#networking

1 messages Β· Page 178 of 1

strange silo
#

^ The Patriot Act btw, great ep lol

waxen scroll
#

I don't watch that

#

😘

strange silo
#

Have Netflix and there is less and less on there I want to watch, so I watch things like that

#

Should just cancel it

waxen scroll
#

I stopped watching a lot of various content by far left people cause the Trump derangement syndrome is massive. I figure Patriot act is no different

#

😬

strange silo
#

Netflix is the Anakin Skywalker of video streaming

#

Depends on the ep, I mean there are Trump jokes but Mitch comes up more

waxen scroll
#

I'm just tired AF of hearing it lol

strange silo
#

lol

#

Zero cares cos nothing to do with me

waxen scroll
#

You have your own problems I'm sure

strange silo
#

Who doesn't

#

But I know more about US on-goings than my own because ours are boring AF and it's just nicer with no skin in the game

hollow marlin
#

@strange silo About the quote earlier: yeah it must be difficult in such a small area to compete with basically everybody you know (NZ if I remember)?

strange silo
#

Yep

#

But I'm also not in one of the 3-4 bigger cities as well

#

Auckland would be a bit different of a situation

little schooner
#

@strange silo so just to clarify, 250 running vms should be possible over nfs just fine?

strange silo
#

Yes, there isn't really a limit at all

#

What you do is have multiple NICs on the storage platform with their own IP and on the ESXi hosts you balance the mounting of the NFS shares across those IPs

#

you don't get multipath at the datastore beyond standard link aggregation but you do balance load across multiple paths by spreading load across datastores which take different paths

#

You'll hit storage I/O or storage CPU limit before network anyway

little schooner
#

So that looks like
Esxi1 --> nic1
Esxi2 --> nic2

#

No need for link Aggregation that way?

hollow marlin
#

@strange silo Im about in a similar situation. I know almost every engineer within a 600mi radius, exception being Canada. We all compete with each other but at the same time go out for drinks or food weekly

strange silo
#

@little schooner Not quite drop that down to the datastore layer as each host will be mounting the same datastores

#

over the same path

little schooner
#

I don't think I get it

#

So multiple nfs share pointing to same big. Volume?

strange silo
#

ESXi1 mount NFS:/10.1.1.1/Datastore1
ESXi1 mount NFS:/10.1.1.2/Datastore2
ESXi2 mount NFS:/10.1.1.1/Datastore1
ESXi2mount NFS:/10.1.1.2/Datastore2

#

Multiple NFS mounts on the storage server and mount them over different IPs

rocky badge
#

Tomorrow is fiber run day partyBlob

strange silo
#

more smaller NFS mounts is better than one larger one for load balancing

#

hitting the same underlying storage volume is fine

#

then if you need more I/O create another volume and migrate or make new NFS shares on the new volume

little schooner
#

@strange silo oh I think I see it now. So like carving a 1TB volume into two datastores, 500GB each and mounting both servers to them the way you listed

strange silo
#

yes

little schooner
#

And it's better because nfs prefers smaller volumes for better performance?

#

While adding redundancy

strange silo
#

Has a bit more to do with network load balancing

little schooner
#

k

#

Yes this plan is good

strange silo
#

Since VMs sitting on datastore1 will take path 1 and VMs sitting on datastore2 will take path 2

rocky badge
#

I need more 10 Gigabit clients on the network πŸ˜„

#

to test the full 10 Gigabit

strange silo
#

and that is common across all hosts, they all mount the same datastore and use the same path so if a VM moves it won't hit the incorrect storage controller and cause a cache miss

#

because it took a different path

little schooner
#

@strange silo I see makes sense

strange silo
#

But that has more applicability in a storage platform with multiple storage controllers

#

Synology NAS or FreeNAS is single controller

little schooner
#

It's a nice design

strange silo
#

It's one of those "industry reference designs"

#

Because no matter which storage vendor you use it's correct for all of them when using NFS

little schooner
#

@strange silo is it valid to use LAG in this case if it's available? Or still go with the separate ip on nics

strange silo
#

LAG is must for NFS otherwise the network has no redundancy

little schooner
#

So wait, I thought lag only allows one ip assigned to the adapter

strange silo
#

So for you you'll need to create a LAG with multiple IPs and get the LAG mode working so each IP uses a different NIC in the LAG

little schooner
#

Hmm

strange silo
#

Ideally you would have multiple storage controllers that share the same disks/volumes and it's 1 IP per controller

#

So 10.1.1.1 Controller 1, 10.1.1.2 Controller 2

little schooner
#

Ahh gotcha. That was the part I didn't get

#

Yes again multiple storage controllers

strange silo
#

Other option is 4 NICs in the storage server and 2 LAGs

#

1 IP per LAG

#

I doubt with 250 VMs you'll max out a single 10Gb path though

little schooner
#

So our server has 1 storage controller and 4nic. So 1 lag of 4 nic and one ip

#

I guess we'll do

strange silo
#

Only time would be during backups by pulling out a DB backup over night or something

little schooner
#

Yeah I doubt it. It will all be remote Connections

#

Students connect with VMware workstation

strange silo
#

Those 4 NICs 1Gb or 10Gb?

little schooner
#

@strange silo they are 1gb each

#

@strange silo think it will be enough?

strange silo
#

Yea, was just thinking 1 LAG vs 2 LAG but with 1Gb team of 4 is best

little schooner
#

Awesome

strange silo
#

For smaller setups I like shared SAS the most

#

Netapp E-Series or Lenovo V3700 for example

little schooner
#

I'll take a look

strange silo
#

Without an expensive SAS switch you're limited to usually 3 hosts but if you need more than 3 hosts SAS is not the best anyway

#

Those with VMware Essentials Plus license is perfect combo

#

As that is 3 host limit, 6 sockets

#

And you can get a fully equipped dual controller V3700 for something like $5 USD

#

FYI under the hood they are all LSI/Broadcom OEM, have a look at pictures of the management software. Just re-skins, quite funny when you know and storage vendors try and do their typical thing.

#

So go for best price and support, because they are exactly the same for all of them, all the big brands have them

#

Only down at these lower end models of course

tender hazel
#

I've always just used iSCSI for that purpose

#

and not NFS.. never really looked at switching

little schooner
little schooner
#

Are there legal sources of getting Cisco images that doesn't require sub?

#

Or it has to be done through Cisco with smartnet

unborn fox
#

Pls can I pick someone’s brain on IPv6??

craggy parcel
#

@little schooner I can not imagine any way other than copying from equipment you own, but can't imagine it will be legal, to use it in other equipment than what it came from.

#

@unborn fox Why not ask your question, instead of asking if you can ask a question?

little schooner
#

@craggy parcel yeah thats what I figured. Teacher wanted to know if it was possible

#

They didn't give him Cisco. Images

craggy parcel
#

Well, they are easy to get without Cisco service contracts, but not in a legal manner.

#

Even though I think software upgrades to that kind of equipment, should be part of the deal, for at least the expected lifetime of the product (No less than 5 years). But in reality you might end up paying more for the company to fix their bugs, than for the actual hardware.

little schooner
#

I see

unborn fox
#

Hi All,

I am planning for future IPv6 deployment for large networks that currently have large amounts of vlans.

I have been trying subnetting IPv6 into /120’s for vlans in a cisco lab. Unfortunately this breaks SLAAC and dhcpv6 starts acting weird and gives clients a /128 or no address at all and they don’t pick up dns very gracefully.

