networking

[brave wagon]

thats what ill do

[tame carbon]

and some photographs with paint edits in them where you want the outlets

I mean, I'm sure these people are not new to this

and new houses get ethernet by default usually

[brave wagon]

i already have the outlets

but they are dead

[tame carbon]

is there wiring?

[brave wagon]

yeah

i need to get it out

[tame carbon]

clean it up, remove all the crap connected to it

number them

https://images.tcdn.com.br/img/img_prod/625353/patch_panel_cat6_48_portas_pier_2094_3_20180719111912.jpg

I've seen racks with like 4 of these stacked

and a bundle of cable coming out the bottom the size of your mom

[brave wagon]

i dont have that much outlets

[tame carbon]

xD

@peak cloak https://www.itrw.net/wp-content/uploads/2016/06/server_spaghetti_4.jpg

[peak cloak]

yep

[tame carbon]

so clean 👀

[brave wagon]

"spaghetti"

[peak cloak]

at my dad's work they had 4 U's of patch panels

[tame carbon]

https://www.itrw.net/wp-content/uploads/2016/06/server_spaghetti_1.jpg

I mean

before & after

[peak cloak]

I got most of my patch cables from there

[brave wagon]

thats more like it

[tame carbon]

https://www.itrw.net/wp-content/uploads/2016/06/server_spaghetti.jpg

xD

[peak cloak]

and it's all prod and you can't touch it

[tame carbon]

thats what happens ^ if you dont terminate your lines

[peak cloak]

because noone knows what it's doing

[tame carbon]

@peak cloak exactly

its a monster

and nobody knows how it works

most of these things happen if the system grows organicly

like with LTT's server mess

“I was asked to help out in a very small, one-rack data center that, in my thoughts, was actually rather nice. It was nicely cabled, clean, and tidy. I was able to do my work quickly, and I was quite impressed by how well things were put together.

On my way out, I was closing the door behind me and flipped off the lights. When the lights went out, I noticed that the room got a lot quieter. That’s when I noticed that none of the equipment was on. There were two light switches that were right next to each other, neither marked. But one turned off the power to the rack. Busted!”

or the IT guys that have unexplained outages every evening at 7pm after closing hours

and nobody knows why

turns out, its the cleaning lady who cant find a socket for her vacuum cleaner

https://www.itrw.net/wp-content/uploads/2016/06/server_spaghetti_3.jpg

@peak cloak https://miro.medium.com/max/1024/0*1XVwmzGTRRsnzEC3.jpg

I love how its also a casual workplace

with the operator telephone

and boombox

[peak cloak]

yep

no server rack either

[tame carbon]

those machines aint exactly 19"

https://pbs.twimg.com/media/D0bkSzuWwAAETsm.jpg

omg

[little schooner]

oh hey, thats how i placed my server tower. on a wire rack

[brave wagon]

how do you even work with this

[rocky badge]

That looks like a SDI video router

[peak cloak]

yeah

[tame carbon]

Bunch of coaxials at the top yeah

[little schooner]

stunning

would hate to undo just to fix one cable

they didnt use straps

[tame carbon]

meanwhile, our own local brand

https://i.ytimg.com/vi/fbCmkFVCs5I/maxresdefault.jpg

https://pbs.twimg.com/media/EX7r-OCUcAUDEUS.jpg

still not there..

[peak cloak]

I mean it's gotten better right?

or is it a mess again with the fiber

[tame carbon]

lol but still

https://i.imgur.com/SbDNZOf.png

[rocky badge]

🤣

[tame carbon]

@rocky badge or the beancounter https://i.imgur.com/ZYnHlcu.jpg

that looks more like trippy art than a cable job

https://i.imgur.com/7Ou2M4N.png

This one is interesting ^

I actually really like it, for how complicated yet compact it is

[peak cloak]

yep, but that choice of hardware though, really confused

[hollow marlin]

Properly tested and terminated to a patch panel. The likeliness of having to replace one is slim to none. Thats why termination always need to go to patch panels/bulkheads

[rocky badge]

A/V rack

[tame carbon]

there's a bunch of audio gear in this

https://i.imgur.com/z9fIfme.png

that looks like an amplifier

[peak cloak]

ah

[rocky badge]

I see some receivers, that sonos bridge

[peak cloak]

didn't see that

[tame carbon]

this is multimedia

https://i.imgur.com/ao4xsiq.png

[peak cloak]

🤦

idk how I didn't see that

[rocky badge]

lol

[peak cloak]

I worked with AV once

I was volunteering at a school and they had one

was able to figure out enough to get the wireless mics to work and transmit to the main speakers

[tame carbon]

I have access to a portable DJ set with like 2800watt amplifiers lol

[rocky badge]

kek

[tame carbon]

DJ table, mixer, mic controller

[peak cloak]

this is how the front looked like, idk how much of a mess is the back

https://cdn.discordapp.com/attachments/270340131536240641/772110853004066826/20201031_104554.jpg

[tame carbon]

but currently, there's no parties to run this at

I can't really DJ myself, but I know the technical stuff and help them out with the setup

[rocky badge]

@peak cloak

[rocky badge]

Most of the stuff in our rack is just audio processing and video distribution

[tame carbon]

quite a lot of fun to play around with

especially if you turn the level to 10

and now the entire town can hear you

[rocky badge]

Although we have a rack full of receivers some are broken too lol, mainly just the backlight

[tame carbon]

@rocky badge lol thats a lot more complicated yeah

here its just an XLR cable for each line

goes directly to the active speakers

[rocky badge]

oop

[tame carbon]

and the table itself has all the lines

I dont like how pioneer does its software though

you need a mac

and the macbook air in that image is so underpowered.

[peak cloak]

isn't mac great for audio work?

