufacturers

[twin pier]

i think you'll be alright

it should work even as a lower spec cable

[nova glacier]

you've missed some context. This is the cable they are using now and it's downgrading to 100Mbps

Whenever that happens it's the cable being flaky 99 times out of 100

[opal pagoda]

what exact speeds do you get?

[twin pier]

I don't get the whole part about cat 8 being impossible because the "standard doesn't actually exist" when

Category 8 was ratified by the TR43 working group under ANSI/TIA 568-C.2-1. It is defined up to 2000 MHz and only for distances up to 30 m or 36 m, depending on the patch cords used.

ISO/IEC JTC 1/SC 25/WG 3 developed the equivalent standard ISO/IEC 11801-1:2017/COR 1:2018, with two options:[7][8][9]

Class I channel (Category 8.1 cable): minimum cable design U/FTP or F/UTP, fully backward compatible and interoperable with Class EA (Category 6A) using 8P8C connectors;
Class II channel (Category 8.2 cable): F/FTP or S/FTP minimum, interoperable with Class FA (Category 7A) using TERA or GG45.

[nova glacier]

Read what I wrote. I said 40GBASE-T doesn't actually exist. Find me a transceiver IC if you really think it does. Yes 40GBASE-T is specified in 802.3, but nobody makes it. They don't even make 25GBASE-T transceivers

[twin pier]

i don't see how 40GBASE-T not existing is an issue

[nova glacier]

That's the standard cat8 was created to handle....

[opal pagoda]

eitherway i assume everything above cat6a bought on amazon is a scam

[opal pagoda]

with TERA or GG45.

[twin pier]

doesn't seem to be the case

[steep tartan]

ethernet:

[twin pier]

why does it matter if anybody makes a transciever, all the cable manufacturer has to do is make sure the cable can support whatever the standard asks for

[nova glacier]

That one was cat7. cat8 actually decided to have both 8P8C (cat8.1) and TERA (cat8.2)

[opal pagoda]

broken cable, get a new one or test it with a tester

or you have 100mbps switch somewhere in the middle

[nova glacier]

That's literally the case. That's what the upped specs of cat8 was directly intended to allow for. Both 25GBASE-T and 40GBASE-T.

[nova glacier]

It matters because it enables companies to sell shite as "cat8" because they can be comfortable knowing that it's literally impossible for consumers to verify it. Only until it's so bad that falls below the capabilities of 10GBASE-T, 5GBASE-T, 2.5GBASE-T, or 1GBASE-T. The transceivers that actually exist in real products

[twin pier]

welp i only say that because ISO/IEC JTC 1/SC 25/WG 3, the only one i can read for free, doesn't make any mention of 40 gigabit

[steep tartan]

no switch just the 65 ft cable from basement to 2nd floor

[twin pier]

LTT should buy a cable tester and test these different amazon cables to see if they're up to spec

[opal pagoda]

one of the wires in the cable is broken, if you check connection details you will see it negotiate to 100mbps

[steep tartan]

now wifi:

I had to disable ethernet to get wifi to work, they can work at parallel no?

[opal pagoda]

not really

[steep tartan]

but ethernet should be higher right?

[opal pagoda]

yes, cable is defective

[steep tartan]

let me try on my laptop

hopefully its not my mobo

[opal pagoda]

do you have another cable?

[steep tartan]

yes problem is my router is on 2nd floor and the only reason I got a direct connection

[opal pagoda]

i always pull 2 cables when doing those kinds of runs

[pulsar dawn]

How expensive is cat 8

[nova glacier]

Around 3-4x the price per foot of cat6a. It has no meaningful benefit over cat6a and is overwhelmingly counterfeit.

[pulsar dawn]

Oh, I should stay with cat 6 then

Cuz I only have 1gbps

[nova glacier]

5e is sufficient for gigabit, but if you're installing it permanently then probably go for cat 6 or 6a. 6 will only do 10GbE to 55m, while 6a takes that to 100m.

[pulsar dawn]

It’s only gonna be like 1 metre away lmaooo

I’ll try 6 because I only need 1m

[nova glacier]

Even 5e can do 10GbE at that short of a distance, but there's also not much of a price difference for such a short length

[worn hedge]

Why is Windows routing like this?

[worn hedge]

Trying to make my VPN work on Windows is a pain.

Linux/MacOS/iOS/Android/BSD/Juniper/anything really:
“Routing table says 192.168.1.0/24 → VPN. Got it.”

Windows:
“I detected Wi-Fi. I declare myself Lord of the Subnet.
No other routes shall be acknowledged.
Your packets may not pass.”

