@waxen scroll lmao https://i.imgur.com/Vs7XX5F.png https://i.imgur.com/ghVe9og.png
#networking
rocky badge
quaint mural
On top of that he didn't actually provide any way for Ban to figure out where the issue was
Those were my points
I never said he was wrong
topaz quarry
@peak cloak https://www.youtube.com/watch?v=kOH1i9eiU6g
it's an interesting way of approaching ipv6 with a background of ipv4
peak cloak
I'll have a watch, thanks
waxen scroll
@quaint mural call the ISP. Escalate. I've done networking a long time. They have lots of data they can access to troubleshoot without the user even doing anything. When a user opens a case and im the person troubleshooting it, I don't even ask them questions half the time because I have data to look at. Also believe it or not the CPU of a network device is the one receiving and answering pings. The devices have internal QoS on all packets headed to the CPU. This QoS puts ICMP dead last.
i have comcast and i know for a fact they can pull up my entire area (not just my neighborhood) and correlate issues fast
ive seen the tablet
xD
topaz quarry
i love comcast boxes as my the internet goes weeeeooooooeeeeeoooooo
lol my only experience with their service is that it works and stops working at the most inconvienient time
waxen scroll
you should have bought business /s
topaz quarry
gotta down Arthas, brooooooo where are you
i'm on comcast
we understand, pull
lol comcast's business team isn't any better
at least for me
quaint mural
Ya I know thats all possible and from what he said you could easily assume its an isp issue. But he wasn't sure and teaching someone some basic troubleshooting isn't a bad thing
topaz quarry
i tried ordering fiber from them and At&t literally brought fiber in to the neighberhood before they could figure it out
waxen scroll
i was a dick about it and im sorry. i get triggered sometimes cause many people go past step 1 and start asking the internet where to look. he should escalate if he did all the basics
topaz quarry
loolz
quaint mural
I'm sorry as well. He was a teen who didn't know where to start
waxen scroll
@topaz quarry what about comcast business for private IP?
quaint mural
I just think that ltt should be an area where we teach ppl these things
But thats my view
topaz quarry
oh i've never needed any of that
my neighberhood was using it for the security stuff
and it kept going down over and over again
idk maybe Comcast doesn't understand Florida
i hear they can have great service, i've just never seen it
waxen scroll
@rocky badge access to hardware? bro it should be free to take home
rocky badge
😂
quaint mural
I had Comcast in pa for 2 years, best service I have ever had
But I live in an area they don't service
waxen scroll
@rocky badge still waiting for my starlink invite. probably wont ever come
rocky badge
lol
waxen scroll
i wonder if i can honeydick them saying i work for <big company> and want to test it now.
topaz quarry
this is why people ask me for ISP recommendations I just say it's a regional thing
quaint mural
Not sure that's their target market
topaz quarry
just lie and say you live in Kansas
waxen scroll
they've been targeting large companies because they intend to offer private IP
quaint mural
I didn't know that
waxen scroll
yeah without 300-600ms
quaint mural
Thought the goal was for ppl in rural areas
topaz quarry
that's the marketing
waxen scroll
ive done MPLSoLTE and that was OK
topaz quarry
is that really a thing
waxen scroll
yep
waxen scroll
yep. and VZ is the exact company i worked with to do it
topaz quarry
it's the only company i know with engineers that could support that endeavor
waxen scroll
i dont remember what they do on their end but your device is in their list and when it links up to the tower it gets put in your MPLS VRF
topaz quarry
they were so into this type of stuff i saw some requests for like interactive AR stuff over their network
their RnD teams do crazy things
waxen scroll
we used them for alarm systems. we ran our own monitoring center... the alarms would just connect to the MPLS
the backup to that was POTS
@hollow marlin curious how soon MPLS will go away since everyone is so internet obsessed now
topaz quarry
i mean there's just somewhat better ways to make overlay networks now
and for private IPs i've never really needed to have one assigned from the modem or stuff like that. Cloudflare spam is strong
waxen scroll
internet wont work for everyone though.... ive seen many people think OH we'll shove our india offices on VPN tunnel, it will be great!
then the latency and loss is abysmal
waxen scroll
Oh!
topaz quarry
and i mean it depends on what your'e deploying an dhow
but yea VPN tunnels aren't the always go to answer
i'm looking into making locked down CDI architectures
so we can just use infastructure as it stands. i'm honestly surprised
that no one has mathed VDI with Containers
to get CDI
hollow marlin
@hollow marlin curious how soon MPLS will go away since everyone is so internet obsessed now
@waxen scroll For customer MPLS circuits, its time is limited. MPLS for everything else is definitely not going anywhere
waxen scroll
most of the time india is using citrix or something to use VDIs in america but even that can be shit
topaz quarry
VDI is to resource intensive
we need CDI
and automatic service discovery
we're so close
lol why did google have to make k8s literally the most buggy thing
why
waxen scroll
companies are paranoid about data exfiltration so usually on the india side they get cell phones taken away, locked room for just the contractors for your company, etc... that means they want VDI in america for all usages
topaz quarry
i mean yea but virtual machines are resource hogs
i agree with virtual desktop
it's just VMs are super resource hogs
and then we get into the disgusting discussion of when is SR-IOV appriopriate with that many VMs
waxen scroll
ive never had a good experience on a VDI... they kind of work but sometimes it'll slow down
topaz quarry
and i'm like ughghhghghg
you need someone who understands how to deploy VDI
it's very hard to do
and super easy to mess up
and when you do it correctly, sometimes the corporate card cries
oh, it's okay let's stack 50 virtual desktops on two cores
nothing will go wrong
hollow marlin
oh, it's okay let's stack 50 virtual desktops on two cores
"its a network problem, pls fix"
Love, Sysadmin
waxen scroll
yep
i hate the hard ones too
my exchange replication is slow...
theres so much happening in the capture per second you cant even tell whats wrong
cant follow one flow
it reuses ports
🖕
hollow marlin
I sat through some of Chris Greer's sharkfest videos and he has some great pointers dealing with shit like that. Dude is a fucking wizard.
