#networking

1 messages · Page 227 of 1

thorny geode
#

even if he does help, it's like listening to an old man with a thick accent and going all over the place

#

I'll try though

#

If we assume it's one VLAN per room, what would be the next step?

#

another classmate said they did one subnet per floor

topaz quarry
#

honestly you should go on youtube and look up Keith Barker

#

and watch his subnetting stuff

#

there's to many correct answers to this question

thorny geode
#

A classmate wants to know if 53 devices is too much for one switch

#

like would this be too much traffic for the first switch:

#

so the prof wrote back this:
"Hi,

We didn't discuss the concept of VLAN by now, and I didn't mention it anywhere in the project. This approach involves trunks that are nor discussed yet in our course.
So each subnet is on each floor, except for the first floor that has two subnets, Subnet 1, and Subnet 0 (please see in the Distributed Documents, the Advanced_Networks_Project_A_Boost_for_Students, fig.10).

Tomorrow between 2:00-4:00 pm we will approach again the topic of Team Project in much larger details. "

#

this is figure.10

plucky berry
#

anyone use cisco packet tracer?

topaz quarry
#

53 devices for one switch?

#

you mean 53 physical devices?

#

assume companies only have 48 port switches

#

you can run trillions of containers/VMs behind one switch

#

but only a certain number of physical hosts

thorny geode
#

one of the requirements was "The company has bought one router with 6 Fast Ethernet ports and you also may have any number of switches with 32 entries you might need." does the 32 entries imply 32 port switches?

peak cloak
#

that's what I would assume

waxen scroll
#

see? i knew you would get in trouble talking to me

thorny geode
#

haha it was worth verifying, so thanks for that

topaz quarry
#

they're referred to as interfaces for switches

#

so idk what entries means

#

physical interface <=> port

halcyon topaz
#

anyone has experience with Netbox or any other IPAM tool?

obsidian token
#

this is the assignment
@thorny geode
What do you do to get this fun homework?

peak cloak
#

that's not fun imo

#

old stuff that isn't really that relevant. The concepts though, yeah I understand what the prof is trying to teach

obsidian token
#

Oh well, yeah school is always behind ig

thorny geode
#

so the prof basically gave me most of the answers, that figure he gave us is basically the diagram we have to recreate (except we show the missing floors 2, 3 and 4)

peak cloak
#

ah ok, that's nice

thorny geode
#

and 32 entries = 32 ports in the switch

#

just his weird lingo

peak cloak
#

yeah, that's what I thought. What else would you need 32 of something

#

yeah

hearty fulcrum
#

is there a way to connect to paired bluetooth devices without removing them from windows like you can on other oses?

waxen scroll
#

why do you need to remove them

#

if the device supports multiple pairings it should be fine

hearty fulcrum
#

i have an xbox one controller with bluetooth

#

and it's connected to multiple devices

#

when i connect it to another device it'll look for the device it's currently paired to

#

so if i wanna pair it to my main pc again i have to remove it from the paired devices list

#

because i don't see an option to connect

hollow marlin
#

@waxen scroll the biggest crime about that assignment is still referring to classes

waxen scroll
#

@hollow marlin i guess

#

public IP. no NAT

#

no vlans

#

no access lists

#

the more you know, the more you'll fail that assignment

#

this is why i tell people like @little schooner you gotta be careful

hollow marlin
#

Yeah it looks like its just a routing assignment. I just wish they would give the mile high view on classes and never refer to them again.

waxen scroll
#

if so he should make an LOL and do all /32

#

prof be like what??? thats not a thing

#

@rocky badge where u at

latent plover
#

@waxen scroll don't make me ban you

#

my dad work at linus media group

#

and he will ban you from this discord

waxen scroll
#

none of those guys have kids that would use discord

#

too young

latent plover
#

Then I'll get my mom

#

she works at Discord

peak cloak
#

Lol

waxen scroll
#

@peak cloak idk

waxen saddle
#

Is this a troll?

waxen scroll
#

a bad one.

oblique dagger
#

I can't get my second network cable to show up in proxmox, ethernet 1 is showing up as it is plugged in (it is currently being used as the slave for the virtual network cable, but my ethernet 2 which has an ethernet cable and is green on both lights is showing as inactive.

burnt epoch
#

Anyone have recommendations for small-scale outdoor wifi deployment? Initially looking at a single Ubiquiti Unifi Base Station XG, but that is sold out at the moment.

burnt epoch
#

Thanks! User load is too low on that one but I really appreciate it

tight fiber
#

what networking protocol is the best to use when coding in C or what other launguges should I learn for my C programs to be more like an network?

thorny vector
#

Wut

#

What are you coding? That's a pretty broad, and fairly odd question to answer

unborn sluice
#

to be more like an network

#

to be the network, one must be a router

#

vision yourself routing traffic

tight fiber
#

@thorny vector Im trying to make good functioning CNC's & i also need to take information from my files like usernames , keys etc...

thorny vector
#

Well, are you going to import another library to use? Present data via an API? Or build your own sockets? The last one I do not recommend.

#

@tight fiber

unborn sluice
#

what kind of botnet is this for CnC

tight fiber
#

@unborn sluice its actually for a underground selling website I have

unborn sluice
#

our website comrade

tight fiber
#

@thorny vector I was planning on using libssh but idk if API's would be the best way to go

unborn sluice
#

CnC over ssh

thorny vector
#

Also, don't pull data from files. That's a great way for someone to find a remote code execution exploit.

#

Use a database of some kind

unborn sluice
#

I mean his implementation is shady enough

thorny vector
#

And API's are great. For example, vmware's vCenter use API over https for its C2

tight fiber
#

alright thank you also I have had problems in the past with people trying to exploit my C2/Cnc server what are some good libraries for C2/cnc development that are more secure then building your own sockets ? cause you implied that building your own sockets you "do not reccomend"

thorny vector
#

Yeah. That's for the upstream people to do. I don't develop on that level, when I do build its infrastructure building, so I never dig down into C of any variety too much, and when I do its edits not additions, so not sure what to recommend. I'd just look up popular REST API implementations for what you're trying to do.

#

How are you doing your developing?

tight fiber
#

ive mainly been using database layouts & incryption from NCSD & CIA.gov

#

& im pretty shit at devolping most of my projects go for months at a time all I do is scetch all my programs into google drive so I could use them on latter dates

thorny vector
#

I meant what development tools? Coding environment, compiler, target and host OS, etc.

topaz quarry
#

what is this conversation

#

and being held by a world dictator

tight fiber
#

I code mainly using parrot OS & debain WSL. my compiler I use is GCC & I use python for incrpytion. Also i dont really want to reveale what im doing as that would probably get me banned

topaz quarry
#

are you trying to do basic network development?