[vale yew]

https://www.wi-fi.org/regulations-enabling-6-ghz-wi-fi
There's no good map from the Wi-Fi alliance on VLP unfortunatly but from the quick look i did, I believe VLP specifically for the lower band should be fine most of them

europe seems to have a additional requirement that it must be "portable"

bigger issue is porbably the 14 dBm maximum for VLP

fine for normal hotel room i think but maybe not suite style

or those 2 floor chinese hotel rooms lol

[fickle remnant]

i think this is a networking question? but i have a truenas nas with a SMB. locally, i can access it fine with great speeds over LAN or WLAN. i have a tailscale vpn set up on the truenas server as well in order to access the SMB. however over WAN using a Tailscale VPN, accessing the SMB is basically impossible. almost everything times out before a file finishes loading. is this expected for a SMB over VPN? is there anything i can do to improve this? or am I supposed to use something else to access files like nextcloud?

[ornate jungle]

In my experience, SMB can behave very strangely over anything but the local network. Not saying it can't be accessed this way, but more often than not it times out or lags a lot over the internet / WAN. Running something like NextCloud or even just accessing the files via an SFTP client would be more reliable.

[fickle remnant]

are there any recommended alternatives for nextcloud? i just want something to be able to view the file system and read/transfer files

i'm already using immich and jellyfin, but i dont want to pollute those with my other files that i need to access

[tight pecan]

Copyparty is neat

[vale yew]

just use sftp?

winscp is a good windows client and for linux your DE file manager probably already has a way to add a sftp network

[opal pagoda]

Btw you can edit route table on windows too

[worn hedge]

yes, but Windows just ignores it

their "on-link" behaviour overrides everything

[broken depot]

How does internet work

If I use mobile data

Somewhere remotly

Would mobile data be equal to setelite internet in same area

Since they use same network?

I used to think it is all different but now I think it is all same

All comes from same towers

So to test out connection all I need is to enable my mobile data?

[frosty stone]

Satellite internet does not come from towers.... It comes from satellites... It's in the name

[broken depot]

I think it is not satelite

It is just antenna

Does that come from same towers as mobile internet?

Just it could be 5g

My phone only does 4g so I probably cant test it properly

I did internet speed test in fee places in house

First floor was 14 mbps 20 ping second floor was 22 mbps 24 ping

That is good right?

[pseudo blade]

No

[pseudo blade]

They don't

[pseudo blade]

You are incorrect

[worn hedge]

If you have "satellite dish antenna" pointed towards a tower, it usually uses different frequencies/technologies than 4G/5G

[pseudo blade]

There is some thing Starlink can do now apparently r.e: cellular connectivity tech

But in general and in practice no they're not equivalent

[worn hedge]

If it's not a fixed antenna (they didn't tell you where to point it), it's likely just a 4G/5G receiver tho

[broken depot]

It is not satellite

It is whatever uses towers

Because it is local internet

Not american or something

I am in Lithuania and internet will 100% will be coming from tower

Just like mobile ones comes thats why I am asking

[waxen scroll]

https://www.reddit.com/r/sysadmin/comments/1pge29t/higher_ed_the_it_environment_i_will_never_work_in/

@rocky badge hey, thats you!

[pulsar dawn]

I’m getting this help plz

[opal pagoda]

quite standard on corporate networks

they want you to use corporate DNS to block certain nsfw/illegal websites

[pulsar dawn]

It’s private WiFi tho

It’s at home

Oh nvm I left my vpn on 💀😭

[pseudo blade]

...Your VPN blocks encrypted DNS traffic?

Sounds like you need a new one

[ornate jungle]

If your VPN is blocking encrypted DNS traffic... I'm with what Meagus said above.

[pulsar dawn]

I use this free one to bypass UK online safety Face ID bs

I like to go on Reddit u know

[tough tinsel]

so my house is kinda strung together with some cat 5e and some random cables, lots of holes, a couple of 2.5 gb switches in our office where the modem and router are.

my room has a 2,5gb 5 port switch i got off amazon for about 30$. the cable that is running though the wall and from outside is a 100ft cat 8 cable that was outdoor rated. about 60ft of which is coiled up by the wall.

Their seems to be some sort of an issue with the cable which is very annoying as its been like this for about 4 years and I CAN NOT rerun a new cable. (it would require freeing the wire on the roof and its WAY to cold outside + the wall would need doing)

Any sugestions? with working ethernet i get about 900+ mbps with wifi i get about 40mbps. upgrading the wifi is out of the question and the cable in my room also feeds a couple more rooms.

[ornate jungle]

What sort of issue is there with the existing cable? (You haven't provided those details so it's hard to suggest anything.)