[tame carbon]

takes like 10 seconds for the music file to be transferred to the table

[peak cloak]

like OS wise

[tame carbon]

@peak cloak no the problem is that their software is mac only

hardware like this should be multiplatform

[peak cloak]

I forgot what vid it was, but someone mentioned the purpose of the rack mounted mac pro was for audio and video work because the sound system of mac is really good

[tame carbon]

thats marketing

96KHz 24 bit is 96KHz 24 bit

just depends what kind of output stage you have, or DAC

[rocky badge]

I mean, to be fair, the audio engine of macOS is better than Windows ¯_(ツ)_/¯

[tame carbon]

in this case, its the DJ table that does that

Jack on linux is very good for audio pros

windows' sound engine is slow and lacks a lot of features

[rocky badge]

Especially for latency

[tame carbon]

there's significant latency compared to the other ones

yeah

[peak cloak]

the problem with linux is just, standards

[rocky badge]

and a lot of our audio applications work better on macOS

[tame carbon]

@peak cloak ??

@peak cloak ALSA takes care of all that

ALSA provides driver, Jack is your mixer

[rocky badge]

Although if you want to do any sort of professional audio on Windows, use ASIO4ALL

[peak cloak]

well yeah but you have other options than pulseaudio

and it's kinda a pain tbh

idk

[tame carbon]

@peak cloak Jack.

https://jackaudio.org/applications/

This would replace pulseaudio

[peak cloak]

and like some programs don't work with pulse and stuff

[tame carbon]

@peak cloak these are sound front-ends, or rather: mixers.

ALSA is just a sound layer for linux kernel

[peak cloak]

yeah

[tame carbon]

@peak cloak programs that don't use pulse for the audio may use SDL

there's multiple modules

linux audio is complicated

[peak cloak]

yeah that's what I mean

it's complicated

[tame carbon]

but all you need to know is Speaker <-- ALSA <-- Jack (Mixer) <-- Program

@peak cloak audio editing and recording software integrates with Jack

so the program can directly use the mixer

thats why its so good for profs

https://mixxx.org/

This is the most common program used

https://mixxx.org/theme/images/2.3/screenshots/latenight-palemoon-3840x2160.png

For playback at least

[peak cloak]

huh, I know nothing about DJing

[tame carbon]

@peak cloak they are just people with really fancy media players

to put foobar and vlc to shame

@peak cloak https://i.imgur.com/XOrC6aJ.png

all you really need

[peak cloak]

yep, it's a mess

[tame carbon]

different APIs

[hollow marlin]

18 simple steps

[tame carbon]

with other APIs that bridge APIs

“ALSA is like the emperors new clothes. It never works, but people say it’s because you’re a noob.”

Which is so true.

configuring ALSA is perhaps the worst thing on the planet

but after that its easy

https://www.alsa-project.org/wiki/Main_Page

thank fuck they have a guide on most sound cards

[peak cloak]

I just have ubunutu do it for me

[tame carbon]

@peak cloak if you want jack support you can just install a pulse module for it

easy pz

[peak cloak]

"easy" for now my audio works I don't feel like messing with it

[tame carbon]

apt install qjackctl pulseaudio-module-jack

pacmd set-default-sink jack_out

Pulseaudio will recognize (through D-Bus) that JACK started, and automatically will route audio to it. When JACK is stopped Pulseaudio will revert to normal routing and start sending audio directly to card again.

this.

this is why that diagram 'looks like a mess'

since a lot of these libraries provide fallback modes

@peak cloak http://floss.booktype.pro/ardour/starting-jack-on-ubuntu/static/Ardour-StartJackUbuntu-Connections03___JACK_Audio_Connection_Kit-en.png

this is why jack is so great ^ :D

if you have many streams to deal with

ardour in this case, is a program with many input/outputs

on windows, you pray that the program itself has a way to manage sound input/output

but on linux, its typically handled outside the program

[peak cloak]

yeah, I had an issue with Davinci Resolve not being able to record

all it showed was ALSA input

[tame carbon]

that means directly from the hardware

[peak cloak]

yeah, but my mic is usb

[tame carbon]

yeah thats all the same

[peak cloak]

well, I looked all over the forums and everyone else on linux had the same issue and no one had a solution

[tame carbon]

@peak cloak all usb audio devices uses the same generic usb snd driver

[peak cloak]

also I need to get network scanning to work again

[tame carbon]

I think the driver is

snd-usb-audio

[peak cloak]

I forgot how I set it up last time, but I need to use SANE

[tame carbon]

my focusrite uses same driver

[drowsy sand]

I just found out about Moonlight Game Streaming. Really poggers to finally get myself 100% on Linux. Intel NUC or some sort for basic web surfing and cat videos with Linux and a big boi gaming rig with Windows 10 + Moonlight. Streaming the Win10 machine to the NUC or whatever I will get and boom. "Linux" gaming without issues.

You can forward some ports so that you could even play when you are not home.

[tame carbon]

I do that with my router

iptables manually too much fuckery

[drowsy sand]

I was already accepting the fact of using two machines separately but this is just great. Need a Nvidia Shield though. Maybe should look into Parsec.

[hollow marlin]

Some companies using whiteboxes only route with iptables. But hey, to each their own

[tame carbon]

@hollow marlin what pure kernel iptables on specialized hardware?