I guess my question is, if I have a large network with let’s say 20 vlans and 150-200 devices per vlan. Do I just slap a /64 on each vlan and call it quits? Or should we be breaking down the /64’s further?

tender hazel
#

@unborn fox you should be using a /64 for each VLAN

#

SLAAC only supports /64's

#

basically each VLAN you use should be a /64 unless it is PtP VLAN connecting two routers, then you can use like a /126 or /127 or something like that

#

a network with 20 VLANs isn't that big

#

generally a company will get a /48 with IPv6 at the least, which gives you enough /64 subnets that you could have 65,536 such VLANs

#

unless you expect the network to enlarge from 20 VLANs to 65000 in a short time, there is no need to conserve

#

I know based on IPv4 experience you are probably aiming to conserve space, but that is counterproductive with IPv6. You have to allow yourself to be much much much more wasteful than you ever would with IPv4

#

Case in point - cellular IPv6 uses a /64 per host, so each phone gets its own /64

#

even for the PtP VLANs where you use /127's it is recommended to actually only do one of those per /64, so leave the rest of the /64 empty

#

otherwise it is too difficult to figure out where the subnet boundaries are

#

the use of /127's or /126's as PtP subnets is really mostly for security reasons (preventing more IPs from being on that subnet) than for conservation

#

I actually often don't bother and just use /64's on PtP subnets too

#

that way if I need to add another host onto the subnet for troubleshooting, it is easy enough

#

so yes, slap a /64 on each VLAN and call it quits

#

but plan out your mapping for them in a way that makes sense

#

like perhaps you can use the VLAN ID in part of the address

#

so if you have a /48 then you have something like XXXX:XXXX:XXXX::/48

#

but then the /64's are XXXX:XXXX:XXXX:YYYY:/64

#

you can use the YYYY for something useful like the VLAN ID

#

instead of just making it up

#

it can make it easier to find things

#

in case you have multiple sites, for the YYYY portion, the first hex digit could be like the site ID (which gives you enough for 16 sites), then the next three hex digits as the hex version of the VLAN ID

#

you could also go with the decimal version if you don't use the higher VLAN ID numbers

#

if the network you are dealing with has more than 16 sites each of which has many VLANs, you may even want to request larger than a /48

hollow marlin
#

To sum it up, with IPv6, any thing smaller than a /64 essentially doesnt exist. We need to get out of the IPv4 mindset

little schooner
#

Why does windows licensing have to be complex?

hollow marlin
#

There are very few licenses that are not complex

strange silo
#

MS licensing is getting a lot simpler than it used to be, flip side is it's getting more expensive as they package more together and throw it under things like Office 365 User licenses

waxen scroll
#

*screams in mandatory Cisco SD-LAN licensing on all new switches

little schooner
#

@strange silo do you know if installing windows in esxi VM container to a shared storage system uses a lot of bandwidth?

#

I didn't setup the env completely to test yet but wondered if you knew that answer now

#

Like when my cameras stream their footage, I am seeing constant bit rate of 23 mbps

#

For windows installing I presume it will be a lot more?

clear igloo
#

It shouldn't use too much bandwidth but just be careful if you need to do maintenance on the shared storage system

#

@little schooner

waxen scroll
#

@clear igloo SD-LAN

clear igloo
#

SDA?

waxen scroll
#

muh DNA

clear igloo
#

ACI to the edge πŸ˜„

waxen scroll
#

M-A-N-D-A-T-O-R-Y

#

MUH 9400

#

they keep trying to sell it, i keep saying no

clear igloo
#

You mean the $0 license?
C9400-NW-A?

#

or the C9400-DNA one?

waxen scroll
#

dna

clear igloo
#

Ah, it just replaces Cisco One iirc

waxen scroll
#

we dont have C1

#

xD

clear igloo
#

lol

waxen scroll
#

im trying to remember but i think the bulk of our ipsec is through a firewall and not a router, so theres no advantage to C1 cause we're not using almost any licenses on the routers

#

we had C1 at another company, that was nice

little schooner
#

@clear igloo k

#

Teacher wants to wait for the purchase first to come in

#

Before making any VMware infrastructure changes

waxen scroll
#

ugh

#

he needs to move faster

#

@clear igloo you can and should make configurations while a device is shipping

clear igloo
#

Depending on the model of bringing the device into the network you can πŸ™‚

rocky badge
#

@clear igloo YEET

#

Dockerizing everything is almost done!

clear igloo
#

Noice!

rocky badge
#

I prob. won't move anything else to Docker though.

#

Minecraft will prob. stay on its own VM, same for Gluu and windows server

#

Well, technically Gluu is dockerized.

#

But not managed with Rancher.

little schooner
#

@waxen scroll Cisco netacademy also didn't give him full access to the Cisco images despite needing some of them to teaches the updated ccna courses with wireless

#

I told him how can they expect you to teach the course if they don't give you resources needed. And you are academy Partner

#

I don't get them

#

So I told him to make that counter argument to them and I think it will work

#

In the interim he was looking for other websites to nab the images from

#

But warned him that isn't really an option for business

waxen scroll
#

i dont know how it works. i dont think gear is included with netacad and the school is responsible for keeping current. i know my school had old as hell gear

little schooner
#

@waxen scroll yeah. The gear is not included, but I would think software should be

#

At least just the images for the lab devices required for course nothing more

waxen scroll
#

nope. the school needs to buy maintenance contracts on all equipment before it is

little schooner
#

Those maintenance contracts are annoying

waxen scroll
#

i agree ;p

rocky badge
#

@clear igloo So

#

uh

#

near my house

#

Fiber is present here, do not dig

waxen scroll
#

guess what happens when you let a maintenance contract expire for a year and want to then go buy one?

clear igloo
#

πŸ‘€ @rocky badge

rocky badge
#

I wanna get off of this shit connection

little schooner
#

@waxen scroll the price increases 3 fold?

waxen scroll
#

they make you pay for 2 years minimum. to cover the year you didnt have it and the year you want to cover it for

little schooner
#

Ouch. They definitely have their bases covered

#

They will never lose

waxen scroll
#

@clear igloo and here i am wanting to ditch 300mbit for 75

#

its different when poppy isnt paying πŸ˜‰

hallow nimbus
#

Same @rocky badge

rocky badge
#

Lol

little schooner
#

So today I found out that the college gave us 2 grand for us to spend, no strings attached.... As long as it's for school use

#

That's neat

waxen scroll
#

everyone?

little schooner
#

@waxen scroll whoops. By us I mean the teacher and I

#

Hehe

#

@waxen scroll that would be something though if it were the other way

waxen scroll
#

2 grand aint much these days

#

what would you do with it

#

@clear igloo as a network equipment PO writer, my spirit is gone

clear igloo
#

Yay, death to the spirit!

#

πŸ˜›

waxen scroll
#

2k cant even get me a 4000 series router

#

@little schooner tell prof you want 40gb

clear igloo
#

400Gb*

waxen scroll
#

im being realistic so his NO is more of a no

cobalt cradle
#

This is for a 4 person house BTW

subtle glen
#

ah yes, my old connection

cobalt cradle
#

I really want to see a connection so slow that speedtests rate it as negatives due some glitch

little schooner
#

I think at that point it will also simply drop packets since the wait time would be too long to hold them in queue

cobalt cradle
#

Yeah probably

subtle glen
#

timed out

little schooner
#

Negative latency tips for Google though

#

@waxen scroll yeah. 2 grand not enough for a great SAN

#

He pitching either 2 grand towards licensing for students or a SAN of some kind

little schooner
#

@waxen scroll so, realistically, im looking to buy a NAS and not a SAN?

#

2k is terrible for SAN, doesnt even get one

little schooner
#

Qnap seems to fit the bill

keen sorrel
#

Moving from Meraki for my home lab to Pfsense, any advice from anyone here?

little schooner
#

@keen sorrel yes. Free updates and easy OpenVPN setup

keen sorrel
#

Thats part of the reason I am switching for sure

#

I have an openVPN server, but opensourced security updates and no subscription fees are hard to beat

little schooner
#

@keen sorrel in terms of how it performs, do not expect it to do more than 10gbps routing. It can't do it. But it makes a perfect multi gigabit setup

#

@keen sorrel how do you have your OpenVPN server setup? In Debian or something?

keen sorrel
#

Ubuntu server set up

#

@xeon

little schooner
#

I see.

#

Yeah that's pretty good

keen sorrel
#

It runs on my Dell server in a virtualize environment.

little schooner
#

@keen sorrel do you port forward it or use NAT?

keen sorrel
#

Eventually I want to virtualize pfsense as well but getting my feet wet first with a physical separate unit @xeon

little schooner
#

Or neither?

keen sorrel
#

I use port forwarding the beauty of openvpn is it's all private and public key based so very secure even with port forwarding.

little schooner
#

Yeah true.