#

is that the story or like what's the goal?

#

well

#

you see without your exact goal in mind

#

i probably can't help :/

thorny vector
#

I wouldn’t use python for encryption. If you’re already using C, do it natively

tight fiber
#

@topaz quarry im shit at socket programing but im trying to get more into network devolpement

topaz quarry
#

when people use a tool, it's for a reason

#

like when i use a toilet

#

it's because i want to take a dump

#

what are you trying to accomplish?

tight fiber
#

the incrpytion algarithm I use only works in python :/

thorny vector
#

I doubt that.

topaz quarry
#

didn't you know roaldi

#

algorithms only work in python

#

what are we doing

#

why are operating systems not implemented in python

tight fiber
#

XD the tool im making is an admin tool for my pre existing database im trying to make a program that allows me to backup logs read logs & write over them etc...

thorny vector
#

why are operating systems not implemented in python
@topaz quarry Not going to lie, that'd be dope to see how it was implemented.

tight fiber
#

the onyl problem im having with the program is the connection protocal for the hole thing

topaz quarry
#

we should make an operating system only in javascript

#

javascript only club

thorny vector
#

@tight fiber Yeah. Expose an API that interacts with the DB via your DB reader of choice

tight fiber
#

the incpytion algorithm I use work only in python its not impossible to use it in C & other laungues because it take 30X as long

topaz quarry
#

i mean idk why you're punishing yourself with C

thorny vector
#

If its taking longer in a lower level language, it's not being implemented correctly

topaz quarry
#

^

#

when python developers develop in C

#

bad things happen

#

spamming type erasure is so dumb

tight fiber
#

XD my incrpytion algorithm is used by the US gov

thorny vector
#

So? I work in the DoD, that doesn't mean anything

tight fiber
#

No but ive done my research

topaz quarry
#

the US Government uses C++14

#

you can use that

tight fiber
#

they dont use just one incrpytion algorithm

thorny vector
#

Okay. Then do more research, and find a better C implementation of the encryption algorithm you're using.

topaz quarry
#

^

thorny vector
#

And mah dude, we use what ever makes sense at the time

tight fiber
#

Im gonna stick with the algorithm I use just because ive been using it for years without any problems & no reverse enginering/hacking

topaz quarry
#

like anything that's accelerated by AES-NI will crush any python implementation

#

then do all of your stuff in python

#

since your favorite algorithm is in python

tight fiber
#

I hate python

thorny vector
#

Your first mistake is assuming that whatever you're using is perfect.

#

@topaz quarry We're agreeing on something, he11 is about to freeze over

topaz quarry
#

i know right

tight fiber
#

Im not saying my method is perfect

#

but its worked well for many years

topaz quarry
#

bro the DoD is going through a freshening up time

thorny vector
#

Windows worked well for many years. Then eternal blue

topaz quarry
#

the old farts don't want to maintain their stuff anymore

#

because in 2020 it's becoming impossible

#

like i literally went to China Lake for a thing

#

and they asked me to do stuff in C++98/C++11

#

i literally said no :/

#

and they were like why

#

maintainability

#

making new projects in C will disuade people from joining you

#

your answers are Go, Rust, and C++17/C++20

tight fiber
#

alright lets say i decide to listen to you what would you reccomend to keep up ""MAINTAINABILITY""

topaz quarry
#

use languages which are both popular and have a strong future in the private sector

#

when the DoD forced cobal down everyone's throats

#

that thing had no lifetime, in fact it's sole purpose was to be a stop gap while bjarne figured out C++

#

your answers are Go, Rust, and C++17/20

tight fiber
#

most of the things that can be done in C++ can be done in C

topaz quarry
#

that's not true

#

constexpr cannot be done in C

#

templates cannot be used in C

#

that's basically 80% of what C++ is

#

do you realize that Dennis Ritchie started using C++ at the end

#

because C++ is literally C + 1

thorny vector
#

C is less secure than c++

topaz quarry
#

because of maintainability problems

#

it's not like C is inherently more insecure than C++

#

it's just it gets less eyes

#

less security audits for projects

#

security audits are expensive

#

not having templates and not having contexpr makes it much harder to write secure C code

#

you can't use units in C without dumping tons of memory at it

#

Dimensional Analysis is a necessary component of development that people just throw out the window

thorny vector
#

It is, actually. Since c++ is object oriented, you can hide variables in a class, and only provide a function interface. Strings are immutable in C++, and enumeration constants don't have any type safety in C.

tight fiber
#

I've been using C for quit a while ? why would I switch to C++ just because of security. C is a very common language & is one of the oldest languages known to man & it will probably be used for much more.

topaz quarry
#

because hiring people will be impossible

thorny vector
#

Using encyption to stay secure and private. Using C because you don't care about security.

topaz quarry
#

because unless you promise to live for a million years

topaz quarry
#

no one else is going to maintain it

unborn sluice
#

why are operating systems not implemented in python
lemme tell you a story

topaz quarry
#

cognitive load in C is much higher than C++

tight fiber
#

If I doing something on a more larger scale I would consider using C++ but C is better for the programs im making

topaz quarry
#

let the language do stuff for you, you don't have to use init and release paradigms

#

i mean do whatever makes you happy

#

but no one will take up the project

#

and you'll get minimal support in 2020 for it

#

like we're basically at a point where we use C++17/20 for systems development, Go for web, Rust for systems development, and python for IT tooling

tight fiber
#

I mainly Use C for implamentation to make the service I provide easy to maintain for me. I dont just use C for my service I also use golang & C#

topaz quarry
#

if you understand C, C++ is a billion times easier

unborn sluice
#

Just code your algorithms in asm smh

tight fiber
#

C++ is to easy

#

pissss easy

unborn sluice
topaz quarry
#

alright

#

well, all the really cool networking libraries

#

are written in Go, Rust, and C++

#

Microsoft soft abandoned C#

#

because they realized it can't actually compete with C++20

tight fiber
#

I know I love making Boatnets in C++

topaz quarry
#

this guy

tight fiber
#

XD but youve honeslty made me think about my devolpement

#

Ill try implementing more C++

topaz quarry
#

@thorny vector we agreed on something, brace for meteor impact

tight fiber
#

do you guys get stoned all day?

topaz quarry
#

no . . .?

tight fiber
#

;/ why not?

topaz quarry
#

i get high off solving problems

#

and playing tennis

thorny vector
#

I got a job to do.

tight fiber
#

I cant code unless im baked I also code much better when im high

#

have you tried coding while high?

thorny vector
#

Code while on a depressant, sounds fine, smh

topaz quarry
#

i'm the manifestation of coffee

thorny vector
#

Right? gimme that caffiene iv drip

topaz quarry
#

we gotta solve problems when people shove portable dildos in their equipment

tight fiber
#

have you guys ever tried coding while high ? cause some people actually see much improvement with their productivty coding while high

topaz quarry
#

bro if developers had 10% of my skill level

#

we would live in a much better universe

#

i need caffeine

thorny vector
#

1.) Federal employee
2.) No desire to
3.) Not a coder, maybe a scripter, mostly an analyst.

topaz quarry
#

oh cool

#

you know this makes sense

#

and why we get into so many arguments

tight fiber
#

go to canada

topaz quarry
#

roflmao

tight fiber
#

the US sucks dick for coding & wages for coders in canada is way higher then the US

topaz quarry
#

uhhhhh

thorny vector
#

Some people aren't in the game for the money.

tight fiber
#

@thorny vector you a snitch ?

