@hollow marlin I know you probably have, but has anyone else seen an entire data center due from broken STP?
#networking
thorny vector
hollow marlin
@topaz quarry the device will assign and address for every different RA type. With multiple matching RA, it will choose the higher preference RA for routing purposes. High, medium, low
topaz quarry
lol does that not blow up
hollow marlin
@thorny vector oh yeah it's definitely a thing. Thats why the defaco design is moving towards L3/VXLAN
green crest
Is PiVPN good
topaz quarry
idk what are you installing it on
green crest
raspberry pi, I don't actually have it but I wanted to know if it was good so that I could purchase it in the future
green crest
it says that PiVPN supports wireguard
peak cloak
it supports openvpn, wireguard
green crest
no, I don't have web ui tool
topaz quarry
@hollow marlin why is that when i ask for an ipv6 prefix i get a different prefix based on if i incorporate the interface DUID or not
does this mean if i give different VMs running a routing OS the same NIC mac address they will receive the same prefix?
hollow marlin
DUID is a randomizer for IPv6 privacy. Theoretically with SLAAC in base v6 you can travel around the world and will always have the same last 48bits. So they added a mechanism to randomize it
When it comes to virtual and how the address is handle I am not quite sure. Never tried it
topaz quarry
so is the DUID unique to the instance of routerOS
but in theory if present the same hardware to my ISP it will always get the same prefix?
hollow marlin
Its unique on the client end, just the last 64 bits. You will still get the same prefix
topaz quarry
ah
little schooner
@waxen scroll why is it that states can get away with having poorly running servers for an agency that 2 million+ people depend on? Half of the time I visit a motor vehicle site, it says that I was placed into a waiting room due to high demand. Then it refreshes and says "the site is unavailable due to high demand. Check back tomorrow"
topaz quarry
i'm curious as to why the prefix is changing though
waxen scroll
@little schooner lmao
topaz quarry
lol dmv
hollow marlin
Run a PCAP on the WAN in the tik. You'll see the lifetime in the RA. It can change depending how they have it setup
waxen scroll
I've heard of ones with business hours. The site shuts down
little schooner
oh they do that here too. its only open during regular business hours
it doesnt make sense. computers dont need the break
they love working with numbers.
waxen scroll
I get annoyed that maintenance is even an excuse anymore. Put the servers with the new code online and take the old ones that you want to update off the load balancer
little schooner
yeah they should do that
topaz quarry
some service discovery tools do that automatically
like if you're using envoy
just turn off the NIC on the server, or put it ins a disabled state
and update the code base
little schooner
heh and its not like they dont have the money to find the right people to do it correctly
topaz quarry
re-introduce it later
little schooner
@topaz quarry i see
topaz quarry
having someone manually go around turnings stuff off and on is time consuming
you can literally have a CI/CD loop where k8s takes the service offline, updates it and re-introduces it
so when you do git push
it all happens automatically
waxen scroll
Government on IIS
topaz quarry
IIS isn't real
waxen scroll
Every job I've had they used it lol
thorny vector
IIS is a bane to my existence
thick rune
Should I get a WiFi Booster, Repeater or extender?
unborn sluice
topaz quarry
no
peak cloak
well depends on your purpose and the environment (like can you run cables)
tight fiber
so if I'm doing key bases AUTH keep in mind I'm using C should i make strings that hold an array of characters to work as a token & compare the 2 strings as a way allowing more code to run?
this is just a scetch I made
im not using strncpy rn
yes cause its only allows a certain amount of bytes to be used
do you understand what im asking
:/
waxen saddle
How is it related to Networking?
flat lion
On the subject of networking I wonder, who exactly is the Networking guru for LMG, LS himself, or someone else?
charred meadow
Considering they have a flat network no one
waxen saddle
Or all of them.
unborn sluice
Schrodinger's network
umbral fable
Hello. I'm having an issue with my selfhosting
unborn sluice
Aren't we all
umbral fable
Ok.... Well, I'm trying to host things, like webpages and Minecraft servers on my computer
I'm able to join via localhost and through my internal network IP, but not from my external IP
unborn sluice
Do you know port forwarding
umbral fable
Works on my phone, which is connected to the same network
Yes, I set up port forwarding
unborn sluice
Can you show us
umbral fable
I hid the external IP for obvious reasons
But I used whatismyip.com to get my external IP
unborn sluice
what's the port of minecraft
umbral fable
25565, but this is for my webpage
umbral fable
What's with the lel
unborn sluice
a good lel
umbral fable
Currently I have just these rules set up
Top one for my page, and the other for Minecraft
unborn sluice
do you know if your ISP actually allows such ports
waxen saddle
192.168.0.107 is the current IP address of the server?
umbral fable
It used to work before though
192.168.0.107 is my local internal IP, it can only define my device on my network, but not from the other parts of Internet
hollow marlin
Look at the public IP on your router, is it different than what whatsmyip say?
umbral fable
It all used to work, and I don't know what settings might have triggered this to malfunction
It is not different at all
whatismyip says that it is ||1.2.3.4, Hidden for obvious reasons|| and the IP that I set in the external IP is ||1.2.3.4||
hollow marlin
Im saying look at the IP your router is leased. Not what is set in the rules
umbral fable
How do I check that? What name would it go by?
hollow marlin
Typically under WAN
umbral fable
I can't find it
hollow marlin
What model router?
umbral fable
Technicolor DPC3848V
hollow marlin
At the top, network > WAN
umbral fable
hollow marlin
Maybe under admin. It's there somewhere
umbral fable
This is in Admin
hollow marlin
Oh I didn't see the whole photos on mobile. What's under status
umbral fable
hollow marlin
What's under gateway
umbral fable
hollow marlin
Yeah its there under ipv4 address. Compare the to the ip you were seeing with whatsmyip
umbral fable
Now this is annoying...
umbral fable
It's the same
hollow marlin
Ok, just making sure you're not behind CGNAT
umbral fable
well, idk what is happening
I'm getting a "Timed Out" error when I try connecting
It's also good to note I've checked if I tried with a different port or none at all and it gives me a "Refused to connect" error instead
Also, if I disabled my port, it gave me the "Refused to connect"
primal ice
are you running the server on your machine or do you have a dedicated machine for the server -- either way check your firewall settings.
umbral fable
The thing that is getting me is... It was working before, but now it doesn't...
