#networking

1 messages Β· Page 132 of 1

high anchor
#

Ok, I've just googled the question and the answer is : Yes, but only with IKEv2 (which is available on my ER-X and my pfSense VM) so I should be able to do something !

young sundial
#

Nice. My whole setup, VPN server for inbound connections and VPN router for outbound connections are all VMs.

inner trail
#

Shit. My whole setup is one RPI3b, and ASUS RT-AC51U

young sundial
#

I want to get a pfSense VM for more advanced stuff, but right now Turnkey Linux VMs are getting the job done.

high anchor
#

I could easily setup some VMs to to the trick on one of my PowerEdge R510 but at 220ish watts at idle, it would definitely be overkill imo

inner trail
#

I mean - that RPI3b and my router is doing the job for me

#

RPI's handling the dhcp, dns cache, and my home AD DC (on samba4)

high anchor
#

I have a PowerEdge R510 handling Steam cache, a small samba storage (it have about 4TB of storage) and some other random stuff (including some Docker containers for Ubiquiti UniFi and UNMS)

inner trail
#

small samba storage(it have about 4TB of storage) yeez

high anchor
#

I say small because I don't have any use for it ^^'

young sundial
#

My experience using a RPI for remote network access is that they freeze up kind of often.

high anchor
#

And I just told you for the one which is already setup, but I also have another 4TB PowerEdge, another at 3TB and another one at 1TB ^^'

inner trail
#

Chrizzle, that's why I'm not seting up the VPN on the RPI - I'm doing it on the router (and offloading the router, with rpi)

young sundial
#

I see that now that I re-read your comment.

#

I wanted the Pi to work for phone-home type scenarios.

high anchor
young sundial
#

Like leaving one at my mom's house for simple tech support.

inner trail
#

You can try to find something more powerful than rpi, with the same form factor

young sundial
#

I don't have any pics here at work, but I use a stack of old think center desktops running proxmox for my "servers". I use the term loosely.

high anchor
#

I may use a Intel NUC (those higher grade ones) as a NAS one day, even if it was my first plan for a VPN gateway, but they are expensive af (it would have cost me less to use one of my PowerEdge for this, including electricity, if noise wasn't an issue...)

young sundial
#

I don't have any racks and the primary space of all my gear is on a desk, so size + noise is an issue too. Fortunately desktops stack on top of each other πŸ˜ƒ

#

I use a low end NUC for my HTPC. It's slick, but an unforeseen issue is that my toddler loves to steal it. So it spends a fair amount of time in a toybox.

#

The bright blue light on the power button gets him every time. Like a moth to a flame.

subtle glen
#

can you share a nas between 2 subnets with only 1 NIC?

high anchor
#

With some manual routes and IPs it should be feasible

young sundial
#

There are a number of ways depending on your network.

subtle glen
#

like to be able to use your nas on the security camera subnet and on the other pc subnet

rocky badge
#

@high anchor I need to setup proxmox on my server πŸ˜„

#

I wish I had some more servers πŸ˜„

young sundial
#

@subtle glen
If you have a managed switch you could do vlans. Put the NAS in both the internal and camera vlans.

if your cameras are on the same physical wiring as your NAS, just with a different IP schema, you can just add a second IP to the NAS' network interface.

If your camera network and your internal network share a router (like the Edge Router mentioned above) you can also allow traffic between the router's network interfaces with some firewall rules. I did something similar years ago with OpenWRT.

#

but TBH adding another NIC is often the simplest solution.

subtle glen
#

unfortunately for now i will be using a nas box

young sundial
#

Firewall rules it is πŸ˜ƒ

subtle glen
#

it would be something like this. (there are other devices and switches but they are not relevant)

#

Paint πŸ˜€

young sundial
#

where's the cloud that says "Internet" πŸ˜ƒ

subtle glen
#

whoops

young sundial
#

No network diagram is complete without one πŸ˜ƒ

subtle glen
young sundial
#

LOL πŸ˜ƒ

subtle glen
#

do i also need to add the phone line cabinet/the isp/the backbone to the exchange point etc

young sundial
#

I only say that because I am in network design hell with Proxmox and bonds and vlans.

subtle glen
#

just use paint

#

if it's too complicated ill just use that nas or something else only for that camera

young sundial
#

It's more the conceptual part. Binding interfaces together for speed/redundancy and then splitting them back up with vlans.

#

do you need the camera to talk to the internet?

subtle glen
#

for remote access i would say. Or have it locally and remotely connect to it via vpn (as soon as i get better internet speed)

young sundial
#

Or use SSH to tunnel to it.

subtle glen
#

πŸ€”

young sundial
#

Put a RPI or a VM somewhere and forward a port to it. You can open ports with it that will use the tunnel. Dynamic, local, and remote.

hallow nimbus
#

SSH good things

#

πŸ˜„

clear igloo
#

Telnet all the things!

subtle glen
#

YAY

#

this nas has a SSH feature tho

young sundial
#

It's a Swiss Army knife. I use it to tunnel Remote Desktop, VNC, browser traffic, you name it.

subtle glen
#

i forgot my VNC password for the pi

#

YAY

young sundial
#

SSH will let you do the top 20% of the things that you would use a VPN for about 80% easier.

subtle glen
#

I guess you have to open port 22 on the router right?

young sundial
#

If your ISP will let you. any TCP port that you can remember will work tho.

subtle glen
#

and then connect to the NAS (in this case) using your public ip?

#

and route the port 22 traffic to the nas ip?

young sundial
#

Yup. Or use a high numbered port and forward that to port 22 on your nas.

#

There are a lot of things that scan for port 22.

subtle glen
#

can i choose any number for the port?

young sundial
#

not just your ISP.

#

yup. I like to use a variation of 22. like 22222

subtle glen
#

or 8357875 ?

young sundial
#

TCP/UDP ports top out at like 63 something.

#

sorry, 65536

#

I knew there was a 3 in it somewhere πŸ˜ƒ

subtle glen
#

you mean that after 65536 you are sure nothing uses the port you choose?

young sundial
#

anyway, if you pass port XX on your router to port 22 on the static IP of your NAS you should be all good.

#

I have no idea what happens after port 65536. But I bet your firewall software will throw an error if you specify something higher.

#

unsigned intergers and whatnot.

subtle glen
#

yeah the tab where you put the port becomes red

young sundial
#

I'm sure that was a "64k ought to be enough for anybody" type of decision. like IPv4.

subtle glen
#

"connection refused" thats a good sign πŸ˜„

young sundial
#

you using *nix ssh or putty?

subtle glen
#

an app on the phone to simulate an "outside world" request

#

maybe that's why

rocky badge
#

Your ssh server is either not listening on 22, or the port you're using, or not configured

subtle glen
#

lets see

young sundial
#

Does the app let you specify a port?

subtle glen
#

yeah

#

i probably did something wrong

young sundial
#

πŸ˜ƒ story of my life!

subtle glen
#

hehehe

#

or just wait for fiber and use a vpn

young sundial
#

I use VPNs too. they just take a lot of preparation.

#

SSH is great for those times when you aren't prepared.

#

BTW, on your firewall setup did you specify TCP?

#

for the port, i mean.

subtle glen
#

i changed the SSH port on the NAS, i opened the port on the router (TCP/UDP), port forwarded even on the NAS (even tho i think it's useless), put the NAS ip to tell the router where to send the traffic

#

ohhh fiber, where are you

inner trail
#

Dude, I know nothing what can be wrong

young sundial
#

I like to use SSH keys and disable password logins because I'm a delusional paranoid. Though SSH keys without passphrases are great for automating SSH connections.

inner trail
#

But have you tried turning it off and back on again?

young sundial
#

^^^

inner trail
#

SSH servers should have disabled pasword login after first time setup

#

Or at LEAST disabled root password login after first time setup or just... by default

young sundial
#

I agree. I also like to use Fail2Ban as well. Probably a "belt and suspenders" approach.

rocky badge
#

I use fail2ban on any public SSH server

inner trail
#

Every linux distro ISO should contain "Linux best practices"

young sundial
#

I have no idea what the rest of the best practices are, just locking down SSH. πŸ˜ƒ

rocky badge
#

A good firewall

inner trail
#

I mean - not only "SSH best practices"

rocky badge
#

If you have a web server, rate limiting

young sundial
#

with exactly one port open, which is SSH πŸ˜ƒ

rocky badge
#

public key auth only

inner trail
#

Fail2ban, never using 'chmod 777'

rocky badge
#

Disable root ssh

inner trail
#

and never using root as a main accountr

#

account*

rocky badge
#

^

#

And I don't expose my server's IPs

#

Everything's proxied by Cloudflare

inner trail
#

Not everyone can use cloudflare :p

rocky badge
#

Well...that's for web server πŸ˜„

#

The only purpose of this machine

inner trail
#

I can't afford different machine for different services

#

My server is running everything - web, mysql, mail, vpn, ts3audiobot

rocky badge
#

Oh, and MySQL should only allow local login. NEVER expose your MySQL instance πŸ˜„

inner trail
#

^

young sundial
#

I can't be trusted to put all my eggs in one basket like that πŸ˜ƒ That's why I like VMs and containers. So I can snapshot all the things before I fix them.

inner trail
#

I mean - "reinstall" used to by me button of the choice in the panel of this dedicated server

young sundial
#

I often end up fixing them so well they need to be restored from a backup πŸ˜ƒ

inner trail
#

And then I've mastered the reinstallation of everything and know I know whay NOT to do

young sundial
#

I have a hosted Asterisk server.