#

XD

topaz quarry
#

i mean getting a high salary in the US if you're genuinely skilled isn't terribly hard

#

if you're a python dweeb

#

and then you wanna get paid

#

yes that's difficult

tight fiber
#

I hate python its so bad

thorny vector
#

I prefer patriot, but to each their own.

topaz quarry
#

i've been asked to leave the US by the Lufwaffa for very high salary

tight fiber
#

in my opinion python is usless & overused

topaz quarry
#

for my skillset

#

i told them unless they have up their soverignty to the US

#

i wouldn't be able to work for them

tight fiber
#

canda is an allie with the US

#

and there economy is better

topaz quarry
#

but not a soverignty or territory to the US

#

their economy is objectively not better

tight fiber
#

people are payed more & make more in canada & people in canada are more taxed then US

topaz quarry
#

canadians are taxed more

#

and stuff costs more

#

the money literally means less

#

higher salary != higher quality of living

tight fiber
#

17 cents

#

are currency actaully makes sense in canada

#

the US pulls money out there ass for there military

topaz quarry
#

you also can't buy certain things in Canada

#

like gigabit internet

tight fiber
#

Im a dual citazen trust me I know I fucking love guns

#

the US is better in many ways

#

abortion & guns

thorny vector
#

@topaz quarry On a side note, I just saw the windows BSOD issue over in tech support. I know its purely anecdotal, but for all of my windows systems, I've never had a bsod from anything other when I was messing with the network stack.

topaz quarry
#

i don't get the problems because i run windows was a VM

#

all the problems are bare metal related

tight fiber
#

I recently just switched to VM edditions of windows

thorny vector
#

Yeah. Multiple bare metal hosts too. All on 2009 now

#

or 20H2, depending on what documentation you look at

topaz quarry
#

idk it's not all bare metal solutions

#

it's only certain combinations

#

windows is less annoying when linux can just whip it to death

thorny vector
#

I'm just sitting here waiting for snort 3 and all its dependencies to compile

topaz quarry
#

clearly surricata is master race

thorny vector
#

Snort 3 fixes the lead suricata had with multiple threads

tight fiber
#

meerkat gang

thorny vector
#

And I'm more familiar with its configuration than with suricata, so I'm using it for my sensor appliance

topaz quarry
#

cisco just upsets me

#

i won't use their stuff just because of how upsetting they are

#

snort rules are easier to understand yea

thorny vector
#

Yeah, epsecially with the current way cisco has its beacon liscenses

topaz quarry
#

like wtf cisco

thorny vector
#

They literally lost all of thier customers that have airgapped networks

topaz quarry
#

we agreed on something else

#

we're screwed now

#

lol routerOS and vyos are so much less complicated than cisco stuff anyway

tight fiber
#

I used to have a cisco router with dd-wrt on it & cisco fucked up my router because of an update so yee screw cisco

thorny vector
#

I think what our end goals are in terms of what we want our applications to do is what really separates us. I build smaller infrastructure we have to hand configure for each customer we go to, vs the automation and expandability you like to do.

topaz quarry
#

it's not just their liscensing though

#

like even just using their stuff

#

i don't want nested prompts

#

like broo

#

i believe in automated networks because i can just program them

#

vyos has like one of the best restful apis i've ever seen

#

as does opnsense

#

and routerOS the epeen op

tight fiber
#

cisco has shown they dont give a shit about there customers either with simple shodan searches it shows that their is more then 1000's of vulnerable SSH routers

topaz quarry
#

lol shodan with a cisco search command

#

it's pretty hilarious

thorny vector
#

I'd be open to moving our stuff to vyos. Unfortunately we do have other analysts that need to be able to hop into the firewall every now and then, and gui is just the best way to do stuff with minimal heartache

topaz quarry
#

if you want to give me a list of things you want in a gui

#

i'm making a web ui using C++

#

cause i'm fuck it

thorny vector
#

For vyos?

topaz quarry
#

yea

#

i'm so tired of having to command line hard mode

#

and it has a web api

thorny vector
#

huh, that's dope. I'd love to have an eye on that

#

uploading to github?

tight fiber
#

@thorny vector what should I use for receiving data from APIS in C (reddit recommends libcurl)

topaz quarry
#

you will use C++ with python style web requests

#

python with type safety

thorny vector
#

seems fine to me. Again, not a programmer. I usually only ever look at C if any flavor of I'm developing an exploit

topaz quarry
#

one thing to look out for

#

install the correct version of libcurl

#

or SSL won't work

#

:/

tight fiber
#

Ok why do i need C++ & python I just want to use C

topaz quarry
#

it's just python syntax

#

with C++

#

it's 100% C++

#

and it uses libcurl in the background for you

thorny vector
#

This is where we reference the above conversation we just had, and leave it at that.

topaz quarry
#

s;dajfa;sldfjk;a

tight fiber
#

if you go to www.libssh.org it says they offer API support is libssh good or would you prefer libcurl

thorny vector
#

Well, considering libcurl is probably meant more for web requests, I'd use that.

topaz quarry
#

libcurl4-gnutls-dev

#

libcurl4-openssl-dev

#

libcurl4-nss-dev

#

look up the differences

#

it actually matters

tight fiber
#

alright thank thank

thorny vector
#

@topaz quarry This is the last time I use one of my lower powered cpu hosts to compile stuff

tight fiber
#

so libcurl4-gnutls-dev is just for http not https

topaz quarry
#

yes

#

because of liscensing problems

#

@thorny vector what are you talking about everything should be compied on rpis

thorny vector
#

He's a mad man

topaz quarry
#

cross compile x86 on ARM

#

what could possibly go wrong

thorny vector
#

I love how people are solving putting x86 apps on arm systems by just piping it through an abstractization layer. No that's fine. I don't see any issues there.