I guess for critical infrastructure sure

nice and bloatfree

no attack surface

imagine your router has an exploit or backdoor

[hollow marlin]

Not sure of the details, mainly from a cost perspective though

[tame carbon]

cough Juniper, cough cisco

@hollow marlin inter-vm stuff is sometimes iptable heavy

if you want to set up local routes

or have highspeed links between devices directly

[hollow marlin]

Looked at it once and said nope

[tame carbon]

you may want to directly do it in the kernel lol

haha yeah

man iptables not much help either

[hollow marlin]

Ill stick to Junos/IOS-XR

[tame carbon]

rOS

[hollow marlin]

and that too

[tame carbon]

@hollow marlin lol I can see in the network monitor when the TV switches between a SD and HD videostream

goes from 14mbit down to 8mbit/s

shame they don't do 4k yet

and even the HD is compressed significantly

which is a shame

netflix is sometimes so bad in quality too

like, some scenes have absolute awful color palettes, where you just see lines on peoples faces from compression

and idk how netflix can get away with this, I have enough bandwidth

open the floodgates gimme 40mbit/s video

thats true HD

[hollow marlin]

Whats worst is when its in dobly vision/HDR and then downscales to 480p at times and looks like hot garbage

[tame carbon]

deepfried TV

in realtime

[waxen saddle]

I've been playing around with an idea for an OS where everything is a node and you just connect the nodes together. Jack is pretty close to that concept. Thanks for sharing!

[tame carbon]

@hollow marlin freshly served:

deepfried deepfried server

[surreal finch]

Ahh the joys of BGP between fortigates... No more updating static routes for weird crap i do in my home network but still want ot reach it at my other location

[hollow marlin]

static routes 🤮

[tame carbon]

my entire network is static routes lol

my /29 gets routed statically through my WAN

and from there its just a subnet behind a firewall

[surreal finch]

@hollow marlin yeah I agree lol

[tame carbon]

on a seperate bridge from my LAN

[surreal finch]

I finally decided to just enable BGP to make my life easier

Now that I am finally doing the right thing with the network and DMZ'ing my VM servers and what not

has been a lazy engineer

[tame carbon]

https://i.imgur.com/cQEJrid.png

meanwhile

[peak cloak]

BGP is useless for home internet right

I don't understand anything

[tame carbon]

@peak cloak allows routers to tell other routers what routes it has

so you don't have to reprogram every router to know about the new route

you can use it locally

but its also used internationally for peering

your home ISP's router will ignore BGP

[hollow marlin]

BGP is love, BGP is life

It will not ignore it, it will just not peer. BGP you need to specify peers to exchange routes with

[tame carbon]

@hollow marlin yeah but you can't just announce a prefix on a home internet connection, can you?

[hollow marlin]

You specify the peer(s) and then announce your route to them. You and the peers have their own route policies. If you cannot peer, you cannot announce

[tame carbon]

so they know of your ASN and what routes they offer for that peer

?

[surreal finch]

@tame carbon what are you using for your firewall?

[tame carbon]

@surreal finch mikrotik

[surreal finch]

Nice

I almost went that route

[hollow marlin]

Correct, in the peering you specify the peers IP and the ASN of said peer. If neither match, BGP will be stuck in active

[tame carbon]

I have one of those RB4011's

[surreal finch]

I almost went with mikrotik, but then went the fortigate route

[tame carbon]

@surreal finch this was my first step after moving away from mortal hardware

tplink, netgear, asus, are all just.. trash

[peak cloak]

what's good with fortigate, I just know that my mom's work uses their vpn software

[tame carbon]

@surreal finch RB4011 has like 2gbit/s ipsec acceleration

so it can function as a VPN as well

[surreal finch]

@tame carbon yeah they are trash. I did the same thing lol.

Nice

[tame carbon]

https://i.imgur.com/mFcpvEu.png

[rocky badge]

I'm just using wireguard lol

I can get line performance out of it

[peak cloak]

@tame carbon almost went with this instead of the ER-X https://www.amazon.com/SafeStream-TL-R600VPN-Broadband-throughput-Concurrent/dp/B007B60SCG/ref=sr_1_4?dchild=1&keywords=vpn+router&qid=1611941423&sr=8-4

[peak cloak]

same

[hollow marlin]

get v7 and use wireguard and easily get past 2gbps

[tame carbon]

idk when they get support for wireguard

[rocky badge]

My main router is pfSense in a VM

[surreal finch]

Yeah I was lucky with my fortinet gear. They are a partner of theirs at work, and the Sales Engineer was like.. "You need anything for at home and to use a lab?"

I was all like well I could use two fortigates, a fortiswitch, and some AP's lol. Not thinking I would really get anything that I asked for except for like 1 fortigate

[rocky badge]

Working just fine https://blob.rocks/P1ZAelyMl4.png

[peak cloak]

I wouldn't be able to maintain a good uptime if it was in a VM

[rocky badge]

Lol

[surreal finch]

I do enjoy pfsense!

[tame carbon]

I'm reading here about router OS v7 beta

people writing scripts with /interface wireguard

[surreal finch]

but I am with @rocky badge on this, I don't have a dedicated box for VM's I use my desktop/workstation for my VM's

[tame carbon]

that seems promising

[rocky badge]

pfSense 2.5 is getting WG

[rocky badge]

lol rip

[surreal finch]

Nothing like rebooting the workstation and taking everybody down due to a windows 10 update lol

[tame carbon]

https://forum.mikrotik.com/viewtopic.php?f=1&t=165248

Here it is

[rocky badge]

My mess that is a lab

[tame carbon]

https://i.imgur.com/Qs9xTWH.png

[hollow marlin]

Seen people with hAP ac2 getting near gig speeds, excluding overhead. Definitely promising

[rocky badge]

https://www.netgate.com/blog/wireguard-in-pfsense-2-5-performance.html

[surreal finch]

That’s my network. I have extra work equipment that isn’t plugged in or powered on.