That said... If the old cable is physically damaged , the only option is going to be physically replacing it, either by re-running a new cable where the old cable exists, or running a new cable somewhere else.

Powerline AV adapters might work too, however, these are largely dependent on your home's electrical wiring. They work great in some homes, and are complete garbage in others.

[tough tinsel]

So the internet has been EXTREMELY slow and when I speed test with google, I got about 20mbps

Our house is full of electric issues which me running ethernet has helped with

[ornate jungle]

• What does Windows report the connection negotiated at when you check Network Connections?
• Also, were these speeds with the network cable plugged directly into your PC, or through the cheap switch you acquired?
• Also, also, have you tested if the same thing happens when plugging in another device, like a laptop or another desktop PC?

Network troubleshooting is more or less about eliminating or changing variables, one at a time, until you find the culprit.

[tough tinsel]

So i tested the cable straight from the router to the pc, laptop, and my brothers chromebook. I switched to one of those cheap netgear switches and I also had the issue. Their doesnt partially seem to be damage to the cable, but I cant inspect the part outside or in the walls either.

Which just the switch, the ethernet and a device it plugs into directly I always get the issue. If I plug and unplug it ot works at full speed for a couple of minutes and then goes to shit

Also I did test with different ports om the router incase I set something stupid in it.

[ornate jungle]

Ah that's a very important detail to include. Definitely sounds like there's either an issue with the cable or issue with the switch. You could further test this theory by temporarily moving your PC to the same room as your modem/router then plug directly into the modem/router.

• If the problem remains, that helps rule out the Ethernet cable and/or additional switch as being the problem.
• If the problem goes away, you'll know for sure it's either the switch or ethernet cable.

[tough tinsel]

I did try moving the laptop but the pc would be a little heavy

[shut geyser]

FYI: Ubiquity Flex switches do NOT work with the eero Max 7. Just sharing experience.
eero sucks.

[meager ginkgo]

They should work fine?

I agree eero sucks.. but a switch is a switch and it should universally work

[topaz patrol]

Eeros are great for most people

[pseudo blade]

Guess I'll never be most people then

I really don't like subscription models (Or for that matter, Amazon)

Plus I actually use VLANs and prize flexibility

Plus many of the Eeros have trash backhaul because they cut the one key piece of hardware needed to make a mesh worthwhile

...And if you just want APs shouldn't you just buy Ubiquiti stuff?

[shut geyser]

Anyone have a good suggestion for an unmanaged switch with 1 10 gigabit port and multiple 2.5gigabit ports?
The only one I can seem to find is the unifi Flex 2.5 G but eero routers apparently don't like those.

[shut geyser]

I am with you. I am HATING my eero. It's too limiting, doesn't play nice with others, and feels like something Apple puked up.

[stuck grove]

random cheap switches off amazon

i got a couple that have 2x 10g sfp+ and 5x 2.5g rj45

[stuck grove]

if i own it, it shouldn’t require a subscription to function

i don’t mind it having a subscription for features that rely on a cloud service or something, but i should be able to simply choose not to use those cloud services and pay no subscription

[shut geyser]

Maybe I am searching wrong.

[stuck grove]

lemme go find a model like the one i have, one sec

https://a.co/d/etU4n7P exact switch i have two of

it’s actually 4x2.5 though

i’ve had em for over a year, work great for what i use them for

[shut geyser]

Thank you! I will check this out. This might be exactly what I am looking for.

I kept getting results for tp-link, Netgear, etc. and none seemed to have the 10g in.

[pulsar dawn]

good type c to ethernet for my HP laptop?

[opal pagoda]

tp link one works fine

UE300C

[zinc mortar]

Finally upgraded from gigabit to 2.5GE, my plan supports up to 5GE but the the cabling in my house is all Cat 5E and i'm not really interested in buying a 5GE nic and switch to find out

[warm oasis]

I usually get 200mbps download and 20mbps upload, it sucks and I hate my WiFi.

[zinc mortar]

Any clue what you're paying for it? Chances are if it's a relatively old plan you can get an upgrade at the same price point, dunno about the hardware side of it though

[warm oasis]

Not sure what we are paying for it but it's virgin media. Relatively new I think.

I'll check rq

This virgin media router

[zinc mortar]

Gotcha, you said 200mbps download & 20 up, is this wired?