topaz quarry
#

naw, nothing could go wrong

tight fiber
#

@topaz quarry can i challange you to typeracer?

unborn sluice
topaz quarry
#

no i'm convincing routerOS to do ipv6

#

i have it working on the router itself

tight fiber
topaz quarry
#

now i just need to dns and pass on addresses to clients

tight fiber
#

someone race me

topaz quarry
#

@unborn sluice

#

let me know if haxors you

unborn sluice
#

@topaz quarry

#

i aint haxors me

tight fiber
#

: ( nobody want to race

#

@topaz quarry you seem like you know alot about coding C++ what would you reccomend doing to help better understand C++ & how did you learn so good. If you answer is just "countless hours of practise" that makes totall sense

topaz quarry
#

all the cool people in cppcon

#

have blogs

unborn sluice
#

i wonder if phoenix actually knows c++

topaz quarry
#

lol can't

unborn sluice
#

you probably need to force you [] or something in the next c++

topaz quarry
#

that's still not english

hollow marlin
#

I can't wait until networking gets its own channel ping

unborn sluice
#

not english exist need to

topaz quarry
#

lol juan

unborn sluice
#

I agree

thorny vector
#

@hollow marlin Like a Networking Tech Tips?

topaz quarry
#

but @hollow marlin curl is networking

hollow marlin
#

If Russ White is the writer im down for NTT

thorny vector
#

I've been considering starting a homelab youtube channel of some variety

topaz quarry
#

same

thorny vector
#

Just didn't know if it'd be worth it

topaz quarry
#

but mine would be how to automate all the things

#

like walk into your room and deploy a whole network

hollow marlin
#

Never would have guess that

topaz quarry
#

using a slew of raspberry pis

#

hey juan, you're a cool networking guy

hollow marlin
#

How do we know Phoenix hasn't already automated chat with some AI tossed in and is not really here

topaz quarry
#

how do i activate ipv6 in routerOS

#

lol

#

i will one day

#

just to mess with everyone

#

when someone says powerline networking

#

the automatic response will just be trash

tight fiber
#

@topaz quarry thank thank

hollow marlin
#

In the tik just enabled DHCP-client on WAN, DHCP server, ND and off to the races

topaz quarry
#

so i can ping ipv6 addresses in the router

hollow marlin
#

Just make sure you drop in your v6 firewall rules though

topaz quarry
#

but it's not handing out anything

hollow marlin
#

Check to see if managed-address-configuration=yes under v6 ND

topaz quarry
#

so managed address configuration should be checked?

#

is it in assisted mode by default?

hollow marlin
#

Yeah its the flag that tells the client to pull DHCPv6. v6 relies heavily on what the flags say

tight fiber
#

im pretty sure you can set your IPV6 by Find what your IPV6 is through DNS mask and public IP then upload that IP USING "IPV6 = 2001:470:1f07:106c::1/128" to /etc/resolv.conf but you have to set your IPV4 too

thorny vector
#

I'm convinced I need to do a blood sacrifice to get my ISP to give me an ipv6

topaz quarry
#

no, you just create a GRE tunnel to hurricane electric

tight fiber
#

XD

hollow marlin
#

I have almost my entire network v6. Still waiting on a budget to remove the last of the B6 blades that don't support it

thorny vector
#

I have no desire for that. Besides, my ipv4 networking works for what it is. I have NO desire to properly configure v6 for everything.

tight fiber
#

jsut look them up

topaz quarry
#

do they really now

tight fiber
#

yee its cloudflare protected if you download it

hollow marlin
#

my ipv4 networking works for what it is
@thorny vector And that is why v6 is 22 years old

thorny vector
#

lol, fair point.

topaz quarry
#

i'm doing ipv6 because i started dirtying my ip space to much

tight fiber
#

EUrope is running out of IPV4's though

topaz quarry
#

no we're out

#

now they're spamming cgnat

#

for everything

hollow marlin
#

v4 been drained for a while. We still have plenty of /19 left if the time comes

thorny vector
#

Yeah. The majority of the barracks on most of the bases I've been on all are cgnat'ted

topaz quarry
#

it's so flipping annoying

thorny vector
#

Meh. I've always had a true public, and the boots don't need a public ip

topaz quarry
#

@hollow marlin thanks

#

checkbox of magic

hollow marlin
#

Sweet

topaz quarry
#

why is ipv6 disabled by default on windows

thorny vector
#

It's not. Fun fact, server 2016 passes everything through it's ipv6 stack

topaz quarry
#

maybe i turned it off then

tight fiber
#

could I make a CGI-nat boutnet ive never seen this protocol is it good with IOT & socket private network protocols?

thorny vector
#

You sound like a marketing exec who just learned some new buzz words

tight fiber
#

im stoned did that make senseXD

topaz quarry
#

now you know we don't

tight fiber
#

does it work with php shh wget etc..

thorny vector
#

You can do C2 over literally any protocol

#

I’ve seen it in icmp, dns, etc.

#

If there are writable field in whatever protocol it is, you can use it for communication

tight fiber
#

True that

tame carbon
#

@tight fiber you looking for IoT messaging solutions?

#

AMQP is preffered protocol for stuff like this

#

for low bandwidth devices, MQTT can be used to exchange data

#

I've used LoraWAN equipment before

#

RouterOS actually has support for lora now :p

unborn sluice
#

is AMQP botnet ready

topaz quarry
#

lol what

#

are you telling this quaker to use rabbitmq?

tame carbon
#

@topaz quarry AMQP is used by more than just rabbitMQ

topaz quarry
#

is it now

#

i honestly didn't know

tame carbon
#

it uses very similair protocol

#

AMQP is just one of them

#

But I believe openAMQ is ded

#

I just use redis for pubsub stuff

#

dont need a big exchange

#

Only deployments of IoT that I've seen, were with LoraWAN, to a gateway that took messages from the air and sent them over IP with MQTT

#

Either commercial networks, or open networks like ThingsNetwork

topaz quarry
#

redis doesn't make promises about deliverability though

#

but yea it has a pub/sub function

#

so routerOS has support for lorawan somewhere?