The best part though is its almost never the network
😂
waxen scroll
i used to have access to opnet/riverbeds full suite for capturing and analyzing... new company only has wireshark
f
you're right though
when it was the network it was usually an IPS or something
hollow marlin
IPS, DNS, FW, DNS, congestions and DNS. Pretty much sums up the potential issues
waxen scroll
i actually built a gauntlet, if you will.... it was a form of 30 questions. when server people asked to escalate I would send the form
the serious ones would get back to me in a week
the others would give up
they didnt like the "give me a full diagram of your application"
topaz quarry
figure out the black box
waxen scroll
many didnt have it
hollow marlin
topaz quarry
with no knowledge
waxen scroll
this was for slowness issues... generally if it was a "i cant access at all" then well say no more fam, lemme look really quick
topaz quarry
idk, without CDI, they'll never understand why VDI is just an anchor
waxen scroll
its easy
topaz quarry
lol no access is easier to diagnoss
waxen scroll
"SEE IT SAYS RST that means its a network issue!"
topaz quarry
i can't wait for you to see legendary virtio networking issues
as we move on with this vRouter concept
hollow marlin
Well the TTL is 127 so it was routed and hit the server on the far end..."don't BS me, its a network issue"
waxen scroll
Heres an example of me looking into a speed issue between a DB and webserver with opnet without even looking at a single packet
open it, delete the noise before and after the transaction
fill in data
boom
topaz quarry
lol i can't imagine trying to support Redis SLAs
like that just sounds like a miserable experience
why is the webserver not taking advantage of data locality
do people legit not undertand data doesn't teleport from the east to the west
waxen scroll
the admin moved the DB to ohio for some reason. i dont know why
topaz quarry
maybe k8s auto re-deployed it without consent
waxen scroll
no k8. this is from 6 years ago. i saved it to a document as training for others
topaz quarry
oh so someone physically was plop
topaz quarry
i mean if you're a developer
and you're debugging when etcd literally takes a big one
or you wanna see that it's actually replicating
waxen scroll
heres another good example.... again its a visual view of all packets with a filter applied to flag (D)rops anmd (R)etransmits
Anyway peoples, this is what your ISP can do if you escalate! 😄
hollow marlin
who needs to read packets? so 1999
I feel like that's a personal attack
topaz quarry
oh lol i usually figure it out before ever needing the ISP to do anything
hollow marlin
We have no analyzers, at least yet
topaz quarry
i love my graphs
waxen scroll
muh gigamons, muh IXIAs, muh opnets, muh riverbeds
it sucks that you basically need to build a massive and expensive network of taps and appliances tho, so you only get to play with this stuff at companies that can afford it
waxen scroll
the reason for taps is software lies
a tap might get something but not the server cause the CPU was too busy
topaz quarry
there is truth to that
hollow marlin
The argument I had for getting a tap when they wanted to throw another SPAN session on a 3750 already overwhelmed. Well they did add a another session on it and my tap arrived 2 weeks later
waxen scroll
we had issues with nexus i think.... if you have a 10G port and attach it to a 1GB destination port, only 1GB will get through the 10G itself
@topaz quarry we also had tiny clients on everyones computers and servers where I could have my app instruct to start and stop captures
0 need to instruct users on what to do
all the typical wireshark capture features like interfaces and filters available too
thorny vector
@hollow marlin I’m having that issue in my home lab right now. No easy way mirror 100% of my traffic to my security onion sensors. So I got some taps on order now. And I’m using one of my sensors as a bridge for my wan.
peak cloak
I looked on amazon for taps, are they really that expensive?
thorny vector
They can be. I found an eBay special that wasn’t bad, just hoping they aren’t kaput when I get em.
I know the taps we have at work msrp at 150$
waxen scroll
i'd say $150-300 is normal
but once you need to so something with the tap traffic, $5000 is normal
thorny vector
And lord help you if you’re trying to tap anything past 10gbe
waxen scroll
$5k to switch tap traffic (basic setup), $20k to aggregate tap traffic, $50k to store tap traffic
these arent actual values, the truth is it varies quite a bit but the cost is high usually
thorny vector
One of our bigger sensor boxes has 68tb of storage, 2tb of ram, and some fancy xeons, with 8 nics. I avoid looking at the asset management for that one.
waxen scroll
in general with the places i work, they store all packets going into/across the datacenter and WAN edges with a memory of 1 week+ before the disk rolls over
thorny vector
We work incident response, so we have to carry all our storage with us
waxen scroll
its great cause if someone opens a ticket and goes "it was crap two days ago but fine right this second" its not a total loss
thorny vector
That sound wonderful.
cursive mist
quick question, i have a 1tb hdd in a laptop, how could i make that like a diy nas so i can store things on that laptop and pull the stuff off of it when i need the stuff on my main system
waxen scroll
and i thought i was an asshole
topaz quarry
i'm being serious though
waxen scroll
topaz quarry
you'll spend more time debugging the file transfers then doing the file transfers
waxen scroll
big props for DIY nas tho.... most people should be attempting that VS "hurrr dur i have one computer and need a NAS!"