[warm oasis]

We don't have anything connected by ethernet

[carmine moss]

Probably is on coax or phone line. Tho yeah if you want more it's probably pay more

200 down 20 up is normal tbh in a lot of regions

[warm oasis]

We don't pay for it my dad does

Idk why though since he's not even been in this country for at least 6 years

[warm oasis]

United Kingdom in a city

[carmine moss]

Yeah your just on the fiber 250 plan seems normal for that

They promise 200mbps down

Solution is use different provider or pay more to get more speed up to 500mpbs down on virgin

[crystal viper]

[vast saddle]

25 gigabit ONT. awesome

https://www.fierce-network.com/broadband/gfiber-says-its-new-ont-will-be-big-expanding-20-gig article

[pseudo blade]

Ideal for any home user's personal datacenter.

[stuck grove]

i'd give my left and right kidneys for 25g FTH

[opal pagoda]

https://tenor.com/view/monkey-paw-simpsons-wish-gif-22682473

You get 25g but you have transfer limit of 1tb

[stuck grove]

YAY two more fingers! so i can ask for two more lines of 25g FTH!

[stuck grove]

FUCK

[opal pagoda]

I am a menace to ISP
Long story short, shops sell packs of 2x 10day tourist sim cards for 10 euros which is by far the cheapest truly unlimited data per day
How to be a menace: buy a bunch with cash
Basically cause full utilisation of lte for 20 days transfering tens od tb of data over mobile network

[stuck grove]

there's someone somewhere trying to figure out why your specific region is signifcantly higher traffic than other comparable regions

[opal pagoda]

They clearly have lots of customers and need to increase capacity

I need to upgrade my wwan modem to support 5g or cat 16 lte

So i can be more of a menace

[nova glacier]

The OLT they're running can even have 50G-PON (G.9804.3) line cards, but the default is a card that does GPON, XGS-PON, and 25G-PON (halves available ports and Nokia only afaik). There's even a 100G-PON proof of concept from Nokia intended for the platform (Nokia Lightspan MF), likely coherent PON since they mention needing "advanced DSP techniques". That was demoed back in 2022 but marketing materials say 2030+ for deployment

[crystal viper]

I HAVE BETTER UPLOAD HAH

[warm oasis]

you probably have better everything

[warm oasis]

ok your download is a bit slower

but that doesnt matter since my computer is so bad i cant install anything that would need that much download speed

[crystal viper]

to my defense im on a 5g router and i have a 6e chip

[warm oasis]

in my defence im broke

[lean palm]

thats fucking genius

i would do that if it werent for cgnat

[vale yew]

how is this cheaper than just an unlimited plan 😭

[flat wagon]

are you running copper?

from your isp

[steep stirrup]

https://tenor.com/view/traffic-driving-windy-gif-12237073

https://tenor.com/view/jeremy-clarkson-jeremyclarkson-gif-4922356

(sarcasm)

[flat wagon]

my speed can go faster but idk something about my server vm is limiting it

[zinc mortar]

I have no clue actually, I just have a termination point running into my ONT

I gotta get a 5g switch, my ISP supports up to 5G, I got a 10g port on my ONT

[flat wagon]

are you canadian?

let me guess, your isp is telus

my whole home network is 10gig ready.

i'm trying to get 5gig from my isp but they don't support my area yet.... 😢

[zinc mortar]

I live in Singapore, we’ve got Singtel here

They support 10G, I just don’t have any devices capable or really required for that, I opted for 5G instead

[opal pagoda]

The cheapest unlimited plan is 25 euros, unlimited plan on same ISP i am menace on is 32 euros
I basically get the same for 15 euros + no commitment

[hazy lake]

i'm having a debate wether should i use this 300mbps aztech wl556e or use my mesh wifi 6 network fofr my pc

[glacial wasp]

lets make this a linkedin networking chat

[kind pivot]

Just need to answer everything with chatgpt and lots of random emojis

[nova glacier]

Do not use that WiFi 4 extender for a WiFi 6 network, it will just make the connection worse. Your PC probably has better antennas than it too.

[pseudo blade]

You're missing the psychotic groupthink and that's absolutely essential to the experience

[glacial wasp]

Bro you dont understand
I negleted my childern to increase shareholder revenue, because thats what really matters here at soulcrushercorp

[vale yew]

oh its close

but yea no commitment based

[hazy lake]

yeah I guess, my chipset isn't but my antenna is

[nova glacier]

why do you think that?

Even the ones that stick directly out of the back of the motherboard are going to be far better than that shitty extender's internal antenna

[hazy lake]

the antennas are good

but not my chipset

but that's a separate problem ill have to solve myself

me english no work

[nova glacier]

What chipset?
Some motherboards make it quite easy to upgrade, having the module unobstructed near the pcie ports and using u.fl to sma-rp pigtails. Others it may require removing a plastic cover and a metal shield before the module is accessible.