#

and a plain debian box with a super cheap/mildly shady host that I use mostly for SSH.

inner trail
#

I've got plans to buy rack servers when we move to new house (which will be in I dunno? 10yrs?) and move my stuff there

young sundial
#

I think the same thing. Mostly because I look on ebay and see rackmount servers with gobs of RAM for less than the price of a nice video card. But the startup costs for racks and panels always bring me back to reality πŸ˜ƒ

#

Although I have seen Ikea end tables used as racks.

inner trail
#

chrizzle - look at one thing

#

power consupmtion

#

most of the old but very powerful server, are pulling heck of a lot power

rocky badge
#

All of these are Debian except the last 2

hallow nimbus
#

The last 2 are shitdows 2016

#

XD

rocky badge
#

XD

brittle mural
#

πŸ‘€

fresh copper
#

r/linuxmasterrace

thick minnow
#

Could putting an ethernet plug on a plug extender mess with the connection

#

or possibly slow it down in anyway

thorn current
#

is anyone else having problems with the asus pce-n15 11n wifi card

#

of my 100 mb connection i only get around 30 mb

gusty vault
#

hey guys some one can help me with steam cache server ?

#

someone ?

inner trail
#

What do you need help with?

gusty vault
#

i download game form steam but i dont see traffic on nload app

#

and i work by all the stages on the the tutorial

inner trail
#

Have you configured 'steam cache server' as your dns server?

gusty vault
#

yes

#

i work with docker as the tutorial

#

any idea why ?

#

can u help with share screens ?

inner trail
#

Man - I've never deployed the steam cache server, so I'm just doing 'light' troubleshooting

gusty vault
#

mmmm ok

#

i will keep working on it ty

#

i found the problem the DNS script keep crashing : /

young sundial
thick minnow
#

^ thatll work if you dont go above the rating of your cable

subtle glen
#

i use those to quick swap cables where the switch is

fresh copper
#

I’m thinking he means putting a power line adapter at the end of an extension cord. Basically anything can mess up powerline stuff but an extension cord is not too bad. Try to stay away from power bars as those are the worst.

subtle glen
#

actually if some plugs are connected to the same junction box or breaker they make a power bar 😊

#

i'm surpised that my powerlines works even tho the signal has to pass where a lot of other power cables are

fresh copper
#

Having anything plugged into the same circuit/phase (depending on how the wiring is set up) can mess it up or slow it down

subtle glen
#

yeah if there are a lot of things nearby, that can drop the signal

fresh copper
#

I have had a lot of trouble with powerline adaptors

subtle glen
#

i usually get a link speed of 200 or less mbps between the powerlines. And those are "rated" for 1000 mbps

thick minnow
#

no replacement for wired :(

subtle glen
#

^

thick minnow
#

my replacement for in-wall

#

electrical tape solves all your problems

subtle glen
hallow nimbus
#

Thats a good place for a serva

subtle glen
#

who needs expensive racks

thick minnow
#

yeah pff

#

$200 no thank you

subtle glen
#

ikea furniture

thick minnow
#

also $80 rails

subtle glen
#

ah yeah

thick minnow
#

and keeping the servers in your bedroom = easy access for when you mess up the switch config and need to swap ports

subtle glen
#

and they are also a good heater in winter

hallow nimbus
#

My pc is allready a good heater

subtle glen
#

my switch is a good heater, cant say the same when its 30 degrees inside

hallow nimbus
#

XD

#

Its a good heater but a bad cooler

subtle glen
#

mm yeah :/

#

they should add an AC inverter unit inside

hallow nimbus
#

XD

subtle glen
#

next project for ltt?

#

they did the pc heater, now do the pc cooling

fresh copper
#

That reminds me that I need to get some rails myself for my server

subtle glen
#

use some bamboo sticks

fresh copper
#

My server is going in an actual DC so sadly I can’t do something like that. It’s quite heavy too

subtle glen
#

but bamboo is flexible

#

πŸ˜‚

fresh copper
#

Lol

#

I’m sending this to Chris

latent badger
#

I like my servers to be silent, quiet and invisible.

fresh copper
#

And that’s why I am sending mine about 795 miles away

subtle glen
#

:/

sturdy mirage
#

has anyone a list of IKEA furniture to make a server rack?
it's quite a mess in my room now :(

subtle glen
#

i use it

sturdy mirage
#

use what?

subtle glen
#

ikea furniture as a rack

sturdy mirage
#

OwO

#

sadly mister poweredge wouldn't be happy in such a small space

subtle glen
#

hahahahah

sturdy mirage
#

I'got an old 2950with 16Gb and two Xeon X5550

subtle glen
#

you need a bigger table for that

thick minnow
#

@thick minnow is it plenum cable though

#

?

#

oh, no

rocky badge
#

o.0 zbk you're here?

#

@sturdy mirage 2950 mark 3?

sturdy mirage
#

I really feel like internet in USA is quite sketchy, not anyone has the same solution to access internet, in France we got "insert telecom company nameBOX'es" that do TV/INTERNET/PHONE/router/Wi-Fi hot-spot/DHCP server/ethernet switch... and that's it behind this you can build whatever network you want... and manage your box in an web based interface...

#

yup, @rocky badge
you like those?

rocky badge
#

πŸ˜„

#

@sturdy mirage they're old and loud but work lol

#

But I have charter and I use their modems and tv boxes but otherwise everything else networking is mine

thick minnow
#

blob! :D

rocky badge
#

zbk!

subtle glen
#

those things are old and loud

thick minnow
#

you just described alot of cisco things under $500

subtle glen
#

uuuu

rocky badge
#

That is true πŸ˜„

sturdy mirage
#

the only downsides are the small amount of ram slots and the really old Java based IDRAC interface

rocky badge
#

yeah....

#

I have to use Ie

sturdy mirage
#

i use ie and Java 6

rocky badge
thick minnow
subtle glen
#

eXPloREr??

sturdy mirage
#

HP ❀️

thick minnow
#

i use winxp and ie6

#

but mostly just SSH

rocky badge
#

Procurve!

#

My school used to use procurve

thick minnow
#

hp stuff is nice

#

$40 for 24 gig ports and its managed? sign me up

subtle glen
#

where where ??

#

ebay?

thick minnow
#

yeah

sturdy mirage
#

real men's use procurves switches

subtle glen
#

mmm

thick minnow
#

theres some fan noise

#

but its very little

rocky badge
#

some

thick minnow
#

like a hummmm

sturdy mirage
#

hummmm

rocky badge
#

I installed proxmox on an old 2950 @sturdy mirage

sturdy mirage
#

what is proxmox?

rocky badge
#

Virtualization stuff

sturdy mirage
#

oh yeah I heard about this like... 3 month ago

#

I've never tried this... is it well supported?

brittle mural
#

πŸ‘€

sturdy mirage
#

I use VMware Esxi6. 5...

rocky badge
#

Yeah it's supported

sturdy mirage
#

@brittle mural are you from France?

brittle mural
#

No, why?

thick minnow
#

i use esxi 6.5 too

sturdy mirage
#

I thought, sorry :)

rocky badge
#

I would use ESXi on this server but the CPUs aren't supported by ESXi

brittle mural
#

It's alright.

thick minnow
#

oo i got ram to spare

rocky badge
sturdy mirage
#

seriously? @rocky badge ESXI even accepted my I5 650 and E5110

thick minnow
#

esxi accepted my i3-2120

rocky badge
#

X5355s don't have SLAT

thick minnow
#

did you try 6.0?