😄
topaz quarry
i mean a portable rpi with openmediavault or something
and attached a drive to it
it's not like you need a full box with a bunch of drives in it
can you tell i don't trust windows with anything important?
topaz quarry
lol you know what i mean though
oh look wifi is going plooop
spends 3 hours debugging connection speed
USB transferring at 60 MB/s
wait the USB beat the wifi by 3 days?
flint matrix
Linus better not have steered me wrong
topaz quarry
lol powerline networking
shell yarrow
Doesn't powerline ethernet get worse the more of them you have?
thorny vector
It has its own intricacies. The "noisier" you make your power circuits, the more lossy it gets. Additionally, anything that conditions the AC current will also stop the powerline communication.
Its a good solution if your house wiring can support it, and a wifi mesh is too pricy, or doesn't make sense.
shell yarrow
PFSense was an interesting project for me
thorny vector
Its a great router/firewall OS
shell yarrow
Yeah PFSense really is a great OS for that. I currently have it on an intel atom mini pc and I had to do some tweaks to get it working.
thorny vector
Tweaks like what? Should have been pretty plug and play.
shell yarrow
set hint.hpet.0.clock=0
set hint.sdhci_pci.0.disabled=1
set hint.sdhci_pci.1.disabled=1
set hint.sdhci_pci.2.disabled=1
thorny vector
ah, ok.
flint matrix
teh powerline networking is just for my switch to hardwire the xsx/ps5/switch/tv
so v0v
thorny vector
Nice! Grats on the upgrade
steady creek
Nice. Hope you like it. It's on my shipping list...
thick minnow
@rose gazelle I just saw your message about the UDM-Pro from Ubiquiti. It is super quite. Ive never heard the fans.
Ive been loving mine especially the 3.5Gbps after IPS
The UDM-Pro is nice and quite too
steady creek
Getting a second hand USG soon, then planning to upgrade to UDM Pro when we get some cameras
thorny vector
I've given up on the quiet game.
thorny vector
It is with a 42u rack of servers, switches, and misc equipment
thick minnow
ive got a few servers in my house as well that i use and keeping them quite is a challenge, but like i said earlier it is not impossible
thorny vector
I figured that's what noise cancelling headphones are for
thorny vector
And nvidia rtx voice has been a god send.
thorny vector
Yeah. Waste of money. I prefer my head phones solution.
high wolf
My ISP just released 'Game Path', which supposedly 'optimizes gaming traffic' to get better ping
unborn sluice
You mean the ISP didn't optimized their routes but instead give this game path
high wolf
lol yeah, it didnt even make a difference lol
thick minnow
lmao who's your ISP
unborn sluice
Is it John
analog nova
hi, I need some help, can anyone recommend me a modem box with a fibre lc cable input
I can't find info on them for the life of me
I was using copper on an asus router, plugged via rj45
and then they upgraded to fiber and uses a lc or fo or whatever it's called connector but the wireless access point + modem combo thing they gave us is so bad I have issue doing anything on wifi
so I wonder can I get a fibre modem and still use the old asus wap
but I don't know on what modem to get or what is good or whatnot
btw, on wired, I got 980mbps down and 700mbps up but 2mbps down and 4 mbps up on wireless
flint matrix
Is it an ONT on the wall? @analog nova
Take a picture of what you have
You should have rj45 out from whatever their router / ont is. You can just use their router as an uplink and have your own router do everything
I just upgraded my wap with great success
flint matrix
Similar issue except my router was just not able to support my home anymore
peak cloak
@analog nova fiber doesn't use modems
Plus depending on your isp, it needs to be a specific ONT
peak cloak
Verizon fios, for example uses a gpon network so they tell you that you need to use their ont. Putting something else will not work
tame carbon
LC is a connector type
peak cloak
Exactly, conncter != fiber tech
tame carbon
@analog nova did they give you a transceiver?
Looks like this v
either with two, or single LC connector
peak cloak
Could also put the all in one in bridge mode
tame carbon
Some FttH solutions are done properly :)
peak cloak
Lol yeah
tame carbon
GPON is not one of them
peak cloak
Gpon is the only fiber in my area
tame carbon
gpon similair to coaxial
in terms of topology
its just one medium for the entire neighborhood
peak cloak
Except that it has much better upload
tame carbon
that makes no sense
peak cloak
Compared to dociss
tame carbon
you can get symetric lines on coaxial
its often not done, because people download more than they upload
rocky badge
name an ISP doing true DOCSIS 3.1 or 4.0 and will actually provide symmetrical. I'll wait.
peak cloak
Exactly
tame carbon
I don't have to name one
theoretically it can be done, but practically they don't
same way that symetric DSL is often only for business customers
hollow marlin
Symmetric DSL definitely does not exist!
tame carbon
@hollow marlin yes it does?
hollow marlin
If you want 2/2, sure
tame carbon
There's dutch ISPs that offer symetric ADSL2+
hollow marlin
impossible
hollow marlin
DSL was designed around a limited spectrum and where asymmetric roots came from.
tame carbon
upstream is green
@hollow marlin I got my facts wrong then. Not sure why, but I've seen symetric lines on copper before
hollow marlin
Like I said, they can advertise symmetric, but you are looking at 2/2 lol
tame carbon
hollow marlin
Just remember what the A in ADSL stands for
hollow marlin
lol
tame carbon
thankfully this is all legacy technology now xD
hollow marlin
If you want sysmmetric over copper you are going way back to T1/T3s
tame carbon
hollow marlin
Still exist but its considered legacy
misty terrace
anyways, symmetric dsl is called hdsl
hollow marlin
Lets just be glad when the ATM vs Ethernet war was being fought, ethernet won
tame carbon
and recently their ISDN was shut down
rip fax.