I'm using my own laptop to run it
It used to work completely fine before
unborn sluice
I mean you might not have static IP soo
unborn sluice
so you checked if your IP is the same or different
waxen saddle
I asked about that earlier. They confirmed the server was running on 192.168.0.107
unborn sluice
I mean the external
umbral fable
I can access it from my phone, that is connected to the same network, but my friend that ISN'T connected to the same network, can't access it
Plus I can't access it if I typed the IP from my computer
waxen saddle
Your router might not have hairpin NAT, which would explain why you can’t access it internally using the external IP
topaz quarry
@hollow marlin do you have any clue what's the difference between listen to interface on OpnSense/Pfsense
and a dhcpv6 client on RouterOS?
umbral fable
I think something just clicked
Maybe there wasn't a problem in the first place...
But I guess my friend I CAN connect to that exact IP, but devices on my own network can't...
Now that raises more questions than answers, but hey, if it works, I'm not ever gonna complain ever again
hollow marlin
@topaz quarry no clue on *sense. Its been years since I touched it and that was well before what I know now
topaz quarry
if you exposed it using a public IP with a DNS record. then you need NAT reflection
so your router can figure out that it's not actually outside your network
umbral fable
Your router might not have hairpin NAT, which would explain why you can’t access it internally using the external IP
@waxen saddle Maybe that might be it...
topaz quarry
that may be what Corewyn referrs to as hairpin NAT
waxen saddle
Yep. Same thing.
topaz quarry
so find the thing for Full NAT reflection
and you can access it internally
or maintain two DNS records
one for public ip infastructure
and one for your infastructure
umbral fable
Well, I don't care... If I can access it, I'll take it
topaz quarry
good stuff
umbral fable
I meant if others can access it.
waxen saddle
Basically, you are routing your internal connection through the router, which isn’t ideal. Recommend using internal IP on your LAN and external IP for others. If you have control over local DNS, you can point your dynamic dns name to the IP of your LAN server and you can use the same URL internal and externally and it will be efficient.
topaz quarry
yea mainting two DNS records is the least dumb thing to do
like with pihole or adguard home or something
umbral fable
But anyway, thanks to everyone who assisted me. But to everyone, have a good day or evening
red arrow
I somehow have two IP addresses on one device
Running ubuntu server
how do I get rid of the second connection
I just want one
fixed it
It's because I made a 01-netcgf.yaml but forgot to turn off DHCP on the original 50-cloud-init.yaml
I mean I can make 254, more if I want to configure it so
idk
Well I fixed it but there was 2
You can have many, I don't know if there's even a limit
No more question, I said I fixed it
well now I just look like I'm talking to myself
sly zealot
anyone experienced with ubuntu server network setup here ??
sly zealot
so during installation , i have my mobile hotspot turned on and i have a usb wifi adapter plugged into the pc. It detects the adapter but there are no options to connect it to my hotspot
how do i do that ??
topaz quarry
You don’t use USB WiFi adapters
It’s up to the OEM of that USB WiFi adapter to upstream patches to the Linux kernel
Or provide you with a driver
Neither has happened apparently
sly zealot
so i dont have a ethernet connection for some time
what are my other options @topaz quarry
topaz quarry
Buy an AP, put it in client mode
And create an Ethernet connection
It’s essentially a wireless bridge
If you have available PCI-e slots
Get a PCI-e WiFi adapter
Or find a USB WiFi adapter that has Linux support either through the kernel or through independent drivers
I can’t help you with the last one
sly zealot
can i share my internet from this pc to that via ethernet ??
sly zealot
Or find a USB WiFi adapter that has Linux support either through the kernel or through independent drivers
@topaz quarry I had used it with kali and it did work without any drivers
It is technically possible
@topaz quarry how
topaz quarry
But you’ll end up creating problems
You’re basically going to turn your computer into a router
Undoing it is very annoying
sly zealot
But you’ll end up creating problems
i will use the usb adapter by configuring the proper drivers once the image gets installed
i guess i have to wait for ethernet then
topaz quarry
what computer are you using that doesn't have built in wifi?
sly zealot
what computer are you using that doesn't have built in wifi?
its an old pc so i am turning it into a home server
humble cloak
tame carbon
premium wifi
unborn sluice
if you have rgb wifi, that might make sense
flint matrix
My motherboard had Rgb wifi 6 xxl hardcore extra fast
spare cypress
Best home router is a mini-atx case , R5 1600x , 16GB DDR4 , 512GB NVME SSD , Quad 10Gbit port PCIE card, and a Wifi 6 card with at least 6 Antennas
Load this with RouterOS and a L6 License and you have a very cabable network device
it should be a threadripper 3950x
@unborn sluice 😅
Maybe a big Navi with it's more open compute architecture could work very well instead of dedicated NP's
spare cypress
with hardware chips
@peak cloak Given the massive computing power if rumors are to be believed it should at least equal an entry level firewall with NP's if there is low overhead with the new IO fabric
peak cloak
don't ask to ask; just ask
rose sparrow
😂
My ISP is providing a shared connection, that is the public IP isn't directly assigned to the router, an internal server assigns the ip. If I want to configure port forwarding in such a case what can I do
peak cloak
so they are doing CGNAT?