sturdy mirage
#

oh men too bad

rocky badge
#

Yes

sturdy mirage
#

I got one E5110 left for sale if you want

rocky badge
#

It's a dual socket server

#

I haven't tried booting it with one CPU though

sturdy mirage
#

it' booting with one CPU

#

but it won't boot without his shitty riser

rocky badge
#

Currently I don't have thermal paste πŸ˜„

subtle glen
#

i used toothpaste once

#

on an old pc

rocky badge
#

So it's CPU and the heatsink, no thermal paste in between

subtle glen
#

nah

rocky badge
#

I'm gonna buy some soon

sturdy mirage
#

I have tried mayonez

subtle glen
#

lol

thick minnow
#

woops

sturdy mirage
#

since it is really greasy it works quite fine..

subtle glen
#

i prefer toothpaste

sturdy mirage
#

easier to apply

subtle glen
#

i even re used the thermal paste on the heatsink few times

sturdy mirage
#

only one time... but AMD A10 6790K didn't liked it...

subtle glen
#

it burned out

sturdy mirage
#

works fine for 5 minutes

subtle glen
#

lol

thick minnow
#

no

#

you need 4

subtle glen
#

i feel like i could fill up its capacity with a 24 h video

thick minnow
#

with segate enterprise drives

sturdy mirage
#

there is never enough storage

subtle glen
#

12 TB?

rocky badge
#

for one camera πŸ˜„

#

you don't want to know how much storage it requires for 200+ 1080p color cameras

subtle glen
#

what's the LCD screen for tho

rocky badge
#

Data and info

subtle glen
#

of what

#

fan speed?

rocky badge
#

The server

#

Probably

#

Or CPU usage or something

subtle glen
#

how is it connected to the motherboard

#

ah yeah @fresh copper

#

2 100 gbps link aggregation

sturdy mirage
#

πŸ€”

subtle glen
#

too little?

rocky badge
#

Only two? Needs moar

subtle glen
#

it records 2560x1440 footage, it can saturate that easily

rocky badge
#

Lmao

sturdy mirage
subtle glen
#

i think the lcd is to check if the disks are ok. I'm watching a video and it shows on the LCD "disk 01 OK disk 02 OK"

sturdy mirage
#

seems legit

subtle glen
#

@fresh copper lol an 8K security camera

#

i need it

#

couple of them

#

some things happened in front of my garage

#

like when someone put a big ass lock on it so that i could not open it

#

200x zoom

sturdy mirage
subtle glen
#

that guy has too many servers

#

where does he get the money from xD

sturdy mirage
#

this channel is really good I think

#

in Europe we manage to have very cheap server stuff there is a lot of companies an brokers that Sells refurbished electronics

subtle glen
#

i'm in europe, where is this secret place full of servers

#

caps?

sturdy mirage
#

caps are illegal in a e s t e t h i c text?

subtle glen
#

apparently

#

why people sell servers without hdd's caddies πŸ˜‘

sturdy mirage
#

server monkey got HP and dell caddies for 5$

subtle glen
#

XFP?

hearty oyster
#

what is it for networking?

subtle glen
#

yeah

#

never seen it before

rocky badge
#

Looks like xfp?... I know it's not sfp(+) and doesn't look like qsfp to me

thick minnow
#

XFP is nice and wide

#

So maybe

hearty oyster
#

looks like xfp but have you got a photo of the pins in the connector on the card to be sure

subtle glen
#

pretty sure it's XFP. is that a better version of sfp+ ? I see that it can transmit 10 gbps like sfp

chrome hound
#

is it fiber channel maybe?

subtle glen
#

that's a 100 gbps NIC

chrome hound
#

XFP for higher speeds of 100gb

subtle glen
#

ohhhhh

chrome hound
#

maybe its just hte angle but it looks wider than XFP

rocky badge
chrome hound
#

lol some one made a monster out of Blob

rocky badge
#

πŸ˜„

chrome hound
#

does any one know if a speed test server records a local record of a speed test?

thick minnow
#

bit late

#

@young sundial

#

But I meant

clear igloo
#

You sure that's XFP and not QSFP+?

thick minnow
#

What I meant was

#

Would a plug extender like one of these

#

If I had an Ethernet plug plugged into it

#

would it limit my speeds n such

#

Anyone?

clear igloo
#

@subtle glen Yah, that's QSFP+/QSFP28 for 100G, XFP was used for 10G but never went beyond that

#

@thick minnow like powerline?

thick minnow
#

Yes

#

if I put an Ethernet plug in it would it like bottleneck my ethernet

#

It just extends the pain socket making more plugs

clear igloo
#

Yah, it definitely could

#

Not to say it will but usually they will cause a lot of issues with powerline in most cases that I've seen

thick minnow
#

so I should plug my Ethernet directly into my socket

#

instead of using an extender like those

clear igloo
#

Yah, I would definitely recommend it if possible

subtle glen
#

also with that green led i would say that is a surge protected power bar ( that filters the powerline freq to ground)

#

@clear igloo is there a faster connector? OR QSFP+ is like the max you can get

clear igloo
#

QSFP for now, QSFP-DD and OSFP are coming for 200G and 400G with QSFP-DD being the better choice due to more dense port configurations and the option for compatibility with lower speeds on the switch ports

subtle glen
#

@split spire it's also about "finding the best plug". One that doesn't have a lot of stuff plugged in or that is not connected like a chain to others

#

holy shet 400 gbps? wtf

clear igloo
#

Yah, most of that will start showing up towards the end of the year from what I've heard

subtle glen
#

does cisco sell switches for that?

clear igloo
#

I'm sure there will be another connector for application specific stuff but industry standards are between QSFP-DD and OSFP from what I've seen
They will be, yes

subtle glen
#

i wonder how much it will cost

clear igloo
#

Couldn't say right now

subtle glen
#

are those QSFP fiber cables?

clear igloo
#

Yah

#

QSFP-DD and OSFP will use SM only, at least from the start

subtle glen
#

so sea cables landing points have these

clear igloo
#

SM is for long range, yah and can do higher data rates on the single beam of light

subtle glen
#

so uhhh where do i sign up

high anchor
#

I think that IPsec will drive me crazy.
This thing don't want to work, for no apparent reasons, and log is not even trying to help me...
(It may be because I don't have an usual setup, which is a IPsec site-to-site VPN with one end behind a firewall, which should work fine because of NAT-T...)
I'll try with a pfSense box (as my "behind NAT" client)

rocky badge
#

Hmm

high anchor
#

I mean, I have a spare R510 just at my left, so why not trying to see if with 2 pfsense boxes, it's working ?
(Installing a pfSense on a PowerEdge R510 (a freaking dual-xeon) feels so wrong, even LMG one wasn't that overkill compared to my pfSense (test) server...)

subtle glen
#

you are never too overkill

fresh copper
#

Yay, my mute finally is gone

#

Once you have a lot of interfaces (as I do with so many VPN connections) especially ones that need encryption like OpenVPN and IPSec, it can take a lot of CPU power

subtle glen
#

Were you muted?

fresh copper
#

Yea

#

For posting links

sick crown
#

hey guys i have a question

#

i need to know what is the best router to get

lusty junco
#

there is no best router to get.. its just what your needs are and how much are you willing to spend..

#

with that said i like the ac1900 nighthawk. but there are others that are better. and it depends on how you intend to deploy it.

rocky badge
#

I use an edgerouter X at home

thick minnow
#

Or do the linus approach with the janky pfsense build

rocky badge
#

πŸ˜„

fresh copper
#

With a pure router you have everything from an Edgerouter X to multi 100Gbps routers.

For a wifi router (what you are probably looking for) there are a lot of options. I like the Ubiquiti Amplifi line but you might want the Linksys WRT3200 ACM if you want OpenWRT. For something slightly less expensive than the Ubiquiti Ampifi stuff is the ac1900 nighthawk that The Shadow mentioned. That crazy eight anntenaed ASUS router is apparently pretty good too

#

If you give me some thoughts on price range, size of home, and if you plan on learning networking I can give better advice

lusty junco
#

agree.. the Linksys wrt3200 is very nice. and asus do make a damn fine router.

sick crown
#

i have the basic trash form att

#

i just need to know what i should get

#

my family is all ways on iphones and im the only one on a pc and i want to play lol and stream

lusty junco
#

B_M_Wilson asked some questions of you deadpanther, he asked" If you give me some thoughts on price range, size of home, and if you plan on learning networking I can give better advice. " this would help us better help you.

elfin gust
#

Hi, I saw someone talking about a nuc for a home server...

sick crown
#

i can spend what ever

elfin gust
#

I own a NUC and use it as home server

#

it is a Celeron N2830 with 4GB ddr3l and 500GB hdd

sick crown
#

and do i need to replace the modem too?

elfin gust
#

it has several services, such as:

transmission
samba
ssh/sftp
tvheadend
minecraft server
garrys mod server (not much players)
UT99 server (very light)
Quake 2 Server (very lght)

it is running ubuntu server 18.04 lts

#

planning to add owncloud and openvpn

fresh copper
#

NUCs are awesome!