[hazy lake]

b840
pcie gen 3-4 and no cpu overclocking

[nova glacier]

that's your platform chipset, not your wireless chipset

[hazy lake]

oh they have a separate chipset for wireless?

damn

[nova glacier]

yes, it's on a little module plugged into a m.2 key-e port

[hazy lake]

came pre installed with one on my motherboard

[nova glacier]

yea, that's the norm

You can see what it is in windows settings -> network & internet -> Wi-Fi -> Hardware properties

[heavy marlin]

curious is using a /31 instead of a /30 more secure in a p2p connection ?

[twin pier]

What would that have to do with security?

[heavy marlin]

well i know that /30 provides 4 ip adresses. one bc one id and 2 usable. Im curious if you could somehow use the brodcast or id to listen or manipulate the connection / data.

im currently "learning" to be an admin and my prof couldnt anwser that question

[pseudo blade]

No difference

Please think about the subnetwork in question

How would it be "listened" to that you couldn't do in the precise same way otherwise?

[twin pier]

Wdym by "one id and 2 usable"

[pseudo blade]

I presume they mean network and omitted the broadcast

[twin pier]

I was under the impression you technically can use the network address on a device, but it's just not conventional

Nevermind, https://superuser.com/a/1525665
I didn't think of that one. The answer by Tranquility

[vast saddle]

Yep. 100 Gigabit symmetrical is Coherent PON

We don’t really want to use IM-DD for 100 gigabit symmetrical.

Intensity modulated-Direct Detection doesn’t get us as far

[shut geyser]

Same speed test service, 2 different servers pinged.
Don't get too hung up on numbers, folks. There is more to internet speed than all of the fancy equipment that we cobble together for ourselves.
Oh, and the server used with the darker screenshot was less than a 1100 mbps just an hour earlier.
I complain and then I remember dial-up. Then I stop complaining.

[opal pagoda]

Run waveform bufferbloat test

[vast saddle]

https://youtu.be/L1PkSdPvX6U?si=DJkgcKO_3H4a8vvl

I decided to watch this video lmao.

Dial-up —> DSL —> Cable Internet —> Fiber Internet makes sense evolutionarily speaking.

Most homes had Dial-up before and then we went to DSL and then cable internet

And now fiber internet is expanding

[shut geyser]

Can't complain about this too much, can I?

[opal pagoda]

Its good

[vast saddle]

A. Nice

[random siren]

you can change the server on speedtest.net to get an average if you wanted

[shut geyser]

oh, I've done that. But that doesn't really tell my how fast my internet is, does it? It mostly shows me that I can get the speed I pay for if the servers I am pinging are optimized, on fast networks themselves, etc.

[random siren]

which for me is more realistic in terms of showing how fast my internet is than idealistic tests

[nova glacier]

That's just more realistic for everyone tbh. The "internet" is a giant web of shared infra. Things like the ISP's own speedtest, fast.com, and often also the "closest" speedtest.net server are the least representative of the actual speed. They'll almost always never even touch the "internet", since it'll just stay on the ISP's network. Any major ISP will have a Netflix appliance and dedicated peering to Netflix's nearest pop. It's useful to assess your last-mile infra, but not much more. The "closest" server on speedtest.net will also probably be at best one hop out of the ISP network

[shut geyser]

100% agreed. What you stated is, fundamentally, my point.

[sinful stone]

Can a switch operate in -30c but under a roof?

[opal pagoda]

if you put it in a sealed ip67 box sure

low temp isnt that big of a deal when not dealing with fiber transciever, moisture is (frost, condensation)

[pseudo blade]

-30c is out of spec for most hardware and some switch chips don't like being too cold

Mikrotik has some offerings rated for -40

Some other vendors may also

[opal pagoda]

tipical "industrial" switch has ratings from -40 to +75

[pseudo blade]

Depends on the product, I'm actively looking at a mix that do and do not

(Also go gigabit lol it can be done cheaper than that)

[opal pagoda]

just noticed that too lmao

all depends on criticality
do you care if it dies? if no just grab a rando tplink for 5$ and it will probably be fine

[pseudo blade]

Getting one that's in spec isn't even expensive, I think it's a game of "Do it right once or save maybe 20 euros at best"

[opal pagoda]

this one is 45

-40 - +75

[pseudo blade]

There you go

I think you could still go cheaper but Teltonika's pretty well known

Wow, these got cost-effective real quick https://amzn.asia/d/a8KQcBF

You'd think we'd see more prosumer routers with a proper complement of 2.5G ports, considering

[opal pagoda]

economies of scale kicked in

[sinful stone]

I dont really need 2.5gbit either, its for outdoor cameras and im just too lazy to drag cables lmao

[opal pagoda]

Do you need poe?