#

in all the config panes?

tame carbon
#

They added it with a 6.x release I forget

#

my hardware doesnt have capabilities for it

topaz quarry
#

i'm on 7.x dev

#

to see all the cool features

#

it's running in a tidy little vm

tame carbon
#

You can buy Lora Antennas from mtik

#

And they have APIs for it

topaz quarry
#

this is pretty sick

tame carbon
#

Every RouterBOARD with a miniPCI-e interface which supports LTE modems could also be turn in LoRaWAN gateway by installation of R11e-LoRa8 or R11e-LoRa9 card.

topaz quarry
#

so i can do pci-e passthrough

#

this is sick

tame carbon
#

if that dont work

#

there's kits for raspberry pi

#

to make a gateway

topaz quarry
#

man now that's some cool stuff

tame carbon
#

its neat, cus its low power and has 10-15km range

#

line of sight

#

data rates, I'll be honest, not great

#

and its also not a session based connection

topaz quarry
#

interesting

tame carbon
#

but for telemetry, it is awesome

#

and you can also send data back to the device

#

but you have discrete messages you pass

topaz quarry
#

so it's UDP style connections

tame carbon
#

yeah, so typically, a device has its own schedule for communicating

topaz quarry
#

ahhh

tame carbon
#

and duplex is done by the party that receives a connection

#

so Client sends data to server, server reads its own outgoing message log, and sends any messages in queue back to client

#

or vice versa, depends on the type of Lora network ,you can do it one of both ways

#

@topaz quarry but the Things Network is quite cool

#

its big

#

v big

topaz quarry
#

i'm curious if i can get QUIC to run over Lora

#

fake a TCP connection

tame carbon
#

There's no protocol stacking with lora

#

sadly

#

any services that you connect to it, talk to the lora gateway

#

which is just an IP service

#

and a lora gateway, can either be self operated, or by someone else

#

they talk on the IP layer, to your exchange, which could be on a foreign gateway

#

so you have clients on the left

#

the bridge with Lora interfaces which just talks to an internet router

#

@topaz quarry the reason I think its cool, is cus central europe is absolutely PACKED with gateways

topaz quarry
#

but why

#

why would they do that?

tame carbon
#

cus we have highly advanced infrastructure

#

our public infrastructure, sewer systems and traffic monitoring

#

is all IoT

#

There's commercial networks too

topaz quarry
#

i feel like that's sort of a problem

#

that stuff should never see open IP networks

tame carbon
topaz quarry
#

like it should just be one big LAN in an airgapped network

tame carbon
#

These are from a dutch ISP

#

but that 10 year battery life, can confirm

#

we had groundwater level meters scattered across large areas

#

with single lithium ion cell, lasting about 6 years

#

@topaz quarry well, thats kinda the problem, it needs a backbone

#

and IP is perfectly reasonable for this

topaz quarry
#

yea in an airgapped network

#

i just open ip networks

tame carbon
#

Networks like KPN, have their own intranet for the backbone of Lora

#

only their message exchange itself, which you use as a customer, is public IP

#

oh

#

and it costs money to send data xD

#

which is why you have to think when you develop this stuff

topaz quarry
#

gotta love that multi-billion dollar bill from all the telemetry

tame carbon
#

well

#

its actually cheaper than setting up SMS modems everywhere

#

uses almost no power at all

#

and its readily available in the entire country

#

they just installed this equipment on the existing 4G towers

#

but yeah, IoT hype

#

buzzwords

topaz quarry
#

idk, at least in the US

#

all the public infastructure is literally in a full mesh topology

#

all those fiber backbones

tame carbon
#

netherlands has like three big fiber loops around the country

#

and some dark fiber here and there

#

but its tiny speck of dirt

#

with 19 million people

topaz quarry
#

oh the dark fiber in the US is nonsense

#

like all the power companies have tons

#

because reasons

tame carbon
#

but dont use it

#

or use it to the level of which it can be used

topaz quarry
#

FPL uses it for a smart grid

tame carbon
#

smart grid is a joke

topaz quarry
#

but like it's apparently like one of the few

tame carbon
#

it will never happen.

#

smart grid on utility supply, things like communicating between power stations, that already exists

#

but telling your tesla to discharge itself cus neighborhood needs more power, NOT going to happen

#

Its just going to make grid stability even worse

topaz quarry
#

well it depends

#

if you have a distributed power grid

#

and you have a major power backbone, i've seen it not suck

#

Florida gets to cheat though

tame carbon
#

the problem with this concept, is that the local wiring is not up to spec for this

topaz quarry
#

we have the nuclear power plant off the coast

tame carbon
#

you get current flows in areas, that are not ment to support loads like that

topaz quarry
#

Florida gets plenty of chances to redo wiring

#

hurricanes love tearing stuff up

tame carbon
#

you guys have above ground?

#

cus we don't

topaz quarry
#

above ground wiring?

tame carbon
#

yeah

topaz quarry
#

south florida isn't allowed to

tame carbon
#

cus I always see videos of hurricanes

#

with transformers falling over and exploding

#

maybe not explode

#

but sparks fly

#

🎇

topaz quarry
#

those are for very old neighberhoods where the majors didn't listen

#

they get a fine

tame carbon
#

lel

#

but get this, here. we have situations like this:

#

some farmer, gets subsidies from govt

#

to build a solar park

#

total capacity: 30MW

#

but the cable supplying it

#

only does 15MW

topaz quarry
#

interesting

tame carbon
#

so when a lot of sun shines, those inverters actually shut down, to prevent overloading of network

topaz quarry
#

you know California has this problem

tame carbon
#

because utility companies don't make as much money on "buying" electricity, and doing this at a large scale requires investment into the grid

topaz quarry
#

and they pay Arizona to take the overages

tame carbon
#

so they aren't interested, and just leave it at lower power

#

cus burning oil & coal is just... easier

topaz quarry
#

it's also cheaper in the short term

tame carbon
#

yes

#

but long term, its not going to sustain

topaz quarry
#

short term monies is what they care about :/

tame carbon
#

yes

#

their short miserable hooman lives

#

dorra dorra, million dorra

#

rambles

#

@topaz quarry one thing that everyone should be doing though, is install solar on their house.

#

with the goal: to at least cover the power use of AC and Fridge

#

using coal to cool your house, only makes things worse in the long term

topaz quarry
#

most of soflo is covered by the nuclear power plant :/

tame carbon
#

soflo?