#

@sick crown generally you can’t replace the modem but some US ISPs allow it. It’s not something I really recommend because there is not a lot of benefit that the average person would find. I think you are probably best going with either something like the ac1900 nighthawk or the ASUS one. If you are in an average sized home (as apposed to an apartment) then I would probably get a Ubiquiti Amplifi. Only downside is that you can’t get it in many stores, you would usually have to order it online.

sick crown
#

i was looking at this NETGEAR XR500 Nighthawk or MikroTik hAP AC RouterBoard

lusty junco
#

sure get that xr500 nighthawk looks sick

sick crown
#

how much would this make my enternet better that is my question

lusty junco
#

it depends on a few factors. like how big the house is and where you place the router. also if the channels used are also being use by others, like if you live in the city or apartment. range should be alot better then what ever the isp gave you. you may want to look at what other networks are around you to make sure you are on a deferent channel.

rocky badge
#

I'd go with the MikroTik RouterBoard

sick crown
#

i can give you my area so you can look nickCreep

thick minnow
#

Are there any rackmount routers under $150 that are any good/gigabit?

lusty junco
#

there are apps for android and iPhone that will scan the local Wi-Fi and show you what channels are being used.. and its free.

sick crown
#

so is blob correct

#

that that one is better?

lusty junco
#

personal preference imo.

sick crown
#

well its 100 cheaper

#

but it dose look basic

rocky badge
#

@thick minnow Have you checked Ederouters?

thick minnow
#

Yeah I looked into those

#

Do any of them do SFP+/10G?

#

Probs not

sick crown
#

lets take a vote on what one you guiys would piclk

thick minnow
#

Oh that's the $300 pro model

lusty junco
#

im not voting on it... take my advice or not.. its you money and your network.

thick minnow
#

^

rocky badge
#

hmm

thick minnow
#

blob your profile picture is adorable

rocky badge
#

πŸ˜„

#

So is yours @thick minnow

sick crown
#

what is the diffrents from the two? sorry im not very smart

fresh copper
#

I probably would not go with the RouterBoard just because I think you should stick with consumer oriented routers as they are easier to set up and can do things like channel searching for you. They are not as good as the higher end stuff but way easier to set up.

#

@thick minnow You can get SFP+ Edgerouters (the Edgerouter Infinity) but they are way more than $150. If you’re fine with just normal SFP there is the Edgerouter X SFP, or if you want rack mount, the Edgerouter Pro which is still probably outside your price range. There is a rack mount kit you can get for the Edgerouter 4 and 6P which both have SFP ports but run $200 and $240 respectively. If you are willing to sacrifice rack mountability then the Edgerouter X SFP is the best, it has 5 1000base-T ports and one SFP port. If you have access to a 3d printer then there are rack mount kits that can be printed.

That’s basically it in terms of Ubiquiti stuff. I am sure there are options with other manufacturers that I am less familiar with. If you have any Ubiquiti specific questions I can answer those best as I use a lot of their equipment for work. I am happy to try and answer any other networking questions too as I create and manage networks for work so I have a decent amount of experience.

gritty owl
#

@sick crown I'm also going to have to lean towards the Netgear (or ASUS equal you can afford). I wouldn't recommend a pro / enterprise type router for the entry level networking person.
There's also the Ubiquit Amplifi stuff if you like mesh networks
My cousin had the X6 and that thing was a beast.

sick crown
#

i need something to replce this all inone trash

gritty owl
#

yeah, I'd first check with your ISP to see if you can replace the modem with your own
Then just get one of the ASUS or netgear routers you mentioned above. Even the X4 nighthawk is plenty.
Just make sure you set up QoS to make sure your gaming has some priority over general traffic so you don't get lag spikes, etc

thick minnow
#

You can have your own modem?

fresh copper
#

A number of ISPs in the US allow it

clear igloo
#

Yah, for cable I believe by law they technically have to allow you to use your own if you want

thick minnow
#

are there any diy ("self-hosted")modems like pfsense is to routing?

clear igloo
#

Nothing that supports DOCSIS 3.0 and up

fresh copper
#

Yea, you have to have a separate modem and router if you want a good router

#

The DOCSIS 3.0 and 3.1 stuff has proprietary drivers so pfsense and the like can’t easily support it. Not to mention but those in Canada (where we usually can’t use out own router) are not likely to work on a version of those OSs for stuff they can’t use

thick minnow
#

ah

#

is there a big difference between 3 and 2?

clear igloo
#

Well 2.0 is basically dead at this point and not supported on any ISP that's half up to date on tech

#

DOCSIS 2.0 also didn't support channel bonding so it supports maybe 40Mbps of down and 30Mbps up (roughly) wherease 3.0 supports up to gigabit down and 200Mbps up (in theory)
3.1 can do up to 10Gbit down and 2Gbit up but there is also 3.1 full duplex which can do 10Gbit down and up

thick minnow
#

ah

clear igloo
#

New switch installed πŸ˜„

fresh copper
#

What kind of switch? I’m waiting to get my Cisco Meraki one that I got for free.

clear igloo
#

C9300-48UXM πŸ˜„

#

You getting the 8 port one? I forget what's given out these days

rocky badge
clear igloo
#

That's the one

thick minnow
#

ah yes the budget option

clear igloo
#

lol

#

We ended up with a couple extra in the lab and long story short, I got to take one home as part of longevity testing πŸ˜ƒ

thick minnow
#

:O

clear igloo
#

Since most of our testing involves constant reloads of the box for all the changes and whatnot and just having a box without traffic going through it and just sitting there isn't exactly the best test, this gives us the chance to see how the code holds up over a long period of uptime with traffic and whatnot going through it that's more typical of what might be seen in production

rocky badge
clear igloo
#

Give brain 1 injection of "the dumb" and get much smarts-o

meager hazel
#

Lol

subtle glen
#

"Budget option"?

fresh copper
#

Yea, they give out the 8 port one. I hear that it’s ok. Probably better if you actually have a bunch of them but apparently having just one for a hobbyist is not the best. Apparently you can get their AP and firewall too. Not sure how much use I would have for the firewall but apparently the AP is quite good

clear igloo
#

Yah, the AP was pretty solid. Firewall was nice but just didn't have much throughput, at least the one I got. I've swapped out the AP since I got it as it was only 802.11n

subtle glen
#

do cisco switches have multiple POE voltages? If you plug in any 24/48 V etc devices in them will it work?

fresh copper
#

I didn’t know it was only 11n. I’m only planning on using it as an auxiliary one in my garage so it’s not like it needs to be 11ac

clear igloo
#

Well this was about 4 years ago so they've probably changed the models they give out since then

fresh copper
#

That’s possible

#

It looks like the specific switch is the Meraki MS120-8LP 1G L2 Cloud Managed 8x GigE 64W PoE Switch

clear igloo
#

Ah, so they have changed it for sure
I just checked and the one I've got is the MS220-8P

#

Definitely don't see the AP I got on the site though so that's probably discontinued and they give out an AC one at least

fresh copper
#

Yea. I’m interested to see what it’s like

#

I’ll apply for the others today

quick schooner
#

Hey guys I am wondering if someone can help me with a network issues. I have a wireless modem that I got from my isp and it does not quite reach the room my computer is in. I just bought a wireless router and wanted to know if i could use the wireless router as a extender

fresh copper
#

Most routers can do that. If you tell me the model I can see if I can find the exact instructions

inner trail
#

Isn't it just as easy as plugging the router into the modem, and setting it to "AP mode"?

subtle glen
#

Isn't just easy to run a cable?

