networking

[opal pagoda]

and what doesent work?

[elder rock]

driver install

[pseudo blade]

Get the universal network driver pack from Intel

Or if you're on Linux...

You're not

Universal driver pack then

[elder rock]

It states that there is no recognized intel network adapters installed in the pc

[pseudo blade]

Intel has it on their website

[pseudo blade]

Could be defective?

Check device manager maybe

[elder rock]

its there

I get this no matter what, Ive checked that I'm uefi and network stack is enabled

[opal pagoda]

did you download driver pack or not?

[elder rock]

I did

This is the same card in the x570 pc, I've tried the same driver I used there as well as the universal driver pack, so I'm at a loss

[opal pagoda]

try and swap the actual cards between the systems

[elder rock]

I did that about an hour ago

it made no change to either situation

they are the same card, and both work as far as I can tell

[lone crane]

Horay

[clever gyro]

I'm setting up a VPN for access to my internal LAN. I have a subdomain setup to allow users to authenticate and start a VPN connection.

The users connected on the VPN will receive an address from a 192.168.2.0/24 pool. When testing this on my phone with my wifi disconnected, I can access internal resources from my server 192.168.1.142 as expected. However, my phone then can not access anything on the WAN I think. Any http/s connection times out.

I think this is a firewall issue. I'm using ufw. What rule would allow connections from any IP on 192.168.2.0/24 to access any (WAN) address on 80/443, and also use DNS?

[rocky badge]

@clear igloo Do you think my local ISP would care about losing two 10 gigabit customers?

[opal pagoda]

is the goal to have split tunneling or full tunneling?

[clever gyro]

So after some additional testing, I was able to ping 8.8.8.8 from my phone. Seems only DNS was configured incorrectly. I'm currently scrapping this setup because that VPN solution only offered 2 active connections without payment :^) Working on getting wireguard setup and tested and then I'll come bcak

[opal pagoda]

you used openvpn right?

[clever gyro]

yeah

[opal pagoda]

simplest setup vpn is tailscale, works even if you are behind CGNAT and dont have public IP

[clever gyro]

its not self-hosted though, which violates my policies

[opal pagoda]

https://www.pivpn.io/
this is easy script to make either a openvpn or wireguard server, works on non raspi too

[clever gyro]

That script is snazzy. Had to modify it a tiny bit for Linuxmint, but it was rather trivial

[clever gyro]

Weird issue i'm having is that sometimes when I'm adding users, the service seems to fuck up a bit. A quick wg-quick down wg0 and wg-quick up wg0 resolves it. Any idea whats causing that? Journal didn't reveal jack

Jan 01 18:22:03 [REDACTED].net wg-quick[3127779]: wg-quick: `wg0' already exists
Jan 01 18:22:03 [REDACTED].net systemd[1]: [e-mail]: Main process exited, code=exited, status=1/FAILURE
Jan 01 18:22:03 [REDACTED].net systemd[1]: [e-mail]: Failed with result 'exit-code'.
Jan 01 18:22:03 [REDACTED].net systemd[1]: Failed to start [e-mail] - WireGuard via wg-quick(8) for wg0.```

[tight pecan]

You can use tailscale with the headscale backend

Self-hosted and open source

[tight pecan]

Looks like the service doesn't remove the wg0 interface when it stops, so when the service tries to run again it will throw an error

[rose fable]

I usually had to stop it instead of restarting it. Restart didn't seem to fully remove the interface.

Since then I've migrated Wireguard config directly into systemd-networkd though and have far less issues.

[clever gyro]

Fortunately I only had to support a handful of users so I was able to create a handful of configs all at once

[rose fable]

Yep. Learning how to add a single user is a good diarrhea though. You find yourself getting an extra device or user at times.

[clever gyro]

Pivpn makes it dummy simple though. Biggest thing is to just remember to restart wireguards interface

[rose fable]

That's not enough control for me. Systemd-networkd is where it's at for me. Easy to understand.

And native

[nova glacier]

it's probably not a problem to have enabled, but network stack is just for uefi booting off the network interface. Try enabling sr-iov. The 82599 should support both sr-iov and non-sr-iov, but the driver stack changes a little for sr-iov so maybe that coud help. The specific drivers in the intel driver pack are PROXGB/NDIS68/ixn68x64.inf and PROXGB/NDIS68/vxn68x64.inf. vxn68x64.inf is the sr-iov virtual function driver. You can right click these and click "install driver" to manually get them installed (both are required for sr-iov)

[clear igloo]

likely not

[elder rock]

I tried everything you suggested, but it seems like the card still isn't recognized as an intel nic, so I ordered a mellanox connect x3, I'll see if I can get that do do anything.

[nova glacier]

what do you get if you run Get-PnpDevice -PresentOnly -Status ERROR,DEGRADED,UNKNOWN | Get-PnpDeviceProperty -KeyName 'DEVPKEY_Device_HardwareIds'?
I'm just assuming this is the only device failing, if it's not this will return results for those other devices too.

[elder rock]

I will check

This is what I got

[nova glacier]

So that's a realtek wireless chipset. Perhaps the PCIe slot you've put the card into isn't available. It could have shared lanes with an in-use m.2 port

check your motherboard manual

[elder rock]

ahh, thats very likely, I have fully occupied all the m.2 slots

[nova glacier]

hopefully you've at least got one slot that's unshared (besides the CPU slot ofc)

[elder rock]

thats the pcie slot I'm using, but its the only othe x16 slot and the card is x8, should I try putting it in an x4 slot?

[nova glacier]

the 82599 chipset does support fewer lanes, even down to 1x. Hopefully your motherboard has slotted the end of the pcie slot to allow it physically. All my asus mobos have but it's no guarantee

[elder rock]

🥲

Guess I'll yoink m.2_3, see what happens

[nova glacier]

Dremel'ing the slot is something people do, but that specific slot would be blocked by the cmos battery. There are adapters/risers that you can purchase instead

though that pictured slot is an x1, which if used means you'll be limited to around 4.9Gbit if it's PCIe 3.0 capable

[elder rock]

Even in that slot there is no change

at this point id be okay with limited speed, I just want to figure out why it doessnt want to work on this system

[nova glacier]

check your bios settings and/or do a full power off. The bios may stick to using the m.2 slot until a full POR

[elder rock]

I just powered on, I dremeled the slot

[nova glacier]

does that slot even have clearance for the card to be fully seated down? I would expect the rtc battery to impede it

Just double checked the datasheet and the 82599 definitely does support down to x1

[lone crane]

what is going on

[nova glacier]

they originally had it in a slot whose lanes were shared with an used m.2 slot. Now they're trying to get it into one of the non-shared x1 slots, which unfortunately didn't have the slot open on the end to accept wider cards

[lone crane]

nice

[opal pagoda]

i would stick a m.2 on a adapter in that x1 slot and then you can use x4 one for network
@elder rock

[elder rock]

I removed the m.2 drive from shared slot, and it made no change

And in the board had 2 x1 slots, the one I used is not the pictured one, there was room

[nova glacier]

try removing m2_2 (bottom left) as well, maybe the manual is incorrect about it being m2_3 (bottom right). Make sure to turn it off and unplug the psu to ensure it really is a full POR.

[elder rock]

Ohhh, It recognizes it as it should

[elder rock]

You were right

[nova glacier]

full POR?

[elder rock]

Yes

anything past this might just be hardware limitations

[opal pagoda]

well you plugged it in x1 slot

[elder rock]

It is in the x2 slot, the one thats no longer shared with an m.2

[lone crane]

there is no such thing as a x2 slot

[elder rock]

x8

[lone crane]

https://tenor.com/view/apka-attack-cat-attack-gif-13439615

[elder rock]

lol

[lone crane]

x8 length or pins

[elder rock]

x1 length or x4 pins eh, same thing?

[lone crane]

i need sleep

some slots are x8 in size/length but might only have x1 pins

[elder rock]

go get u some sleep, thanks for the help

[nova glacier]

that one was x16 length and x4 pins iirc. should be able to do 10Gbps with pcie 2.0 x4 (16Gbps) with much headroom

[lone crane]

no thanks

[lone crane]

the card would need to be x4 tho

[opal pagoda]

gigabyte motherboard comes to mind
x16 mechanical, x1 electrical

[elder rock]

the card in the server that its speed testing to is pcie 2.0 x16 (8 due to the card)

[lone crane]

ah

[elder rock]

yur

[lone crane]

no wait that should still be fine

[nova glacier]

It's an 82599 on an x8 card. that chipset can use x1, x2, x4, or x8 of its lanes

[elder rock]

maybe its my switch then?

[lone crane]

are you using DAC or fiber

[elder rock]

fiber

dac to the server from the switch

[lone crane]

i got the same results after smashing my fiber cable

[elder rock]

oooh

kk

[opal pagoda]

speed should be symetrical

[nova glacier]

pcie 2.0 x8 has a nominal limit of approximately 32 Gbps

[lone crane]

if cable broke and its dual then one of em could be more damaged than the other

[opal pagoda]

yikes

[lone crane]

OH DEAR LORD

i knew it

[elder rock]

🥲

[opal pagoda]

https://tenor.com/view/the-simpsons-he-is-already-dead-stop-gif-5552043

[elder rock]

At least theyre cheap ish

[lone crane]

ye

[opal pagoda]

did you jam it in a door?