#

It stops the brute forcing easy

keen sorrel
#

Whenever I use SSH I either lock it to a specific IP only allow certificate-based authentication with encryption keys. It's really getting to the point where even secure passwords aren't reliable

little schooner
#

@keen sorrel yeah. I have some of my Ubuntu server with cert based login too. I need to finish up setting the others

#

They are still on password

#

I also need a new 10g switch

#

Looks like I am going with mikrotik

hollow marlin
#

@little schooner Port forwarding is NAT

keen sorrel
#

Just lock it to your external IP and use your VPN to connect. I use a Mikrotik Router board as a switch, very reliable

little schooner
#

@hollow marlin but why they give them different names

hollow marlin
#

NAT is the mechanism, port forwarding is the configuration

little schooner
#

@hollow marlin so in terms of Edgerouter, it's doing both?

#

It only shows GUI for NAT details

#

Well that could of fooled me.

#

It did fool me

keen sorrel
#

Edgerouter gui is a tad confusing with its layout imo. I mean so is Mikrotik, but at least you expect it with them

hollow marlin
#

@little schooner Yeah most routers dont separate it. NAT in general is dynamic and stateful, port forwarding is a static configuration for NAT

#

Port forwarding doesnt exist in Cisco, Juniper, etc....

little schooner
#

@hollow marlin oh now that reminds me back to Cisco commands

keen sorrel
#

I also looked at untangle, but in a coin toss between security products I usually lean toward open-source

little schooner
#

Yes they use NAT keyword

#

Ah hah....

#

@hollow marlin thanks for pointing that out.

#

Now I made the connection

hollow marlin
#

πŸ‘

little schooner
#

@keen sorrel I haven't tried untangle but

#

It probably does the job too

#

My exposure has mostly been with pfsense since I've deployed like a dozen of them

keen sorrel
#

It's a close call in terms of features, but untangle is closed while pfsense is open source. In terms of longevity and security open-source usually wins out

little schooner
#

That's true

#

Just look at windows live mail on GitHub

#

Or wait... I know I read an article somewhere that the source code was public

#

So they can make it working again... I think...

#

What it means is yes, it helps. Make products survive longer term

keen sorrel
#

What's the other one I here alot about, sophos?

#

@little schooner Ill give you a holler on how it goes tomorrow. Waiting on Dban to finish on the Mini itx pc I'm going to install pfsense on(previously belonged to someone else)

hollow marlin
#

The internet was never meant to be this big in its current form, we should just make a new one, I'm kinda sick of all the patch work and people trying to clinch to the status quo endlessly. the ipv6 standard doesn't really make sense and there are a lot of shenanigans around it, experts even say it's not suitable long term, exactly because of the compatibility and other issues - yet it gets sold as the one and only solution, when it really isn't, and by all intends and purposes is likely to fail, there's a reason I turn this off first thing on all my devices (as do millions of other people)
Is this guy for real? Like WTF

waxen scroll
#

Lmao

#

Forum?

little schooner
#

I was close to turning ipv6 off on ubuntu because plex media server wouldn't listen on anything else except ipv6

#

then it hit me that the configuration for plex was broken and had to reinstall. after reinstall it came back working

#

Now it listens on both as it should

rocky badge
hallow nimbus
#

Lel i did hit 5.5 Gbit

#

πŸ˜‚

rocky badge
hallow nimbus
#

πŸ˜‚

rocky badge
#

nah,

#

this is my internal speedtest

hallow nimbus
#

Watch me kill it

rocky badge
#

I'm speedtesting....

ornate jungle
#

runs speedtest using ISP sponsored server, gets pissy results SIGH
runs test using a provider who actually knows what they're doing (Frontier Networks), gets good results

vernal gust
strange silo
#

@little schooner Mostly not much at all, would be a few spikes but mostly installing Windows is decompressing files out of the mounted wim file so it's not really any different to doing a file copy with explorer but it only does each file as the installer needs it or is set to copy etc

#

@little schooner I prefer QNAP over Synology as you get higher end better performance hardware spec for the same money, either way 2K isn't going to go too far

#

Might be a case of buy the best no HDD model you can get then find a way to get disks in to it outside of that 2k

little schooner
#

@strange silo yeah I suggested the qnap TS-832XU but he saw the synology 1817 NAS

#

With 6 6TB hard drives, it came it to be close to 1896

#

I really wanted him to get rack mount hardware

#

I don't really know if the 2k is a super hard limit or

#

If There is some room to go over

winged cliff
#

So I'm looking for a new router. My dad finally decided the verizon one we have isn't good enough. Where should I start?

hollow marlin
#

What is the initial problem? What was the deciding factor that the router wasnt good enough?

waxen scroll
#

@hollow marlin i want to put in ipv6 to the core this year

#

but it got so political in the last few months. i probably cant

hollow marlin
#

Upper management or coworker politics?

waxen scroll
#

also i think cisco and others keeps having issues with their code where you're only vuln to a security issue or crash if ipv6 is running

#

upper

clear igloo
#

upper manglement is always the problem

waxen scroll
#

for example, i told Lurick i want to enable python API

#

days later there was an announcement of a bad vuln

#

xD

#

cant fucking win with modern features

#

if i told our change review boards im turning ipv6 on, my head would probably roll with all the concerns

rocky badge
hollow marlin
#

We have ran into similar vulns with both Cisco and Juniper in our core. The ones we ran into though were when IPv6 was used with X protocol.

#

Didnt affect us, but still a pain to keep scheduling maintenance windows

waxen scroll
#

our change process is so bad right now im close to quitting over just that

hollow marlin
#

BuT Ipv6 Is uNSEcuRe wiThOUt NaT

clear igloo
#

LUL

hollow marlin
#

Is what I hear most

clear igloo
#

NaT iZ sEcUrItY11111!

rocky badge
#

"I don't want to lose the security provided with nat"

waxen scroll
#

its true on ubnt... if you turn it on theres no way to firewall it in the GUI xD so its open until you realize it

hollow marlin
#

Hah...excuse me

waxen scroll
#

i was supposed to upgrade line cards and be done by last oct

#

i havent started yet because of our terrible change process

#

keeps getting in the way

hollow marlin
#

Upper management doesnt understand when "change processes" become "processes" because changes never happen

#

My last job was like that until shit piled up because the same reason

waxen scroll
#

one manager actually lectured me for my change getting denied and im like DUDE, you clearly have never been through the change process

hollow marlin
#

Then they came down on us. They shut up quick when the board reviewed our ~70 change proposals that prevented the situation we were currently in

waxen scroll
#

lmao

#

our problem is that too many business units are allowed to say no and when they say yes.... if you cause an outage and you didnt have that unit on the call during the change you get yelled at because the restore is slower

#

so if you touch the datacenter which can involve many BUs, you have to seriously invite like 20 teams. they need to sit on the call for hours. if one forgets to show up, change cancelled

winged cliff
#

@hollow marlin range

clear igloo
#

@waxen scroll Qualys πŸ˜„

rocky badge
#

@clear igloo oooh

#

Imagine if a school went all UniFi ThinkDifferent

#

vs Cisco, Aruba, etc

#

Just a standard k12 dumb IT, nothing major

hollow marlin
#

@waxen scroll Oh fuck that. If that many hands are involved nothing will ever get done. Anything after 5 people makes the process next to impossible

waxen scroll
#

i wouldnt use ubnt in any large environment. i want 24/7 support with an engineer who can read debug mode and even edit in debug mode. buying multiple spares isnt the answer sometimes

rocky badge
#

Like a school has those :p

clear igloo
#

skewl
spares
omegalul

waxen scroll
#

ive had many tickets where i need an engineer to go into asic level console and enter jibberish to help me

hollow marlin
#

We have a good 20-30 enterprise circuits where the customers use all Unfi. One I think has around 300 switches

#

I just cant imagine

waxen scroll
#

K-12 school can afford to shrug shoulders and be down

#

i like ubnt, but i dont 300 switch like it

hollow marlin
#

Unfi Redundancy = keep spares an stack with RSTP 😎

rocky badge
#

@clear igloo so that guy whose rack fell through the roof

#

All of the servers survived lmao

clear igloo
#

yes

#

nice!

rocky badge
#

@clear igloo it's going to cost 400k to double reenforce the attic though

#

And it was 600k in hardware

clear igloo
#

OOOOF

rocky badge
#

It's a 48u full of custom supermicros

#

But luckily all of the stuff on that rack was replicated across the other racks and in AWS

#

So nothing actually went down and nothing was lost

clear igloo
#

Google would like to know your location

rocky badge
#

Lol

hollow marlin
rocky badge
#

@clear igloo when he hooked up the Outpost....his meter just went spinning like crazy lmao

#

kwh was going to mean nothing if he kept it on for a while

#

It requires four 250V/30A

subtle glen
#

ahhhh 120v country

vapid dune
#

needs better ipv6 firewall

rocky badge
#

@clear igloo I'm on Verizon hotspot + VPN right now oof.

clear igloo
#

OOF

rocky badge
#

I mean....