#

Or not use the isp router?

clear igloo
#

Spent an hour trying to figure out why my water leak sensor wasn't connecting to wifi. After trying everything and finally getting it to connect, it turns around and disconnects but then I sent an email to support and not a moment later it's back up and working 😑

rocky badge
#

πŸ˜„

#

Why wont it connect to WiFi @clear igloo

clear igloo
#

Have no clue

#

It was refusing to accept the DHCP offer and never picked up an IP for some reason

rocky badge
#

Odd

clear igloo
#

Yah, just randomly decided to accept the offer and now it's working but it worked fine for almost 3 months from the time I got it until yesterday

chrome hound
#

does it come with a 90 day money back warranty πŸ˜„

clear igloo
#

Nah, it's got a 1 year warranty πŸ˜›

meager hazel
#

Noice

white coral
#

Finally upgrading from my ISP modem, and am moving my personal router to be an access point on the other side of the house instead of using the likely less powerful extender as one.
Getting this one: https://www.netgear.com/home/products/networking/cable-modems-routers/C6300.aspx

clear igloo
#

Have you bought that one yet? If not I would look at something else because it's got a Puma 6 chipset which will add a good bit of latency and other issues

fresh copper
#

Yea, those Puma 6 chipsets are not so fun. If my ISP did not force me to use a modem with one in it I would switch in an instant.

subtle glen
#

it doesn't work cause it's WIFI

#

connect it with ethernet πŸ˜‚

sleek estuary
#

$70/mo for 4 (3) mbps .-.

fresh copper
#

Ouch

thick minnow
#

I use Ethernet

fresh copper
#

Ethernet is nice, big fan on 1000Base-T myself but I here 1000Base-LX is nice too

thick minnow
#

Ya they are both pretty good

clear igloo
#

10Base-T or bust πŸ˜›

clear igloo
#

iSCSI mounts ftw πŸ˜›

harsh rose
#

How secure is something like a pi hosting openvpn on a corporate network

fresh copper
#

@harsh rose Is the pi connecting to an OpenVPN server or is it the server?

There are always security considerations and it depends on what you are planning to do with it. If’s it’s for remote access then it should be ok as long as only the people that you want to be able to connect are given credentials. If it’s connecting outbound it’s more of a concern. It should be fine on it’s own as long as it’s in layer 3 mode and uses a different subnet but there still are some potential attacks. A lot of those are dependent on the exact environment.

Regardless of what the setup is, the only way to be fully safe is to essentially treat it like another WAN connection. Put a firewall between it and the rest of the network and only allow through what you have to.

sturdy mirage
#

maybe if it's something you play with, you can simply put it in DMZ environment

fresh copper
#

Anyone in here know much about STP?

clear igloo
#

Spanning tree is evil πŸ˜›

fresh copper
#

I'm working on configuring one of my switches at the moment and I am wondering if I should use regular STP or RSTP or MSTP

clear igloo
#

RSTP or RPVST is most common
MSTP isn't something too common these days and STP is pretty much out the door in 99% of environments

fresh copper
#

Thanks. This one is just for my internal network so I want to make sure it's most likely to be compatible with whatever random equipment I use in the future.

clear igloo
#

Yah, RSTP will work with STP too if you happen to have a switch that can only do that and gives you more flexibility with regards to configuring edge ports which STP doesn't provide. Been a while since I've messed with plain STP so I'm a bit fuzzy on that part

fresh copper
#

Ok, I’m sticking with RSTP then. Thank you

gusty vault
#

hey guys how i can tracing my network on server that i build on linux with docker ?

fresh copper
#

@gusty vault What do you mean by tracing? Like traceroute? Are you wanting a docker server that scans your network?

Things that can help me understand include: What are you trying to accomplish? What have you tried already? When you tried these things what did you expect to happen? What actually happened?

gusty vault
#

hmm i mean something graphic that i can see the traficc of outgoing and in going data to server πŸ˜ƒ

fresh copper
#

Oh, something like MRTG is probably what you want. It creates graphs of network interfaces. Here is an example of some random ones (they can look better than this though) https://evix.org/mrtg/

gusty vault
#

ty ❀

fresh copper
#

You're welcome!

gusty vault
#

on 8min timeline

#

@fresh copper

fresh copper
#

That would be nice. They mentioned it was some sort of diagnostic panel. I wonder if it's built into one of the containers. They don't mention it on the forum post though

gusty vault
#

maybe they used some site to connect the server

#

ohh nvm i will find something :/

#

ty for the help @fresh copper

fresh copper
#

You're welcome

white coral
#

@clear igloo yes sadly

#

its one of the better modles compatible with my isp

#

and its overkill for the speed I get

#

by 2 times

latent badger
ornate jungle
#

@gusty vault as noted above, it's netdata, a stats dashboard you can install on linux systems that has a web interface. i run it on my potato "server" AKA a mac mini G4 from 2004, running debian on a single core ~1GHz PPC cpu with 1GB RAM.

gusty vault
#

Wow ty

rocky badge
#

@ornate jungle Netdata ftw!

hallow nimbus
#

^

chrome hound
#

any one else running a Ookla speed test server on Ubuntu 18.04? after upgrading I fail the SSL test with Response: , Error: Unknown SSL protocol error in connection to sp01.seddt.net:8080

rocky badge
#

Speedtest doesn't use SSL

#

@chrome hound

chrome hound
#

yes it does

#

OOKLA SERVER TESTER
Test results
sp01.seddt.net
port: 8080
netgauge
details: Version: 2.5 Build Date: 2017-08-15.1314.4ae12d5
status: PASSED
websocket
details: Version: 2.5 Build Date: 2017-08-15.1314.4ae12d5
status: PASSED
crossdomain
details
count: 1
domains
*
tip: The detected cross domain policy allows all domains to test to this server. For more information on securing your Ookla Server, please see Ookla Server Daemon Advanced Configuration
status: NOTICE
https
details: Response: , Error: Unknown SSL protocol error in connection to sp01.seddt.net:8080
tip: Connection over HTTPS failed.
status: FAILED

#

or rather I should say it can

rocky badge
#

Plus why 8080 for SSL?

chrome hound
#

idk ask Ookla why they picked that port

#

I wonder if they are using an old cipher that 18.04 doesn't support any more

rocky badge
#

Rip

chrome hound
#

yea they need to do some work.... I rebooted the speed test server and now look::
https
details: Response: hello 2.5 2017-08-15.1314.4ae12d5
status: PASSED
@rocky badge

rocky badge
#

ouch

chrome hound
#

ok well I enabled logging to see if I could get the error so it wasn't just a restart πŸ˜„

#

man they don't log speed tests to the log file either

chrome hound
#

and back to failing when I turn logging off the SSL fails again... wtf Ookla...

subtle glen
fresh copper
#

This is so sad

#

I know that some people survive on those speeds but that ping is a nightmare

silent flax
#

@subtle glen looks like EDGE πŸ˜„

fresh copper
#

That sounds about right

subtle glen
#

Those beauties arrived today

fresh copper
#

Nice!

#

I’m waiting for some cool stuff myself

#

I got to decide what IPv4 subnet to use for my new LAN network. I’m thinking 10.10.10.0/24 because why not

subtle glen
#

192.168.1.... πŸ˜€

#

I may want to change ip ranges too but I'm too worried about changing all the static ip's (especially the one from the cisco switch)

#

@fresh copper what cool stuff

keen sorrel
#

Anyone in this channel work with honeywell door security panels. Trying to setup one to be accessible on my local network and hagving some issues. Ping me if you can help

fresh copper
#

Just got my new supply of rj45 terminators

#

When I first got some I got 25 for about $15. These ones I got 100 for about $10

foggy echo
#

sick

#

u have a link?

#

@fresh copper

fresh copper
foggy echo
#

Ty sm I'll check it out for US

#

Oh I found it for anyone else interested just look up Monoprice RJ-45 Modular Plugs RJ45, 100-Pack for Solid (107245) in Amazon and its a sponsored item

subtle glen
#

How do you put a router/modem combo in bridge mode ;-;

latent badger
#

I am very very sorry

#

For a more serious answer: You have to refer to the manual of your router, because that really depends on the brand and/or the ISP. Some ISPs even manage theese things for you so you have to ask them/login to a centralized system to control that stuff.

subtle glen
#

i'm trying to find that in the router's 141 manual pages since yesterday. I might as well contact the ISP

#

i might have found some bridge things but i'm not 100%sure those are the correct settings to look at

latent badger
#

What model/brand is it?

subtle glen
#

D Link DVA-5582 . i could send you the manual but it's in italian

latent badger
#

You could use the Pure Bridge function.

#

But like it says it will disable all management functions so you have to be ready with all the other configuration.

subtle glen
#

"Pure Bridge mode disables the local DHCP server, causing your ISP to assign IP
addresses directly to any affected bridges. By default, the assigned bridge is all
Ethernet and Wi-Fi LAN clients." maybe i didn't understand correctly what that does but, isn't that going to assign a public ip to a bridge?

latent badger
#

Yes, is not that what you want with bridge mode?

#

In theory the router/modem will become a modem.

quasi isle
#

and the next connected device should get your public ip

latent badger
#

Indeed.

quasi isle
#

i can set an option at my isps homepage to get my modem into the bridge mode

subtle glen
#

doesn't it takes that public ip and "transforms" it into 1 private ip where i can hook up my router?

latent badger
#

No, that is only acomplished with a router with NAT and firewall functions.