@hollow marlin JAM JAM JAM
single medium ethernet is still terribad
I'd prefer tokenring over that
hollow marlin
Never used it and avoided learning about it
tame carbon
Best place to test out pyrotechnics during newyears eve: https://upload.wikimedia.org/wikipedia/commons/thumb/5/5d/Junction_boxes_Deutsche_Telekom.jpg/1280px-Junction_boxes_Deutsche_Telekom.jpg
analog nova
@tame carbon the cable is just a round and yellow one
@peak cloak there are no wap which have the connector I need
it
tame carbon
@analog nova is that the cable?
analog nova
yes
tame carbon
@analog nova yellow sleeve and all?
analog nova
exactly yes
tame carbon
That;s Single Mode fiber, LC connectors
analog nova
the blue as well
tame carbon
@analog nova did your ISP not provide you with a transceiver?
hollow marlin
If they are blue its not GPON
analog nova
I think it's in the modem
tame carbon
@analog nova https://cdn.discordapp.com/attachments/387022787480387605/767370061634994176/sfp-transceiver-lg.png
analog nova
the cable just went from underground using a beefed up rj45 into that cable
tame carbon
They look like this ^
analog nova
yes
tame carbon
yes, you need a media converter
analog nova
it went from underground as those
analog nova
and then a box which turn it from those into the yellow cable
tame carbon
you need one of these ^
SFP fiber module goes in the left
RJ45 comes out the other, and goes into your router
analog nova
is there one of those which is built into a wap
hollow marlin
I prefer you buy a Mikrotik with an SFP and copper port over media converters. MC always have problems
analog nova
because my current thing is a huawei thing
tame carbon
you want to get rid of that Huawei device? or what
analog nova
yes
analog nova
oh, so there is no a single box connector
tame carbon
Well, you can
but its no biggie if you have them seperate
I assume your net is < 1gbit/s
then using copper is just fine
analog nova
I have symmetric gigabit
tame carbon
copper can do that just fine
tame carbon
copper can do gigabit
analog nova
and then they changed it so I can't use my old wap
tame carbon
its just limited to 100 meters range
analog nova
I guess they have a bunch of amplifiers or something then before this
because I was on copper and the copper do gigabit fine
can I just replace the huawei thing with the converter thing and then plug it into the wap and a switch just fine
analog nova
or the other way round
analog nova
mine gave one but it's super bad
ok, imma go get one o those thing
can you link me a decent one
tame carbon
This is to convert fiber to copper
And router wise, I can only recommend mikrotik, but its a bit more for advanced users
tame carbon
Well, mikrotik is a lot of manual configuration
but it can do it all
the router you see in that image
analog nova
but if I plug it in and config the thing it should work like my isp can't refuse it?
tame carbon
analog nova
because they were very sketch about it when I asked them whether I can have a different modem
tame carbon
@analog nova its probably useful to figure out how your ISP provides the internet over the fiber
often, a VLAN is used, and then with DHCP
analog nova
ok, imma look around again because I want to make sure it works
tame carbon
transceiver has to be the right one for that fiber link
once you have the SFP (the transceiver), you just plug it into your own equipment
and configure it
analog nova
and there is no way they can block it if they realized I changed it?
tame carbon
well
the router will have different MAC
my ISP for example, has to be notified if I make a change to that
analog nova
oh
tame carbon
but idk how that is for yours
analog nova
imma call them monday
tame carbon
if they provide you with an SFP module, you can be certain its ment for use with your own equipment
analog nova
I saw a sneak peek on the tech's laptop when they changed that my connection theoretically can go 10gbps
it went above 4000mbps on their screen
tame carbon
analog nova
tiem to call them tomorrow I guess
analog nova
yeah I am not going 10gbit
tame carbon
2.5G is a joke
humble cloak
i just upgraded my 100mbps switch for a 1000mbps one lol
analog nova
everything else do 1
tame carbon
nobody uses it beyond consumers
analog nova
it comes as standard on my laptop iirc
tame carbon
almost no networking equipment has 2.5G support
unborn sluice
yea, most realtek are 2.5
analog nova
alienware area 51m
unborn sluice
even my desktop is 2.5
analog nova
it's the only thing that have wired rj45 in my house
unborn sluice
2.5 is still weird
tame carbon
yeah, makes no sense xD
analog nova
I don't use it so 
unborn sluice
quick mafs
analog nova
but like
isn't 1inch = 2.5cm
so maybe they want to make the same thing happen in networking
analog nova
so they can start counting using inch
tame carbon
wat
analog nova
1gigabit 1inchbit 10gigabit
tame carbon
@analog nova if I had to recommend you a single all-in-one Mikrotik device
unborn sluice
I think they should use football fields like muricans
tame carbon
the older, RB2011 is what comes to mind
unborn sluice
1 football field bit
tame carbon
@analog nova https://mikrotik.com/product/RB2011UiAS-2HnD-IN
analog nova
imma look for those @tame carbon
tame carbon
@analog nova it has gigabit SFP
analog nova
are they international?