rose sparrow
Yup I think
rose sparrow
Ip assigned to my router
This is my public ip
to like a "gateway" can you elaborate
@peak cloak
Anyone??
olive notch
Try running a traceroute
clear igloo
Yes, you have a 100.64.x.x/10 IP, you're on CG-NAT 100%
olive notch
Do they really nat to a public ip class? I thought they would do that to something like 10.x.x.x
clear igloo
Yup, 100.64.0.0/10 is reserved for CG-NAT
tame carbon
@clear igloo TIL.
rose gazelle
Good ol' brown fans save the day again
No more jet engine s whirring through the room
rose sparrow
Yes, you have a 100.64.x.x/10 IP, you're on CG-NAT 100%
@clear igloo
Yup, so by any means I can do port forwarding?
clear igloo
You cannot @rose sparrow
Well, maybe, let me ask, what are you trying to port forward?
clear igloo
Ah, I was going to say you could setup a server/VM somewhere and then tunnel from your home to the server and then access the server remotely
rose sparrow
I was planning on ftp, rdp and ssh
But then I thought I can just make a open vpn connection
clear igloo
I hope you mean FTP and RDP after VPNed in
rose sparrow
Yup
clear igloo
Yah, you could possibly setup an tunnel to a remote server and then when you need to access your local network you VPN to the server and it tunnels back home
It's a good bit of work and has some recurring costs though
rose sparrow
AWS?
clear igloo
Probably, yah
rose sparrow
Oh I see
clear igloo
It's not 100% guaranteed to work though but it's always worth a shot if you really need to
rose sparrow
I have Raspberry Pi running 24/7 can I do something with it
clear igloo
In case anything messes up the tunnel from home to the server with CG-NAT in the mix, it shouldn't but you never know
rose sparrow
you could do pihole
@unborn sluice
I have already done that
unborn sluice
Yea, you never know but I haven't had problems in mine
clear igloo
I have Raspberry Pi running 24/7 can I do something with it
@rose sparrow You'd have to use that to tunnel to somewhere not behind CGNAT like a VM on AWS or something
rose sparrow
Oh I get it now
clear igloo
You're basically setting up what's known as a site-to-site connection and then you use the remote site (ie AWS or something) as your VPN point for your phone or whatever when not at home
rose sparrow
I think better option will be to switch the ISP itself
clear igloo
Yah, if your current ISP is doing CG-NAT I'd say there is a good chance the others in your area are too
waxen scroll
ISP should just ipv6 already
tame carbon
@unborn sluice https://aws.amazon.com/ec2/instance-types/
those CPU credits is a bit of a tricky thing
your core is shared with others
The CPU credits used depends on CPU utilization. The following scenarios all use one CPU credit:
One vCPU at 100% utilization for one minute
One vCPU at 50% utilization for two minutes
Two vCPUs at 25% utilization for two minutes
unborn sluice
that doesn't count
tame carbon
yeah but you can push 100% cpu at all times
cores arent shared
amazon is selling you vCores here
so the micro vm
you have a baseline of 10%
so your average cpu is at most 10%
if you use less, you build up credits
which you can use briefly to 'burst' to more than 10%
unborn sluice
that's the T class
tame carbon
yes
which is why they so cheap
but for a CG-natted internet connection as a site2site
its totally reasonable
dont need that much cpu
since the encryption can still be hardware offloaded
since its x86
rose sparrow
Yah, if your current ISP is doing CG-NAT I'd say there is a good chance the others in your area are too
@clear igloo
Actually the service provided by our government isp is unCGNATed but it's too slow. I was thinking if I could use a load balance router for that purpose
rose sparrow
how slow is it?
@peak cloak
It advertise 8mbps for 10usd but I barely get 3mbps cuz it's running on old ass telephone lines which are present since 1990
peak cloak
hmm, yeah. I don't think you would be able to run anything stably on that
rose sparrow
Yup
and what service do you want to run?
@peak cloak
Can you please read the old messages cuz it's a pretty long story
peak cloak
yeah I think it could work
pine bridge
need someone to help me get the best ping out of my router XD
like need help with all the settings and stuff
pine bridge
@peak cloak like normal settings
peak cloak
you can't magically increase your ping
once it's out of your router, it's all up to the ISP
pine bridge
idk I feel like my internet in general is bottlenecked somehow
peak cloak
then test directly from the modem/ONT
pine bridge
I have 0 understanding of networking tbh
peak cloak
what's your ISP
clear igloo
How are you connected from your PC? Are you wired? Wireless?
peak cloak
^ first question I should have asked tbh
clear igloo
Magic can have different latencies 😛
pine bridge
@clear igloo pc with lan
@peak cloak im not from the usa so u prob wont even know my isp
XD
topaz quarry
if you're connected to the ISP assigned box
with ethernet
that's like all you can do
pine bridge
@topaz quarry but im getting like 100 ping
on good days
lmao
to close by servers
like my ping is about 60 to my isp
peak cloak
run a traceroute
pine bridge
how ?
peak cloak
to the game servers
pine bridge
do I do that
peak cloak
on windows: tracert <server ip here>
pine bridge
as I have said 0 understanding when it comes to networking
peak cloak
so like tracert 1.1.1.1
peak cloak
you know command prompt
pine bridge
yep
pine bridge
it's pinging 172
peak cloak
once it's done show the output
thick minnow
hey can someone help me, im setting up a steam cache but my docker is always saying "Restarting"
topaz quarry
you can have a 5ms ping to your ISP's datacenter
and a 100ms ping to the game server
the game is not hosted at your ISP's datacenter
you need to provide more info than restarting for us to figure it out
provide logs
thick minnow
peak cloak
@thick minnow check logs
waxen saddle
Dotty, do you have it installed on Ubuntu?