[elder rock]

Lol, guess that'll do ot

Nah, I think it go ran over by an office chair

[opal pagoda]

lol

[lone crane]

xd

[elder rock]

Or melted from setting behind the power supply on the pc

[opal pagoda]

get armoured one

[lone crane]

no

[elder rock]

Bet

[lone crane]

the glass would be fine

well should have been fine also that psu would need to be like what 120c+

[elder rock]

It gets warm

[lone crane]

not that warm

[lone crane]

can they take a door being closed on it

asking for a friend

[opal pagoda]

a3 one can afaik

[opal pagoda]

*b3

[opal pagoda]

look on fs.com

[lone crane]

ERSTICKT is the best and most known fiber brand cmon man how did you not know this /s

[elder rock]

I'm not exactly good at this stuff, thats why im here lol

[lone crane]

ofc for the most part they tend to be fine but FS specializes in this stuff and tends to only cost a bit more

[opal pagoda]

https://www.fs.com/products/41030.html?now_cid=220

get the lenght you need

[elder rock]

what is om4 os2 and om3

[opal pagoda]

os2 is singlemode, om3 and om4 are multimode

tiel color is om3

[elder rock]

oh

[lone crane]

os2 is the connector

[opal pagoda]

om5 is magenta colored

[opal pagoda]

no

[lone crane]

im wrong

[opal pagoda]

lc is connector

[opal pagoda]

this is also wrong lol

[lone crane]

damit

[opal pagoda]

no one uses os1 anymore

it just has higer attenuation

[lone crane]

its funny we really should have this at school

[opal pagoda]

i had it

[lone crane]

we do have fiber and such but not this stuff more like waterpeak stuff

[hearty lily]

Having some issues with connecting remotely to my synology Nas when I was looking into it my deco internet had reset making the ip address for the Nas not compatible. If I just switch it back within range will everything sort itself out? Feel free to dm me I may be able to explain better

[lone crane]

never have a NAS on DHCP always set a static outside of DHCP.

[twin pier]

all my servers are on dhcp reservations 🔥

[thorny osprey]

is duckdns gud

[pseudo blade]

It's free and never gave me trouble

Nowadays I have a static IP and domains so I don't use it

[thorny osprey]

do I need to buy a domain to get an SSL cert?

[frosty stone]

Well what are you going to certify if you don't have a domain?

[thorny osprey]

a sub domain from duck dns ;-;

or sum

[opal pagoda]

Do you have static ip?

Maybe acme from letsencrypt would work with duckdns

[lone crane]

what i was thinking too

[thorny osprey]

nop ;-;

[opal pagoda]

are you behind cgnat

[lone crane]

more like gg-nat

[opal pagoda]

i need ipv6

[lone crane]

i got ipv6 on muh server :3

and a static ipv4 ip that has somehow not changed for 200+ days and we pay nothing extra

[opal pagoda]

yea, on vps i have static ip and /56 loll

[twin pier]

Got a new, local, fiber ISP last Thursday, seems they give me a /48 in ipv6

[nova glacier]

That seems excessive

[opal pagoda]

I don't know why people complain when they recieve /64
Like bruh you still got millions of ipv6 address

[nova glacier]

fr. A /64 can contain literally every device on the planet multiple times over. In what universe does a singular customer need 65536 times that

[clear igloo]

vlans
slaac (android) doesn't work with anything less than a /64

[nova glacier]

what? I never said the default shouldn't be /64

We're talking about giving out more than /64 lol

[clear igloo]

Yes, and if you subnet a /64 into two /65s SLAAC won't work

because you have multiple vlans

[pseudo blade]

If they don't give more than a /64 you can't subnetwork

[opal pagoda]

You can still use DHCPv6 tho

[clear igloo]

and android won't work with DHCPv6

[pseudo blade]

No you can't

Android has no support for anything bar SLAAC

[opal pagoda]

Lmao

Then its android fault for not supporting full ipv6 stack

[pseudo blade]

Sure, you can interpret it that way

Tbh a /56 would be ample for residential and honestly even small to medium enterprise

8 bits is enough!

:P

I think I'm getting a /48 from my ISP and considering that there's enough of those for everyone on earth to get one...

/shrug

[rocky badge]

Yeah I would want a /56 at minimum

That would give you 256 /64s

[nova glacier]

to me, it sounds like a contrived scenario to justify the wasteful allocation. You could just get another /64 if you genuinely need that. Fairly similar things were said when ipv4 was being allocated wastefully too

[rocky badge]

My stupid ISP isn't giving out v6 though 😐

[opal pagoda]

This would all be non issue if slaac was defined to work up to /120

[nova glacier]

indeed, lots of more sensible ways to resolve the issue

[pseudo blade]

I felt that way like five years ago and then I realised that it's the same amount of bits either way... so as long as the implementation allows for enough blocks for a few per person the "waste" is immaterial

What matters is having enough blocks of addresses

[opal pagoda]

Same was though for ipv4

[pseudo blade]

How would you propose exhausting 2^48 allocations of addresses?

There will never be enough humans

[rocky badge]

oh

I guess my ISP doesn't do SLAAC only DHCPv6 lollll

bc I just got IPv6 lmfao

[nova glacier]

seriously though, the same argument was made with ipv4. It was hard to imagine that people would come up with new inventive ways to explode usage.... like nanomachines... son 😉

[pseudo blade]

You say this like IPv4 can-kicking hasn't been distilled to an art form and they couldn't use literally any trick bar killing off SLAAC and NAT to address that hypothetical and unlikely scenario

Whether we're getting 2^48 nanomachines and a big glorious tech future or not is debatable but that whole can of worms is likely not a topic for this channel lol (perhaps this could be addressed by having multiple nanomachines sharing a subnet?)

[opal pagoda]

You forget one thing
Once a waste, always a waste
Whole 240.0.0.0/4 was essentially burned

[pseudo blade]

Yeah, and having that /4 wouldn't have delayed the inevitable all that much

Also it had a use even if they strictly don't need that many of them and singlecast ended up dominating

[rocky badge]

Interesting

IPv6 seems to have worse performance than v4... 🤔

Not sure if my ISP routing is weird with their v6 space or

[pseudo blade]

Bigger addresses

[rocky badge]

Like, noticeably more latency, drops in speed

[pseudo blade]

Ah

I guess you could compare the hops taken for v4 vs v6

Is your use case likely to be hitting a caching appliance?

[rocky badge]

hmmm

Might be speedtest and some weird routing

[twin pier]

i'm glad to get a /48 so i can do VLANs with prefix delegation

dhcpv6 kinda smells

i don't really understand worrying about waste, there are essentially infinite

unless you're like trying to give every grain of sand on earth a /32 or something

[rose fable]

No they are not. It seems that way now, but they are not.

[twin pier]

how

[rose fable]

Because there are idiotic humans that are wasteful and will assign some stupidly large amount out that will never get used and never get reassigned despite being needed. A finite resource can always run out. And with how wasteful many humans are, it will likely happen a lot sooner than you think possible.

[twin pier]

idk if you fathom how large the ipv6 space is

https://www.reddit.com/r/ipv6/comments/1awerh0/comment/krgme9g/

[rose fable]

I quite clearly understand. And I also understand how wasteful the top 0.1% are

[twin pier]

worst case you can like start reassigning spaces like happens with ipv4 still constantly?

and it's not like elon musk owns IANA or something

[rose fable]

For now

[copper trellis]

https://tenor.com/view/nothing-ever-happens-chud-chudjak-soyjak-90-seconds-to-nothing-gif-9277709574191520604

[rose fable]

I've seen more dumber things happen in the last 5 years than I've seen in my entire lifetime.

[twin pier]

i mean if that's the type of disaster you're preparing for then why do we even develop computers when a solar flare can wipe half of everything out

[zealous glen]

@rose fable please ignore bbaovanc, he is a notorious troll.

[rose fable]

Oy, thank you

[copper trellis]

[twin pier]

rule of thumb for the internet: if someone disagrees with you, they are a troll

just so you know for the future

[zealous glen]

precisely

[sick thistle]

ipv6 also generally has vulnerabilities

[twin pier]

curious what makes you say that

[lone crane]

something about it being newer probs

[topaz patrol]

Addresses were not supposed to have letters in them

[opal pagoda]

NAT is not a firewall

[opal pagoda]

Its bits, its up to you on how to represent it

[silent flax]

i will never forgive my ISP giving /48 to the router, but giving out only /64 after the router.

[clear igloo]

Yikes, that's worse than AT&T who gives out a /60 but reserves 8 /64s for no reason and you have to request the remaining 8 /64 prefixes by sending multiple PD requests each for a /64

[silent flax]

they don't even allow you to set your own DHCP servers for IPv4 etc... so i have my own router behind theirs, kill IPv6 for my local network and have IPv4 only LAN

[opal pagoda]

time to turn on bridge mode moment

[nova glacier]

but now I can address my smart grill dead:beef and my smart coffee machine c0ff:eeee. (/s I have neither)

[opal pagoda]

no route, all you can reach is BADD:CAFE and BADD:BEEF

[nova glacier]

ig I should've clarified those are interface ident side, not full addresses

[twin pier]

my ubiquiti gateway doesn't support multiple PD requests so I can't even do that for vlan until I get a different router

at a different place

[meager ginkgo]

My UDM Pro does? Not sure what gateway you have

Each VLAN is set to auto on prefix delegation

you can ditch the 8 reserved /64s luckily if you bypass their hardware

[twin pier]

It's the USG, can you show what that looks like? I wonder if there's an option in the newer controller software

[meager ginkgo]

yeah one sec

[twin pier]

last I remember I only have a single option on wan to request one prefix, which normally I'd set to /56

[meager ginkgo]

this is the mobile app but you can still see it

[twin pier]

But what do you set in wan?