tame carbon
Though I feel bad recommending an RB2011, since its so old xD
The RB4011 is its big bad brother
analog nova
the infrastructure here is very old
tame carbon
analog nova
I am the only person I know which have gigabit at home
analog nova
I am pretty sure everyone else is still on fast ethernet and 15mbps speed cap
tame carbon
but pricetag
analog nova
that is around the same price as my asus wap
tame carbon
asus biggest sack ever when it comes to networking
analog nova
I want to use it again, which is why I asked here XD
analog nova
I really only need 3 wired and the rest run on wifi
my area 51m, my desktop and my nas
analog nova
the rest doesn't even have rj45 port
tame carbon
@analog nova I still think, you should get the HEX S, and then buy seperate wireless APs
analog nova
I can use the asus as the separate wap then?
tame carbon
You could yeah
analog nova
ok, cool
tame carbon
But the HEX S has the SFP interface you need
and it has 5x gigabit out
as well as PoE on one port, if you need it ;)
Take a look at the specs
It is affordable, small and easy to use, but at the same time comes with a very powerful dual core 880 MHz CPU and 256 MB RAM, capable of all the advanced configurations that RouterOS supports. The device has a USB 2.0, PoE output for Ethernet port #5 and a 1.25Gbit/s SFP cage.
RouterOS can pretty much do anything
tame carbon
Most stores
just look online
they have resellers everywhere
@analog nova just hope you have a bit of patience
mikrotik configuration ^ is a bit... different
its not as intuitive as with those home routers you can get
analog nova
oh dear
definitely not as intuitive as the asus
which is literally plug
download app on phone
done
tame carbon
Well
This is the "Quick Set"
for initial configuration
this is basically, what you'd configure on a consumer router
it sets you up with a basic internet connection, on a specific port
and makes the rest your LAN, sets you up with a default firewall, etc
analog nova
ooh I think I have seen that page
tame carbon
QuickSet can break A LOT of things, if you use it afterwards
so its ment for initial configuration
tame carbon
Port fowarding
you do this once
you can just copy an existing rule, and edit settings
analog nova
I think I did that when setting up my nas to run dual duty as a minecraft server
tame carbon
I actually have two wireless access points elsewhere
but they are controlled from the main router
tame carbon
using CAPsMAN, mikrotik special sauce, to remotely manage wireless access points
and ofcourse, DHCP stuff
is very logical
you define a pool
and then assign a DHCP server to a bridge with that pool
@analog nova the main confusing thing with mikrotik is that there's tonns of fields for options
but you don't need most of them xD
analog nova
ah ok
round osprey
does linus have the isp router in his home or the dream machine pro as the router? or he has the isp router connected to the dream machine pro? I dont understand his installation. Can u send a diagram or something?
waxen scroll
huh? not sure what you're talking about. tag him
waxen scroll
linus. hes the only one who can speak about his home network. none of us know
waxen scroll
i dont think ive ever seen a video talking about his ISP, probably not DSL so its a cable modem attached to the dream machine
round osprey
?
flint matrix
does he answer?
pretty sure from that video he had his ISP router going to his 10gigabit switch
and that went to his dream machine
or soemthinga long those lines
he has a UDMpro, one of their larger PoE switches, and a 10gigabit switch in a stack
its literally the same setup i went with due to his video
he should get some kickbacks from ubiquiti for that
hollow marlin
Im pretty sure he got all the Unfi equipment for free
flint matrix
he specifically said he didnt in that video iirc
he got the doorbell for free
but he bought the cameras/UDM stuff if i remember from his video
yeah he goes ISP modem to his UDMP wan
rocky badge
@waxen scroll I think his ISP is itel
He did a video about bonding at home and I think it was itel
topaz quarry
also i love linus for his tech enthuasism
but i don't think we should be emulating his network behavior
rocky badge
The UDMP is probably doing a flat network
Lol
All of his cam's IPs are 192.168.1.x iirc, same as his network iirc
flint matrix
idk im happy with my upgrades - went from a netgear 7900
rocky badge
Which makes sense, 192.168.1.x is the default UniFi network
topaz quarry
isnt't that the default network for like all consumer routers?
topaz quarry
i mean if you never need to segment your network
nothing he says will inflict severe pain on you
but if you happen to run containers and VMs and have a ton of devices
rocky badge
@topaz quarry basically
waxen scroll
also no diagram needed, he basically explains how its all connected in that video that was linked
you just have to think quick
vagrant raptor
my isp doesnt even give me a router
just a moden
and you can buy a router preconfigured from them
peak cloak
what isp even gives you a router for free? It's either included in the subscription or they give you an option to buy one off of you. Some let you save like 10 bucks each month by using your own
peak cloak
the one verizon gives you hardware wise actually sounds good
but consumer router software sucks
vagrant raptor
but the problem is, those boxes are modem and router in one
vagrant raptor
i have a seperate cisco modem
peak cloak
ONT is seperate
vagrant raptor
the hell?