#

My Verizon hotspot is supposed to be limited to 600Kbps/600Kbps :p

#

but disabling IPv6 and setting TTL to 65 bypasses that on some phone hotspots. πŸ˜„

little schooner
#

@rocky badge that's a new Ipv6 excuse. "We can only throttle on ipv4"

rocky badge
#

LOL

green compass
#

Is HP 1400-24G for $50 a good deal ?

craggy parcel
#

@little schooner I think the real excuse for big ISP's are, "We have enough IPv4 addresses for a while, lets make it hard/impossible for others to start a new business to compete with us..." πŸ˜›

little schooner
#

@craggy parcel that's what it's come down too. Like the ipv4 waitlist in the UK

craggy parcel
#

@little schooner Wait list in the UK? Never heard of that.. Only the one RIPE made...

little schooner
#

@craggy parcel it was some article I saw somewhere

#

Maybe on ars

craggy parcel
#

Perhaps they mentioned the same list, but from a UK perspective? And got something messed up?

#

I mean, only ISP's would be able to transfer IP's, while the RIPE can actually hand out new ones, as old blocks are being returned.

#

But no ISP would have any interest in making a UK only list

strange silo
#

@rocky badge We used to put Aruba in to schools all the time, below 500 students then Ruckus

#

Ruckus for ages, don't know if it's no longer a problem, couldn't do multiple security profiles and rule chains using different auth methods on the same SSID

rocky badge
#

Lel, my school uses Extreme Networks for switching, wireless, NAC, etc and Cisco for routers.

little schooner
#

@rocky badge didn't extreme networks used to be called entersys?

#

Enterasys Networks

rocky badge
#

Yeah

little schooner
#

Yeah my area k12 schools use that

#

They are old

rocky badge
#

They recently acquired Aerohive

#

Ubiquiti might aquire Ruckus

little schooner
#

@rocky badge now they can swarm wifi signals

#

With the new hive

rocky badge
#

Lol

little schooner
#

Ubnt should aquire rukus

strange silo
#

@hollow marlin All our change control mettings have 20 managers in them and around 30 in total, YAY! πŸ’©

little schooner
#

Make their aps cheaper and let them still operate independently

rocky badge
#

It was in their shareholders PDF

little schooner
#

I wouldn't want ubnt staff to touch the stable. Rukus hardware

strange silo
#

lol rude

little schooner
#

Well

strange silo
#

but ture

little schooner
#

My biggest issue is that there is no dedicated support with ubnt

strange silo
#

But their forum πŸ˜‰

little schooner
#

Yeah, people attack on the forums

#

Attack the question

#

Also if you bring up. Other brands it's a defensive war

#

Not saying I actually posted something but noticed time to time

strange silo
#

I just don't ask for help and throw out the Ubnt equipment for something better if it has a problem and firmware don't fix it

#

Have an ERLite paper weight

rocky badge
#

blobnauseated edgemax

little schooner
#

@strange silo yes I remember Edgerouter having a show stopper bug with udp traffic

#

And it went unfixed for years

#

Until a month's ago they finally put a patch

strange silo
#

Swapped it for mikrotik

#

swap that for a Fortigate

#

Fail up πŸ™‚

little schooner
#

Fortigate sounds nice

#

Same with watchguard

#

But I don't have a business income to afford the subscription stuff

strange silo
#

Fortigate is still no replacement for a proper boarder router which the mikrotik is better at

little schooner
#

Mikrotik is versatile for the most part

#

Also makes for a great addition for an edge switch outdoors

strange silo
#

I'm just using used Fortigates at home with no FortiGuard licenses so a lot of the nice features are disabled

#

I use them for the hardware IPsec which kicks the ass of everything else

#

For the same price*

little schooner
#

I see

rocky badge
#

I wish I could make it show the entire switch layout lol

#

Instead of 2 rows slide over

strange silo
#

@rocky badge Linus's Chrome tab video, "more ram in 1 stick than your entire computer"..... wrong linusPerfect

rocky badge
#

Lol

#

Wasn’t it 128gb sticks

strange silo
#

yea

rocky badge
#

Hot

#

I need to use my pc more lol

little schooner
#

@strange silo does the fortigate support Ipv6 and ipv4 firewall using DNS names?

#

Edgerouter doesn't let me put hostnames in the rules

strange silo
#

Yes

little schooner
#

And if I get one, it works without subs?

strange silo
#

But fortigate is not known for having stable firmware releases

little schooner
#

Ohh

#

That's not fun

strange silo
#

so you have to wait and really check before upgrading or you will have a bad time

#

This year we've had about 3-5 major outages due to firmware bugs or something spazzing out on it without any indication before had it was going to

little schooner
#

Hmm

strange silo
#

Like the Av scan engine spinning to 100% CPU cos... fuck you I guess?

little schooner
#

Heh, that's abnormal for sure

strange silo
#

Or old versions of TLS getting blocked by default after FortiGaurd signature updates, by 'mistake'

#

which being signature updates you have zero control over

#

but we didn't need eftpos

#

.....

little schooner
#

@strange silo do you know if fortigate supports dnsmasq like functionality?

#

Like if client request internal domain, to use a different DNS server to answer the request

strange silo
#

@little schooner Yes as you have found but we do it via DMZ DNS servers with different zone files

waxen scroll
#

@strange silo i bet blob tests in prod all the time and annoys his parents when the network dies

little schooner
#

Can't find the CRS328-24P-4S+RM with a good return policy

strange silo
#

Phew internet is still working

#

Digging trench, hit the fibre cable going in to the house

#

oh yea, that's going that way too

hollow marlin
#

Careful, you dont want to nic the fiber and let the internets out

waxen scroll
#

you didnt check for errors tho ;p

hollow marlin
#

@little schooner what policy are you looking for?

little schooner
#

@hollow marlin where the restocking fee isn't like 40%

#

In case I have to bail

hollow marlin
#

Why would you need to return it? Pretty much know what you are getting

little schooner
#

@hollow marlin read online that some came with missing parts or screws deattached

#

Or needed a new power supply

hollow marlin
#

Thats warranty though. You reach out to Mikrotik directly

#

Also I am sure the missing parts are mostly shady re-sellers

strange silo
#

Yea anything not delivered as ordered is cost on supplier not you and you have right of return without fee, but you have to let them try and remedy first

#

Which is also why you don't pay first, but sadly consumers don't really get that option

waxen scroll
#

lmaooooo

#

yep, ive ordered $400k+ of product before and they wont pay any invoice unless i go into a system and confirm i'm happy with what shipped

#

must make vendors sweat

little schooner
#

@strange silo that would be an awesome option to have

hollow marlin
#

Yeah we had our two MX10003s for 2 months before they got their check

hollow marlin
#

Apparently wireshark is completely useless tool and networking doesnt exist above L3

cursive valve
#

He said anything above l3 wasn't his problem πŸ˜‚

hollow marlin
#

If you actually read some of his other comments he says a firewall is L4 and not networking because its above the networking layer