[twin pier]

see you're able to get a /60 and prefix delegate out of that

On at&t fiber you have to request multiple /64's, not a single /60 to divide up

[vast saddle]

https://www.reddit.com/r/FiberOptics/s/oaQxadkfHO

[vast saddle]

Lmao. Insane

[silent flax]

no bridge mode

[royal smelt]

my ISP insisted on having their shit ONT to convert from fiber to ethernet. I have a UDM cloud fiber. connect straight into that. they said no lol.

need to figure out how to bypass that shit. I have 10Gbps symmetrical internet and i only get between 5-6Gbps currently

[twin pier]

It might do authentication, that's the case with at&t

[royal smelt]

yeah most likely. I have seen some cases where people have been able to spoof that portion but I dont think thats the case with my ISP yet

[twin pier]

Rip

[royal smelt]

https://github.com/Anime4000/RTL960x

it seems people have made it work with att

[opal pagoda]

read this

[royal smelt]

yeah i saw that. Would be fun to attempt though.

[peak cloak]

it's GPON probobly, it's honestly not that big of a deal

I have verizon fios and their box just does fiber -> ethernet and I use my own router

although I heard with att you may need to use their router since the ethernet connection does some funky port based auth, although I've seen people bypass it

[meager ginkgo]

I bypassed my AT&T 010 ONT and BGW210, pretty easy for someone who is technically inclined.

I'm on GPON and used a G-010S-P with extracted 802.1x certificates

[heavy marlin]

ordered my first thin client yesterday so i can start my little linux server

[stuck grove]

get shorter fiber patch cables

[lone crane]

first thing i thought was das not within spec

[verbal kelp]

pfff this again lmao ill try my ccna after this

[meager ginkgo]

Old pic, I have an appropriate length one now 🙂

[opal pagoda]

it is, it is much easier testing shorter lenghts of fiber patch cable compared to category copper cable

[lone crane]

aaahh

[opal pagoda]

you use a launch cable then on the other side a endcap

you then get a graph like this

[lone crane]

i was thinking more of this

[opal pagoda]

this is just bend radius

[lone crane]

ye

o well am not gonna do much fiber

[opal pagoda]

i find fiber much more magical than wifi lol

[stuck grove]

i mean they're ultimately fairly similar, both using EMR to convey data

[opal pagoda]

at the end yes its all emr but optical amplifiers are essentially magical black boxes to me

like wtf

[silent flax]

got my 8127 NIC, has PCIe 3.0 x2 label on the back (x4 physical interface), so yeah, it should do fine in the 5700G system

[normal berry]

So i have a unique situation.

I have a workshop thats about 70M from my Starlink modem. I have a workshop im currently building that will be used for content creation as well so i want an internet connection to the workshop. but I cant run any cables.

I see there is Point to point bridges that can work but i have no idea or experience with how they will effect my upload speed. Anyone have any experience with this sort of system?

[lone crane]

ltt used point to point

[pseudo blade]

That's a very easy distance to work with, as long as both sides of the bridge can see each other.

I'd go 60ghz because why not

Something like this is cheap-ish and easy https://mikrotik.com/product/wireless_wire

[normal berry]

Oh I did forget one thing, I have powerlines running through my property, while the lines won't be in the way of the line of sight. The line of sight is right under the powerlines

That shouldn't causes alot of interference right?

[pseudo blade]

It can definitely cause interference

And it is also something you should have said upfront

How much? It's impossible to tell

I don't know how much clearance you have

I don't know what voltage

Oh wait they're just above LoS?

Not near either device?

If so my recommendation still stands

I thought for a moment you meant the structure was under a power line and was going to ask how that even happened

[weary garnet]

College has some layer 3 new swiches for my class to configure its one the coolest things ive seen and it has rgb and a touch screen

[lone crane]

Ubiquiti really had changed the market and some admins really do not like it

[weary garnet]

How so?

[lone crane]

lack of enterprise features

[random siren]

any specific ones? didnt have deep networking stuff in school and uni, and at home i obviously also havent encountered anything lacking

[lone crane]

BGP was one i was told

only 1 PSU is another

they do have the DC stuff but eh

[paper valve]

Surprised a school would use ubiquiti to teach networking when the whole point of their products are to make things easier

[lone crane]

humans want easier

ubiquiti also just offers certain things and ease of use most others lack

but its more a case of small to mid size places ubiquiti is AMAZING for but massive companies they just cant handle.

[lone crane]

i have a pretty strange question, right now at school we are at wireless networking and are using acrylic heat maps, i am just wondering if you guys have even heard about it

also kinda wanna find something like it that does not suck.

[pseudo blade]

Pretty, relatively inexpensive, being L3 possibly surplus from some IT department somewhere where someone actually tried to use it for L3 leading to immense disappointment...

From what I hear they really dropped the ball on their L3 switch functionality

Also quite a lot people both teaching and practising in any IT field are frankly not all that good at it and might lean on it as something easier to learn for themselves to teach

[opal pagoda]

support

for cisco you can have hardware replaced if it failed in matter of hours

[lone crane]

ah so that is why support is like as much as replacing all the equipment with ubiquiti stuff at least for my class

[opal pagoda]

you can define the acceptable SLA when negotiating enterprise agreement so if you can accept 48h hardware replacement it will be so much cheaper

also warranty for ciscos is "limited lifetime" aka until published end of life

[lone crane]

does the stuff just become free to use

as from my understanding a lot of it you need a new license each year for it to keep working

[opal pagoda]

thats meraki

i use all cisco catalyst and nexus and those are "trust me bro" licenses

[lone crane]

all i know is last year i was using stuff older than me like 2006 kinda stuff

no license there but this year its all ubiquiti and was told it was due to licensing

[opal pagoda]

one thing they get you with is mandatory DNA licensing for 9x00 catalyst switches lol

[lone crane]

DNA?

[opal pagoda]

cisco DNA / renamed to catalyst center

[lone crane]

funky

[opal pagoda]

https://www.cisco.com/site/us/en/products/networking/catalyst-center/index.html

[lean palm]

yeah. unifi l3 is a bit of a joke compared to the big boys of switching (arista, cisco)

unifi is solid for small business, though I've seen it crumble under real network load where cisco did not

[weary garnet]

Well thats the point im a total newbie and the class focouses on networking from the ground up

[paper valve]

As other have said their l3 isn’t great and personally something that’s easier to use is the exact opposite of what I’d want to use when learning networking from scratch lol

[weary garnet]

ah

[lean palm]

I find aruba switches are great for learning

They have a nice enough gui that you dont have to be a cli wizzard but the interface wont hold your hand and guide you through everything

[heavy marlin]

https://de.aliexpress.com/item/1005007805523988.html?gatewayAdapt=usa2deu4itemAdapt what do you guys think of that thing for first homelab ?

[nova glacier]

I've gotta wonder how the economics of that could possibly work. The RTL9303 alone has to be at least $30, probably over $40

[pseudo blade]

The price doubles if you ask for anything other than an EU plug lol

Though as it seems to just have a 12v DC barrel good chance you could just put any old 12v 2.1mm plug pack you have lying around to work

Probably an amp or something? I'm swimming in those

[rare mesa]

So what domain should I buy for my about me / neocities website?

[pseudo blade]

Honestly I'm surprised nobody's registered that

[rare mesa]

I kinda want that now

[opal pagoda]

i cant even...

[clear igloo]

it's fine!

[hazy lake]

the moment when i need to exploit the mesh wifi 5 by adding another usb 3 1200mbps realtek card

it was faster than the onboard wifi card 😭

[lone crane]

https://tenor.com/view/pacha-perfect-emperors-new-groove-very-good-gif-18089782898853427957

[opal pagoda]

if not wire why wire shaped?

[vast saddle]

https://www.reddit.com/r/FiberOptics/s/oZmZvtkBa7

Love me organization

[fallow python]

i want to turn an old pc into a homelab for nas, vpn server and maybe a few more containers down the road. it currently has an i3 6098p and i want to upgrade it should i go for i5 7500t or 7400/7500?

do i lose alot of performance by chosing the low power one

[opal pagoda]

its fine as is

good enuf certified

[lone crane]

the t is just locked to a lower tdp anyways

it does nothing for the power use you will have

[fallow python]

so idle it will be the same?