thick minnow
its 11 pm here so im heading to bed im going to attempt again tomorrow ill keep you updated
dark kayak
docker logs steam-cache
If it's restarting, then you've got it set to come up in an auto-restart mode and it's terminating for some reason.
so now that I'm out of game: so a couple of things that you should check, I can't tell if you've configured them: Whether those containers have been given networking privs/config to be able to talk to each other, for one, are they exposed to the host machine, because you have no ports open - but as I said, if they're constantly restarting, somehting is killing or causing the process to finish.
waxen saddle
I had the restart problem because Ubuntu runs a DNS server on port 53 and the container couldn’t start.
flint matrix
is there a decent workaround for openvpn on the UDM pro?
topaz quarry
yes
run openvpn/wg in a docker host/vm host and port forward to it
seperating your control plane and your data plane will cause you less pain later
unborn sluice
more plane less pain
flint matrix
like have a separate wifi network setup
to just portforward
to that host?
my goal is to be able to connect wireless devices to etiher US based IP or local based IP
for streaming
topaz quarry
you want an openvpn server to vpn into your network yes?
or do you want to do it the other way around
flint matrix
other way
topaz quarry
then setup a docker/vm to act as an OpenVPN client
and set that as your default gateway
instead of your router
the docker/vm host will still use the router, it will just encapsulate it over the tunnel
flint matrix
can i do that for only specific traffic? like whichever devices are on certain networks?
flint matrix
i have a udmp
topaz quarry
then just associate different SSIDs with different vlans
make 777 or 888 your lucky vpn tunnel vlan id
to tunnel over to other region
and leave your default lan for everything else
south blade
What's a decent gigabit wifi router that I can buy used? I had mine bugging out or something once in a while, lost WIFI across all devices, but LAN (only one device using it) kept working. So I then set it up to auto reboot at night (DD-WRT), but it's still doing it. It's not very often, but when it does it's inconvenient.
lilac tree
Any one here have the new UniFi WiFi 6 devices and have any suggestions on optimal settings?
waxen scroll
I don't think that exists
Yep it's not even in the product page. Sorry bro you got some china ripoff
@rocky badge y so quiet
So you made a mistake. No reason to run away
@hollow marlin I can't get through to him
hollow marlin
Blob where you at 
reef gazelle
@waxen scroll Unifi 6 exists...
It's in early access so you wouldn't see it unless you had a UBNT account
waxen scroll
I have a ubnt account
unborn sluice
whole trout
Does anyone think this idea could be stupid?
2 routers in one modem connection. That was my whole plan originally, too stupid?
whole trout
What would be a good mesh you can recommend me with?
sand hound
whole trout
Google Nest...?
whole trout
I was gonna say didn't Google just discontinue their Nest line up of products? Lol
primal ice
as in google for your area we have no idea where you live.
whole trout
I live in the central valley of California, so my ISP is Comcast/Xfinity.
primal ice
area/region
whole trout
How do you mean?
sand hound
does comcast have fiber?
whole trout
Comcast does now.
primal ice
engenius look them up
whole trout
But in my area, I'd have to consult Xfinity first.
I believe I can get 10G from them, according to a sales rep since I would be the first one to get fiber connection in the region I'm in.
sand hound
At what cost tho
whole trout
I was originally going to upgrade from my Linksys router to the Xfi system, where Xfinity would provide you whole home coverage -- but their repeaters were said to not be as good as expected.
primal ice
https://www.youtube.com/watch?v=4G2g7Txgzgw watch that. :p
whole trout
(Hence the unlimited data offer they have, Xfinity just started issuing data caps at 1.25TB, after that you have to pay $20/50GB -- which is stupid, thanks to FCC.
And alright, thanks @primal ice -- I'll check that out right now.
dusty osprey
Anyone knows how Carrier Aggrestion works in 4g? My isp supports bands 3,7,20 even tho b7 doesnt work for some reasons
Random website says i can CA on 3,20
Those bands individually work but they never CA
lethal marlin
brittle estuary
my internet provider offered me an add-on service to my existing 6mbps service
with 7us a month they will provide a unlimited 5G with HUAWEI 5G CPE Pro 2
serene ridge
brittle estuary
any good 4g/5g router recommendations?
eternal raptor
Aren't 4g/5g routers generally work just like hotspots?
brittle estuary
just want to know if its stable for something like gaming/torrent./etc
brittle estuary
can the router handle multiple use + torrent
topaz quarry
are you getting a FIOS 4G/5G plan or something?
if you want cheap stuff that works just get mikrotik stuff
i wouldn't trust huawei equipment with a ten foot pole
it's a single unit with roughly no feasible way of cooling and I assume you're going to have the clients in multiple rooms. So the answer is probably no
brittle estuary
ok thanks
stability is crucial as we do real time stock trades at home.
f the huawei
my home is using two 6mbps lines, n can use some upgrades though lol
topaz quarry
your answers are ubitiquiti or mikrotik for reliable cheap home networking
if you want low latency you sincerely need to setup a mesh network or just rig everything in a wired fashion
brittle estuary
already has linksys mesh
topaz quarry
oh in my experience linksys is pretty bad
considering cisco basically uses it as their trash brand
is it working out for you?
topaz quarry
don't run multiple wifi networks in your home unless you know what you're doing
you'll end up making them fight each other
whole trout
@serene ridge 1.2TB/month
clear igloo
@topaz quarry Cisco hasn't owned Linksys in years
Belkin owns them, I think they were sold in like 2011 or so
toxic citrus
@brittle estuary Huawei 4g and 5g modems are absolutely garbage i have first hand experience. They're adequate until you use it for like 30 seconds and then the speeds drop by 80%. Will prove it later on if you don't believe me 😂
brittle estuary
@toxic citrus is there a 5G router that’s doesn’t speed drops?
tame carbon
1.2TB/month is a lot
we use IPTV, and even that doesnt use so much
what happens if you go over 1.2?
this is just fair use policy what they are running
so generally, they are lenient, 1.2TB is not bad. I get 1-2TB of monthly transfer on a $5 VPS in a datacenter
rarely gets to the limit
toxic citrus
@toxic citrus is there a 5G router that’s doesn’t speed drops?