[brave wagon]

im here again

[hollow marlin]

Needs more Juniper

[rocky badge]

@surreal finch main switch.... 😬

[tame carbon]

if people had discord 60 years ago

[peak cloak]

https://cdn.discordapp.com/attachments/387022787480387605/789118646718562314/20201217_081457.jpg

this is mine

[tame carbon]

we'd all be boasting about our latest rotary dial phone

[rocky badge]

Behind my servers is a mess too

[surreal finch]

I’m an all Fortinet shop in my house. Cause I didn’t pay for it lol

[rocky badge]

HPE servers can be screamers whenever a fan fails...or you yank one out to see how loud they are 😂

I'm Ubiquiti + pfSense + Cisco lol

because UniFi APs are 👌 for the price

[lean pebble]

how are we today?

Someone know how to make steam work on fedora 32? for some reason its not launching

[peak cloak]

I only used fedora based distros as servers

no clue

[lean pebble]

ah never used it as a server

only desktop

centos for servers

[tame carbon]

@lean pebble you need i386 binaries

[lean pebble]

Ik I have them

but no launching

[tame carbon]

any errors?

missing libraries?

[lean pebble]

nope

[tame carbon]

launch it from terminal

steam-launcher

or just steam

https://i.imgur.com/bvGAwMD.jpg

[lean pebble]