[robust briar]

I have a remote server that is under bruteforce and getting numerous tries to connect as apache, root, admin and other users to it. It's not a big problem, because all connections are paswordless, but it overloads ssh and makes the server unreachable from time-to-time from my side. And this is frustrating.
I can't whitelist IPs via firewall because potentially it can be used from different IP addresses by myself, but I want to fix this problem.
Any ideas how I can do this?

[silent flax]

port knocking ? https://wiki.archlinux.org/title/Port_knocking

[robust briar]

Nice idea
But won't it block my services (like HTTP)?

[silent flax]

it only blocks the services you want to protect

[robust briar]

Ok, will try. Thanks

[silent flax]

or https://goteleport.com/blog/ssh-port-knocking/... in the end, the main point stands, there are just different solutions to bring the final result, which is that port is firewalled until you knock on port(s) in right sequence, and then that IP is enabled to connect to the specific protected port

[stuck grove]

basically any ethernet cable will work at any poe rating

90w poe is ~2a

[opal pagoda]

everything except stupid CCA cable, it isnt per spec a cat cable even tho it is sold as one regularly

[stuck grove]

also iirc it doesn’t “negotiate” poe support at all

[opal pagoda]

yes, cables are passive

[stuck grove]

so regardless of whether or not the cable could handle 120w of poe, it’ll dump it into the cable anyways

[opal pagoda]

and then 🔥

[stuck grove]

well more so🫠

[obtuse hawk]

Hi people,

i am planning to transfer my drives from my server into hot-swap bay, got a raid controller that i need to flash into IT mode to be as passthrough for sata

the card is LSI 9650SE-16ML

and i couldn't find any tutorial regarding this card into IT mode configuration

[opal pagoda]

are you sure it is LSI and not 3wire?

[pseudo blade]

Sounds like you configure it in the RAID controller, probably by accessing its configuration during boot

[obtuse hawk]

i dunno when i searched about it, it told me it's both?

in cli it does show 3ware

root@server:/tmp# lspci -nn | grep 3ware
01:00.0 RAID bus controller [0104]: 3ware Inc 9650SE SATA-II RAID PCIe [13c1:1004] (rev 01)

[pseudo blade]

Failing that it seems there might be a Linux utility for configuring this family of controllers

[pseudo blade]

It is

[obtuse hawk]

yeah i installed that utility

tho, nothing about passthrough mode

as far as i know, i might be boned

[pseudo blade]

JBOD is a valid RAID type for the controller

You do that

[obtuse hawk]

yeah but from documentation i've read it's some sort of pseudo-raid 0

and everything is still behind the controller

like SMART and stuff like that

[silent flax]

just replace it with normal cheapo LSI card then?

[pseudo blade]

JBOD is the best you're going to get

Otherwise chuck it and get something else

[obtuse hawk]

probably yeah, i've got this one for free, so that's unfortunate

[silent flax]

i mean you could just get an 9211-8i (or china clone) for next to no money and reuse even the cables

[pseudo blade]

If I were you I'd at least try it

[obtuse hawk]

i already have zfs pool, with existing data. i ain't risking that

i do have part backup

but that's about it

[pseudo blade]

Otherwise used cards are in fact cheap

Idk dude you ask I answer

IT mode is not a concept here

[obtuse hawk]

yeah, i am thankful, i am not trying to be mean. i am just trying to fix my setup a bit to be proper instead of double sided tape hdd's

[silent flax]

not the answer you look for, but for my personal NAS i just gave up on using old LSI cards and bought an M.2 to 6x SATA adapter with ASMedia chip. supports ASPM, used much less power... But if you need SAS, that is not an option

[obtuse hawk]

need SAS for the available length of the cables

since the bay in rack has a backplane

and the server is outside the rack behind it

[silent flax]

then grab a cheapo 9211-8i, ideally preflashed to IT mode and call it a day

[obtuse hawk]

guess that's the plan

unfortunate that the 8i doesn't have 3 ports

[silent flax]

9300i-16i ?

https://www.truenas.com/community/resources/lsi-9300-xx-firmware-update.145/ + https://forums.servethehome.com/index.php?threads/original-lsi-sas-9300-16i-problem-flashing-please-help.36618/#post-356881 ?

a bit more expensive, (around 60 euros i think), and you need new cables, but oh well

[obtuse hawk]

those are mini sas right?