[opal pagoda]

yes

it just limits peek wattage

[fallow python]

even with 2-3 users on the nas? or maybe nextcloud later on

[opal pagoda]

yes

[fallow python]

great thats the best case scenario

[opal pagoda]

you can always get a new cpu

but considering that new prebuilt nas systems have much shittier procesors inside this will do just fine

[fallow python]

what os to chose? ive used truenas in the past but ive heard about proxmox and that its better for scalability

also i have 2x4gb and 1x8gb ddr4 ram

[opal pagoda]

truenas scale

[fallow python]

can i easily run wireguard vpn on it?

i suppose everything on docker containers

[opal pagoda]

either docker containers or vm

[fallow python]

should i mix ram to get from 8 to 12 or 16

[pseudo blade]

Doesn't matter much

May cost you performance but it's unlikely to be significant for your use case

[thorny ivy]

im trying to setup a static ip for a important system but im not able to find an option on my routers page for it, coulf anyone help me out?

[nova glacier]

Look for DHCP reservation. Sometimes it's on the client list

[thorny ivy]

oh okay

[thorny ivy]

didnt find it

the closest ive found is setup a table for static routes

[nova glacier]

what is your router model number?

[thorny ivy]

20002647 i think

i can check under the router if needed

[nova glacier]

a fritzbox 7490?

[thorny ivy]

yes

[nova glacier]

Home network -> network will show a client list. the edit button on the right of the device will let you reserve a device's existing ip or change it

[thorny ivy]

And then it needs to be the ip of the router right?

[nova glacier]

no, two devices can't share an IP

[thorny ivy]

Im very new to all of this stuff

So im not sure what to change it to

Also, now that im looking i see no option to change the ip

[nova glacier]

a unique IP in the range of your existing network submask (i.e a submask of 192.168.1.0/24 is 192.168.1.2-192.168.1.254 assuming the router is 192.168.1.1)

[nova glacier]

the button that says change

[thorny ivy]

i dont see any change button

[nova glacier]

Did you click the device name on the left or did you click the edit icon the right?

[thorny ivy]

edit icon

like the pen

[thorny ivy]

cause the GUI shown in this image is older

[nova glacier]

you need to access the settings of the device assigning its IP. I'm fairly certain it's still in the same place on the latest firmware.
Your images show it has two IPs, which implies you've got multiple DHCP servers. That's pretty questionable, but it might just be how fritzbox does their meshing.

Alternative to all of this is to just force a static IP on the device itself

[thorny ivy]

i mean how could i force a static ip on the device im on?

im running a pi5 with pi os lite on it

[nova glacier]

idk about pi os lite, but for most distros it's with nmcli. nmcli connection edit <connection_name>, set ipv4.gateway 192.168.178.1, set ipv4.addresses 192.168.178.<n>/24, set ipv4.dns 192.168.178.1, save, verify, activate, quit.

iirc anyways

[thorny ivy]

there is nmcli

what do i enter at the connection_name?

[nova glacier]

check your current IP with ip addr, idk if it will be .110 or .187

[nova glacier]

hit tab to show the options, it should be clear which one

[thorny ivy]

on wlan0 it is .187, one after that with /24 brd ends in .255

[thorny ivy]

Thanks

[thorny ivy]

a command gave me the error Error: failed to set 'addresses' property: invalid IP address: Invalid IPv4 address '192.168.178.<n>'

is it cause of the <n>

[nova glacier]

yes, that's a placeholder for the IP you intend to set. just reuse 187

[thorny ivy]

Do you also want to set 'ipv4.method' to 'manual'? [yes]:

yes right?

[nova glacier]

yes, just hit enter

[thorny ivy]

Error: Failed to save 'netplan-wlan0-FRITZ!Box 7490_EXT' (b2c932e3-28a0-3fc3-b2bc-e929c364c8d6) connection: Insufficient privileges

[nova glacier]

you need to use sudo nmcli...

[thorny ivy]

oh

[thorny ivy]

Did all of it, should it all be setup or is like a reboot needed?

[nova glacier]

it's immediate

[thorny ivy]

oh okay

[thorny ivy]

How can i also change the dns on my router as shown in this video? https://youtu.be/oX4NqFisC5Y?si=_sLQnm80KP037E1w&t=461

[nova glacier]

Home Network -> Network page, IPv4 tab, local DNS server setting. you need to change this on the primary router not the extender, same place that IPs can be reserved

[thorny ivy]

i dont seem to see a section called ipv4

do i need to edit it first?

[thorny ivy]

do i need to click on settings first?

[nova glacier]

yes

[thorny ivy]

closest things i found

[nova glacier]

ipv4 settings

[nova glacier]

the "local DNS server" setting. Set it to 187

[thorny ivy]

works now, thanks

[ornate jungle]

One that represents you as a brand, or as a professional. Could be your name, a nickname, a business name that represents your legal business, etc. Only you can answer this question...

[hazy lake]

exploiting my wifi 5 (mesh)

[hazy lake]

this

[lone crane]

good old ai

[rocky badge]

Rethinking my site to site strategy...
I have 3 sites I want to connect. Currently using WireGuard but only getting 600Mbps out of it despite the sites having 10 gig, 2 gig, and 1 gig.
I want to do something that can run on Linux machines that can do at least 2 gig lol.

[opal pagoda]

what hardware are you using for wireguard?

[rocky badge]

AMD Ryzen 9 7945HX with X710s

Like I figured that should be plenty of power to do stupid fast WireGuard

[opal pagoda]

and other side?

[rocky badge]

I'm not even hitting 5% CPU usage

Same exact system

[opal pagoda]

linux on both?

[rocky badge]

yes

6.8.0-90-generic with kernel wg

[opal pagoda]

what is the throughput without vpn?

[rocky badge]

2gbps, maxing out the other site's internet

[rocky badge]

I even tried setting up WG locally (across VLANs) and still getting the same kind of speeds. Ryzen 9 7945HX machine and M4 Mac mini

Same VLAN

[nova glacier]

What's the tcp congestion control set to? You could try bbr if it's not that already
sysctl -w net.ipv4.tcp_congestion_control=bbr

[opal pagoda]

isnt wg UDP

[rocky badge]

I tried that earlier but no change

also yeah

[nova glacier]

the effect is on the tunneled packets

[opal pagoda]

time to whip out good ol ipsec running on hardware accelerated ASIC

[rocky badge]

I just want above a gigabit WG 😩 😩

[twin pier]

for some reason I only get about 5-10 Mbps over the WG tunnel between my parents' houses, when both have 500 Mbps uplinks so you're not alone

[nova glacier]

what else have you tried so far?

[rocky badge]

MTU, giving the VM pcie passed through NIC vs proxmox bridge, more resources, less resources

[nova glacier]

basaed on your kernel I assume you're on ubuntu so you could also try the HWE kernel (6.14)

[rocky badge]

Hmmm

[rocky badge]

@nova glacier @opal pagoda Hmmm this may be the culprit

Port forwarded iperf over WAN running udp tests

those numbers are only slightly higher than what I am getting inside the WG tunnel

[nova glacier]

rip
I just setup wireguard with my oracle free tier instance out of curiosity. For about 15 seconds it's 440Mbps, but it stabilizes around 815Mbps. Oracle is 4Gb, my ISP plan is 1.3Gb/40Mb, but my own networking is just gigabit atm.

[long scarab]

someone ported proxmox to arm64
https://docs.pxvirt.lierfang.com/en/

[wary pecan]

Anyone else build Grafana Dashboards?

[amber urchin]

Traffic shaping either over the internet or via either sites router?

[nova glacier]

yes, but only a really simple one for graphing temp and humidity from a TSDB

[wary pecan]

I kinda just started playing around and finally finished mine after wiping it out 3 different times. Any advice? This is my first/4th Finished product.

[nova glacier]

ping being measured in MB/s is a bit strange, but no I don't really have any advice. I just used grafana as a quick means to an end for graphing the data of some Matter temp+humidity sensors I made

[opal pagoda]

What router are you using?

Maybe you can exampt this traffic from IPS/IDS to get better performance

[whole jasper]

Guys idk if anyone can help with this, but its just a general DNS/apache2 question,
How do I make my server running on a different port appear on a sub domain?
Basically I have my main website server running an immich photo gallery and i want to be able to access my photo gallery from photos.example.com and access my main website from example.com
I don't wanna use ai so I'm asking people as I've already tried looking online for answers but can't seem to find any.

[glacial jolt]

Is it a local server or public?

[whole jasper]

its my server with my public ip xdd

im using cloudflare dns

[glacial jolt]

Use a reverse proxy

[whole jasper]

yeah ive tried but im kinda stupid and dunno how to configure my apache2 conf file right. I can send what I have right now if u want

<VirtualHost *:443>
    ServerAdmin [e-mail]
    ServerName example.com
    ServerAlias www.example.com
    DocumentRoot /var/www/ivy/public_html

    ErrorLog ${APACHE_LOG_DIR}/iivy_error.log
    CustomLog ${APACHE_LOG_DIR}/iivy_access.log combined

SSLCertificateFile /etc/letsencrypt/live/example.com/fullchain.pem
SSLCertificateKeyFile /etc/letsencrypt/live/example.com/privkey.pem
Include /etc/letsencrypt/options-ssl-apache.conf
</VirtualHost>

<VirtualHost 127.0.0.1:2283>
    ServerName photos.example.com
    # Proxy Settings
    ProxyRequests Off
    ProxyPreserveHost On
    ProxyPass / http://192.168.0.171:2283/
    ProxyPassReverse / http://192.168.0.171:2283/
</VirtualHost>```

ik im doing it wrong, but idk how to do it right

[glacial jolt]

I haven't used Apaches however Nginx Proxy Manager has worked well for me in the past

[wary pecan]

Ha youre right! it is in mb/sec lol! This is why I asked for someone to check it out, Thanks!