#

I cant argue with that logic ping

cursive valve
#

True but then I should argue for a raise πŸ˜‚

hollow marlin
#

10% for each additional layer

ornate jungle
#

I mean, technically speaking, Layers 4 and up aren't directly required for L1, 2, & 3, however, in terms of actual functionality, they're definitely required because a users' purchase ordering database application isn't going to work if any layers from L4 through L7 are broken. (And it sure won't work if layers L8 through L10 are bork, either.)

cursive valve
#

I'm not at fault if it's user error lol

waxen scroll
#

At many companies load balancing is managed by network people

ornate jungle
#

At my company, load balancing isn't managed - the hardware & infrastructure is in place, but almost nothing is configured for automatic failover, so when a network link fails, the route stays offline until someone from the NOC manually implements a failover. sigh

waxen scroll
#

At my company I don't even have to troubleshoot unless it's really bad

#

πŸ₯°

ornate jungle
#

I want to work where you work. Where do I sign up? πŸ˜„ (kidding, but that sounds awesome)

hollow marlin
#

Well by the sounds of your NOC and their setup, they dont work either

waxen scroll
#

Go apply somewhere hiring network engineers who actually engineer

#

Usually 2-3 levels above noc

#

If you're really lucky you'll never touch equipment physically ever again

#

I'm only half lucky there. I still do sometimes

#

I don't do racking or cables though

hollow marlin
#

I still have to because none of the other engineers know shit about racking/running

waxen scroll
#

@hollow marlin the sexiness of being in a DC or touching equipment wore off after my second job

ornate jungle
#

I mean, I'm part of a team that liaises information between our customer facing teams and the backend engineers, so I see that our NOC do work their butts off - the root cause lies within OSI Layer 9. πŸ’Έ

cursive valve
#

I like the pictures the techs send me but that's as close as I'll go now

#

Been there done that thanks

waxen scroll
#

Anyway, due to my job I'm expected to know not only Wireshark, but mass wire tap infrastructure

#

So that guy is LOL

#

We have to troubleshoot other people's applications while knowing nothing about them because they blame us before troubleshooting themselves

cursive valve
#

He probably just doesn't know how to use it properly πŸ˜‚

#

It's a perfect tool for going in blind

waxen scroll
#

Yeah.

little schooner
#

I'll go in blind the first couple weeks

hollow marlin
#

It blows my mind that someone is so passionate about not using the single most valuable tool in networking

waxen scroll
#

Every time xeon has an issue I ask "what do the packets say"

#

It helped before

cursive valve
#

They usually tell me I done f upped

waxen scroll
#

@hollow marlin that guy hasn't been haunted by an IPS yet either

hollow marlin
#

But thats above L3, not his problem

waxen scroll
#

Oh right. He's not infosec

#

Where does he work. Must be ATT

#

Or VZ. They seem to have very cranky ccies

#

I wouldn't trust most of the ccies I've met to know how to work Wireshark

hollow marlin
#

No way in hell that guy is a CCIE
probably some access layer dude that occasionally configures SVIs from time to time

waxen scroll
#

πŸ˜‡

#

Last VZ ccie I dealt with was whining about me not ttu a circuit in the middle of my business hours

#

God forbid I make him work at 10pm

#

Super close to reading him the riot act in front of a conf call full of people

hollow marlin
#

I can say that about a lot of VZ non-IEs also

#

I cant believe the shit we have to do to get them off their asses

waxen scroll
#

His PM started talking about taking it offline just as I hit unmute

#

I could feel the embarrassed vz team on the other end

hollow marlin
#

Also last month we had to install an MX in their COLO for peering and some additional customers where their fiber feeds directly back to that COLO. They had some shit go down and locked out VZ badges and we couldnt get to our equipment. Took them 3.5 weeks to regain access

#

They could only resolve the issue after hours??? and no tech was willing to stay after to fix it.

waxen scroll
#

I'm the end he won too. I had to tell the business VZ refuses to ttu unless it's inside business hours. They let me do it

#

They needed like 4 vz teams on this call. It was redic

#

We were doing new mpls over lte deployment

hollow marlin
#

ttu?

waxen scroll
#

Test and turnup

hollow marlin
#

Ah

#

Never used the abbreviation nor heard it

waxen scroll
#

Many of the telcos seem to use it. Some just say activation

hollow marlin
#

Yeah activation in our area. VZ also seems to call things what they want at times that are completely non-standard

#

Speaking of LTE, supposedly upper signed a contract last week with a local telcom that has the licenses and we will be experimenting with LTE

cursive valve
#

They definitely make up their own acronyms

hollow marlin
#

The worst is a SD-WAN vendor that does a lot of work in our area. They had to give us a terminology sheet because next to everything was non-standard in their emails. switch, router, CE, PE, tunnel, peer... all that shit was different. Like LFO, LFE, RO, etc...shit made no sense

strange silo
#

why...

hollow marlin
#

My best guess is to appear as if their SD-WAN boxes are not just routers running and tunneling BGP/OSPF

craggy parcel
#

Or maybe they just want to feel extra special? πŸ˜›

little schooner
#

@waxen scroll hey, are the best emails the ones where I ask for full access to a given system and the reply from the system administrator comes back to me with an email body of done.? And I got full access to it.

waxen scroll
#

i use quid pro quo for access like that

little schooner
#

hahahah

waxen scroll
#

So if I help the AD person with little resistance, I might ask if i can have access to some admin functions in AD

#

usually the answer is yes

little schooner
#

interesting

waxen scroll
#

yep. one job i got access to DHCP and the ability to add/remove/change objects in some OUs

little schooner
#

not bad.

#

I like when my permissions grow in size

#

Of course, it means I have to be more careful with them if it can take over critical systems

#

also is Please advise and happy new year! a good way to end email?

#

I am writing an email to the school administrator to give me VMware vSAN licenses

#

Its the same guy that helped me get windows server 2019 licenses too

#

ohhh i just hope he can help me out with this one too

waxen scroll
#

people so quiet today

little schooner
#

@waxen scroll Monday

craggy parcel
#

Most people here, are not at work the 31st. πŸ˜‰

#

And those who are, will usually be off at noon, or something like that.

waxen scroll
#

so you're saying that goofing off on discord during work hours is why this place exists?

#

@clear igloo i know you do

craggy parcel
#

LOL.. No, it's almost midnight here. Most people would not have to get up early tomorrow...

clear igloo
#

@waxen scroll Yes πŸ˜›

strange silo
#

@waxen scroll Here I am with full admin privs to everything linusPerfect

#

Break AD? Sure. Break vCenter? Sure. Drop some config off the core switches. Why not.

#

@little schooner So you are going to try out vSAN?

#

You should really get yourself a VMUG EVALExperience subscription, paid for buy work of course

craggy parcel
#

Getting the company to pay for stuff, if often easier said than done. πŸ˜‰

strange silo
#

worth trying πŸ™‚

#

I pay for mine though

little schooner
#

@strange silo maybe. Ultimately, it is the store that has NSX, vSan, vCenter and workstation 15 all for free for student

#

I contacted the admin in charge and he replied to me today. He says he retired!!

#

And the new admin is a guy that probably won't see my email until Jan 20th

#

Well, here's to hoping with enough asking that they will tick the box of "create account" with the submission I put in requesting access

#

The old admin was the one who would basically approve every request with this store

#

done. , try it now. his replies would be

#

Like that was low barrier to entry right there

#

This new guy I dunno

waxen scroll
#

Lmao @little schooner how unlucky

#

The new guy will say no

#

He just got there

strange silo
#

lol

craggy parcel
#

If new guy is any good, he would ask for justification and if good enough, approve. πŸ˜‰

stiff panther
#

Damn it having some frustation with webmin

#

chnaged the ip and mask

#

to match my network

#

and i cant access the panel after applying the changes

rocky badge
#

It's so fucking cheap

clear igloo
#

Nice

#

Have fun with those 25Gb optics LUL

rocky badge
#

Lol

tawny seal
#

Oh god I want one so bad also

rocky badge
#

You're paying 224% of the switch's price

clear igloo
#

lol

rocky badge
#

@clear igloo also, lol this is the first UniFi switch to have level 3

clear igloo
#

It connects directly to level 3? πŸ˜›

rocky badge
#

All of the others say "in a future software update"

#

Smh

#

You know what I mean

little schooner
#

Incredible value

waxen scroll
#

wheres the USW Spine

waxen scroll
#

@little schooner its not

#

theres no value

#

wheres the spine and wheres the SD-LAN software?