@brittle estuary no idea but definitely wouldn't be a Huawei because they're awful lmao
tame carbon
5G will suffer from environmental effects
so lightning storms, interference from other 5G communication, as well as rain and objects
but its way faster than 4G, and scales better
line of sight to the tower, is preffered
gets you good signal
thats why those boxes are often installed on the roof
primal ice
apparently in the last 12 days (how long the router has been up) I've used 158GB ~13GB a day and I haven't been gaming. thats just youtube and netflix and discord. meh.
brittle estuary
is there a usb dongle that has both Wifi ac n bluetooth 5.0?
or should i jus get them separately
Asus usb-ac53nano
Asus usb-bt500
unborn sluice
go with pcie wifi
cedar igloo
basic question, if you directly connect two machines, does it use an inbuilt DHCP server to assign IPs? And also, can they instantly communicate with eachother or should there be some more setup required?
tame carbon
@cedar igloo if you plug two computers directly to one another, you'll have to use static addressing
since theres no dhcp
hollow marlin
You could use the APIPA address if you just need to talk between them only. Just look at the 169.254.x.x address on both and they'll be able to reach each other
dire flare
Could always configure a DHCP server on one of the boxes, but that's really, really unnecessary work for something like that
unborn sluice
just use a switch + static ip
hollow marlin
Use the KISS method. Just APIPA and done
dire flare
You really don't need a switch
As long as the NICs are relatively recent (Auto MDI-X is an optional but in practice pretty much always there part of 1000BASE-T spec) you don't need any cross cable tomfoolery either
tame carbon
I've not had the need for a crossover cable in literally 15 years
pretty much all modern ethernet interfaces have support for this out of the box
dire flare
I needed to use a crossover cable once
It was in class a few years ago & we had to put together some old Cisco gear
People still very regularly claim that no no no you need a crossover cable to put together two PCs
hollow marlin
We have some legacy voice gear that is legit 19 years old that supports auto-mdi-x. Its really not a problem anymore
tame carbon
used to just hook laptops together
to play age of empires when we had no internet
or command & conquer: generals
clear igloo
Now you have WAN parties 
hollow marlin
VXLAN parties?
clear igloo
Yus!
dire flare
You guys wouldn't happen to have any literature recommendations on learning SQL?
unborn sluice
Just learn SQL without literature
tame carbon
@unborn sluice literature for learning SQL is actually the best place to learn it
because ANSI sql is pretty much what works on all systems
unborn sluice
I actually don't know whatd you mean by literature for learning SQL
is that a website or something
unborn sluice
gotcha
tame carbon
you can understand sql better if you know how the engine will use your query
how to optimize indices
and set up constraints properly
tame carbon
sql server is actually the easiest if you want to do ANSI sql
it adheres to the standard quite well
dire flare
No Starch Press has a SQL book out but they cover stuff through the perspective of PostgreSQL.
I think I'd probably benefit most from MySQL/MariaDB focused content
unborn sluice
just learn any SQL
tame carbon
but I wouldn't learn on mysql
tame carbon
cus you have to make SEQUENCE for everything
unborn sluice
but I learned how to deploy the shttest to work
tame carbon
and bunch of other mappings
tame carbon
@dire flare mysql lacks some of the constraint features, CHECK constraints do not work
though MariaDB addresses these issues
I still prefer other engines for it instead
unborn sluice
I kinda considered XML as config files
not data
so clunky to use as data
though , yes html
tame carbon
html is not xml
unborn sluice
i mean markup as general
unborn sluice
html is not xml
xhtml doesn't exist
tame carbon
and json for more advanced configuration
tame carbon
most of the message passing I've built with pubsub
is just json yeeting back and forth
main reason why I prefer using xml, has to do with JAXB
unborn sluice
yea I agree
I use GSON to pass java objects over whatever
I thank google for such a useful library
tame carbon
dont need gson
gson is bad
I only use it for parsing json that I dont know the structure of
This is my preffered lib for handling json with xml
This allows you to use jaxb bindings for json
unborn sluice
I still remember jackson
tame carbon
I have it as a standalone jaxb context
and it also works with Jersey
the rest framework I use
so you can just send headers to the server Accept: application/json
and it gives you json
and application/xml for xml
unborn sluice
I have no problems with connection whatsoever, it's just how to handle the conversion
I like python can do such with less insane ways
tame carbon
meh, lemme find a context provider for moxy
unborn sluice
though i'd say the python way is the sane way
tame carbon
its not that much code
unborn sluice
I mean sure, you can code it in whatever
tame carbon
nah but to get moxy going
to tap into jaxb
public class DiaxJsonContext {
private static final String PACKAGE = "me.diax.srv.stubs";
private static final String MEDIA_TYPE = "application/json";
private static DiaxJsonContext context;
private final Marshaller marshaller;
private final Unmarshaller unmarshaller;
/**
* Creates a new context based on the given package
*
* @param packageName the package where to look for models
*/
private DiaxJsonContext(String packageName) {
try {
Reflections reflections = new Reflections(packageName);
Set<Class<?>> types = reflections.getTypesAnnotatedWith(XmlRootElement.class);
JAXBContext context = JAXBContext.newInstance(types.toArray(new Class[types.size()]));
unmarshaller = context.createUnmarshaller();
unmarshaller.setProperty("eclipselink.media-type", MEDIA_TYPE);
unmarshaller.setProperty("eclipselink.json.include-root", false);
marshaller = context.createMarshaller();
marshaller.setProperty(Marshaller.JAXB_FORMATTED_OUTPUT, true);
marshaller.setProperty("eclipselink.media-type", MEDIA_TYPE);
marshaller.setProperty("eclipselink.json.include-root", false);
} catch (JAXBException e) {
throw new RuntimeException("failed to initialize context", e);
}
}
...