[peak cloak]

if you are hosting locally you need to open both port 80 and 443 and point it to the reverse proxy

[rocky badge]

It’s not going through IPS/IDS. UDM Pro

[nova glacier]

Have you checked if it's the same behavior on every port? If it's ISP QoS it may have different policies for certain ports. 443 would probably a good one to try first, since they probably wouldn't want to apply QoS that impacts HTTP/3/QUIC traffic. I doubt they'd be doing DPI QoS to actually differentiate the traffic on a port.

[rocky badge]

https://community.ui.com/questions/UDM-Pro-UDP-Throughput-Expectations/013749df-d918-45b6-b9ed-367688d20b55

https://community.ui.com/questions/Severe-UDP-Throughput-Degradation-on-UDM-Pro-CPU-bottle-confirmed/9210a40d-7d49-45d5-8b74-7490353137be

[nova glacier]

oh geez, I never would've suspected that. Even my $99 wifi router with 2.5Gb WAN has offload. A 10Gb WAN $380 dedicated gateway router lacking offload is insane

[rocky badge]

It does have offload

Just not UDP

Which I'm now curious to see how others would handle trying to shove 1Gbps+ through one UDP session

[nova glacier]

Given the ubiquitous nature of UDP with use in multiple VPN protocols, HTTP/3, and more that's a glaring oversight.

[twin pier]

it is ubiquiti youre speaking about, though

[rocky badge]

A lot of that can be parallelized or doesn't try to shove a lot in one flow

Because as soon as I throw multiple flows it handles 2Gbps easy

[nova glacier]

(pun intended)

[rocky badge]

Never thought I'd say this

OpenVPN is currently faster than WireGuard

[twin pier]

Can you run wire guard over TCP?

[rocky badge]

No

[twin pier]

maybe there's some hacky program to do it 🧌

as long as you don't care about your latencies

Because I know mullvad already has the option

[nova glacier]

the wireguard site mentions udp2raw, but there are multiple options for doing this. Whether it'll be better than a native tcp vpn idk, but probably worth benchmarking
https://github.com/wangyu-/udp2raw

[opal pagoda]

Time to whip out vyos

[rocky badge]

@waxen scroll @clear igloo CommScope got sold to Amphenol

And Ruckus & Access Networks Solutions got rolled into Vistance Networks

[waxen scroll]

@rocky badge I just put 340 aristas in

[rocky badge]

nice

[waxen scroll]

It's almost as if bad licensing practices from vendors backfire on them

[lean palm]

APs or switches

pretty sure the APs have hefty licensing

[waxen scroll]

Switches

[regal badger]

Hello 🙂 and Guten Tag , i would like to buy a Unifi UX7 , but what i dont get , is it possible to use just this device as my router? To replace the one from my ISP. ? 🙂

[waxen scroll]

Not that I know much about it but looking at the store page, yes, you can replace your ISP router if you have a modem or can put the ISP router into bridge mode if you're forced to keep it as a modem

[stuck grove]

You should be able to

Depending on how your ISP works, you may need to keep the modem to convert from the ISP line to ethernet

[brisk mountain]

how bad are powerline adapters in an old house? (for context my house was built in 1920, the wiring has been redone since then, but I doubt any later than like 2000s) I read online that they don't work well with older houses.

[ornate jungle]

Impossible to say without having built your home. It really boils down to how your electrical circuits are wired. I've had poor performance in newly build homes, and great performance in really old homes, and the opposite. 🤷

I would just ensure the retailer you buy your adapters from has a good return policy in case they don't work.

[brisk mountain]

honestly, I probably wouldn't return them even if they didn't work. I'll end up giving them to somebody or something. I just wanted to know if trying it was even worth my time

thanks for the answer tho!

[nova glacier]

if they added in coaxial for cable tv at any point then MoCA is a likely more reliable option too

(ratty water logged coaxial is a thing too though, so it's not guaranteed to be reliable)

[brisk mountain]

I'm pretty sure all that was ever here was a line that ran from an antenna to a single room. And I think it might have been ripped out. I'm probably gonna be moving in a few months so I just wasn't looking for anything more permanent like routing ethernet. I may end up using a USB wifi adapter.

[opal pagoda]

https://mikrotik.com/product/crs804_ddq
wake up, new switch dropped

[nova glacier]

I wonder what 34.65Gbps (64-QAM) or 46.2Gbps (256-QAM) wireless bridge could sell for. The 60GHz Rx/Tx are pretty affordable, just $26 each; $208 for 4 Rx + 4 Tx. The ADC/DACs are hella pricy though. $400 for each ADC and $100 for each DAC, so $2000 total for a 4x4. The pricing of zynq rfsoc is starting to seem reasonable for the quantity and rate of ADC/DACs they provide

[nova glacier]

Imagine the 67 SDR
https://www.en.alinx.com/Product/SoC-Development-Boards/Zynq-UltraScale-plus-RFSoC/AXRF67.html

[zinc mortar]

Question, i've got an ONT with a 10Gbps port connected to a 10Gbps capable switch. My ISP is providing a 5Gbps plan, if I were to get the Intel X540-T2 NIC for my PC, will it negotiate to 10Gbps with only 5Gbps? I understand that those nics only negotiate 10Gbps or it drops down to 1Gbps, but i'm wondering if I can utilise the 5Gbps from my ISP.

PC -> Switch (10Gbps)
Switch -> ONR (10gbps)
ONR -> Fibre Termination (5gbps)

[opal pagoda]

Link speed negotiated does not care about uplink speed

[zinc mortar]

Sick that answers my question, thanks!

[pseudo blade]

I think we can talk about that when more than a select few internet services can actually saturate a gigabit connection.

I don't even want faster downloads as much as I want gigabit uploads

[peak cloak]

linux isos of course

[opal pagoda]

Uncompressed asset time

[sudden juniper]

Hello guys! I have been experimenting with making cyber-security videos using SBCs and microcontrollers. I want to know how can I make them better and also seek to have conversations with people up for any possible collaborations. Please let me know. Thank you.

[opal pagoda]

wrong kind of networking

[rocky badge]

My ISP removed their “gigabit” plan it’s now “1.5 gigabit” lol

And I’m glad a few months ago my parents ISP upgraded the gigabit plan from 500mbps upload to symmetrical for no additional cost

[calm lily]

Uhh guys what do you think about this...I'm new! To networking

[stuck grove]

is this switch for emotional support?

[fading lantern]

why two water bottles

[pseudo blade]

Nah bro it's doing intervlan routing and is obviously crucial to the internet itself staying up :)

...despite being an unmanaged l2 switch.

[lone crane]

what is the port on the right for

[pseudo blade]

Probably nothing special, they used a 1x4 and 1x1 part

[stuck grove]

i've used that exact switch, it doesn't actually do anything different

all 5 ports are identical in function and spec

[nova glacier]

fast ethernet in 2026, oof. ig still plenty of TVs using 100Mb and it's certainly enough for that, but damn lol

[opal pagoda]

Router on a stick

[stuck grove]

that is almost certainly an unmanaged switch

[nova glacier]

indeed, it's an FS105

[shadow bluff]

uh cant do roas if your switch doesnt support intervlan in the first place

[opal pagoda]

/s was missing

[bleak trail]

soooo

linux networking here?

[opal pagoda]

sure

[bleak trail]

when i boot the debian machine, sometimes boots with mac address 1, and sometimes with a different mac address

[rocky badge]

@clear igloo @waxen scroll Should I buy a purple packet eater

48 port PoE+ 4 SFP+ lol

[waxen scroll]

No. Learn arista

[stuck grove]

SEND ME THAT LINK

right now

is it 1g ethernet tho?

[lean palm]

nah id rather a cisco

[bleak trail]

go for 10gbit rj45,

[high haven]

I am going to need to replace my internet cable inside the house. Where do you get good internet cable? I am new to this so.

[pseudo blade]

48 gigabit, 4 10 gig SFP+

AKA a very standard access switch from the last decade or more

Seems it supports AVB which is probably why Blob's eyeing it

[opal pagoda]

avoid "CCA" (copper clad aluminium) only buy pure copper cables, anyone selling you ratings higher than cat6a is scamming you

reccomended suppliers : fs.com, monoprice, infinitecables

ubiquiti also has some decent bulk cable boxes

[meager ginkgo]

What’s your “internet” cable?

Are you talking fiber, Ethernet, coax??

[high haven]

Ethernet and coax

[meager ginkgo]

listen to Martin then ^

coax I’d make sure to get quad shield RG6

23AWG Cat6A unshielded non-CCA is what I’d recommend for future proofing

regular CAT6 will work too but 10Gbps is not able to be ran officially as far

[high haven]

Any place you’d recommend for the coax?