#

that pretend-douche on yt?

topaz quarry
#

FPL already went through the 15 year investment period for nuclear energy

#

south florida

tame carbon
#

oh

#

southflorida

#

derp

#

I'm quite pro nuclear

#

mostly, because, I don't see a reasonable alternative as of right now

#

but I don't want those PWRs

topaz quarry
#

there's some micro nuclear plant designs

tame carbon
#

water in a reactor is so dumb

#

Modular reactors yeah

topaz quarry
#

because 15 year investment plans

tame carbon
topaz quarry
#

with multiple billion dollar debt ceilings

tame carbon
#

This is what gave me hope for a green future ^

topaz quarry
#

are super scary

tame carbon
#

because pressurized water reactors are just a dumb idea

#

they are incredibly inefficient, like 0.5% of actual fuel used

topaz quarry
#

the british keep trying their hand at nuclear fusion

tame carbon
#

and they can melt down, and can also have hydrogen explosions

#

fusion, I don't have my hopes for

#

fission works, and we can deploy it

#

@topaz quarry look up "Kirk Sorensen"

#

He has lots and lots of talks

#

even did one at the technical university in Delft (netherlands)

topaz quarry
#

neat

tame carbon
#

He's former nasa aerospace engineer

#

and he came across liquid fuelled reactors, when he was envisioning a lunar community

topaz quarry
#

honestly

#

if humanity wasn't such scum

#

we could have a space elevator

tame carbon
#

xD

topaz quarry
#

but because we're scum

tame carbon
#

we've had this alternative form of nuclear power, since 70s

topaz quarry
#

they'd just shoot with a rocket

tame carbon
#

but Nixon wanted to make jobs in a specific state, so he cut funding to Oakridge

#

and killed the MSRE

topaz quarry
#

ah yes

tame carbon
#

ran for 5 years

topaz quarry
#

i remember seeing a tad talk on this

tame carbon
#

and was only stopped because of politics, not because of technical problems

topaz quarry
#

politicians do dumb things

tame carbon
#

I am fascinated by this technology

#

I have to work right now, otherwise I could go on a 2 hour tangent about this tech

#

Because

#

reasons

#

@topaz quarry these reactors don't require pressure vessel, they operate at much higher temps

#

and cannot suffer from either chernobyl type or fukushima type disaster

topaz quarry
#

da

#

i was facinated by lack of nuclear bomb effect

tame carbon
#

There's no "meltdown" possible, since the core is already molten

#

and the "emergency" system of the reactor, is a frozen plug of salt at the bottom of the vessel

#

cooled by a blower that blows cold air over the pipe

#

if power is lost

#

that plug melts

#

and the entire reactor core drains into a specialized tank

#

which is designed for this exact scenario

#

with traditional reactors, water has to be kept on the core at all times

#

that drain tank, has no moderator, it goes subcritical, fission stops

#

only way to start it back up, is by melting the fuel, and pumping it back up into the core

topaz quarry
#

it's amaze isn't it

#

honestly i'm dumbfounded they haven't used it yet

tame carbon
#

liquid fuel in a solid moderator (graphite)

#

instead of a solid fuel in a liquid moderator (water or heavy water)

#

heavy water is used for low enriched uranium, because it absorbs less neutrons

#

@topaz quarry the reason it hasnt been used yet

#

after ORNL closed up shop

#

nobody knew, for 40 years, that this was even an option

#

only in early 2000s, when Kirk uploaded scanned PDFs from a book he found on a shelf

#

did this get featured in Time magazine and Science

#

and since 2010, dozens of startups have begun developing this

#

we'll see first commercial LFTRs in next 5 years

topaz quarry
#

again if our race wasn't a community of fucks

tame carbon
#

main reason right now, is once again... economic incentives

#

Molten salt is very corrosive

topaz quarry
#

we could just use a space elevator

tame carbon
#

and they currently can build vessels that last 15~ years

#

but it needs 20-25 years to be viable

topaz quarry
#

where's my orwellian style sun extractor

#

i keep forgetting the name for it

tame carbon
#

but once we can figure out how we can use molten salt..

#

we will never run out

#

thorium-232 is simply too common

#

don't need enrichment plants

#

waste profile is 1/35th of uranium-plutonium fuels

#

and produced waste, does not contain transuranics, so its only fission products which are done being radioactive after about 300 years

#

U-238 is the boogie man in nuclear power

#

when it absorbs a neutron it becomes plutonium

#

and plutonium is the biggest polluter

#

needs storage for over 100k years

#

Thorium 232 absorbs neutron, becomes Th-233, which has short halflife beta decay, to Pa-233

#

Pa-233 has a 27 day halflife, before it turns into U-233 through beta decay

#

because these are different elements, you can do chemical seperation

#

and this is the key in thorium efficiency

#

it needs a sort of chemical "liver" to clean the nuclear fuel

#

you can also mine a thorium reactor for rare resources

#

quite a lot of fission products, when they become stable, can be sold for profit

#

materials such as Krypton and Xenon

#

or other medical isotopes

#

can be extracted from the reactor while it is operating

#

@topaz quarry oh well, nuff said

clear igloo
#

IoN, internet of nuclears 😄

toxic citrus
#

What is the term given to setting up an access point wirelessly?

unborn sluice
#

wap

toxic citrus
#

Effective?

clear igloo
#

You mean where it connects to other APs via wireless only? Mesh is the other term

toxic citrus
#

I think it's wap, and not the other type of wap 😳

unborn sluice
#

what's the other wap

toxic citrus
#

I'll check and see if that's a setting on my modem

peak cloak
#

WAP means Wireless Access Point

toxic citrus
#

what's the other wap
@unborn sluice the "song"

peak cloak
#

idk what you are thinking about linusKappa

unborn sluice
#

monkaHmm I'm not gonna ask any further question. it would be more obvious I know about pop

toxic citrus
#

Right but is wap a good way of doing things or should i route a cable up to the AP?

#

Latency doesn't matter

unborn sluice
#

but throughput does

peak cloak
#

huh, you would always wire up a WAP

#

unless you are doing mesh

unborn sluice
#

Wired AP

toxic citrus
#

What

peak cloak
#

the wireless in WAP means that it emits wifi

unborn sluice
#

seriously though, you want your AP connecting to another AP?

#

like an extender?

toxic citrus
#

I want my ap connected to my main modem

clear igloo
#

correct, APs that talk to each other via wireless are in a mesh. Some use dedicated 5GHz channels to minimize the impact to throughput and whatnot

peak cloak
#

modem or router?

#

those are not the same

clear igloo
#

Probably a combo unit

toxic citrus
#

Combo

peak cloak
#

oh yeah

toxic citrus
#

Stock oem garbage

unborn sluice
toxic citrus
#

It's 4g though i have no choice

peak cloak
#

wire up the WAP if you can

unborn sluice
#

4g?

toxic citrus
#

Right that means using a powerline adapter then and that's oof

#

4g?
@unborn sluice yes, Rico, 4g

unborn sluice
#

oh so it's a wireless modem

toxic citrus
peak cloak
#

or if your router supports mesh you could try to see how it works

toxic citrus
#

First pic is Huawei b525

#

Second pic is Asus dsl-ac55u

#

I know the ac55u works as an AP when hooked up directly but that woul mean using powerline adapter 🤮

peak cloak
#

can't run wires in walls?