[amber urchin]

Link is for reference to what I am speaking of only and not a recommendation of a specific seller.
Could always go with an expander to increase the number of ports - but honestly at that point you're probably better off just going with a 16 port in the first place. I originally went with the 9400-16i since the 9300-16i is actually two 8i and a PCIE switch (thus why the external power input). The 9400 is a single chip solution. I say originally because I did what I should have done in the first place and switched to disk shelves and so I got a 9305-16e.
https://www.ebay.com/itm/374905158573

[silent flax]

he wants something with IT mode tho, just saying

but ok, it seems 9400-16i has IT mode too. Not sure about price tho, i said 9300-16i because it is somewhat reasonably priced
https://forums.unraid.net/topic/178755-cheap-lenovo-430-16i-flashed-to-lsi-9400-16i-tri-mode-nvme-support/

yeah,
~30 euros for 9211-8i
~65 euros for 9300-16i
~140 euros for 9400-16i.
Kinda steep 😄

($100 on ebay tho https://www.ebay.com/itm/389291304999 or $87 for IBM branded one https://www.ebay.com/itm/389288738108)

[opal pagoda]

Yeah, it puts every single drive into its separate raid 0 and displays that to OS

[obtuse hawk]

ngl, that's so dumb

i already ordered LSI 9211-8i

pre-flashed

[silent flax]

i once bought an old Adaptec card and i didn't use it exactly because of this - there was no JBOD/IT mode, i would have to put every drive to it's own RAID0, which i said screw it and bought an IBM M1015 (9211-8i, just with a dumber connector layout) and flashed it to it mode

by dumber i mean what a horrible location for the SFF8087

vs

(and yes, i get it that M1015 is most likely based on 9240-8i, which look same as 1015, but M1015 didn' even had RAID5 unless you bought a key)

[tribal cape]

Open-ended question. But I just upgraded to a Ubiquity Gateway Max over the weekend with a U7 Lite AP. Everything is setup and working great, great speeds, etc. Other than just renaming some ports for organization and getting my wifi networks setup is there anything else that needs to be done that I might not be aware of?

I also got my DNS switched over.

[pulsar dawn]

meant to get 1gbps bru

ethernet cat 6 btw

[pseudo blade]

I'd say you're good on gadgets, now's time to look at isolating IoT stuff, cameras etc. you've obtained.

[pseudo blade]

You're getting basically gigabit down once overhead's factored in, that's pretty typical

[pulsar dawn]

ooh i see

[pseudo blade]

The upload speed... probably something to read your contract over, could be a technology limit

Could just be product segmentation

[pulsar dawn]

thats the normal upload speed here in the uk

[silent flax]

ASUS gets often a lot of hate, but damn. I bought mine in 2012 and while sure, it ain't my main router, it still can be used and let's be honest, half of the router manufacturers drop support after 2-3 years. Meanwhile ASUS still doing some updates (and there is still FreshTomato for the rest)

[pseudo blade]

13 years eh?

[pulsar dawn]

damn

[silent flax]

the end of life stuff was on for 2024 update too, so they still might release some security fixes

[pseudo blade]

Looks like it's just vulnerabilities

[silent flax]

which is the important part imo

[pulsar dawn]

my parents have the same isp and they only get 100mbps upload

[pseudo blade]

So probably Microsoft or a security agency got to them on some botnet or another

[silent flax]

they fix security stuff "often" for a 10+ year old router

[pseudo blade]

It is something I really like Mikrotik for though - I run the same release as their newest stuff and for the most part my router from 2018 keeps up with the newest

Not just bugfixes

[silent flax]

i mean just in comparison for other consumer routers, like Dlink or TPlink and such

[pseudo blade]

Oh yeah they're all trash

[silent flax]

but in comparison to them, ASUS at least tries somewhat 😄

[pseudo blade]

No bugfixes ever

[silent flax]

there is a saying in my country 'guy with one eye is the king among the blind'. That is ASUS vs other consumer router brands

[pseudo blade]

Pretty widespread saying yeah, and true

[random siren]

only other consumer router maker i know that has longterm support for their routers is avm/fritz ngl

other than that it goes fast into prosumer/small business

[silent flax]

which is a very 'germany only' router brand (i haven't seen them anywhere else but in germany and some countries around them)

[pseudo blade]

I'd honestly like to see mandatory security updates and IoT vuln management baked into consumer law

5/7 years from sale

[random siren]

yeah they are very prevalent here 😅

[silent flax]

at least we got "5 years of updates from end of sale" for phones for now

[silent flax]

and very weird looking one

[pseudo blade]

Yeah that's huge where it's offered

[silent flax]

for those who haven't seen a fritzbox

[pseudo blade]

Now we just need 10 years and access to replacable batteries

[silent flax]

that is their color scheme

[random siren]

from the outside maybe. but their design hasn't changed in ages

always silver/white and red

nowadays switching to blue, yellow and white ngl

[pseudo blade]

Kinda need to swap the two colors around

[silent flax]

my biggest hate for consumer router is going to be ~2010's Linksys

[pseudo blade]

Ah yes

[random siren]

alienware router go brrrrrrr

[pseudo blade]

Cisco came in

[silent flax]

but not for the reason you would think

the brown capacitor was the one in the Linksys router, the black one is the replacement Nichicon i bought

saving every cent at expense of reliability

(this capacitor actually murdered the power adapter for the router)

[pseudo blade]

And here I was considering them ewaste for having flash cut down to like 2MB or something

Cisco made it a challenge for a while to see how badly they could build them to justify their SMB offerings

RVXXX, anyone?