ya i know

its launching till the "updating" and then crash

X Error of failed request:  GLXBadContext
Major opcode of failed request:  150
Serial number of failed request:  52
xerror_handler: X failed, continuing
Steam: An X Error occurred
X Error of failed request:  BadValue (integer parameter out of range for operation)
``` Those are the only errors I get

[tame carbon]

mssing some libraries

[wanton furnace]

anyone know stormshield firewals??

[lean pebble]

ldd on steam say nothing missing

[tame carbon]

@lean pebble do you have the propietary research drivers on that system?

for like cuDNN ?

[lean pebble]

yap

[tame carbon]

because those don't come with 32 bit binaries

:3

[lean pebble]

I had steam long time ago on this system

[tame carbon]

this is nvidia giving you the finger

There's nothing we can do

they just removed support at some new version

[lean pebble]

I removed it because I installed windows kvm machine

[tame carbon]

and no longer include binaries in their repos

I recently ran into this with someone else with two RTX3080's

wo needed cuDNN

and the cuda binaries

[lean pebble]

in fedora you can install them by nvidia

I already did

[tame carbon]

@lean pebble there's no 32 bit binaries in their repositories.

thats why its not working

they removed the graphics stuff for gaming

[lean pebble]

sec I remember there was

[tame carbon]

also

why you on 32 bit

lol

or is it just steam, and your OS is 64 bit?

[lean pebble]

I'm on 64 lol

[tame carbon]

so yeah

https://forums.developer.nvidia.com/t/latest-cuda-driver-from-deb-repository-breaks-steam/70950

This is kinda what happened

[lean pebble]

but ya I see now they removed the fedora 32 from their cuda download place

nvidia idiots

[tame carbon]

if you get your binaries from nvidia directly

you get this problem

if you get them from the regular sources

you can game

but can't use cuDNN

@lean pebble DKMS may allow you to have both drivers installed

and switch between

but idk how to do that

[lean pebble]

can I install all of them from nvidia and only the 32bit from someone else?

what is the command for check what I have in dkms?

xD

huh I have only nvidia in dkms xD

[tame carbon]

 crystal@watomat  ~  sudo dkms status
[sudo] password for crystal: 
bbswitch, 0.8, 4.4.0-142-generic, x86_64: installed
bbswitch, 0.8, 4.4.0-201-generic, x86_64: installed
bbswitch, 0.8, 4.4.185+, x86_64: installed
bbswitch, 0.8, 4.4.233, x86_64: installed
nvidia-384, 384.130, 4.4.0-142-generic, x86_64: installed
nvidia-384, 384.130, 4.4.0-201-generic, x86_64: installed
nvidia-384, 384.130, 4.4.185+, x86_64: installed
nvidia-384, 384.130, 4.4.233, x86_64: installed

@lean pebble DKMS is used to load out of kernel tree drivers into the kernel

[lean pebble]

wow driver old

[tame carbon]

yeah

this is a GeForce940M

kernel is also old

@lean pebble I dont use these drivers anyways

bbswitch is here to switch between onboard and nvidia

its total garbage

https://wiki.archlinux.org/index.php/bumblebee

but works with enough effort

[lean pebble]

I don't have on board

[tame carbon]

Bumblebee is an effort to make NVIDIA Optimus enabled laptops work in GNU/Linux systems. Such feature involves two graphics cards with two different power consumption profiles plugged in a layered way sharing a single framebuffer.

[lean pebble]

only nvidia

2 nvidias

[tame carbon]

@lean pebble yeah but you can have two drivers installed with dkms

[lean pebble]

ya I know

So you know a good and reliable source for downloading the second nvidia driver?

@tame carbon

[tame carbon]

@lean pebble I think the regular package source for the nvidia driver you download as a user contains those 32 bit libs

but that driver doesnt include cuda

you can't have both

or at least

not according to nvidia on the latest versions

[lean pebble]

wanna hear something funny?

Even the original nvidia driver doesn't include it out of the box

[tame carbon]

really?

[lean pebble]

I had to install it manually

ya

xD

[tame carbon]

fuckers lol

used to be

[lean pebble]

So it doesn't matter

[tame carbon]

you installed 32 bit libs

with 1 command

and it works

[lean pebble]

here is the installation

https://developer.nvidia.com/cuda-downloads?target_os=Linux&target_arch=x86_64&target_distro=Fedora&target_version=33

[tame carbon]

@lean pebble yeah but your problem is this:

https://i.imgur.com/khdQjUw.png

that repo, only has x64 libraries

:3

[lean pebble]

Ik

I saw

Now need to find the best repo for it

[tame carbon]

https://i.imgur.com/Vo5Ny16.png

lol only version I could find

where they are still in

they even removed them from ubuntu 16

@lean pebble you see, this is the issue

there isnt one

xD

since its all binary blobs

[lean pebble]

xD

[thick minnow]

What about r420?

[peak cloak]

that's better

but still bare min

[thick minnow]

I mean it's that or a hp pavilion laptop

[peak cloak]

that being said, I'm not an expert on servers

[rocky badge]

R420 is nice

[thick minnow]

What's it worth?

[rocky badge]

Its like the R620, dual socket, but a little below it

[thick minnow]

I mean I just want a nas

[rocky badge]

Like the R420 maxes at 384GB of RAM

which is fine, but the R620 maxes at 1.5TB

R4x0 is the mid tier 1u, R6x0 is the high end 1u

R3x20 is low end 1u

[thick minnow]

What's 1u?

[rocky badge]

1 rack unit

[peak cloak]

https://en.wikipedia.org/wiki/Rack_unit

[thick minnow]

Can u seed of a freenas server?

[rocky badge]

but if you want a NAS, the R420 should be fine

Watch out for what drive bays it has though

it could be 2.5" or 3.5"

R520 would also be a good NAS

[thick minnow]

So basically what I want is a server I can put in the shed so I can get rid of the need to move and the stack of hard drives off my desk.

[rocky badge]

the LFF format (3.5") has 8 bays

[thick minnow]

Ideally I wanted to use a crappy laptop with freenas but I'm told that usb with drives may not go well

[rocky badge]

nope

[tame carbon]

money helps in these situations

[rocky badge]

because FreeNAS likes direct access to the disks

[peak cloak]

yeah ZFS

[rocky badge]

via a HBA

[thick minnow]

so just so understand, r420 is minimum? Because i do want to go minimum as it will probably be hardly used.

[rocky badge]

So the integrated RAID card in the PowerEdges can be put into JBOD/IT mode which will pass through all of the drives

[thick minnow]

and can i also set up a printer server on a server? Is that a thing?

[rocky badge]

Yeah, R420 LFF should get you 4 drives

[peak cloak]

yeah sure

[thick minnow]

can u expand drive storage somehow?

[rocky badge]

a DAS

or disk shelf

Like a PowerVault MD1200

its just a disk shelf, there's no CPUs or anything

[peak cloak]

yeah ideally you could also put a hypervisor on it and run the printerserver and freenas on different VMs

[rocky badge]

and it directly connects to the server

[thick minnow]

so that just plugs into the server somehow?

oh ok

[peak cloak]

and passthough the disks

[thick minnow]

bit above me rn not sure what all that is but ill google it in a bit

[rocky badge]

Yeah, you get a PCIE card and then plug in the disk shelf

FreeNAS can run CUPS