}
@unborn sluice ^ this is pretty much all you set
tame carbon
yeah
unborn sluice
tame carbon
but this is the minimal amount of code to use json with xml classes
@Getter
@Setter
@ToString(callSuper = true)
@NoArgsConstructor
@XmlRootElement(name = "profile")
@XmlAccessorType(XmlAccessType.FIELD)
public class Profile extends IdentifiableModel implements Serializable {
private static final long serialVersionUID = -7330255948705861599L;
private Long discordId;
private long xp;
private long balance;
}
Gotta love the number of annotations
unborn sluice
For such cases I'd rather have a function already
tame carbon
or a bunch of boilerplate code
unborn sluice
feels like annotation is abused
unborn sluice
Yea, that's why I want to have functions max 3
tame carbon
@Getter just generates getters for all the fields
its just compiler sugar
@unborn sluice these are just models
data containers
that can be turned into xml, json or serialized into binary
python is not type safe, and so you don't need this
but java, you kinda need some binding to program against
otherwise you'll be forced to have string references everywhere
which is not checked compiletime
tame carbon
@unborn sluice craziest beast I've built... was probably a script host
wrote a program that was ment to do health-checks on server instances
the healthchecks themselves however, had to be flexible
tame carbon
yeah, these people used zabbix
and had their own collection agent
but it was a hardcoded piece of junk
that had to be recompiled everytime they wanted a change
tame carbon
yeah I rewrote it
unborn sluice
so that's why I got the json to java objects nightmare
unborn sluice
I'll want to rewrite this in python
tame carbon
some of the libraries they used to talk to the backend systems, were java only
so you had the individual tests, in a directory in /etc
and the script engine would load these at a set interval
and execute them
the script host provided the urls and configuration properties to the scripts with its own object
using the other configs from /etc
unborn sluice
it's time you migrate them away from java
tame carbon
var host = properties.get("commserver.cli.host");
var port = parseInt(properties.get("commserver.cli.port"));
var user = properties.get("commserver.cli.user");
var pass = properties.get("commserver.cli.pass");
var logger = new Logger();
var context = new CliClientContext(host, port, user, pass);
var client = null;
var success = false;
try {
client = new CliClient(context);
client.connect();
var resp = new DefaultCliResponse();
client.doRequest(new CliRequest("PING"), resp);
var responseList = resp.getResponseText();
if (responseList.size() === 1) {
success = (responseList.get(0) === "PONG");
}
} catch (e) {
success = false;
} finally {
if (client !== null) {
client.close();
}
}
zabbix.set("backend.commserver.cli", success);
@unborn sluice I mean, as a script host, being able to do service testing like so
there's util commands like cmd()
for shell commands
this is javascript sandboxed in a java vm :)
sadly, oracle has deprecated this now
file structure is at least interesting ;)
unborn sluice
this is javascript sandboxed in a java vm :)
good thing some people implemented js in java
(iirc)
tame carbon
thats the NashhornLoader for me
it sets up an environment
wrote that myself
after experimenting with the jjs engine
final class NashornLoader {
private static final List<String> PRE = Arrays.asList(
"load(__LIB__ + 'init.js');",
"imports = new JavaImporter(java.util, java.io, java.lang);",
"(function () {",
" with (imports) {",
"//BEGIN SCRIPT"
);
private static final List<String> POST = Arrays.asList(
"//END SCRIPT",
" }",
"})();"
);
/**
* Wraps the given code with the environment code
*
* @param code the code
* @return the wrapped code
*/
static String prepare(String code) {
StringBuilder sb = new StringBuilder();
for (String s : PRE) {
sb.append(s);
sb.append("\n");
}
sb.append(code);
for (String s : POST) {
sb.append(s);
sb.append("\n");
}
return sb.toString();
}
/**
* Gets the linecount to account for corrections
*
* @return the linecount
*/
static int getLineCorrection() {
return PRE.size();
}
}
all this did
is inject your code into a context
with some of the lib stuff xD
/**
* Executes a script
*
* @param script the script
* @param bind the object bindings
* @throws ScriptException if script execution failed
*/
void execute(Script script, Map<String, Object> bind) throws ScriptException {
ScriptEngine engine = new ScriptEngineManager().getEngineByName(script.getEngine());
try {
for (Map.Entry<String, Object> entry : bind.entrySet()) {
engine.put(entry.getKey(), entry.getValue());
}
logger.debug("=== Script Execution ===");
logger.debug("Script: " + script.getName());
logger.debug("Engine: " + script.getEngine());
logger.debug("Bindings: {");
for (Map.Entry<String, Object> binding : engine.getBindings(ScriptContext.ENGINE_SCOPE).entrySet()) {
logger.debug(" " + binding.getKey() + " -> " + binding.getValue().toString());
}
logger.debug("}");
registerEnvironment(engine, script);
engine.eval(script.getCode());
logger.debug("=== Script Finished ===");
} catch (javax.script.ScriptException e) {
correctColumn(e, script);
throw new ScriptException(e);
}
}
//init.js
load('nashorn:mozilla_compat.js');
load(__LIB__ + 'logger.js');
load(__LIB__ + 'utils.js');
load(__LIB__ + 'sql.js');
mozilla always
tame carbon
yep
then you pretty much got a good environment to work in
you can import java classes as prototypes
and make instances
and pretty much everything works
tame carbon
@peak cloak I bodged a script engine into a daemon that supposed to do healthchecks on bunch of services on a customer environment
this was for a telemetry backend
for sewer and traffic management
over 300k tracked objects
a lot of the propietary libraries they had were java, so I needed be able to fall back onto those
so nashhorn was the only way to satisfy that requirement, as well as it being reconfigurable without recompilation
so the sysadmin dept could adjust things if need be
not every environment had the same test configuration and setup
tame carbon
@unborn sluice the framework I built, was designed from the ground up, to support more than one scripting language