#

And would over-complicate your setup hugely.

subtle glen
#

so my new router would need a WAN port with dhcp enabled so that the isp can give the ip right?

quasi isle
#

not neccessarily
for pure routing functions normal ethernet port can be enough

#

but thats up to the router

latent badger
#

Well, lets just be perfectly clear

#

Ethernet ports and WAN ports are the exact same thing.

subtle glen
#

yeah i mean that will be used to "connect to the isp"

latent badger
#

The only diffrence is that a WAN port is by its definition and confiuration set up to be against the outside of the network (Wide Area Netwok / Local Area Network).

#

But yeah. You have a EdgeRouter? I think the default config on that one is eth0 for WAN.

#

So connect a cable from the ISP modem to eth0 and when bridged and the EdgeRouter is configured correct it should work just fine.

subtle glen
#

for now Eth0 is used to access the router. Any other ports wont work

#

like the untrusted zone

latent badger
#

You will probably have to configure ports for LAN and WAN then. I think there is a way to apply a default config with a wizard that could help you on your way.

subtle glen
#

ill see what i can find. Thanks for the help guys

latent badger
#

Oh and remember, the ERPoe-5 does not have switching ports. This means that you can only route, and that the LAN port needs an external switch if you want more than 1 device connected (which you probably do want.. πŸ˜› )

subtle glen
#

it will be connected to a 48 port switch πŸ˜€

#

so different LAN ports can't talk to each other?

latent badger
#

Yes they can talk to eachother, but only with routing. meaning that they will be on diffrent networks (10.0.0.0/24 on eth2, 10.0.1.0/24 on eth3)

subtle glen
#

oh ok

thick minnow
#

So this sounds a little bit weird:
I am having a asus rt-ac68u router with asuswrt-merlin firmware installed. And somthing strange happened 2 months ago.

One day i found that i cant connect to baidu. (The baidu.com domain works, but some CDN domain like tb1.bdstatic.com wont work with connection time out)

And i swapped the routers, and it works again, but due to the slow speed of the old router, i changed back to ac68u, and it works again.

And a few days ago, it went down again, and affect more chinese website.

Anyone know why this happens and how to fix?

PS: google and most western websites works, and i use those website for a reason.

latent badger
#

Do you know if it is a DNS issue? Maybe try checking with "nslookup" tool in command-line.

thick minnow
#

I do, but it seems not somthing strange

#

or let me run it again and send a ss

latent badger
#

So it is a DNS issue?

thick minnow
#

idk, i am using 1.1.1.1 and 1.0.0.1

latent badger
#

On your computer directly yes? Not through the DNS relay on the router?

thick minnow
#

through the dns on the router

#

i guess is the router issue

latent badger
#

Try this:
Open CMD
nslookup (this enters the nslookup command line)

tb1.bdstatic.com
Wait to see if you get reply
server 1.1.1.1
tb1.bdstatic.com
Wait to see if you get reply

If the reply is the same then there might be another issue.

fresh copper
#

There is a good reason for it to look like this. It's because usually people peer with Google's normal ASN to get to youtube so this ASN is only used in places where Google's normal services are not available which causes the map to be weird. The map for google's normal ASN is a lot simpler

gleaming valley
#

this is a bad dns record on the pc not the router. do a ipconfig /flushdns than a ipconfig /release than ipconfig /renew

#

than reboot both pc and router

subtle glen
#

is google fiber still laying down fiber?

clear igloo
#

In some places, yes

subtle glen
#

i was hoping to see them coming to italy 😊

clear igloo
#

I wouldn't hold my breath :P
They've pretty much stopped in most places

#

Most of what they are doing is finishing out their original commitments and that's about it

subtle glen
#

yeah. Now i don't even care. Open fiber is laying down fiber everywhere in Italy even here in this city

clear igloo
#

nice

subtle glen
#

i bet in few years 1 gbps will be obsolete

clear igloo
#

I doubt it

#

I would say 60% of home devices don't need more than 100Mbps and those that need more still don't saturate gigabit links

subtle glen
#

maybe not in few years

clear igloo
#

I'm sure maybe 10 to 20 years down the road most things will be wireless or moved to mgig at least

subtle glen
#

or maybe ISP's will offer 10 gbps at a reasonable price ?

clear igloo
#

Hey now, don't make me laugh so hard πŸ˜›

subtle glen
#

here we dont even have ISP's that give 10 gbps hehehe

clear igloo
#

AT&T is supposed to offer 5Gbps and 10Gbps for home users in the next few years but I doubt it will be at a reasonable price

subtle glen
#

😬

clear igloo
#

The tech I spoke to said that 5Gbps is maybe going to drop in the next year or so

subtle glen
#

at 1000$/month

clear igloo
#

Probably $150/month but that's just speculation

subtle glen
#
  • the price of the router i would say
clear igloo
#

I hope they let me use my own at that point

subtle glen
#

no more bridge mode with their modems

clear igloo
#

At least let me request more than a /64 for IPv6 =/

subtle glen
#

and give me a static ip

#

i mean if they say that IPv6 range will never be saturated any time soon, why don't they just give everyone a static IPv6

#

i think my isp is still using IPv4

clear igloo
#

Because that requires thinking to implement

#

Spectrum would bind your IPv4 address to the MAC of the router behind the modem so it was basically static unless you went offline for like a week. For IPv6 they would give you a new block if you so much as blipped the interface -.-

subtle glen
#

do you have an IPv6 ?

clear igloo
#

Not right now, I've not bothered with it

#

AT&T decided that you only get blocks of /64 addresses with their latest "modem" box for fiber and you can't request anything larger like a /60 so if you have multiple VLANs then you're screwed since you need to figure out how to request multiple blocks on the connected router and deal with routing traffic from each VLAN out a different interface which is near impossible

subtle glen
#

i didn't completely understand that but it doesn't seems something good

clear igloo
#

Basically you need to have an interface connected to the modem for each /64 you want but because you can't just say "all non-local traffic goes out interface X" since you'll have that traffic come back in on a different interface, you're SOL

subtle glen
#

ask cisco to become an isp provider with all the features that are missing with others isp's

clear igloo
#

That would be bad for business πŸ˜›

subtle glen
#

why?

clear igloo
#

Why would an ISP buy from Cisco when they are also the competition?

subtle glen
#

netflix is a competitor to amazon but they still rent amazon servers

clear igloo
#

It all depends on what options are out there. If you have a large choice and suddenly the person you're buying something from becomes a big competitor, why would you continue to give them money while they steal your business

#

Netflix and Amazon aren't direct competitors, sure Amazon has a service that competes with Netflix but it's not their main product

subtle glen
#

that's right :/

thick minnow
#

I need help every time I try to connect to my WiFi or go online my whole WiFi disconnects

remote kernel
#

Should I get 4x gigabit NIC for my server or 1x 10gbps SFP+ nic?

subtle glen
#

@thick minnow what do you mean? Does your AP wireless signal turns off?

#

@remote kernel i think it depends if the 4x1 gig NIC has link aggregation

thick minnow
#

@subtle glen what’s ap?

subtle glen
#

the thing that gives WiFi

thick minnow
#

Mines LAN

#

No wireless

subtle glen
#

"I need help every time I try to connect to my WiFi or go online my whole WiFi disconnects"

thick minnow
#

Yea

subtle glen
#

what?

#

LAN or WiFI ?

thick minnow
#

Look

#

the LAN is connected to the WiFi.

subtle glen
#

i have troubles understanding. The Computer is connected to the router using a ethernet cable?

thick minnow
#

Ya

#

Almost

subtle glen
#

what do you mean by almost

thick minnow
#

I mean lan and ether are same

#

S yes

#

So

remote kernel
#

Ethernet is a technology that a LAN can be cabled with

subtle glen
#

lan stands for Local area network

#

the group of devices connected in your house

thick minnow
#

Yeah

subtle glen
#

they are not the same

remote kernel
#

Exactly. So even if it's over fibre channel or Ethernet or god forbid DSL it's still over LAN

thick minnow
#

IDk

#

Nvm

subtle glen
#

how can we help you

fresh copper
#

@remote kernel for the NIC, depends on what’s going to be on the other side. In my situation a 10G NIC would be what I would get but if you don’t have anything to connect it to on the other side then it’s useless

remote kernel
#

I'm getting a 10G switch

fresh copper
#

Awesome!