#

or is it rented?

toxic citrus
#

All the way upstairs is not ideal

peak cloak
#

it's possible, just hard because of all the beams and stuff

toxic citrus
#

Indeed

#

That's not a job i trust myself to do tbh

peak cloak
#

I still haven't wired up the upstairs either

toxic citrus
#

So I wanted to set it up wirelessly

peak cloak
#

planning on running a conduit outside because it's not possible to run inside of the walls without ripping up drywall

#

there is just one run that was done when the house was renovated

toxic citrus
#

Rj45 go brr

hallow nimbus
#

Fiber goes brrr

clear igloo
#

wifi goes 🤮

hollow marlin
#

W fi s perf t y f ne

toxic citrus
#

Cries in 5mbps

thick rune
#

cries in 43.6mbps on fiber on virgin media

unborn sluice
#

brooo

#

i am ready to switch with you

#

i'd take that 43

thick rune
#

my dad has to pay £24 on 2.4GHz wifi and 5GHz but my wifi card doesnt recognize wifi 5 or 6 so :/

peak cloak
#

huh

unborn sluice
#

don't mix

#

you're dad would pay for the speed

#

not the 2.4 wifi or 5ghz

#

if he does, something is not right

peak cloak
#

what does price have to do with wifi gen?

unborn sluice
#

$100 for wifi 4 ez

#

$150 for wifi 5

thick rune
#

he has a hitron hub and says that he has to pay for both

unborn sluice
#

wait what

peak cloak
#

weird

#

get your own router

unborn sluice
#

You should be paying for the speed, e.g. your 50mbps or whatever

peak cloak
#

yeah

unborn sluice
#

you could possible "rent" the router

#

since some people don't want to buy

thick rune
#

idk all i know is that wifi speeds no matter how fast it says it is its slow

peak cloak
#

you pay for bandwidth AcTuAlLy linusKappa @unborn sluice

unborn sluice
#

youre right

#

I forgot

#

routers don't matter

#

idk all i know is that wifi speeds no matter how fast it says it is its slow
@thick rune do you use like b/g/n ?

#

not ac/ax

thick rune
#

what

unborn sluice
#

gotcha

thick rune
#

is bgn on the white sticker on the router?

peak cloak
#

b/g/n/ac/ax

unborn sluice
#

it's a specification

peak cloak
#

those are wifi gens

unborn sluice
#

probably should've divided it

#

b or g or n or ac or ax

#

there

peak cloak
#

yeah ac and ax are 5 ghz?

#

still most people would be fine with n or ac

unborn sluice
#

I use N right now

#

still waiting for better AP to be available in my Area

peak cloak
#

you can't get Omada's or ubiquiti's ?

unborn sluice
#

want mikrotik

peak cloak
#

true

tame carbon
topaz quarry
#

engenius APs are apparantly amaze

unborn sluice
#

@tame carbon turned me into a mikrotik fan

tame carbon
#

@topaz quarry yeah, only in north america, and primarily business customers

topaz quarry
#

but normies can buy them

tame carbon
#

<-- european

topaz quarry
#

the feels

tame carbon
#

could be worse

unborn sluice
#

could be worse
@tame carbon do it

waxen scroll
#

@rocky badge dont block icmpv6 its bad

#

@topaz quarry i think he turned off his tunnel lol

peak cloak
#

Would it be bad practice if I block my internet facing servers from being able to ping my LAN. I already have a block new rule from the server subnet to the lan.

hollow marlin
#

You should have your internet servers segregated to your LAN yes. If you have a decent firewall thats where zones come in

tame carbon
#

I got a 2nd bridge for that

#

and firewall rules between those two

hollow marlin
#

Basically the same thing in tik world

tame carbon
#

my /29 is routed through my wan address

#

so most of the firewall stuff that is there by default, blocks it

#

so you have to add some accept rules

#

@hollow marlin oh, this is actually outside of the IP stuff

#

using interface lists

waxen scroll
#

o_o

#

:dead:beef:cafe:

waxen scroll
#

@hollow marlin that feel when you peer review a coworkers plan and find things like vlan 69, vlan 666, ....

#

i know what you're trying to do...

#

💫 monkaS 💫

hollow marlin
#

We have one of those guys too

thorny vector
#

Doing some work on tthe security appliance I'm making. I am in dependency heck

waxen scroll
#

themed passwords too

#

simpsons and other shows

#

ive seen this happen at multiple jobs

thorny vector
#

Cuz nerds like having inside jokes, I suppose

waxen scroll
#

when i do passwords its jWR#p0F*q21!

thorny vector
#

looks at test domain named yeet.wtf

tame carbon
#

@waxen scroll vlan 420

waxen scroll
#

ive seen that one too

tame carbon
#

you should be worried if they use vlan 88

#

and 13 has packet loss

#

not sure why

waxen scroll
#

it triggers me when buildings skip 13

#

just because its called 14 doesnt mean its not the 13th floor

flat lion
#

Hmm, anyone happen to know how I'd configure my unbound internal DNS to ignore one of my upstream CNAME records for my domain? (I've got *.ddns.mydomain mapped to ddns.mydomain, which is fine outside my network, but I think it's causing issues with some of my devices on my network trying to use the ddns synthetic A record rather than the proper internal IPs)

topaz quarry
#

yes

#

you rewrite the record internally

flat lion
#

@topaz quarry , yeah, but with what? I don't want anything internally to point to ddns.mydomain except that bare URL.

topaz quarry
#

you just buy a domain and point to it externally use an external DNS system like cloudflare

#

and point to it internally using your own DNS resolvers

#

otherwise if you insinst on using someone else's domain name which you do not own then you have to use NAT reflection

#

your router will figure it out

peak cloak
#
   app.mydomain.com              192.168.1.200

  External CLient       ->      Cloudflare NS
  app.mydomain.com               69.123.123.123
topaz quarry
#

he doesn't want to do that

peak cloak
#

oh

#

then I'm not understanding it correctly

topaz quarry
#

he wants to use a domain he doesn't use and not use a public IP

#

in other words he's using a free dynamic dns service that has provided him with a hostname free of charge

#

now the way you can get your router to figure out what's happening is just tell it that it should use NAT reflection, so when it gets a query to go outbound ti goes oh i see

#

and instead points internally

peak cloak
#

oh

#

just get a domain

topaz quarry
#

lol right

peak cloak
#

if you are a student, you can grab some for free for a year

#

from github student pack

topaz quarry
#

oh really?

peak cloak
#

yeah

topaz quarry
#

man i should've taken advantage of that

#

i feel dumb

topaz quarry
#

i still have an active student account

#

and an active edu email

#

maybe i can squeeze something out of it

#

oh really lol they provide legit domains through an actual registrar

#

it's like $7 a year so i didn't actually think about it

peak cloak
#

what's a good registar

#

right now I'm on .tech

topaz quarry
#

same

#

Google has io and app

#

since they decided to become a registrar as well

#

they also have dev

peak cloak
#

it's sort of annoying as when I say presentmonkey.tech they think I said presentmonkey.tek

topaz quarry
#

net is usually cheaper than com

#

io, app and dev are all super cheap

peak cloak
topaz quarry
#

not far from $7 a year

peak cloak
#

when let's encrypt is free

topaz quarry
#

because they can?