peak cloak
yeah, that way they can just use existing cable
vagrant raptor
so why fiber
peak cloak
because fiber is better
better ping, and better upload
however fios uses GPON which kinda sucks
vagrant raptor
"can just use existing cable" "fiber"
What?
peak cloak
fiber to the ONT, out of the ONT you have two outputs, ethernet and moca COAX
they can either switch the output to MOCA (default) or ethernet
vagrant raptor
so the existing last mile cable
peak cloak
I just use ethernet which goes to the wire
well yeah, within my house I don't have fiber
ONT is on the side of the house
clear igloo
Existing coax cable in the walls to your TV or whatever, not coax from the node to your home
peak cloak
yeah
vagrant raptor
a little off topic:
haha - stupid americans - get limits on their hotspot data lol
Why the fuck did you guys vote off netneutrality
peak cloak
hotspot data? you mean like wifi? I don't
vagrant raptor
in europe you get your data and your eu-roaming data
thats it
noting special for hotspot usage or some stupid bullshit like that
peak cloak
like wifi hotspots are unlimited
vagrant raptor
clear igloo
WE didn't vote it off, some jackass said "muh competition not happen cuz nn iz bad" and did away with it
vagrant raptor
peak cloak
oh so like your phone as a wifi hotspot
vagrant raptor
like bruh
how do they even determine if you are using data ondevice or tethered
clear igloo
On a non-rooted phone they can easily see that stuff
clear igloo
The phone reports back if hotspot is on and what's using it
vagrant raptor
the phone doesnt say what the data is used from
clear igloo
Yes it does
vagrant raptor
like as spyware basically?
clear igloo
It's simply reporting back if hotspot is on and what data the device(s) used
unborn sluice
like as spyware basically?
peak cloak
also don't they use ipv6 on mobile usually, so they can see if your phone is using more than one ip?
vagrant raptor
they must have either a sim tool or an actual app that reports it to their servers
clear igloo
The phone knows hotspot is on, the phone knows if a device is using data, the phone can relay that information back to the carrier
vagrant raptor
what do you mean with more than one ip
vagrant raptor
your phone is just a little nat gateway in ipv6 hotspot mode
unborn sluice
they must have either a sim tool or an actual app that reports it to their servers
what if the feature is actually built in
vagrant raptor
built into where
unborn sluice
your dog
vagrant raptor
sim cards have a tiny java microcontroller inside of them
that might be used
but still, how does the simcard know that you are tethered
peak cloak
give me a sec, let me try something
clear igloo
Holy crap, how many times do I have to say it. THE PHONE KNOWS AND REPORTS TO THE PROVIDER, if your phone has hotspot and negotiates that capability with your carrier then it reports on the data used by any tethered devices
That's why you can root a phone and remove that limit
misty terrace
it's just apn settings
unborn sluice
Holy crap, how many times do I have to say it
This tbh
misty terrace
if you set the main internet apn as internet,dun,supl, it will so internet and hotspot from the same apn
clear igloo
You, in a lot of cases, can decide in your account settings if you want to enable hotspot, the phone will get those settings from the carrier. Exactly @misty terrace
misty terrace
that's what i did for a friend of mine to evade vodafone 1eur/100mb tax for hotspot
clear igloo
That's also where rooting comes into play from what I hear because some carriers will force you to use their hotspot app to track you too or throttle your hotspot speeds
clear igloo
It's been a while since I messed with 4G stuff but I believe if you try to negotiate capabilities the headend can reject you though depending on authorization
misty terrace
it shouldn't
for android, it redirects system functions based on how various apns are configured. if the provider says main internet if on web.isp.com and hotspot is on crap.isp.com, nothing stops you to set your phone to redirect tethering traffic to the first one. they literally can't tell if data is coming from an app or from another device under that sim
clear igloo
Ah, ok, maybe that's changed since the days of old where you had to root to do that
misty terrace
unless it's provider locked, android has had manual apn settings since 1.0
clear igloo
Maybe it's throttling speeds I'm thinking of then
misty terrace
that happens if you break the data cap
unborn sluice
Most of the "VPN that give you free internet" rely on a certain APN
though i haven't tried it myself
internet.isp.com might shit on you for breaking the limit
misty terrace
depends on how the provider measures traffic
vagrant raptor
in my understanding you just get intertent to your phone,
are you guys saying that the hotspot uses another login?
misty terrace
in basic words, kinda
vagrant raptor
so apn is basically the default gateway?
misty terrace
yes
vagrant raptor
well
dont you americans have some providers that limit your streaming quality?
that is some mayor bullshit lol
peak cloak
no
waxen scroll
its so sad that none of the LMG staff participate in their own discord
peak cloak
that's just bandwidth
vagrant raptor
yeah they detect a video stream and slow you down
clear igloo
All three force lower quality from known/major streaming sites depending on the plan
clear igloo
Yah
unborn sluice
All three force lower quality from known/major streaming sites depending on the plan
@clear igloo they do?
vagrant raptor
whats next, vpns are blocked?
yes mobile
unborn sluice
so they QoS your netflix traffic?
clear igloo
Yup
unborn sluice
ah sht
clear igloo
Yah, pay more $$$ get better quality 😄
peak cloak
yeah, but not cable or fiber ISP's ?
unborn sluice
I love the open internet
clear igloo
Correct, not seen that
misty terrace
i think that's something that only happens in muricah
vagrant raptor
is tmobile a provider for cable internet, as well as mobile?