Run it in a jail

[peak cloak]

ah

[thick minnow]

im not sure whats going on in there?

[peak cloak]

idk anything about jails

[tame carbon]

I've run CUPSd on a raspberry pi :3

[rocky badge]

The main server, at the top, has a PCIE card in it

[tame carbon]

its the only bit of opensource apple software that I know of lol

[rocky badge]

which then connects it to multiple of those disk shelves

Since they can be daisy chained, but you'd only need one if you want to expand later on

[thick minnow]

also for a server, do i need all same capacity hard drives?

which means im gonna need to buy more drives

[peak cloak]

not nessicarly

[thick minnow]

im still considering if i even need a server.

Its literally just me and im gonna be accessing it very little

[peak cloak]

but you need disk I forgot the name

[rocky badge]

Ideally yea

[peak cloak]

"sleds"?

[rocky badge]

Yes

[thick minnow]

what are sliding rails for?

[rocky badge]

to rack mount in a server rack

[tame carbon]

holding the server in place?

[rocky badge]

and easily slide it out to work on it

[peak cloak]

and sleds for the disks

[rocky badge]

https://www.ebay.com/itm/4PCS-3-5-SAS-SATA-HDD-Hard-Drive-Tray-Caddy-Sled-for-Dell-PowerEdge-R730-R420/254563014514

[thick minnow]

i do have a rack i plan on mounting it on but cant think when i would use the sliding thing

[peak cloak]

oh it's caddies

[thick minnow]

also

[peak cloak]

not sleds

[rocky badge]

caddies/sleds

interchangeable

[peak cloak]

ah

[thick minnow]

why does it say 2.5inch? (i would actually prefer 2.5inch but just wondering how this works)

[rocky badge]

Because that's the drive size

2.5" drives vs 3.5" drives

The R420 comes in both variants

[thick minnow]

oh r420 only accepts 2.5inch drives?

[rocky badge]

Either

Depends on model

[thick minnow]

which one is this?

it comes with drives also

and whats it worth?

[tame carbon]

that looks like 3.5" ?

[rocky badge]

3.5"

US?

[thick minnow]

im in the uk

but i can convert currency

[rocky badge]

ok

max $? lol

[thick minnow]

not sure what u mean but i just mean whats it worth

whats a good price for it

[rocky badge]

no, like how much do you wanna spend

[thick minnow]

ideally i want to find a 'good deal' or even a 'bargain'

i have no clue.

minimum i have to.

[tame carbon]

@rocky badge he wants to know if he has to sell his house* to buy this thing

[thick minnow]

yea that specific ebay listing

what offer should i send if i was to send one.

[tame carbon]

$1

[thick minnow]

i have no clue what these are worth but it says 500 quid on google brand new

[thick minnow]

u saying its scrap?

[tame carbon]

no

[thick minnow]

i mean hard drives alone must be worth something

[tame carbon]

im just kidding

you typically dont buy used harddrives

those belong in the shredder

[thick minnow]

ok so excluding those, what would u say its worth?

[tame carbon]

idk

[thick minnow]

excluding the sliding out things

[tame carbon]

go on ebay search for it

see what other people offer for it

[thick minnow]

there isn't many

i mean like is it 10 quid, 100 quid or 1000 quid.

does nobody really know what these are worth

i mean some guy is selling one for 99, some other guy is selling for 250.

[peak cloak]

send links to the posts

[thick minnow]

https://www.ebay.co.uk/itm/193858868164

dont bid tho yea 🙂

[peak cloak]

yeah I'm in the US idk

[thick minnow]

https://www.ebay.co.uk/itm/Dell-PowerEdge-R420-Server-2012-R2-ESXi-6-7-Compatible/124539939676?hash=item1cff28ab5c:g:g3YAAOSwhrRfrEEt

[thick minnow]

what are us prices for them?

[peak cloak]

the cpu's and memory also matter

[thick minnow]

CPU 2 x Quad Core Intel(R) Xeon(R) CPU E5-2407 @ 2.20GHz
Memory 64GB

[peak cloak]

ah this one has a better cpu

[thick minnow]

do i even need 64gb of memory?

im literally gonna download not films on it.

[peak cloak]

prob not

[rocky badge]

For ZFS

you typically want 1GB of RAM per 1TB of disks

[thick minnow]

it has same cpu?

[peak cloak]

no

[thick minnow]

Intel(R) Xeon(R) CPU E5-2407 v2 @ 2.40GHz

Quad Core Intel(R) Xeon(R) CPU E5-2407 @ 2.20GHz

[peak cloak]

yep

it has the v2

[thick minnow]

ah ok

substantial?

[peak cloak]

https://ark.intel.com/content/www/us/en/ark/products/75782/intel-xeon-processor-e5-2407-v2-10m-cache-2-40-ghz.html

https://ark.intel.com/content/www/us/en/ark/products/64614/intel-xeon-processor-e5-2407-10m-cache-2-20-ghz-6-40-gt-s-intel-qpi.html

[thick minnow]

0.2ghz higher thats all i can tlel

[rocky badge]

the v2 is newer

[thick minnow]

problem is none of this means anything to me

because i dont even know if these are worth 10 grand of 5 quid yet

[rocky badge]

its more power efficient and based on a newer process

[hollow marlin]

Why exactly go the used server route? Loud and power hungry. Just go a cheap Ryzen and setup a small nas

[desert briar]

Not to butt in, but these CPUs are horrible

[thick minnow]

can u get a cheap ryzen pc under £100

[rocky badge]

Depends on the price range they want

[thick minnow]

i dont have a price range

yet

[desert briar]

https://www.cpubenchmark.net/cpu.php?cpu=Intel+Xeon+E5-2407+%40+2.20GHz&id=1856&cpuCount=2

https://www.cpubenchmark.net/cpu.php?cpu=Intel+Xeon+E5-2407+v2+%40+2.40GHz&id=2354&cpuCount=2

The v2's pull 7.6k in a dual benchmark

[thick minnow]

idk how much im supposed to pay

[rocky badge]

They're fine for FreeNAS

[hollow marlin]

Your power bill is part of the equation

[thick minnow]

how much power do they use?

[rocky badge]

Plus, my old servers don't use much power anyways

[desert briar]

If you have large amount of data which you want to software raid, meh meh

[rocky badge]

Each of my servers use ~110W

Doing more intensive shit than FreeNAS would ever do

[hollow marlin]

That adds up. Cheap Ryzen and nas can sip way less

[rocky badge]

on the same gen as they're looking at

[desert briar]

I'd differ there too, the older the server the more power they draw usually. If you compare for example G5 HPE servers with G8... But I guess 80W+- is negligible

[rocky badge]

https://blob.rocks/dYxGyzHpJv.png

R620 https://blob.rocks/3pb0zSFqsO.png

Dual Xeon E5 2650 in R620
Dual Xeon E5 2620v2 in the DL360pG8

[thick minnow]

I want a server i can stick films not films on so i can 1- seed from there so i dont need a stack of hard drives in my room and 2 - watch films on other pc's in my house as well as transfer data easily inbetween. I dont have a budget but want as cheap as possible so bare minimum. I also want to use it as a printer server.

-How much am i looking to spend
-specific recommendations of models i should look at?

[rocky badge]

As ESXi hosts

[thick minnow]

nobody know how much a server cost? 😭

[little schooner]

it varies

[thick minnow]

on what?

[little schooner]

every server has different specs that meet different needs

it depends on what you need

[thick minnow]

ive already said what i need.

[little schooner]

oh I didnt read that part above

i was just generally saying

[thick minnow]

well let me know if you can help, because im very surprised nobody can help me when everyone has these big expensive servers.

[desert briar]