#

Definitely get the 10G NIC then

unreal lark
#

Does anyone actually have 10 Gigabit internet

clear igloo
#

Usually not about 10Gig internet, it's about local transfers and sustainability over 1Gbit without LAG

#

There are a few places in the US that offer 10Gig but they are usually small towns with their own ISP

chrome hound
#

I don't know about only small towns having 10gb, UTOPIA services 11 or so cities in Utah, I have 10gb service

clear igloo
#

Interesting, I only know of a couple places that have it and they aren't very large cities or anything but good to know

fresh copper
#

I wish I had 10G. I have 300/20 at home and about 3G transit total for my ASN

chrome hound
#

having 10g service is one thing, getting 10gb speeds is another thing, but as ISP upgrade it will come along, just like 1g server used to be when it first started hitting the public

fresh copper
#

Yea

#

They often oversubscribe

#

Or technically have 10G but not 10G to any specific place, more of an aggregate

subtle glen
#

mmmm i want to become an isp then so that i can have 10g

fresh copper
#

10G transit is quite expensive though

#

I guess if you hosted your own Speedtest server then you could put a 10G card in it. I may try that

strong tusk
#

doesn't Linus have 10g?

fresh copper
#

I don’t think so. I think it’s more than 1G though

#

I’ll have to check on what it was

chrome hound
#

@fresh copper I swear I didn't install my own speed test server no sir not me

fresh copper
#

I’m going to make one at some point. Maybe make it on a different VM on the same machine and see what the max inter-VM speed I can get is

chrome hound
#

you could always use Ipref

fresh copper
#

That’s not as fun

subtle glen
#

on a vm with those 400 gbps NIC's Lurick mentioned

sturdy mirage
#

hello guys!
am I alone to have this bug in ESXi 6.5?

#

ESXi see that my CpU can go up to 11.1 Ghz

#

but I got only a small I5 2300 CPU

clear igloo
#

It's total capacity, not max speed

#

2.80GHz x4 = 11.2GHz capacity

sturdy mirage
#

okay... to my mid this is quite a dumb way of watching CPU usage but... why not

clear igloo
#

Well ESXi "pools" resources together so it's their way of showing you total CPU power

clear igloo
#

@subtle glen Just FYI there aren't any 400Gbit PCIe NICs on the market, I doubt they will show up for a year or two at least. They are probably coming but not for a while πŸ˜ƒ

subtle glen
#

oh 😦

sturdy mirage
#

I use fast ethernet, it'really slow too but... I don't have the choice

#

BTW thx @clear igloo :)

subtle glen
#

@sturdy mirage i have no choice too. Wifi arrives only if i put an ap on the balcony and if i leave the garage door open (or i could drill a hole and stick the antenna out. Now i'm seriously considering to run a fiber cable and use 2 media converters on each end so that i can have at least a 1 gbps speed

fresh copper
#

I just sent my stuff off to be coloed! I'm sending it to a friend who is doing down to the DC in one week by car so that I don't have to ship it all the way.

clear igloo
#

Nice!

#

What's going in the colo @fresh copper

fresh copper
#

I have a Netgear gs724tv4 24 port managed switch (with a single single mode fiber 1G sfp in it), an Edgerouter X, and an Xserve 2008.

#

I have 4x1G LACP from the Xserve to the switch. I also have all the ports of the edgerouter connected to the switch but they each have different VLANs on them

clear igloo
#

Nice, better uptime and service hosting?

fresh copper
#

Yea, faster internet speeds, static addressing, not having to listen to the loud fans, couple people to peer with.

unreal wedge
subtle glen
#

i see a challenge here

unreal wedge
#

Nope, just two people maxxing out speedtest nodes.

#

My machines were 30Gb/s, so Β―_(ツ)_/Β― and they were in a datacenter. They were not my own.

subtle glen
#

absolutely not my connection

unreal wedge
subtle glen
#

πŸ˜”

unreal wedge
#

two gigs, one bottleneck

subtle glen
#

they are in 2 different buildings πŸ˜•

chrome hound
#

funny thing about public IP's, they are public

unreal wedge
#

As we all envy the owner of 69.69.69.69

#

Feels bad man.```
NetRange: 69.68.0.0 - 69.69.255.255
CIDR: 69.68.0.0/15
NetName: CENTURYLINK-LEGACY-EMBARQ-BKL-6
NetHandle: NET-69-68-0-0-1
Parent: NET69 (NET-69-0-0-0-0)
NetType: Direct Allocation
OriginAS:
Organization: CenturyLink Communications, LLC (CCL-534)
RegDate: 2003-08-05
Updated: 2018-05-02
Ref: https://rdap.arin.net/registry/ip/69.68.0.0

chrome hound
#

lol

#

I wonder if Qwest knew that 69 would be come a thing when they were making that request for IP space back in the day

rocky badge
#

@unreal wedge century Link ooof

chrome hound
#

I could be wrong, but I think that space was taking over by Century link when they bough Qwest, but I could be wrong

unreal wedge
#

The number has always been a thing.

chrome hound
#

lol well maybe in 2003 I just wasn't aware of it being a thing πŸ˜„

clear igloo
#

AT&T, why you suck at IPv6 still ;-;
Wish I could just buy a block of address space easily too =/

subtle glen
#

wish i could have 2 fiber lines

#

Regarding public IP's, can you still do that bridge mode thing to use your router even tho the public ip is dynamic?

clear igloo
#

You mean pass the IP to the box behind the ISP's box?

subtle glen
#

yeah, use the modem/router only as a modem and use the edgerouter as router

clear igloo
#

Depending on the box they give you, yah

#

that's how mine is setup

subtle glen
#

cause i was looking at the interface option on the ubiquiti router and there was "assign ip manually/ use dhcp" and i thought that the dhcp was to assign ip to a device connected to that port, not to receive an ip from the isp

#

that's why i was wondering if it would still work even with a dynamic ip

clear igloo
#

DHCP is to receive a dynamic address from the ISP and can also be used, in server mode, to give out IP addresses

subtle glen
#

oh cool, so i just have to set (in this case) Eth0 with the DHCP server enabled. Now i just have to figure out how to put the modem/router in bridge mode πŸ˜€

clear igloo
#

What box do you have?

#

From the ISP that is

rocky badge
#

@subtle glen got your new router working?

subtle glen
#

@rocky badge yeah

rocky badge
#

Yay

subtle glen
#

@clear igloo there is a "pure Bridge" thing at page 25 or something but i cant understand how to set it up

#

@rocky badge you have an edgerouter too right?

rocky badge
#

Yea

subtle glen
#

cool

lunar thicket
#

Hi

clear igloo
#

That feel when you have everything on PoE power and free up a whole power strip πŸ˜„

subtle glen
#

did you switch everything on PoE?

clear igloo
#

Anything with a barrel plug or micro usb port and ethernet port, yes

subtle glen
#

now you have a box of poe injectors

clear igloo
#

nope, all off a PoE switch πŸ˜›

subtle glen
#

ohhh thought you changed from injectors to the switch. Now i saw the message

clear igloo
#

AH! No, I changed from wall warts to PoE power

subtle glen
#

were those ap power supplies and stuff like that?

clear igloo
#

No, random IoT devices

#

APs have always been on PoE

subtle glen
#

can the switch automatically switch between 48 or 24 volts for the different devices?

#

ahh i saw them on amazon too

clear igloo
#

Everything I've got is all 48 volts input iirc

#

Since 24v is non-standard I don't think it does but I could be wrong

subtle glen
#

i remember something about the switch that had PoE 24/48 v but i'm not sure too

clear igloo
#

I'm sure some exist, I just haven't seen them πŸ˜ƒ

subtle glen
#

wait whats the number of my switch?

#

3560 or something like that?

clear igloo
#

Yah

#

if you access the switch and do 'show inventory' it will give you the full model number but 'show plat' is usually cleaner

subtle glen
#

wait there is PoE even for spf?

clear igloo
#

Negative

#

mGig is all copper

subtle glen
#

there wouldn't even be a good use for it

clear igloo
#

no good use for what?

subtle glen
#

poe over sfp

clear igloo
#

Oh, yah

#

It would be out of spec with regards to temp and harder to cool the SFP as well

subtle glen
#

do you recommend an ip range in particular?

chrome hound
#

for like what DA SFP cables?

clear igloo
#

DA SFP cables or even 1Gig SFP with copper

#

Definitely couldn't do fiber XD

chrome hound
#

lol for some reason I was thinking fiber SFP and was wow that would be cool to power my device from a couple miles away πŸ˜›

clear igloo
#

That would be awesome

subtle glen
#

power over fiber?

#

lol energy efficiency would be so high

clear igloo
#

Yah

subtle glen
#

like having fiber traces on mobo's: no heat,more efficient, less copper used

clear igloo
#

I wish I had the picture of the 400Gb switch handy with all 36 or 32 ports cabled up while showing the insides but I don't feel like opening up my work laptop πŸ˜›

subtle glen
#

😱 400Gb ????