[meager ginkgo]

I personally wouldn’t run coax anywhere besides maybe to a modem or antenna nowadays

it’s not really needed since most tv services are over the internet now

[high haven]

Yeah, the only reason I am using that is for, outside to my modem

[meager ginkgo]

just run a single line then IMO

Run multiple CAT6 or 6A to each location would be my recommendation

[opal pagoda]

if you can get a small rack and terminate everything to patch panels

[meager ginkgo]

^

or grab a wall mount patch panel that uses keystones at the very least

[twin pier]

What if I buy above 6a from those suppliers you listed 🤔

[high haven]

Alright, so do I need coax?

[opal pagoda]

well you dont need anything higher

[meager ginkgo]

it’s fine but it’s not really doing you any favors. Just more install trouble for no real gain

[opal pagoda]

so it would be wasting money

[meager ginkgo]

above 10Gbps fiber is more common and recommended

[opal pagoda]

also they are harder to terminate

[twin pier]

I was replying to the "anyone selling you ratings higher than cat6a is scamming you" part

[high haven]

It would be just one line from outside, through the attic to my modem

[meager ginkgo]

yeah that’s true

there’s no need for over 6A, at that point you should be going fiber

[twin pier]

so those sellers are scamming you by that logic

[meager ginkgo]

There’s also a lot of fake CAT7 and CAT8 cables on the market

[opal pagoda]

selling you = ads
if i see ad for something higher than 6a its most likely a scam

[meager ginkgo]

That’s what I would do

just buy a short reel of coax

if you wanted to futureproof I’d run a small conduit and the coax alongside if you ever get a fiber company coming

[high haven]

Ok quad-shield rg6

[meager ginkgo]

shouldn’t be too expensive

[twin pier]

One of those does advertise it to you on the blog but I forget which site it was

[high haven]

Any specific brand?

[opal pagoda]

this is advisable for everything

[meager ginkgo]

yes, I’d run a larger conduit for inside drops though. Hard to do in existing construction also

shouldn’t need more than say a 1/2 conduit for outside [ EDITED ]

shouldn’t need more than say a 1/2” conduit for outside service entrance

[twin pier]

https://www.monoprice.com/pages/MPAcademy_Which_Ethernet_Cable
Cat 8 best for future proofing your network 🧌

[meager ginkgo]

Shouldn’t matter too much for a single drop for your internet. Just avoid CCA again

[opal pagoda]

there is currently zero use for anything higher than cat6a
40 gigabit is not implemented on anything

[twin pier]

I am aware

I was just trying to point out the contradiction

[high haven]

Awesome appreciate your guys help!

[opal pagoda]

servers went dac and transciever way due to significantly lower power consumption, 10g base t was used for a short period but it is very power hungry

[meager ginkgo]

This article isn’t totally wrong, but it’s not practical nowadays. Most stuff over 10Gbps will be using Singlemode fiber

multimode sprinkled in there also

it’s like running fiber for a 1gbps connection. Highly overkill and causes more issues than it’s worth [ EDITED ]

it’s like running fiber inside your walls for a 1gbps LAN connection. Highly overkill and causes more issues than it’s worth

[twin pier]

Correct ✅

[meager ginkgo]

The only way I could see CAT8 or something similar being useful is for when 40gbps PoE is needed lol

but I bet they’ll be different standards by then

[tepid ingot]

dont u love it when tailscale guides just dont work

[opal pagoda]

no i never see that being implemented

[meager ginkgo]

Exactly my point

doubt it’ll come

I wonder if someone will make a fiber connector with integrated power wires (not separate)

like SC or LC but with conductors inside as part of the connector

allowing power over fiber cables essentially

[opal pagoda]

https://connectorsupplier.com/hybrid-cable-assemblies-with-copper-and-fiber-conductors/

[meager ginkgo]

interesting

I do wonder how we’ll get internet to things like APs in the future

maybe that’s how

[opal pagoda]

https://www.occfiber.com/product/slimline-riser-indoor-outdoor-pltc-hybrid/

if only splicing of fiber wasnt so difficult and expensive

[opal pagoda]

https://youtu.be/6ozKLH876YQ
this might be interesting to you

[rocky badge]

very popular in broadcast & entertainment

SMPTE fiber or LEMO fiber is one cable that includes DC power from a CCU base station to a camera connected via fiber for signals

[meager ginkgo]

I actually just saw this the other day, pretty interesting stuff

Amazon has some stuff

[opal pagoda]

is this slip ring?

[rocky badge]

lemo

[north raft]

are any of these even worth considering for screwing around with decommissioned networking hardware?

i see cisco, huawei, etc

[opal pagoda]

Is this USD?

This is all very old equipment

Unless you are using them for learning they are not worth it at all

[clear igloo]

Even for learning you can do more with a virtual environment than that stuff

[umbral fossil]

A little charitable donation for the top dog himself😜

[opal pagoda]

Yes but some vendors like forti provide very limited virtual environment

And idk if Huawei provides ones at all

[clear igloo]

Ah, I missed the other vendor gear, yeah

[waxen scroll]

sus

[umbral fossil]

These and a couple more bits of history for you!

[north raft]

oh it's argentine peso and the most expensive item there is like... 80 usd? Thanks though

[tired verge]

hello guys, is there a VPN or some similar technology that is worth it? I tried NordVPN and other major providers but their IP was clearly blacklisted/bad scored IP and most of the time showing that is coming from a VPN Provider instead of actual ISP. My knowledge on networking is poor all I need is decent VPN or similar solution (free or paid doesn't matter) where I can leave it turned on 24/7. I need IP or whatever similar solutions are from Sweden. As I plan to move there I want to make all my accounts and to run everything like I am in there already. I watched something like u can buy VPS or cloud machine or dedicated IP but I do not understand much. Any help appreciated!

[pseudo blade]

Mullvad

Else roll your own

[tired verge]

ty I have seen mixed opinions for it too. how to roll my own or if I can just buy dedicated IP or rent some cloud machine or so. Not sure I just know some terms xD and I saw something about proxies but they said it's only for scraping w/e it means

[lone crane]

all datacenters aka VPS AND VPN IPs are as you say blacklisted

[pseudo blade]

"All datacenters" Well... no...

Not even all AWS IPs generally

Depends on the service of course

[lone crane]

eh oki but i would imagine it aint easy finding one

spin the wheel and hope

iv never had any luck

[rose fable]

Rent house in Sweden, add residential internet service to the house, plop computing device in house connected to internet service and setup VPN. Very simple to do.

[tired verge]

I am going to buy house in there but that is not the case now when I am far away of the country. As you know emails, games, everything have the country that you are registered with but not only that if the VPN disconnects or not actual Swedish IP logins from other countries will appear and they will realize that I cannot travel that fast even with Airplane... but I want to enjoy everything from before I move there so everything is aligned to their market. I already had refunds from the most known VPNs about this. Some checks showed the IP from other countries even which is crazy. Meanwhile they promote "dedicated IP that only you use etc." but it was not the case. I was checking with tools like Scamalytic and similar ones. So they do not provide you what they advertise.

[tired verge]

Urban's VPN free version actually can get you lucky sometimes by giving you "0% scam score" IP from a Swedish provider but it is a lot of ping pong so the connection is too. I can enable killswitch on most but idk

[rose fable]

I'm saying just rent house before you arrive

[tired verge]

this would come in expensive to pay rent both here and there just to set up a personal VPN 😄 that's why I am looking for some solution that by 2026 should be in excistence 🙁

[pseudo blade]

Sure must be nice to have "rent a house for your server to live in" money

Us non-yacht owners tend to have to exert some self-control when spending our money and must find more cost-effective solutions :)

[tired verge]

this

I am nowhere rich xD houses there cost like 15-30K EUR (70 m2) but this is not the forum about it. I just wanted to point out. I just need an IP that is indeed located in Sweden that I can run 24/7 inb4 I move there that's all.

I am paying rent already in my country as I save money to buy house there and move so yeah. However I do not want to make the accounts in my current country as prices, ads, what is available everything will be different and then some supports are very stubborn when u have to switch country etc.

I am not sure if some proxy/VPS/Cloud server or whatever it would come in cheaper, my PC is kinda powerful so I can also run a VM if there is some workaround

[rose fable]

My bad

[tired verge]

Actually you can guide us how to become as wealthy as you are - this will resolve the issue too

[clear igloo]

Just get small loan of million dollars from parents and start business

https://tenor.com/view/arrested-development-lucille-bluth-bananas-gif-5831031

[tired verge]

Instructions unclear, I got 50 millions instead ...

aand back to cables, anyone with some doable idea for my scenario?

[south iris]

Is a network VPN worth it? How would it help me secure my home network?

[lone crane]

Wat

[lone crane]

Tf is a network vpn

If you just mean vpn then in your home network it would not so more than increase your ping

[south iris]

I guess like a whole home network firewall is what I am looking for

[random siren]

a firewall is something different than a vpn. what are you trying to achieve in the first place?