clear igloo
Nope, mobile only afaik
vagrant raptor
and whats that line fuss about
do you share the performance on multiple devices?
clear igloo
AT&T and Verizon do but AT&T does DSL and Fiber while Verizon does FiOS or 4G/5G home internet too
Performance per phone usually
peak cloak
and then you have all the smaller ISP's
clear igloo
Yah, usually city/county owned or something
clear igloo
If you go with the major carriers, yes
vagrant raptor
thats exessive pricing
unborn sluice
$85, what's the speed?
clear igloo
Speed depends on location, $$$, and load on the tower
vagrant raptor
oh and of course, they eiter have unlimited or 4gigs lol
clear igloo
That's why I went with an MVNO, $40/month for unlimited everything + 5Mbps of unlimited tethered data (if I don't redirect)
unborn sluice
(if I don't redirect)
wdym redirect
vagrant raptor
what do you mean redirect
clear igloo
Well like TheRealZago mentioned, you can redirect the APN or change it so they can't see
on Android
unborn sluice
Ah that part
clear igloo
Yup, it sucks for 1 person
vagrant raptor
for the price of 8gb in america you can have unlimited 150mbit in europe
unborn sluice
me seeing those speeds are higher than my fiber at home
peak cloak
why is your fiber so slow
unborn sluice
$35ish for 35/35
vagrant raptor
i have like 20-70 mbit at home
unborn sluice
peak cloak
oof
unborn sluice
My games don't even download in less than a minute
charred meadow
Canada 😢
vagrant raptor
damn mobile data in the us is expensive
peak cloak
also you won't have data everywhere
go somewhere rural and you will have spotty connections
aka majority of canada and the US
vagrant raptor
well i have at least 3g in suburban areas
if you go hiking you probably loose data in some places
do your isps also offer home wifi over lte
like this for 50€
clear igloo
yup
vagrant raptor
they offered 10/1 mbit unlimited for 14€
BUT if you have a mobile plan with them, its 7€ and if you have 2 mobile plans its free
long story short, i finessed the family of a friend and now have unlimited 10mbit data on my dual sim phone for FREE
one sim for sms and calls
the other for internet only
i am excited about 5g for one single reason
latency
lte+ already can achieve gigabit speeds but at 100+ ping
i dream of the days when i just have a powerful server in my house and a paper thin laptop thats basically a 5g based thin client
topaz quarry
i already do this with 4G LTE
idk what yall think 5G is
i swear the internet gets better if you use ipv6 and stop subjecting yourselves to cgnat
peak cloak
it's confusing because it's new. You just gotta learn it, that's what I'm doing
also it's confusing because there are completely new concepts compared to ipv4
vagrant raptor
and what do you do with devices that dont support it?
peak cloak
well that's the thing
most consumer end- devices do
windows supported it sort of since XP
it's mostly consumer network devices
and even devices that support ipv6, like my ER-X don't have any GUI support
almost everything needs to be done in config tree or cli
so it makes it seem even more confusing
unborn sluice
Mostly the things that doesn't support are consumer routers
like the real "value" ones
unborn sluice
ipv6 been here for a while
hollow marlin
it's confusing because it's new
@peak cloak The first RFC for v6December 1998
hollow marlin
A lot of our networking protocols are quite old and just built upon. Its hard to believe v4 is almost 40 years old
With its drafts going back a lot further
peak cloak
ipv6 is older than me lol
unborn sluice
misty terrace
IPv6 is older than a lot of people on this server
leaden escarp
anybody know why my ethernet is slower than it's suppose to be?
humble cloak
Do you have all the network switches all the way on the same (or higher) speed?
Also the cables
half badge
on my windows pc it is somewho also slow. maybe because some vlan driver plays i did years ago. only getting 55-60 MB there. if i stick the cable into another pc i get around 100. but yeah the cable itself should support it
peak cloak
@leaden escarp how slow is it?
leaden escarp
When I do a speedtest it says it's 145mbps in download. The upload is where it should be
This is plain old wired internet btw. Not for a server if anybody thought that lol
topaz quarry
your speedtest is based on your internet plan
not your local infastructure's capability
leaden escarp
ik, my internet plan is 1000/100
clear igloo
Any "gamer" or QoS software on the PC?
peak cloak
@topaz quarry i've had issues with cables giving me slow speeds
clear igloo
Are you using a Killer NIC/killer software?
half badge
you have a second pc to test?
leaden escarp
already talked to them about it, they said the signal is going in just fine
topaz quarry
looooooool killer nic
half badge
i mean like connection speed inside your network
topaz quarry
killer nic is so dumb
leaden escarp
no other pc with 1bgps capablility
topaz quarry
if you have broken cables that would interfere too
well then install another OS other than windows
leaden escarp
So, cable, ISP or windows is the problem
half badge
you could boot from a live cd of linux and teest
topaz quarry
like super crap hardware can do 300/300
you need a wire tester
to eliminate your wiring
as a source of problems
clear igloo
But a broken wire would hard limit to 100Mbps
half badge
yeah 1gb is old tech 10-15 year old hardware should be able to handle it (if i remember correctly haha)
topaz quarry
yes
leaden escarp
probably my wires then, my cable managment from downstairs to upstairs here is a bit jank
peak cloak
@clear igloo i've had a wire slow down to 60mbps. Idk what the issue was, maybe interference
from a 200 mbps conenction
topaz quarry
powerline networking makes everyone's lives miserable
peak cloak
@leaden escarp any power cables running next to it
topaz quarry
oh yes don't put PSU on your ethernet cables
don't run 120V wires literally right next to your networking equipment
topaz quarry
the cummon sensio theorem states you shouldn't do any of this
leaden escarp
dang, this gettin technical, but idk
peak cloak
some electrician before in my house, ran cat5e right in the middle of a power cables
peak cloak
oh, I know who it was, one of my father's friends who thinks he knows everything about computers because he took a CS course
topaz quarry
excellent
peak cloak
I had a whole argument about routers vs switches vs AP
topaz quarry
ah yes all modems are routers
all routers are modems
all aps are routers
the confusion of ISP all in one boxes :/
half badge
isnt it all the same? you stick a cable in and data goes somewhere, it is magic after all
charred meadow
some electrician before in my house, ran cat5e right in the middle of a power cables
@peak cloak I was helping my friend reconnect a cable in her wall. When I was looking for the other end I lost tack of it since it was in a bundle of about 10 powercables.