#

@clear igloo buh MUH aci

clear igloo
#

ACI Anywhere πŸ˜›

waxen scroll
#

sales can just keep thinking that

clear igloo
#

I know several places that are pushing ACI down to the branch

waxen scroll
#

those same places have budgets

rocky badge
#

@clear igloo EYES

clear igloo
#

@rocky badge modular chassis when?!

rocky badge
#

lol

little schooner
#

@waxen scroll aww, it can't work without the spine?

waxen scroll
#

a spine doesnt exist afaik

#

it can, im wondering why they released a product called a leaf with no spine product

little schooner
#

What they should be releasing are new switches with 40 gbps qsfp+ ports

#

Since when will they compete in Datacenter?

#

Not with the way things are now

#

@ancient vigil I'm already saturating 10gbps

#

With the nvme

#

No, that will be expensive

#

And while they are at it, new access points with ax

clear igloo
#

eyes AX aps πŸ˜„

waxen scroll
#

oh GAWD

#

@clear igloo i set hass to discord theme

#

my EYES burn

#

rip

little schooner
#

they charge $0.40 every month for having the remote

#

@waxen scroll I probably should of picked an open source home automation platform

#

Now that I think about it more and after watching a video about the benefits of open source firewalls

waxen scroll
#

LMAO wat

#

that price list makes me wanna throw up

little schooner
craggy parcel
#

@little schooner Guess the remote part might just be because you pay to have a set top box, and the remote is part of it, but listed by itself, to make sure no one can say it's not detailed enough? I'm sure the price for the settop box would just be the .40 higher, if not a separate item...

waxen scroll
craggy parcel
#

That price list, is that cable or fiber?

little schooner
#

@craggy parcel hmm probably

#

mine?

craggy parcel
#

Yeah.

waxen scroll
#

cable until the bottom one

little schooner
#

its for cable and fiber at the bottom too yeah

#

@craggy parcel they charge 4.50 for the TV box

waxen scroll
#

i dont think they charge for the remote in my area, its not listed

little schooner
#

@waxen scroll lucky you

#

they are basically milking us the money

waxen scroll
#

they still charge the stupid $10 fee to have 720 or better

little schooner
#

not like we have the remote but still...

#

yes

craggy parcel
#

So the gigabit with TV is cable.. And we complain our internet prices are outrageous... For 1000/100 cable service, we would pay about 59.90. The settop box is the same 4.50 though.. (That's including a remote, and even the first battery.)

waxen scroll
#

$15/m modem fam

little schooner
#

pricey

#

@craggy parcel yeah, $59.90 for your gigabit is insane deal

#

in this area its double that

craggy parcel
#

Haha.. No. That's what is considered the most expensive provider in the country.

little schooner
#

I think its only like this because there is no other cable competition within my zip code

waxen scroll
#

@little schooner after my payment on the 8th of next month, my contract is over

little schooner
#

@waxen scroll very exciting

waxen scroll
#

no its not

little schooner
#

kiss them goodbye... if possible

waxen scroll
#

then its like $80

little schooner
#

oh

#

there are no alts?

#

yeah you have to fight for another promotion.

#

or not even, they usually just refer me to their Price PDF file

#

its stupid really

waxen scroll
#

i cant kiss them goodbye. next is 25mbit DSL for $50/m or LTE for $50/m

little schooner
#

yeah DSL is my other option only too...

#

its terrible

#

no lte here .

waxen scroll
#

im going to bamboozle them and visit a customer center instead of allowing them to send me to retentions on the phone πŸ˜‰

#

customer center should play wayyy less games

little schooner
#

but how can they know its 940 mbps

#

why not just say that exactly

#

I know that my edgerouter easily does 1gbps

craggy parcel
#

Not really. Here the country is basically divided by two main cable providers, and a lot of smaller community providers, with many of them just reselling services from the two big ones. On the DSL side, it's the same, the main competitor are usually one of the two main cable providers. So they are more or less competing with each other and themselves.. However, no sane person would prefer DSL to cable or fiber. For the fiber options, there's one main provider, that's not one of the two cable/dsl providers, and the price for a 1000/1000 fiber connection is about 73.40 usd. They promise 900 Mbit, I guess to account for the fact that most people don't understand how TCP/IP works, and only look at their actual download speed, not accounting for overhead. ;)

DSL service btw, is about the same price as cable.

#

So in reality our internet i quite cheap compared to others. πŸ˜‰

#

(Not that I care much about the price, it's paid by my workplace. πŸ˜‰ )

waxen scroll
#

im tempted to do LTE but the signal in my area is low, so im afraid i will get 25mbit or worse

craggy parcel
#

Why LTE?

waxen scroll
#

its the only other option

#

they give you 50 max, but it depends on signal strength

craggy parcel
#

Hmm.. We don't seem to have unlimited LTE.. Best I can find, is this: https://www.3.dk/internet/Til-hjemmet/ Prices in DKK. Basically you get 1TB, and can buy new blocks of 1TB if you need more.

#

Oh and the extra TB is more or less a full month in price. πŸ˜‰

#

No provider seems to be willing to give you unlimited mobile data..

clear igloo
#

"unlimited"

waxen scroll
#

i guess my second issue is also latency. their website says 30ms minimum is typical

craggy parcel
#

Well, I've used ssh over GPRS.. No need to complain! πŸ˜›

waxen scroll
#

ive done SSH over commercial satellite

#

it aint pretty

craggy parcel
#

There's something funny with PING in the 1000-4000 ms range.

#

Well, that's only about 300ms or so?

waxen scroll
#

all your ssh traffic is sent to the 10000 locations listening on those channels

#

^_^

craggy parcel
#

Well, it's encrypted... So who cares? πŸ˜›

#

(Encrypted with the debian default key of cause)

waxen scroll
#

we have a satellite base station at work and thats supposedly rare AF

#

generally you outsource that

craggy parcel
#

Sounds interesting.. But yeah, you usually buy the service from someone, and if there's a direct connection to you, it's most likely delivered via MPLS or VPN.

waxen scroll
#

mhmm

#

@clear igloo we're beaming data on channels we rented on a satellite (forget the name) from this big dish. thats as much as i know. i dont touch the thing other than sending data to it v_v

#

the racks in the datacenter look like gear from the 80s

#

it could die at any time

craggy parcel
#

Haha.. I actually have what looks like some satellite base station about 2-3 km away...

waxen scroll
#

the routing protocol it runs is RIPv1 if i recall

craggy parcel
#

May RIP RIP.

waxen scroll
#

the remote sites use Hughes receivers which also run rip

#

i wonder if they teach RIP anymore

#

my class taught RIPv1 and 2

#

its such a simple protocol to not teach it

craggy parcel
#

Well, it's been a while, but 10 years ago, they did, but also called it deprecated. πŸ˜‰

waxen scroll
#

OOF

#

10mbit is also close... theres some gear from cisco I use that wont do it

craggy parcel
#

I've not used 10 Mbit since the connection was coax and BNC connectors, that required terminators in the ends.

waxen scroll
#

i still have a few things on 10 or 100

craggy parcel
#

That would be more than 20 years ago

#

The sat-link by any chance? πŸ˜›

waxen scroll
#

and by me, i mean some team that i cant tell what to do

#

nope, servers

craggy parcel
#

Ok.