[lone crane]

i think he thinks what the vpn ads say is all real

anything trough a HTTPS website is encrypted and then again even then a lot of stuff is encrypted anyways

[random siren]

the only things not really hidden a lot of the time would be dns but that is fairly simple to change aswell

[lone crane]

its like one button press in windows

[twin pier]

Still leaking domains via TLS sni

[mortal stratus]

you know how there used to be VMUG meetings pre Covid (might have them still, haven't looked) and Cisco does things like Cisco TEch Days, where they have talks and panels for a day. Anyone familiar with something like that but cloud based? AWS/Azure

Preferably in the Chicago/Madison/Milwaukee region

[opal pagoda]

all use of vpn's shift the point of trust from your ISP to your VPN provider

do you trust VPN provider more than you do your ISP

[tired verge]

What do you recommend? In my case is not about trust is about shifting location to Sweden before I move there so I can keep it online 24/7

[opal pagoda]

get yourself a gl.inet travel router and any of supported vpn's (there is lots)

in that case

[shut stag]

also something to consider a lot of online info goes off of your billing address, not your point of sale. learned this while overseas

[tired verge]

what is this gl.inet travel router? Apologies I am not that deep into networking

[opal pagoda]

Its a small router pre installed with openwrt that supports your requirements

[tired verge]

So I get one of these and then I have to still use some of the VPNs?

[tardy mulch]

You use one. People tend to prefer wireguard these days

[peak cloak]

wireguard is just a protocol

[tardy mulch]

Which people tend to prefer

[peak cloak]

for vpn providers mullvad is what I use

[tardy mulch]

That's not the point but yea they're good

[peak cloak]

technically you can use any computer with the right interfaces to act as a router, then configure it to route everything over a vpn

but yeah that would work

[tardy mulch]

Raspberry pi for example, I used that for a bit before moving everything to my router itself (ax1800s)

[peak cloak]

that may struggle depending on the bandwidth

[tired verge]

Is buying a residental IP ok?

[tepid ingot]

the people who used to live in my house left rj45 connectors everywhere

and idk where to find the ends

[tepid ingot]

ofc it is

[tired verge]

So it should solve my case to have 24/7 IP running so I can use my everything from the desired location

[tepid ingot]

just use tailscale

buy a random vps

and use tailscale for exit node

[nova glacier]

24/7 IP running? wdym by running?

Other alternatives include dynamic DNS, which there are free services that can give you a sub-domain for. If you own a domain already then a simple daemon can keep your DNS records updated for free

[versed warren]

is my wifi working?

[nova glacier]

you recorded a video of some blurry blinkenlights. I'm not sure what you expect anyone to make of that lmao

[nova glacier]

If I had to make several guesses, by wifi you actually mean internet, that this is a cable modem, the 2nd led is downstream, 3rd led is upstream, and 4th led is internet, then your ISP is either down or your coaxial cabling is broken.

So yes your wifi is working, but your modem isn't establishing a DOCSIS connection to your ISP. Meaning your internet is down

[topaz patrol]

Very bad scale lol

[ornate jungle]

Impossible to say from the video alone. We would need to know what each of those lights mean.

[versed warren]

i ended up getting it fixed

[rose fable]

Actually the pi can push some serious throughout. IIRC, close to 4Gbps.

Or no, I think 3Gbps. They are very capable routers

If you're ever curious about how good a CPU is for Wireguard throughput, this has a decent database

https://github.com/cyyself/wg-bench

I settled on this thing with a Pentium Gold 8505. I've maxed out my 1Gbps connection to a VPS via Wireguard and it was only sitting at 20-23% CPU usage. And sips a measly 3W idling.

[tired verge]

I mean that I can play my games and browse the web while everything sees me like I am in Sweden instead of my current location.

[hard arch]

spicy warning light

[zinc mortar]

oo thats fun

[pulsar dawn]

is steam bad on downloading, it download things below like 600mbps

[nova glacier]

they tend to be one of the only internet services that approaches my ISP plan speed, but every ISPs connections are different and regional. Check your CPU usage. Decompression takes a good amount of CPU at higher speeds

[pulsar dawn]

ah yeee

cuz mines 1.1gbps plan, but only goes up to 700mbps

so must be some limitation

[lone crane]

1.1Gb plan?

But there can be so many other things on the lan side too that can reduce speed the biggest wifi

[pulsar dawn]

ill try show in a second my task manager and the download

[pulsar dawn]

wait

[lucid trench]

I am running a wire gaurd vpn at home and use one of these to connect to the vpn and now i have access to home network

[nova glacier]

wake up babe, new standard in the IEEE GET program
https://ieeexplore.ieee.org/document/11090080

[hallow knoll]

i'm gonna run my company's mission critical NAS over wifi because I cba ordering an ethernet cable on amazon

[oak basalt]

its doing its best

[nova glacier]

MRU is super cool. It brings a pretty significant increase in sub-channel flexibility. These figures do also apply to the normal OFDMA mode and sub-blocks of wider bands can use the smaller MRUs. (36-15 is cut off, but easy to imagine where the other 996-tone blocks are)

[lone charm]

Lmao been having issues on my phone with Internet. Just found out that 3 days ago I accidentally changed my phones static IP to one held be a VM instead of changing DNS. So turns out I'm an idiot

[hard arch]

finaly a good router

[lean palm]

https://hntrbrk.com/ubiquiti/

Interesting read- not implying political bias personally.

[clear igloo]

The fact the reporters identified as russian military and they were still sold gear is very concerning in strictly an export control sense, not going to dive into politics either. Like a HUGE yikes to ignore export restrictions to put it mildly

[rocky badge]

@clear igloo the local big hospital monopoly is all thin clients now for static workstations 👀

[clear igloo]

smart 😄

[rocky badge]

yeah it's all VMware Horizon

[clear igloo]

Cool, Dell thin clients?

[rocky badge]

Yeah

[celest adder]

Hello, i just got cloud gateway ultra, i was trying to use teleport as vpn for my school wifi, but it doesnt work? I have made Wireguard, what should i try?I heard i needed vpn that uses htpps traffic.

[flat wagon]

hell yeah

[coarse pawn]

What are you trying to access ?

[opal pagoda]

your school wifi is most likely very restricted, from DNS to blocked ports

[pseudo blade]

Thin clients are cool, shame the licensing costs for VDI and RDS take away much of the interest for me (plus of course very few people want to pay to do it resiliently and therefore end up with an SPoF)

I'd hope a hospital would

[rose fable]

Dats the beauty of Wireguard. Easy to get around and use whatever port you want

[opal pagoda]

You can set custom ports on literally anything

[pulsar dawn]

On Xbox how do i improve latency on the network, I have a cat6 Ethernet port connected to my Virgin media router which says (2.5gbps) but obvs I only have 1gbps, will getting a good router help?

I have 30ms rn and I wanna improve

[coarse pawn]

Thats More down to your ISP

[clear igloo]

You don't, unless you want to spend a few million dollars on running fiber directly to the data center or something
30ms is really good to be honest

[peak cloak]

You are paying for 2.5 or just 1

[pulsar dawn]

It’s decent? I’m glad

[pulsar dawn]

I’m only paying for 1 but I might ask for the company to put fibre in so I can get 2gbps

[peak cloak]

So then there's no issue

[pulsar dawn]

Ah okay

I’m at my limits with the latency on games then Yh

[clear igloo]

Pretty much, yup

[pseudo blade]

So I try to tell 5-digit employee IT departments, after they insist it's not secure unless it's on 443 and putting traffic on other ports is dangerous

I feel some of those large shops have learned nothing about IT or networking since 2003 and honestly?
Part of me is jealous of their lives

Sure,the meteor's likely coming some day but it hasn't in the last two decades and they seem happy in their obliviousness.

[opal pagoda]

a teacher i had claimed it is illegal to use different ports, he also claimed it is illegal to change mac address from factory one

besides that
does anyone have cisco C9200L 4X that use 1000BaseLX SFP for uplinks?
i have some wierd shit going on with this combination, does not manifest if SX transcievers are used or 10g ones

[rocky badge]

Yeah

[rocky badge]

Oh yah they definitely have large VDI farms

[rocky badge]

Illegal? 😭

[opal pagoda]

https://tenor.com/view/cyber-police-reported-report-reporter-police-gif-14718698980511019213

[pseudo blade]

Aw man, I'm still hiding from the police and/or mafia after I encountered all those illegal operations while running Windows 98.

[shut geyser]

Reason #564 to not use eero routers: no access to Internet traffic logs unless you pay extra.

[opal pagoda]

cant stop me using wireshark

[meager ginkgo]

Just FYI speed won’t really affect latency. Latency is more affected by a internet provider’s routes to other servers or the connection medium your internet is (Fiber, Cable, DSL, 5G etc)

2gbps is likely overkill for you also if you’re mainly using WiFi

I have mostly hard lines in my house and still don’t think I’d utilize 2gbps. I’d only get it if it’s a good price

doesn’t help most client devices still either have 100mbps or gigabit Ethernet ports on them

[pallid talon]

Potatoes want you to think they are just vegetables. Don’t let them trick you. We are wise, we utilize technology.

[wide knot]

is this the best travel router I could get? trying to stay in the under 150$ range
https://www.gl-inet.com/products/gl-be3600/

no internet at my apartment except for free wifi, used their wifi 5 router before but it was clearly insufficient for game streaming via moonlight on the same network.
https://www.gl-inet.com/products/gl-sft1200/

I was also eyeing this one from asus, I work at best buy so with my employee discount it would roughly be 80$
https://www.bestbuy.com/product/asus-rt-be58-go-be3600-dual-band-wi-fi-7-travel-router-white/JJGGLQFZWW

[gilded mural]

I'm thinking of getting a NAS so I don't have to pay for storage subscriptions but I'm discovering something: why do you have to pay for storage separately when buying NAS? I thought the drives were included with the plastic box?