waxen scroll
@topaz quarry heres some more lols
clear igloo
That's just a bunch of fail right there
waxen scroll
imma report it
that recruiter is an idiot. you post a fake job, get warm leads, then wait on all of them to go cold and attempt to cold call them later?
topaz quarry
Companies do dumb shit all the time
rocky badge
@clear igloo oml how shit is Windows
iperf3 on Debian 10 server, iperf3 on Windows 10 client, .\iperf3.exe -c REDACTED -P 4
[SUM] 0.00-10.00 sec 255 MBytes 214 Mbits/sec sender
[SUM] 0.00-10.00 sec 255 MBytes 214 Mbits/sec receiver
iperf3 on Debian 10 server, iperf3 on Debian 10 client, iperf3 -c REDACTED -P 4
[SUM] 0.00-10.00 sec 556 MBytes 467 Mbits/sec 467 sender
[SUM] 0.00-10.03 sec 547 MBytes 458 Mbits/sec receiver
;\
mellow heart
Has anyone here used FreeNAS & NextCloud?
I'm getting an error Access through untrusted domain when trying to login
topaz quarry
yes, you have to add your domain name to the trusted domain list in the nextcloud config
strong recomendation
use a VM and deploy nextcloud using docker
there's an environmental variable for most of the stuff that's going to trip you up
@rocky badge windows is windows
rocky badge
lol
topaz quarry
i heard windows 10 also tries to use the same random number for ipv6 address generation under SLAAC
waxen scroll
kay
mellow heart
I've been looking for that config file for ages now
Do you know where it is located?
dawn forge
I'm looking for a WiFi 6 mesh system with multiple VLAN-tagged SSID, closest I got is the Netgear Orbi Pro WiFi 6, but not sure it supports it
https://www.netgear.com/orbi-pro/sxk80.aspx here the link
waxen scroll
@rocky badge I still have no equipment other than my phone that supports ac
rocky badge
Lol
flint matrix
little schooner
@waxen scroll it's going great. I started last week Thursday going through the written docs the last person left and converting them to Word. I did 15 pieces in about 2 hours. Some of the pages I have to take time interpreting it because the written steps on some pages were not clear with the purpose.
I have been staying away from discord the past few days
Busy with a lot of things
I did end up using word docs, folders and SharePoint. They already pay for it so I adopted it
And the notebook now is used for notes for the day, week or a meeting
waxen scroll
❤️
mellow heart
wherever it's installed on FreeNAS, you will have to find the config file for it
@topaz quarry I found the config file, and when I edit it, the website doesn't work at all
topaz quarry
you're accessing it over the wrong protocol
the best solution to this is just to use a VM, run LInux and use docker containers
you can try literally putting either https
or http in front of the URL
mellow heart
I figured using the plugin would be easier
So I need to start a VM with FreeNAS for Linux to install NextCloud?
Wait! Progress
You were correct
It was trying to access it via https not http
waxen scroll
topaz quarry
all browsers access websites through https by default
because normies don't understand
peak cloak
I mean, at least firefox doesn't
topaz quarry
Jails on FreeBSD are so unbelievably complicated
peak cloak
I've had a few instances where it didn't
topaz quarry
on my system it does
waxen scroll
i know. i hated them
its been a decade since ive messed with them so i dont even remember the details
mellow heart
So that is some progress, but now it just gets stuck trying to login
topaz quarry
like the comparable of Jails on FreeBSD are Containers with a MIcroVM Runtime
yes LIght
welcome to jail hell
install a Linux VM
use docker
mellow heart
Jail Hell...
topaz quarry
declare victory
topaz quarry
so like nextcloud is already complicated to deploy
and then deploying it through freenas is like
like if you have to install any system utliities to run anything
to compress/decompress stuff in nextcloud
you'll probably rip your hair out before you get there
topaz quarry
a permission probably got changed
tracking it down will be command line gynmnastics
macOS sucks at virtualization because it's based on FreeBSD
you're basically running the FreeBSD comparable of locked down linux containers
a lot of things are easy to deploy with FreeNAS
nextcloud works until you change something
mellow heart
crap... it tried to load in https
when I login
that's why it doesn't work I think
This worked before dammit 😦
How do I tell it not to worry about ssl / https
peak cloak
you could self sign an ssl cert and install it your browser for now
idk the specifics of that though
mellow heart
wouldn't have made it this far without your help
I didn't use ssl before
worked fine