[pseudo blade]

No?

I mean that is trash but it's at least older OpenWRT territory

Oh wait

Broadcom

Never mind.

No it's trash

2.4 or 5 is a laugh too

[silent flax]

i mean it's probably ~2009 or 2010 when i bought it, so it's not as bad

not like there were many options at reasonable price

[pseudo blade]

I think we went from some near ISP-grade crap to a Netgear DNGD4000 at home around that time

Admittedly the Netgear's firmware really sucked

[silent flax]

WRT54GL -> that Linksys E2000 -> RT-N66U -> Edgerouter X SFP -> mini PCs running OpenWRT 😄

(ER-X isn't really capable of handling Gigabit internet)

[pseudo blade]

DNGD4000 > years of mobile tethering and whatever was lying around > hEX

I had the hEX fed by USB tethering for a while

[silent flax]

for 75 euros this was awesome, but oh well

[pseudo blade]

ER-X has the same CPU as the hEX

I can make gigabit happen on it though

[silent flax]

biggest drawback was that it had no USB for storage imo

[pseudo blade]

But it's barely capable of it

hEX has USB but not much functionality to justify it

SMB1? Yayyyyy....

[pseudo blade]

What's this for?

I'm getting 940 down on speed tests+Steam downloads via ethernet

At 85-90% CPU

With maybe 10 firewall rules

Traffic analysis is an obvious "no"

That CPU doesn't have working offloads on RouterOS

[silent flax]

that was someone asking about ER-X and gigabit. I mean i replaced it anyway just in case with a N2930 mini PC by then due need for USB and wifi and stuff anyway

[pseudo blade]

Might on the ER-X

Yeah if you're using Ethernet routers anyways why not a mini PC really

[silent flax]

i keep these old routers around for family use cases (oh no, mom needs to expand the wifi for her 30/3 internet). For myself, i just go with mini PC + dedicated AP these days

N100 + 16GB RAM + 1TB NVMe SSD + dual 2.5 gigabit NIC is my current router

[pseudo blade]

There's nothing competent for 2.5 gig yet I've found

At least at a price point that makes sense

So that makes sense

[silent flax]

only drawback of this mini PC is Minisforum stupidity when it comes to CMOS battery

[pseudo blade]

Oh?

[silent flax]

needs that kind of CMOS batter on cable, it kills the CMOS battery within a year and won't power on without a CMOS battery or with a dead one

so i got a spare 5pack

[pseudo blade]

2gbps internet is approx. $200/month here so I'm not going to bother for what little software actually gives me more than 200mbps usable for just me

The CMOS batteries are fortunately not hard to make

Bit of heatshrink and a CR2032, the original wire+connector

That's all they've done really

The battery drain is annoying though

Never had one die in a device I'd want to keep using anyways

[silent flax]

i plan to get one of these and solder it to the original plug & wires

[pseudo blade]

Ah, that's a nice solution

Just don't forget the on/off switch

[silent flax]

i know

and because the only time the drained battery is an issue is reboot, i could swap the battery while it's powered on

[pseudo blade]

Fair enough

[silent flax]

and i might have 2.5 gigabit internet in low single digit years

(i mean probably 1-2 years till they expand it). Yes, it is DOCSIS, which is why it is so bad upload, but oh well, at the price i can't complain

[pseudo blade]

Ah that pricing

We don't have remotely enough competition for starting prices like that here in Aus

[silent flax]

Australia's issue is at the backbone, no ?

[pseudo blade]

Indeed

Government built a monopoly and a previous administration wasted tens of billions on FTTN they are now expected to recoup

And everyone's just reselling that so real price innovation is not possible

[silent flax]

the other alternative is optical 1000/500 for 32 euros, but then i would have to pay much more extra for TV service (which i share with my parents)... so i stay with DOCSIS for now

[pseudo blade]

Price floor for non-promotional plans is AU$60/mo

Or 33EUR

For 25/10mbps plans

[silent flax]

15/3 VDSL is ~11 euros. 30-70/6 VDSL is 16 euros