#

some people want vanity certs

peak cloak
#

what are those?

topaz quarry
#

certs with your exact domain on it with an upsteam CA

peak cloak
#

oh

#

I could care less

topaz quarry
#

you would only care if your customers care

#

but if this stuff is just for you

#

it literally doesn't matter

peak cloak
#

yeah, for a homelab it doesn't matter

#

should I transfer my domain from .tech to namecheap?

topaz quarry
#

up to you?

#

i personally don't care who owns my domain name

#

i just use cloudflare for DNS

peak cloak
#

prob will, .tech costs 30 bucks a year

topaz quarry
#

it all shows up on the same pane for me

peak cloak
#

yeah same, cloudflare dns

topaz quarry
#

then always choose the cheaper option

#

when you switch give 24-48 hours for updates to occur

#

it shouldn't take the long but DNS is complicados

peak cloak
elder linden
#

hi guys I am new to networking and i got a question
what does 'ndisc_router_discovery() failed to add default route' means

hollow mural
#

anyone use Synology Drive to sync to NAS, and if so you know why it has to process all the thousands of files I have synced every single time the program opens?

hollow marlin
#

hi guys I am new to networking and i got a question
what does 'ndisc_router_discovery() failed to add default route' means
@elder linden Not sure what OS that error is from but if the router is handing a global v6 router address then it will fail. It needs to be set to the link-local.

#

if IPv6 is not being used it can be ignored

flat lion
#

@topaz quarry , missed your message back. I own the domain (via Google Domains)

peak cloak
#

then yeah, look at my diagram

#

doesn't need to be cloudflare you can use google DNS too

flat lion
#

At this point I'm chalking it up to screwiness with iOS's caching in particular. If I actually query hostname.ddns.mydomain pointing at the pi4 as the NS, the appropriate results are returned. But my iPhone keeps trying to use the public IP which hasn't got any ports forwarded

peak cloak
#

android is also screwy

#

at least in the newer verisons of android, I can't get it to use the local DNS server

flat lion
#

I also have a suspicion it's something to do with the new DoH with iOS 14.

topaz quarry
#

then just point to your domain internally

#

ios 14 still respects DNS settings

#

so if you give it a DNS server, it will use it

elder linden
#

@hollow marlin thanks. I am trying to fix my modem. I got a 1000mb plan and i am only getting 15 mbps rn

flat lion
#

Well that's just it, as far as I can tell, it's using the pi4 as a DNS+DHCP server as it should, but it keeps trying to take pi4.ddns.mydomain and go to the public A record

topaz quarry
#

check your ipv4/ipv6 DNS settings

#

if it's not your pihole

peak cloak
#

you turned off router DHCP right?

topaz quarry
#

then that's why it's doing that

peak cloak
#

just making sure

topaz quarry
#

yes don't create broadcast storms

flat lion
#

Yeah, it's off. And the 4 & 6 addresses are right (both the pi), I've checked

topaz quarry
#

do you have peer dns on?

flat lion
#

mDNS/Avahi? No

topaz quarry
#

if you don't turn off peer DNS from your provider

#

you will get your ISP's DNS

flat lion
#

The router is also pointed at the Pi

topaz quarry
#

turn off ipv6

#

you're probably using peer dns by accident

flat lion
#

Kinda doubt it, it's literally only the iPhone that keeps doing this. Everything else returns appropriate A+AAAA records for hostname.ddns.mydomain inside my network

#

Router is set to stateless V6, RAs disabled, with the Pi set up as the v6 DNS server + v6 router via tweaking ipv6_forward

topaz quarry
#

then just block every DoH

#

address

#

the iphone will default to the DNS

#

if what you're saying is true

waxen saddle
#

It’s something with your setup. I can tell my local dns server to point any domain to any IP I want and my iPhone has no issues routing to the ip I specified for that domain.

flat lion
#

Well like I said, I don't know what exactly the root of the issue is. It could be caching the public A record cause of the cname for *.ddns to ddns, or it could be some DoH issue since I'd recently updated the phone to iOS 14.

topaz quarry
#

if you think it's caching the flush your dns

#

if you have ipv6 on, it's 99% probably you have peer DNS turned on somehow

#

if you think it's DoH then just block every DoH address (isn't like there's a ton of them)

#

if you're unsure, use wireshark to see who your iphone is asking for DNS records

flat lion
#

I know dis and re-connecting to the network (which as I understand it will flush iOS'es cache) will get it to connect to pi4.ddns.mydomain, but it's kinda annoying to have to do repeatedly

topaz quarry
#

then create a wirguard instance

#

and tunnel your iphone to your infastructure at all time

#

lol if flushing your cache solves the problem

#

it means it's picking up an A or AAAA record from it's LTE connection

#

and keeping for the duration of the TTL

flat lion
#

Mobile data is off

topaz quarry
#

then how would it get another DNS server

flat lion
#

I've been asking myself the same question for the last several hours

peak cloak
#

urgh, linux tools would be nice

#

cli

flat lion
#

Well I am on Linux lol.

topaz quarry
#

use wireshark

#

and see where the DNS requests are going

flat lion
#

Arch on my Tower and Arch ARM on the Pi

peak cloak
#

like on the phone

hollow marlin
#

What v6 servers is the iphone getting? Pre-post testing

flat lion
#

Yeah, I just installed it and got it fired up now

waxen scroll
#

Yesssss I love when people ask what the packets say

hollow marlin
#

$5 two RAs with O flag set

topaz quarry
#

lol

flat lion
#

Blech, looks like I gotta log back out and back in first

topaz quarry
#

that would be pretty funny

#

broadcast storm it up

flat lion
#

@hollow marlin it's got the pi's v6 address for DNS and 172.16.0.2 (again, Pi) for v4

topaz quarry
#

so if i get 500 routers all with RA and m mode enabled

#

what happens to the network

#

yell louder equipment

#

yell louder