[opal pagoda]

so you can shop around for drives

and get your desired capacity

[gilded mural]

that explains it a whole lot
thanks!

[opal pagoda]

you can ask for a sanity check here anytime so you dont buy something suboptimal like SMR drives

[ornate jungle]

What @opal pagoda said. Also, drives are usually purchased separately because some people want an all-SSD NAS, while others want an all-HDD NAS, while ever more other people want a bit of both.

Since a NAS is "just a computer" (oversimplification), it really boils down to what you're trying to do with it.

[gilded mural]

just storage

[stuck grove]

there’s many kinds of storage and many ways to use storage

[rose fable]

Because many people already have drives laying around

[lone crane]

I dono about that one chief

Unless you work with NASes you tend to not have at least bigger drives laying around

[rose fable]

No need for bigger drives chief. Even a single 500GB drive is a hell of a lot more than you'd get from typical cloud storage providers. You can pull that out of a lot of older machines

I put 2x500GB drives in RAID1 in my parents system 5 years ago. They still haven't even filled that half full with photos and docs.

[steep stirrup]

for my pcvr setup, if i set the bitrate at anything at 100mbps or above steamvr just stops working, freezes on my headset

i assume the cat5 cable is the bottleneck, should i get a cat5e or a cat6 cable?

[lone crane]

cat 5 is really really old

your cable should be cat 5e at least and or be able to handle the speeds

the bigger issue could be either encoder or probs more likely bad wifi

[steep stirrup]

i think i've isolated it to the cat5 cable, my upload doesn't go higher than 11.7 MiB's according to btop which is consistent with the 100mbps limit on cat5

which is weird since its short and i heard that short cat5 can handle speeds above 100mbps

[lone crane]

why not just uhm check what speeds the ethernet card is claiming its running at?

[steep stirrup]

motherboard claims to support gigabit lan according to asrock

btop should just read what the card says

[rose fable]

Doesn't mean the cable does

[steep stirrup]

yeah its probably the cable then

[lone crane]

do ⁨ip addr show ⁩ then find your nic and do ⁨sudo ethtool (your ethernet thing for me its eno1)⁩

[steep stirrup]

even if it isn't ill just get a cat6 cable and eliminate a future headache

[lone crane]

my NIC is 2.5 but you can see its only going up to 1000

[rose fable]

Cat6 is overkill. 5e is plenty

[lone crane]

well its nice not having to re buy cables once 10gig becomes the new norm

it aint much more anyways

[lone crane]

rip 100Mb

[rose fable]

Its extremely expensive to get quality cables. It was $80/meter last I bought Ethernet cables

[lone crane]

80$ a meter WAT

[rose fable]

Yes

[lone crane]

are you buying 25gig certified cables or something

it should only be at worst like 50% more than 5e

[rose fable]

Just regular cat6 stuff. That's why I only get 5e which is only $5/ meter

[lone crane]

i can get a 100 meter spool of cat 6 for 80$ quality no clue

[steep stirrup]

any way to change it?, maybe in router's web interface?

[lone crane]

can you show us the cable as it should say cat 5 or cat 5e on it

[steep stirrup]

it says cat 5 i've read it myself

[lone crane]

ok yea new cable time

[rose fable]

Better get AI to analyze the cable. It might tell you it's cat6 instead 😑

[steep stirrup]

i could probably gaslight it into doing that

[rose fable]

😂

[lone crane]

swat your prices do not add up

https://no.rs-online.com/web/p/ethernet-cable/7917025

[rose fable]

Dunno where that is or what currency that is

[lone crane]

norway

rs is a legit brand

[rose fable]

I'm nowhere near there Bro

[lone crane]

where you at

some random tribe

[rose fable]

Currently Tasmania

[lone crane]

no wonder

[rose fable]

🤨

[lone crane]

is importing really that spensive

[rose fable]

Kind of

Similar to importing to USA these days with all the tariffs

[lone crane]

what the hell, feet and meters

anyways in places that are not as island based cat 6 vs 5e prices are not bad

[rose fable]

In Indonesia before this it was cheap yes

I would get 10m stuff for like $8

[lone crane]

but yea no if possible get cat 6 even tho 5e tends to be able to do most of the same speeds its gonna save a lot of headaches

[steep stirrup]

ill go with cat6 because i found it for cheap here

[clear igloo]

Just one note, make sure it's not CCA or copper clad aluminum/aluminium

It's more prone to breaking and has other issues

[lone crane]

yeeeaaaa

[steep stirrup]

i dont wanna risk getting a cat5e cable and it being poor quality enough for the nic to fail to negotiate 1gbps

[rose fable]

That's pretty rare

[opal pagoda]

lmao what

thats is for 100 meters

[rose fable]

No.. 1

Quality cables. Not shit

[lone crane]

he lives in the middle of nowhere

[opal pagoda]

what country are you in, i bet i can find better

[lone crane]

Tasmania

i also posted a thing of RS for their super high end pro stuff that was 20m for 80$

[rose fable]

I'm talking about walking into a store, buying it now. Not ordering online and getting it in a week. If a cable is down, I'm not waiting a week to get my internet back. I kinda need that working right away

[opal pagoda]

https://wbt.com.au/copper-and-data-cabling/patch-cords-and-cables/cat6a-cable-f-utp-lan-blue-lszh-305m-drum.html

these fellas have decent price

[rose fable]

Sure I could get it cheaper online. But I need that shit now. I need to walk into a local store and be home in less than an hour with working internet again

[opal pagoda]

so that means just local stores are scamming you

[rose fable]

Local prices is what it is

[lone crane]

make millions by making your own store selling cat 6 cables

[rose fable]

Even if I lived in Canada, sure I could get it for probably 1 cent a meter if I ordered from aliexpress. But having no internet for a week is not acceptable

[rose fable]

Unlikely. Its a very small market

[opal pagoda]

lol when i buy kilometers of cat7 i get charged for a cable and copper in it at spot price

[lone crane]

why not just buy it and keep a few meters

this feels like a very specific once in a lifetime argument for using cat 5e in 2026

[rose fable]

Gotta do what you gotta do

You never know the price until shit happens and you need to buy now because you don't have any spare

[lone crane]

shit happens?

[steep stirrup]

i only need a 0.25 meter cable

[lone crane]

like the cables lights on fire?

[lone crane]

wat

[rose fable]

Or the cat eats it

[steep stirrup]

my router is close to the pc, which i am sure introduces some interference

[lone crane]

a 0.25 cat 5 cable should be able to do 10gig

[lone crane]

no

[steep stirrup]

even 1 gig fails to negotiate, endless loop of trying to connect to the network

if i set it to manual

[lone crane]

o well just get any 1m cat 6 cable you can find or smn

[steep stirrup]

i mean unless its linux side fuckery i dont know of any other reason why manual link negotiation would fail like that

than a bad cable

[rose fable]

Sometimes the rats also get in there and chew it. I mean, shit happens

[lone crane]

PoE it :3

[rose fable]

No, that would kill them. Don't wanna do that

[lone crane]

or connectors

[lone crane]

anyhow the real answer is buy a massive spool of cat 6 and put it in a metal box or something

[rose fable]

I could probably just go chop some fiber off the nearest pole too

[steep stirrup]

ethernet cables omnomnomnomnom

[rose fable]

There are spools and spools of it. Just gotta make sure its not the line going to my house

[steep stirrup]

nvm im stupid

[lone crane]

https://cdn.discordapp.com/attachments/859423676457287730/1286737790322868365/2x-1.gif

[steep stirrup]

my router doesn't support 1gbps lan

[lone crane]

knew it

also WTF

[steep stirrup]

it was staring me in the face lmao

[lone crane]

i just keep hearing stories form peoples ISPs replacing their router every few years, where in the world are you

[steep stirrup]

Serbia

another option is to get a usb 3.0 cable ( a loooooong one) and go wired for the pcvr

might just do that

[opal pagoda]

get your own router, wifi 6e or wifi 7 with 6ghz band

[steep stirrup]

i have my own router separate from the modem its just a piece of shit

it can do 5ghz

[opal pagoda]

well dont get piece of shit, get something better

[rose fable]

How old does a router need to be to not have 1Gbps LAN? 🧐 Seriously...

[topaz patrol]

Lots of low end gateways only have 100Mbps ethernet ports

Very stupid, because often they are perfectly fine in every other way

[rose fable]

Where? I haven't seen one in like a decade in any country I've lived lol

[topaz patrol]

ARCHER C24
ARCHER C54

[rose fable]

I've lived in some pretty low class countries like Canada as well, and they were still 1Gbps

[topaz patrol]

Those are the two I remember, but there are lots more from Chinese brands like Ruijie

and Cudy

[rose fable]

The C24 I see is 1Gbps LAN

[topaz patrol]

https://www.tp-link.com/au/home-networking/wifi-router/archer-c24/#specifications

Don't trust Amazon specs

Technically over wifi you could do >100Mbps LAN

[rose fable]

That's just sad. I mean, you could buy something for cheaper than that and get 1Gbps ports