#

Why would they need 10 Mbit equipment in 2019? To scared to upgrade?

waxen scroll
#

not sure. they could be abandoned but finding who owns them isnt easy

craggy parcel
#

Disconnect them, and see who screams the loudest? πŸ˜‰

waxen scroll
#

normally I would but people get fired over stuff like that

#

depends on whose screaming

craggy parcel
#

True. We only have the "What's this server doing" problem, with virtual machines. We have about 150, and no one dares to remove the ones we don't use, even those powered off for ages.

waxen scroll
#

oof. thats just as bad

craggy parcel
#

Yeah, and as we have no operations people, but are actually all developers, with some handling operational tasks, it's always getting the lowest priority. We have things that's running 10 year old versions of software, that really needs to be updated, but it's impossible to get the time allocated, as we would have to delay development tasks.

#

But at least there's SOME will to get our messy code sorted out. πŸ˜‰

vapid dune
#

my probe stats:

Total Disconnected Time :   0d 00:07
Total Availability      :     99.98%```
#

QQ lol

craggy parcel
#

@vapid dune Quite similar to mine.. And yes, I did NOT want to login to my work e-mail, to fetch the actual mail report. πŸ˜›

vapid dune
#

lol

#

@craggy parcel I actually unplugged the unit and swapped from a smaller ups to a larger one...

#

my entire home internet went down for a bit xD

craggy parcel
#

Heh.. I don't have a UPS. Don't know when it was down, but I probably didn't notice.

vapid dune
#

only a few minutes tops though. I have a couple power bars off of the ups

#

ah yeah, I do have occasional internet outages in the middle of the night for I presume maintenance

craggy parcel
#

Yeah. We don't mind disconnecting our customers phones at night either. πŸ˜‰

vapid dune
#

lol

jaunty finch
strange silo
#

If not for that location I would of said typical Australian internet

bitter gorge
#

savage af.

radiant shell
#

Australian internet is fine

strange silo
#

Should pick a closer test server, that latency is much higher than it should be

radiant shell
#

that was on my old wireless access point that was terrible, most of that ping is from it

strange silo
#

lol ouch

#

Wireless 5G, that a fixed home install or your phone?

radiant shell
#

speedtest mobile app, SSID was Wireless 5G

strange silo
#

ohhh 5Ghz, lol duh πŸ€¦β€β™‚οΈ

radiant shell
#

Just did a test from my home server, its kinda peak time so download speed isnt great but ping is better

Hosted by Telstra (Adelaide) [0.14 km]: 16.091 ms
Download: 79.23 Mbit/s
Upload: 34.48 Mbit/s

strange silo
#

That upload is actually really good for aus plans

radiant shell
#

yea im on FTTN but i live about 20 meters from the node

strange silo
#

nice

#

used to be similar distance back in ADSL2+ era and could actually get 18/1, then move and got 9/0.5

radiant shell
#

yea those were the days

strange silo
#

go further back and we had 38kbps dialup and a call window of 6pm to 7pm otherwise phone is engaged

#

those days sucked

vapid dune
#

there's a makeshift POE injector in there. or two LOL

dense karma
#

gonaa save this link for later

vapid dune
craggy parcel
#

@vapid dune If that's horror, come see "my" rack. πŸ˜‰

vapid dune
#

lol

#

the guy over in tech support is saying his mac only gets 100 mbit instead of gigabit to the router now. and it works when plugged direct into the router

craggy parcel
#

What's running in the coax? CATV?

vapid dune
#

I think just cable tv

craggy parcel
#

Hmm.. And if not properly shielded, I suppose it can kinda interfere with the networking?

#

Oh, and those small wires.. I assumed they were phone lines.. But now I see that does not appear to be the case. πŸ˜›

vapid dune
#

YUP

#

maybe there's phone spliced into it LOL

craggy parcel
#

Because of cause there is. :p

little schooner
#

@craggy parcel for our classroom, it was because one pin was shunted out of the rj45 end plug

#

Since it was missing, it downgraded to 100 Meg

craggy parcel
#

Makes sense, since 1gbit requires all four pairs.

vapid dune
#

@shrewd stone maybe carry on your networking question here lol. but the easiest way to figure out which segment isn't working with gigabit is to use one of those network testers imo

vapid dune
shrewd stone
#

ok thx

vapid dune
#

you need no faults in all the pairs for it to work at gigabit

#

else it degrades to 100

dense karma
#

Just picked up a Netgear prosafe 24port gigabit switch for 30usd

craggy parcel
#

I usually use one of these, for simple continuity testing.. Cheap and easy. πŸ™‚

vapid dune
#

I have one like that too lol

#

I got mine off amazon

craggy parcel
#

I've seen someone sell one, used, on facebook marketplace, for like 3 times more than I paid for a brand new. πŸ˜‰

vapid dune
#

is it smart or managed @dense karma ?

#

either way good deal on such a large switch xD

dense karma
#

It’s unmanaged

shrewd stone
#

oh

dense karma
#

New on amazon it’s 120

shrewd stone
#

and btw

#

update:

#

I gained 10 mbps more through ethernet

#

not much changed

#

so now i have 90 mbps

#

instead of 80

dense karma
#

That might just be variance on xfinitys

#

Side

vapid dune
#

yeah it's probably still not gigabit connectivity lol

#

I mean if you want to lug your computer to the switch you can plug into that? πŸ˜„

#

and then bypass the switch altogether

dense karma
#

He’s getting 210 plus on WiFi so it ant gigabit

vapid dune
#

assuming you can't connect your computer directly into the router via just plugging stuff direct in the network closet

shrewd stone
#

i can't connect directly to the router in the network closet

#

oh

#

wait

#

it is possible

#

its just that im using a switch to connect the rest of my house via ethernet

vapid dune
#

right but this is just for temporary testing if no one else needs it lol

dense karma
#

If some one else needs I too bad

vapid dune
#

lol

#

though I'd say it's probably the mess of hanging cables

#

rather than the ethernet cables to the switch

#

one pair or wire somewhere along the way is disconnected or dead

dense karma
#

Yea that or a mouse or something chewed on the cable in the wall

shrewd stone
#

its definitely not the mess

#

but

#

if something were disconnected

#

it wouldn't even work

vapid dune
#

nah

#

you can have 1 wire disconnect and it still might work

#

but yeah in the worst case it's the wire in the wall

#

ugh I had a coax cable int he wall that died for some reason. the guy was diagnosing it just asked me if I really needed that coax line and then proceeded to just remove it from the wall receptacle and abandon it

#

(I didn't need it and it was quite a lot of effort to pull another cable)

shrewd stone
#

oh

vapid dune
#

not sure how big a deal that is for gigabit mind you

#

the other possibility is interference

shrewd stone
#

how

#

and aaaaa

#

my laptop internet is being so garbage

#

dammit

#

nope

#

just my xfi pod acting up

dense karma
#

Nasty xFi pods

shrewd stone
#

they aren't bad

#

its just sometimes they act up

#

so badly

#

you can't even send a message in discord

vapid dune
#

that might just be discord

dense karma
#

At least it’s not like mine and internet is completely go out

vapid dune
#

also giant spike in their response time on the main status page

green compass
#

any of you had experience in upgrading RHEL systems ?
Is it worth clean install or I could upgrade it ?

#

I have ancient RHEL 5 DNS/DHCP VM running in my homelab that needs update really really bad

craggy parcel
#

If you upgrade in steps, one version at a time, you should be fine. Applies to most linux distros.

green compass
#

so RHEL 6 then RHEL 7

#

I use LVM but I have no special mounts like /var or /home

craggy parcel
#

Exactly. Most distros does not support more than one major version at a time.

vapid dune
#

upgrading distros is a disaster in waiting

#

I'd just clean install it if it didn't have too many things

craggy parcel
#

@vapid dune Worked fine for me so far..

green compass
#

I have DNS/DHCP for entire network

vapid dune
#

I mean it's a VM right

green compass
#

my other VMs, APs, WiFi

#

Its like a router

vapid dune
#

just spin up another VM and then swap over

little schooner
#

@vapid dune I updated mine and it works

vapid dune
#

and if it isn't right swap back

little schooner
#

Just do one release at a time

green compass
#

I will replicate VMs, change my main one to connect to secondary and start update

craggy parcel
#

If it's a VM, make sure you can access it without DHCP and DNS, then make a snapshot and try upgrading, make a new snapshot for every major version. Roll back if it failes. πŸ™‚

vapid dune
#

I've had bad experiences even with 1 release. but yeah it's possible too

#

I had it where the thing wouldn't boot after lol

little schooner
#

@vapid dune for which distro?