Where are you based? Europe or US

[thick minnow]

UK.

[desert briar]

ah

so neither

You looking for a tower or rackmount?

[thick minnow]

either

i have a rack thing which i can mount on, but if i have to just place it on the floor idc

[desert briar]

anyways, this reseller is your friend https://www.bargainhardware.co.uk/

[thick minnow]

i dont wanna buy from a reseller

[desert briar]

Ordered from it multiple times, if you dont mind going refurb

ah, you want brand new?

[thick minnow]

no second hand market

need to know what to look at and what prices tho

[desert briar]

then if you dont mind refurb I doubt ull find anything better than BH, mainly if you are in the UK. Let me try to look for some of the offers

[thick minnow]

well i dont know if i will find something better than them because i have no clue what this stuff is supposed to cost

so i went on it and typed in r420 (since thats the only thing i know anyone has told me)

[desert briar]

tbh their offers are very reasonable, but the RAM and disks are kind of meh. I'd recommend buying RAM separately from ebay, but it depends on shipping costs and what not

[thick minnow]

what type of stuff should i configure idk what all this is

i believe in finding bargains on ebay

[desert briar]

Alright well, first of all. You looking for LFF or SFF? 2.5" or 3.5" drives?

[thick minnow]

i will find some guy who got a server from work who's company shut down and just wants it gone but need to know whats a good price first.

[thick minnow]

not sure what lff or sff is, and idc which sized drives either.

oh ok just googled lff and sff

[desert briar]

SFF - small form factor, 2.5"
LFF - large, 3.5"

[thick minnow]

i dont mind either

i have a bunch of 2.5inch drives rn but i can buy big ones

[desert briar]

its just, if u have 3.5" drives at home, its a "waste" to get a 2.5" server

[thick minnow]

i care about price over speed.

i dont have any spare 3.5 drives.

i guess 2.5 then

also that shop is really expensive (as far as i can tell)

copied some random configuration from ebay and some guy on ebay is selling it for half the price.

[desert briar]

can you paste in the link of the offer?

[thick minnow]

https://www.ebay.co.uk/itm/193858868164

[desert briar]

as far as I can see BH doesnt even have R420s in stock. Anyways, the devil is often in the details. You dont know the frequency of the ram, its brand. Same for the drives.

• its an auction

[thick minnow]

nobody is bidding on that nobody wants these in the uk rn

[desert briar]

you can bid for 99, but someone will overbid you eventually. It isnt the actual price

Then if you can get that for 99, go for it

[thick minnow]

im local anyway i think they guy will let me have it for 120ish

i need to speak to him more first.

so you would say this is worth 99 easy?

[desert briar]

99 is, + it claims to have a windows server 2016 standard license

but

[thick minnow]

and is this a good pair for me who wants something to seed a few not films from?

[desert briar]

you are more or less getting for what you are paying. The server is really old and has pretty much almost 0 upgrade paths. RAM caps at 1866mhz at ddr3, the CPUs in that thing are kind of trash (according to a benchmark ive checked) and are V1... You won't be able to run newest software on it. E.g vsphere 7

[thick minnow]

i wanna remind u my use case for it.

u think i still need something more powerful even for my use case?

[desert briar]

but again, its 99 gbp, with rails and bezels... That alone is worth 99+ gbp

[thick minnow]

in which case can you give some recommendations.

[desert briar]

to that now

so

[thick minnow]

ill find an equally good deal elsewhere

just give recommendations.

[desert briar]

The data transfer shouldn't really be a problem. If you have your house wired, 1gbit should do the trick just fine for 1 client

I cant talk for seeding, I've no experience with that

an issue I see though, is transcoding

[thick minnow]

whats that

and if its a big issue, what do you recommend.

[desert briar]

I assume you will want to run something like Plex for your movies. You will need to transcode these movies - https://support.plex.tv/articles/200250377-transcoding-media/

ideally, you should have a GPU to transcode the media

[thick minnow]

well does it need to be done on the server?

cant i just access the server like hard drive

and use vlc on a computer elsewhere (where im watching the film)

[peak cloak]

technically I think

[desert briar]

You can do that, ive no experience with that though. If you want to run your movies in a share of some sorts, yeah. I cant tell you whether the movie will be handled on the client or on the server though

[peak cloak]

but not if you streaming it which is what plex does

[desert briar]

If it will be handled on the server, Im pretty sure the hardware you have is inadequate

[thick minnow]

im not doing anything fancy

as far as i can tell server acts like shared hard drive

and i use vlc downloaded in a computer and open the file with it.

boom

[hollow marlin]

Why not just buy a few drives, toss them in your main PC and just stream from there?

[desert briar]

I cant tell you whether the movie will be handled on the client or on the server though
If it gets handled on the client, all that matters is the link between your PC and the server

[thick minnow]

because the entire reason i want a server is to get rid of the drives from my main pc

[desert briar]

if it gets handled on the server, you won't have the best experience based on that hardware

[thick minnow]

why would it be handled by the server

[hollow marlin]

But what is is the reasoning behind that? If you are just looking at streaming between rooms there is no need to spend time and money on a nas. Hell, could just spin up a VM for your server needs and call it a day

[desert briar]

I can just give general advice based on my experience, but if you want any of these specifics I'm not your guy as I never used any of my servers for this use case

[thick minnow]

one sec lemme go copy paste my thing from earlier

[thick minnow]

I want a server i can stick films not~~ films~~ on so i can 1- seed from there so i dont need a stack of hard drives in my room and 2 - watch films on other pc's in my house as well as transfer data easily inbetween. I dont have a budget but want as cheap as possible so bare minimum. I also want to use it as a printer server.

[desert briar]

I also want to use it as a printer server.
I missed that

if you want to run 2 servers at once you will need to virtualize

[thick minnow]

i mean a printer server on ebay 15 quid anyway

so if thats hard work i can just buy a ebay printer server

[desert briar]

Or you could get a cheapo raspberry pi

or that

[thick minnow]

too much effort

at this rate im tempted to give up on a server and just throw a grand at some local hardware guy to buy everything and get ripped off by him

in the last 2 hours i learned that maybe 99 quid is a good price for a r420 but r420 is old anyway

[hollow marlin]

Still, the drives will be in your case...hopefully. There is no need to overly complicate things and have another loud and power hungry device running