I just didnt spend any time implementing any
just nashhorn
unborn sluice
Why reinvent the wheel
tame carbon
was only 60 hours
Look, these people sucked at planning, and during my 2 years working there
I was done on thursdays with all my assigned jobs
and just did some stuff on the side
and this was one of the nagging issues nobody wanted to tackle
but I managed to build an overengineered script host that was installed as a debian package alongside the main application as a systemd service
xD
took them couple hours to integrate
so they were quite pleased
unborn sluice
Look, these people sucked at planning, and during my 2 years working there
why do I always hear these stories
tame carbon
their code was a mess too
I cleaned up a lot of things
seperated modules with pure interfaces and added DI
@unborn sluice they implemented the unix permission system with an enum
I asked them, and they told me it was faster this way
but you can just do bitwise operations with an AND
which is even faster
thorny vector
why do I always hear these stories
@unborn sluice Because as soon as people start being management/project planners, they lose all sense
unborn sluice
waxen scroll
woeful birch
sexy
peak cloak
probably just windows
use linux 
no honestly idk
can't really
it's probably something with windows "querying" traffic or something, I don't know much about it
maybe QOS too
idk
peak cloak
F
Put a raspberry pi in a case the wrong way and I cracked it
I was so close to deploying pi-hole and grafana
frigid sphinx
oh it could be worse..
it could have been my 128g version of that card
which was very much not $20
thorny vector
Who needs grafana? Its all about that splunk 👈
thorny vector
You monster
little schooner
@thorny vector you got splunk, kid. Real splunk.
I just had to type that out lol
forest kettle
Hello, anyone good with setting up an FTP server for external access... I am having a few issues connecting externally.
peak cloak
Well why do you need an ftp server. There may be better ways for what you want to do
waxen scroll
@topaz quarry the workaround is use port 80
topaz quarry
an ftp server on port 80
which is also blocked by some ISPs
is just straight up cancer
waxen saddle
If the FTP server is just for downloading and no authentication is needed, FTP is fine. For anything else, you’ll want to set up a secure FTP server. Or check out another protocol entirely.
next roost
Anyone else in here content creators?
thorny vector
@next roost like what?
toxic citrus
Weird flex
little schooner
Everyone here is a content creator. By using discord and typing out a message, you created content
waxen scroll
yeah i was gonna say that
decided not to be a smart ass
but since you started it
i create daily, get paid, and you're not allowed to see it.
the funny part is @clear igloo is allowed to see it
he has an NDA signed
clear igloo
😛
hallow nimbus
is just straight up cancer
@topaz quarry
whole trout
Is it possible to convert an old router to work as a mesh or an access point?
If anyone has any idea, please do share. ^
Right, and wouldn’t matter what brand of router it is, right?
I wanted to make a TP-Link router as the main one and then the old Linksys router I had as an access point (or mesh).
If anyone knows, I’d really appreciate it if there’s a tutorial.
And yeah, it’s not even me who is taking on this project.
peak cloak
depends honestly
if you can disable NAT or it has an AP mode
or you flash an alternative firmware on it
like DD-WRT
whole trout
Does disabling HDCP work? (According to the person taking on this project, yes it “could work” but I sort of doubt it. Any takers?)
peak cloak
HDCP?
you mean DHCP?
DHCP is one thing you need to disable
but you also want to turn off NAT
otherwise you will not have one network, but two instead
whole trout
*DHCP, sorry yes.
peak cloak
well I have like 5, but in VLANS
whole trout
So this all goes to two different SSID’s now, rather than one?
whole trout
Well two networks, I just read that now.
peak cloak
well double-nat is
peak cloak
There's a lot of factors, there isn't ONE specific way
whole trout
So does it vary in between brands or how does it go?
peak cloak
that's one thing, but also just network design
whole trout
Got it.
little schooner
Double NAT is not a good solution
But to XFinity tech, they said paraphrasing "because it was in bridge mode, it was preventing your modem from getting an internet from the line"
peak cloak
what does that sentence even mean
it sounds like when people just use big fancy words randomly
little schooner
I know. This was at the dentist office
Prof asked me to get a modem selected out for the business to use and he got the right one from bestbuy. He proceeded to install it and the old XFinity unit was in routed mode. I listed the steps for him to switch it to bridge so the modem can get the signal and go to the router from there.
Some reason the XFinity unit locked up or something and instead of calling me he called XFinity tech in
And XFinity was telling him lies about the modem we were using and bridge mode junk
I was disappointed.
@waxen scroll Im about to try out an engenius access point in a few days to see if its more reliable than unifi flex HD. It's been acting a little weird on reboots
whole trout
Yeah this isn’t anything with the set up I have, I have Xfinity but I don’t have their modem/router @little schooner
little schooner
Even outright blocking wifi clients from connecting to it for 2 minutes after its up and running
waxen scroll
old engenius was not reliable, i dont know about recent
primal ice
wendel really likes the new ones
little schooner
@whole trout what I'd like to do is use unraid to run a firewall/router like opsense and a Linux server on a low power mini pc box, replacing my Edgerouter
@primal ice thats good to hear
peak cloak
I still don't like the idea of a virtualized router for core applications, like being a core router for my home
primal ice
@whole trout are you connecting the tp-link and linksys via ethernet or wifi?
little schooner
@peak cloak what concerns do you have with it
whole trout
@primal ice what do you recommend?