#

I only have ever used lts versions

vapid dune
#

I think it was debian at the time

#

-shrug- it was a VPS

craggy parcel
#

But yeah, if the config is very simple, a new install might be just as fast. I've never tried having the luxury of being able to just reinstall the damned thing, because config and applications were undocumented, for most parts. And had to be done yesterday.

little schooner
#

@vapid dune oh

green compass
#

I need to finish documentation on my DNS/DHCP and I might just go directly onto RHEL 8 with reinstall

craggy parcel
#

@vapid dune I've upgraded multiple debians, without problems, longest upgrade path was a recent 6 or 7 system upgraded to 10.

green compass
#

Network will be down but idgaf, I can connect to ISP router

little schooner
#

Well it's a home lab

craggy parcel
#

@green compass Setup the new VM while the old is still running, then power down the old one, when the new is ready. No need to let the services be down more than a few minutes.

little schooner
#

So it probably doesn't matter

green compass
#

it kinda matters, my entire house network is on that homelab, that is how my dad setted it up few years ago undocumented which I am mad for a reason

#

now I need to figure this shit out

little schooner
#

@green compass but you just said it was home lab

green compass
#

No

little schooner
#

So it's not home lab

green compass
#

Wifi

#

APs

#

DNS

waxen scroll
#

that feel when your username is an anime

green compass
#

DHCP for entire house

#

my other VMs, APs, WiFi
Its like a router

#

that is what I said

little schooner
#

I could screenshot it but... Okay

green compass
#

I copied message

little schooner
#

Yeah you should let router handle that stuff

#

Dhcp and DNS should be on stuff that rarely changes

#

Like router

green compass
#

Well my dad doesn't want to buy any router and ISP router is "bridged" to VM

little schooner
#

Ouch

#

That's hard to fight yeah

green compass
#

I have to figure out migration and then setup Foreman to manage life cycle of VMs

craggy parcel
#

Well, if it matters, I'd use the upgrade procedures from RHEL, one version at a time. Being a VM you have the luxury of easy rollback. So if using a snapshot before you start, it's as easy as pressing a button, to revert to how things were before. πŸ™‚

green compass
#

Next is my NAS that runs RHEL 6

#

it used to be my old PC

#

I need to upgrade it to RHEL 7 and install ZFS

#

as well as upgrade pool to enable stuff like encryption

little schooner
#

To avoid downtime, it takes a lot of planning

#

To have some downtime, it takes less planning

green compass
#

well my NAS is gonna have to have down time

#

for DHCP

#

I will plan a lot

#

for NAS

little schooner
#

I see

green compass
#

it can take 30 minutes to install

vapid dune
#

lol

green compass
#

and get back up and running

vapid dune
#

agree with router

green compass
#

copy config of samba

#

and netatalk

vapid dune
#

in before some of those things are outdated

#

and/or their config structure has changed

green compass
#

oh shit, I might as well as spin up VM to check that

#

Does Samba have AFP implementation or Apple changed their stuff ?

#

we run 2 hackintoshes with Time machines

vapid dune
#

I mean you could probably clone the VM too?

green compass
#

Not a VM

#

its my old PC

vapid dune
#

oh

#

yikes LOL

green compass
#

Running Phenom 1055T, 16 GB of RAM, Quadro 4000 and 8 TB RAIDZ1 pool

craggy parcel
#

Hmm.. Why do you want to upgrade?

Why not do something new?

Install pfSense for the router/DHCP/DNS stuff.
Install freeNAS or similar for the NAS task.

Easier than messing about with config on your own...

green compass
#

I could play around with pfSense, I am just must comfortable managing RHEL vm with DNS and DHCP stuff
I will probably test to see it and FreeNAS can't manage ZoL pools, I remember that

#

I am stuck with Linux on NAS

little schooner
#

I learned that the best network designs are the ones that serve the requirements with the least amount of complexity. Unless you are required by compliance to implement a type of security into the network design

vapid dune
#

iSCSI?

green compass
#

that is for VM on R720 (Nextcloud), I have a shit ton of stuff to do before end of my winter break

vapid dune
#

I like separating my concerns so that I don't end up with single points of failures

#

or upgrade hell

#

lol

#

that and well described services and backed up configs

green compass
#

Update router VM, Update NAS, re create Docker containers for media automation, update GNS3 server, implement lifecycle controller (Foreman), update game server, redo Time Machines for hackintoshes and setup backup strategy for my VMs

#

that is like 40% todo for me

little schooner
#

Hackintoshes are a losing battle

#

What if it breaks again?

craggy parcel
#

Well, I'd certainly go with the simpler pfSense/freeNAS solutions. Because it's so easy to manage, compare to raw linux boxes. And when programming and managing servers and networks all day, I don't want to be boring stuff at home too. It just has to work. πŸ˜‰

green compass
#

My mother has it, she refuses to buy Macbook Pro or any Mac related, I run OpenCore on it so Clover is none of my concerns and that is why we have Time Machines

#

and my brother for graphic design in his school (he is going into school for graphic design)

craggy parcel
#

@little schooner Hackingtosh is great for messing around, and for the challenge, but for everyday use, I'd say get a mac, if you want to use MacOS. That's the only way to stay compliant with the license anyways.

little schooner
#

@craggy parcel I see

green compass
#

Does Time Machine support SMB ?

craggy parcel
#

Time Machine is not a service. It's more like a way of storing files remotely, and an application in MacOS.

green compass
#

I know, I am asking cause I wanna ditch netatalk, its nightmare to maintain

craggy parcel
#

It DOES however, require some features on the remote end. But if SMB supports those, I don't know.

#

I think it failed for me when trying to a Windows computer. But that was AGES ago. The problem was something with the way the sprase files are handled.

#

But now that they've ditched the time capsule, they might have made it more compatible with NAS solutions.

green compass
#

Hmm, I will research for backups, I am also working docker-compose file and Gitlab pipeline to get fucking docker off my list of things to worry about

vapid dune
#

I wonder how much NICs cost to go with it

craggy parcel
#

If docker sucks that much, don't use it. Everything done with docker can be done without. Just use a new VM instead of a new container.

green compass
#

Hmm $100 from what I saw last time looking at prices
I need Docker for stuff like Sonarr, Radarr, Jackett, qBitTorrent, Plex, Jellyfin

#

Manual setup is even worse

craggy parcel
#

Why do you NEED docker for that?

#

@vapid dune 9 ports are not enough. πŸ˜‰

#

Also kinda interesting layout of the ports..

green compass
#

Cause I dont want to download Sonarr, Radarr tarballs, screw my head with permissions, fuck around with Mono and C# runtime software

#

I would take Docker over that any day, its easier to maintain

craggy parcel
#

Hmm.. What are the legal ways to use Sonarr and Radarr? Seems like they are only for downloading torrents of TV shows and Movies...

green compass
#

πŸ‘€ I would talk about that but rules forbid

#

Linux ISO talk

craggy parcel
#

Ok.. Need to get some sleep anyways, before I have to be at work in about 7Β½ hour...

green compass
#

Anyways I'll plan carefully DNS upgrade and do it during night

#

DNS/DHCP*

vapid dune
#

or use lxc instead of docker

#

100 usd for that thing @green compass ?

green compass
#

100 for NIC

#

10 gbit

vapid dune
#

also for those things you listed I just throw them on freenas if I needed em lol

#

I'm using transmission though

#

freenas plugin/jail

#

I guess unraid has similar stuff

green compass
#

I cant do FreeNAS, ZoL pool is not compatible

vapid dune
#

what is a zol pool?

green compass
#

Zfs on Linux

vapid dune
#

I'm a bit confused though freenas uses zfs