#

it's not on the market but it exists?

clear igloo
#

Prototype, yah

subtle glen
#

this is getting interesting

clear igloo
#

Rumor is November/December timeframe

#

But that can always change

subtle glen
#

rumors about the price?

clear igloo
#

I can't say even if there were

#

I can't even make a good guess at this point but around the 40K to 50K mark for the list price wouldn't surprise me

subtle glen
#

what if you have one of those cards that have 2 qspf (or whatever the 400gb is called) plugs: can you link aggregate them?

clear igloo
#

I don't see why not if the card supports it

#

Would only help if you had multiple clients hitting that box though

subtle glen
clear igloo
#

Depending on the card with SFP+ you either get 4x10 or 4x25 ports but yah, not sure of any card that wouldn't support some form of aggregation at that level

chrome hound
#

whats the back plan on a 400gb switch like speed wise?

clear igloo
#

line rate

#

so 12.8Tbps per 1RU

subtle glen
#

because you know: i have to saturate that 2,5 hdd connected to the usb port of the router speed. Maybe we are close to saturate it with that quad sfp+ card

clear igloo
#

lol

chrome hound
#

lol

subtle glen
#

but wait. If the 400 gbps switch is still a prototype, what does an exchange point or a submarine cable land station use?

chrome hound
#

at my work they are working to upgrade core hardware, they had a lot of demo hard ware in, the challenge is space for us, most hi capacity/speed switches are full sized, when your cabinet only had 18 inch depth it makes it hard

#

fiber is fiber is fiber

clear igloo
#

most places use a bunch of 100Gb aggregation right now

#

Yah, cabinet density and depth can be a challenge with a deep switch =/

chrome hound
#

the Fiber to my house was installed when the max speed was 100mb with out replacing any fiber they can push 10gb, and to go 100gb on the same fiber, you just need a second fiber

subtle glen
#

those switches are really long, i cant fully open my door cause of that

clear igloo
#

So long as the fiber is SM then you can swap from 100Gb to 400Gb pretty easily but nothing I've seen mentions multimode transceivers yet

chrome hound
#

well multi mode is pretty short range so

clear igloo
#

Yah, lot of data centers do MM for the short hops but SM for the backhaul so it shouldn't be an issue in most cases but there is always that one place that uses MM everywhere xD

chrome hound
#

typically if you are that close to the device your stacking with copper stack cables πŸ˜„

subtle glen
#

what if you want to increase the speed over a fiber line: do you just have to change the "machines" in the cabinet? or they just "unlock more speed" cause these "machines" are capable of higher speeds

chrome hound
#

its mainly optics to a point

clear igloo
#

Yah, optics and whatever it's plugged into

chrome hound
#

but we have a lot of older Omni switches that max out at 1 gig

#

which for typical res deployment all you need, but there uplink ports are only 10gb so after you get to a point of load you have to have a switch with 100gb uplink or you create a bottleneck

fresh copper
#

I still don’t see the benefit for MM even at short distances. As far as I am aware, with the current technologies they both support the same speeds. I have heard multiple arguments as to which one is less expensive.

chrome hound
#

MM is must lower on power usage

#

much cheaper optics

#

for example the MM I use in my house cost 15 bucks per, versa 80 for LR optics

#

there is also issues with burn out, the LR are laser so your running the risk of burning something in short runs

subtle glen
#

tf

clear igloo
#

LR is great for eye surgery though, just a quick zap of the optic and you're good to asdflkjasdl;k;lweqrjlklalllkafjlksadfjlkasdfl

chrome hound
#

MM Optics are after all LCD

subtle glen
#

hehehehe

chrome hound
#

just wow a pin point laser joke...

subtle glen
#

i mean, passive fiber

clear igloo
#

I will say, the one thing about MM I don't like is for the higher speeds you usually have to deal with MPO cables over standard 2 strand cables

chrome hound
#

passive is not the light but how the hardware talks

subtle glen
#

then i guess it's not good for your eyes xD

chrome hound
#

nope

subtle glen
#

few months ago i thought you could see like a red dot of light pulsing if you look inside that cable

#

now i know its something like infrared you cant see with the naked eye

chrome hound
#

well its wave length for sure, we deal with active Bidi optics so we are pushing both directions in the same fiber on different wave lengths

subtle glen
#

i didnt know you could go both directions

chrome hound
#

err might be the 60km because they have to re-route my fiber to a hut that had proper 10gb ports

rocky badge
#

πŸ˜„

#

Have you fixed your PfSense? @chrome hound

chrome hound
#

new card comes in Tuesday, but I forgot to order optics so I have hoping the Chelso will accept intel optics, we will see πŸ˜›

subtle glen
rocky badge
#

ah, nice. Hope it fixes it

chrome hound
#

me too, al though my CEO found my speed test server πŸ˜„

clear igloo
#

lo, whoops πŸ˜›

subtle glen
#

busted

rocky badge
#

@chrome hound lol

chrome hound
#

and was all who the hell is running a speed test server in orem and how has that kind of speed that is not on our network, the Head ENG guy was all, ooohh thats just your Web Developer

subtle glen
#

was he like "hahahahaah how funny.............. you're fired."

rocky badge
#

lmao

#

Nice

chrome hound
#

lol he was pretty impressed, just cough off guard was getting nervous about some new internet provider

subtle glen
#

quickly deletes the server

rocky badge
chrome hound
#

I have the ss of the speed some where, it pulls some impressive speeds for it

subtle glen
#

for that speedtest server, do you just make the procedure to become a speedtest host and then open the program on a pc and select your server?

chrome hound
#

there is a bottle neck across our NNI we have 2 10gb bonded ports handling two sides of the network

subtle glen
#

"bottleneck"

rocky badge
chrome hound
#

yea you just stand it up and then they will approve it or not

#

then you can search for your sever

subtle glen
#

but other people can use it for their tests

rocky badge
#

Yeah

subtle glen
#

isn't that a "network safety hazard"

rocky badge
#

No?

chrome hound
#

what people don't realize if your speed tests will only go as fast as the fastest router in your path and the available bandwitdh

#

well it could be, but you need to set it up correctly, I have mine out side of my internal servers and even if some one hacked it, I just turn it off and rebuild it

subtle glen
#

like when in a film they hack fbi and they just reboot

chrome hound
#

since its on a ProxMox cluster its pretty easy to turn off and on πŸ˜„

#

or delete

subtle glen
#

what about turning off and on the power bar

chrome hound
#

lol

#

yea no that would take my wifes internet down, and we don't want that

subtle glen
#

:/

chrome hound
subtle glen
#

are those batteries?

chrome hound
#

two power buttons

#

that is A leg and B leg for my setup

subtle glen
#

wtf do you have to power when there is an outage, your entire house??

chrome hound
#

the Black panels are the control for each string

#

just the internet and my wifes PC

subtle glen
#

for 2 days?

chrome hound
#

like I said if her internet goes down I am screwed

#

I am short batteris to run for two days πŸ˜›

#

its an over time project, I buy 16 at a time every 6 months

subtle glen
#

lol i have a cheap 600 VA ups modified with 2+ batteries (so 3 in total) that powers routers, a switch, my pc and a plex pc (that i never turn on)

#

if i turn on the pfsense pc/my pc/ the switches and router, the ups goes into overload mode

chrome hound
#

My real goal is to keep my NetApp from powering down, in the event of a power outage I can SSH home and shut things down gracyfully

subtle glen
#

well, those are a lot of batteries, cant they power everything up?

chrome hound
#

oh yea

subtle glen
#

"for 1 day only"

chrome hound
#

those are 30 amp draw UPS's

#

well keep in mind I only have 1 battery sled per chain right now

#

and that one sled will power the stack for about 2 hours

#

well 2 sleds but still

subtle glen
#

if there is a power outage build a male to male cable, turn off the main breaker, plug the cable into a random plug and into the ups. You can power your house

chrome hound
#

that the stack minus the switchs and junpir for internet

subtle glen
#

whats that empty switch

chrome hound
#

a cisco 3750? I think

#

I replaced it with a netextrem when I wen 10gb through out the house

#

funny thing is I still have like 8 devices that have to have a 1 gig cooper port, suck as my AP

subtle glen
#

"get a 10 g AP"

#

simple

chrome hound
#

do they make those?

subtle glen
#

dont think so :/

#

wifi cant transmit 10g

chrome hound
#

yea so I am ok with having some copper ports, I put in that 16 1gig for the netapp copper ports, but I think I could move that traffic to the 10gb ports, just haven't yet

#

nice

#

want some more 600ah units? they jsut need batteirs

rocky badge
#

Woah

#

Changing TTL on Verizon bypasses the hotspot throttle

chrome hound
#

really??

subtle glen
#

Ofc why not

chrome hound
#

wow

chrome hound
#

this is cell right?

rocky badge
#

Yes

#

Using my phone's hotspot