peak cloak
just reliability and also the fact that it doesn't have dedicated routing hardware, so it uses more power
@whole trout ethernet 100%
little schooner
Do you think 10W is too much power
peak cloak
I mean if you have a dedicated low power box then that's fine
little schooner
Yes it would be low powered like that. That's my goal
peak cloak
but like people running core routers on their r720's
little schooner
1gbps is enough speed
peak cloak
yeah
primal ice
yeah connect them with ethernet, turn the dhcp off on the linksys (turning it into an l3 switch basically) it should get its ip's from the tp-link and then set up your ssid's the same on both units. don;t use the wan port on the linksys to connect them. the vlans should be set up already for the wifi to just work. you may also want to set a static route for the linksys on the tp-link. this is basically what I have done to my buffalo router dhp1750 to make it an access point.
peak cloak
but, you are still double NATing
primal ice
nope nat gets shut off by not using the wan port
peak cloak
oh yeah, I guess that would work
primal ice
though you can also flash dd-wrt or what ever on it and then just bridge the wan to the other ports but that is just complicating things.
peak cloak
I never had to really work around issues with consumer routers, so I didn't think of that
scenic void
is a cheap network card better than intergrated network on the motherboard?
I currently do 10mbps download, max 12mbps if everything but the download is closed
i wanna up the download by a bit.
scenic void
we are getting 110mbps download on 5ghz
and 10mbps upload on 5ghz
im not sure the price but its quite a bit expensive since its virgin media and virgin media is the fastest in uk
scenic void
its on ethernet
peak cloak
Oh
peak cloak
@scenic void 11 MB/s or 11Mb/s
peak cloak
if it feels slow, like when browsing the web then it could be DNS
if speedtest says it's around 100, then it's fine
scenic void
ookla i try every now and then, ill try it now with pausing all the downloads
107 download
and 9 upload
scenic void
k
I guess only other thing is to get a higher speed package from isp.
but dont need it rn
little schooner
@waxen scroll at work, I noticed that you don't want to say "I know how to fix that", because if you do, they will pass and assign you that responsibility for current and future occurrences forever
scenic void
Strange, I'm now getting 4.2MB/s on this download
and discord messages are taking longer to send.
peak cloak
most likely it's on your ISP's end
peak cloak
so when you type google.com in the browser your computer needs to know what IP to go to. So it sends a DNS request to whatever DNS server that is configured (if it wasn't changed then it's most likely your ISP's DNS server and can be slower than other public one's) and asks for the ip. Then your computer will send an HTTP request to google's ip address
waxen scroll
@little schooner if it's not related to your job, yeah. Don't say anything
peak cloak
Basically, if the DNS resolution is slow, your pages will take "longer" to load as your computer is waiting for the DNS server to provide an IP address
scenic void
I'm using my ISP DNS.
scenic void
just opening that link drops my download to 2.8MB/s
is ipv4 better than ipv6? or the other way around
peak cloak
ipv6 is newer than ipv4
basically we have run out of ipv4 addresses
so ipv6 was created about 20 years ago
adoption has been slow tho
so basically, there is no need to NAT in ipv6
because there are so many addresses
and restores the original point-to-point idea of the internet
scenic void
whats a subnet prefix length?
i am trying to change my preferred dns to the .8 one instead of the .4 since .8 is faster
peak cloak
why do you need a subnet prefix for DNS?
scenic void
idk
peak cloak
are you changing it in windows?
scenic void
mhm
peak cloak
or in your router
scenic void
windows
frosty warren
ooooooooooooook
peak cloak
yeah, that's what expected
don't mess with that unless you know what you are doing
like if you want a static ip (even then I would use a static dhcp lease instead of manually configuring a static ip)
peak cloak
steam may have slowed down the download
scenic void
now its 4MB
wheres the 12MB/s gone. lol, also this message took like 7 seconds to send
peak cloak
look at the drive data, steam is probably writing to disk
scenic void
For mobile networks, GSM mode is the one that has best signal?
peak cloak
ok, so I have a weird problem with DNS. dig on WSL reports that ubnt.presentmonkey.tech is 10.10.10.1 which is correct. However nslookup on windows reports ubnt.presentmonkey.tech is ubnt.presentmonkey.tech.trust.presentmonkey.tech and 69.123.176.255 which is my old public ip
I'm pretty sure this has something to do with the DHCP domain which for trusted is set to trust.presentmonkey.tech
and windows is adding that to the end of ubnt.presentmonkey.tech ?
oh, you know what I think it is. I configured a wildcard cname before for *.presentmonkey.tech which pointed to presentmonkey.tech
and that still has my old public ip
let me see if that works after DNS propagates
yep, that was the issue
grim crow
yo so i want to use my domain for a website and i used ips to host it. i got the domain through godaddy and i cant make it work i can only access throught like this www.ipadress:port
peak cloak
ips?
grim crow
like linode
peak cloak
wait, so do you have full access to a VM with it's own ip?
grim crow
yeah
grim crow
just for testing im using the simplehttp in python3
peak cloak
hmm, yeah idk that
well in all the 3 that I listed above have a config file which tells the webserver on what port to listen on
grim crow
yeah it listening on port 8000
peak cloak
well then that makes sense
http is only on port 80
unless you specify otherwise
or you put a reverse proxy in front
grim crow
oh ok
peak cloak
listen 80;
server_name www.example.com example.com;
location /app {
proxy_pass http://127.0.0.1:8080;
}
}```example for nginx
listens on 80
and forwards them to a local server on port 8080
and if I rememmber correctly, only for example.com/app or www.example.com/app
because of the /app location
peak cloak
or as LZ said, just bind it to port 80
thorny vector
hollow marlin
Got a new toy for the EVE-NG lab
thorny vector
Yeah, boy, she sexy