[thick minnow]

no i have many many drives

they are currently stacked on top of my pc

with usb

[lethal charm]

Do shitty little 5 port network switches increase latency or anything

[hollow marlin]

No

[lethal charm]

I want to like put a switch inside my pc and hook up my pc + a raspberry pi to a single connection

[thick minnow]

how do i share these drives across my network anyway?

[desert briar]

SMB

[hollow marlin]

In windows just use network share

[thick minnow]

how

is it easy

[desert briar]

^+1

you right click on a folder

click share

done

kind of

if you google "network folder windows10" ull get countless guides 😄

[thick minnow]

it dont say share

[desert briar]

You cant share a drive, just a folder

[lethal charm]

last time i was trying to get windows shared folders to work, it was faster for me to install openssh client on the windows machine and scp lol

[hollow marlin]

Properties > sharing

[thick minnow]

do i do advanced sharing?

i cant share a drive?!

[desert briar]

Maybe you can then

My bad

advanced sharing will work too

[thick minnow]

is any guy on my wifi gonna be able to access this?

[desert briar]

https://www.tomshardware.com/news/how-to-share-drives-windows-pc,36936.html

Why did I say you cant share a drive, that was stupid, lol

[thick minnow]

what if i just get a laptop in the shed stick 50 hard drives into it with usb and run that network sharing thing can i call that a nas?

[desert briar]

and yeah, if u allow anonymous access

[thick minnow]

i clicked a few buttons lets see if my neighbors break my drive

how do i access it from a different computer now?

go on 'network'?

[desert briar]

It depends on the throughput and port speed of the switch. Definitely get a gigabit switch which also has a nice throughput. E.g with an 8 port switch you should be looking for a throughput of 8gbit/s. If it has lets say 5gbit/s, and you populate all 8 ports you will run into throttling

Did you even read what I sent you?

[thick minnow]

why does clicking share not just work why do things have to be complicated

wait a sec i just realised this prob wont even work because im connected directly to a router

[desert briar]

any device on your network should be able to access the share, if windows firewall allows for it

[thick minnow]

ive already disabled every firewall everywhere

wheres the 'ribbon' menu

[lethal charm]

So if i have a gigabit switch and gigabit internet, all machines combined connected to teh switch will max out at a sum of 1gbps right

but also, 1 machine can do 1gbps if none else are in use right?

[hollow marlin]

Also as many stated yesterday. for the love of god please re-enable your firewall on your main router

[desert briar]

all the devices connected to that switch can do 1gbit locally. Externally it depends on your ISP. Also, not that if you are using Pi3b+ or lower, these use 100mbit ports

[desert briar]

^, lol

[lethal charm]

I have gigabit networking/internet at my college too

[desert briar]

Ribbon menu is at the top of the file explorer

[thick minnow]

i could but then i have to do the other router too and set up port forwarding which is effort

ill consider it

[desert briar]

I know you dont want to hear it becase "too much work", but SMB is unencrypted by default. If you port forward SMB people will be able to see everything you do in cleartext

• if someone intercepts the authentication attempt (gets your password hash [netntlmv2]), they will be able to crack it and access the drive remotely

based on your users' permissions even interact with your machine's services, and take full control of your workstation

[hollow marlin]

not a priority on your router behind your main one, but your main one absolutely needs it. You keep saying "too much effort" and "complicated" but at the same time want a server and open your router to the world. I think you need to take a step back and get perspective on things instead of sacrificing security and how much "effort" things take

[lethal charm]

how in the world does that still exists if its so unsecure

[thick minnow]

so i went on one laptop, i went on network, saw my pc clicked on it, entered username and pass, clicked on drive and it worked

i went on a diff pc, and go to network and my pc main pc doesn't show there

[lethal charm]

Also . . . Can anyone tell me why for the past few days whenever I google something using the URL bar on my browsers (all other internet is fine like going to youtube or whatever) just sometimes doesnt load my search

[desert briar]

There is a lot of things which are insecure, lol. Implementation of smb itself "isnt", but what you can do with it is

provided you have credentials

[thick minnow]

@desert briar can u help with my thing?

[desert briar]

#tech-support , could be anything

[thick minnow]

i dont think its a tech support issue, i think its a i haven't set it up right issue

[desert briar]

even slow internet. Dropping packets, corrupted browser

list goes on

[thick minnow]

no i mean its just not showing up

like its not there on the list of things

there is other computers there tho which weren't on the other pc

[desert briar]

I dont know man, sorry.

[thick minnow]

can i only access it from 1 pc at a time maybe?

the other pc was windows 8 maybe that has soemthign to do with it

[tame carbon]

🤦

[thick minnow]

it says this there now

i think thats the win8 pc i connected from

the other pc has a pc there called \pc

and windows cant detect it

[thick minnow]

i mean this isn't really helping

😦

[hollow marlin]

Didn't you say its behind another router?

[thick minnow]

nah same router now

3 computers, main, windows 8 and other one

i can connect to main from win8 ezpz, other one (windows 10) its not showing up under 'network'

im gonnna try straight adding the ip

[hollow marlin]

just type that network path right into windows explorer

[thick minnow]

i dont know the network path

will it work if i type in ip?

[hollow marlin]

You just posted the screenshot of it

[thick minnow]

did i?

oh f:\Shared

your file couldn't be accessed

Ok this is just dodgy

Seems to work if I do sketchy stuff

Ignore.me for a while

[desert briar]

\\ipOfTheMachineWithTheDrive\f

is your network path

get the IP with ipconfig

[thick minnow]

The ip thing didn't work it wanted full name of the computer

How do I get it to stick tho in file explorer?

I added it as network location but it just closed and did nothing

[desert briar]

ensure that file sharing is enabled on all the machines (turned on by default on private networks)

[desert briar]

Doesnt even appear in your devices & drives?

[thick minnow]

No but I can access it typing in entire name

Oh wait

[desert briar]

right, try to map a network drive, not add a network location

[thick minnow]

It didn't crash on me this time

[desert briar]

well, there you go

[thick minnow]

So what's the advantage of me going server route now over doing this?

[desert briar]

this is what a server would do, based on what you said you wanted it to do

so none

other than the fact that it would be a dedicated machine

for sharing

[thick minnow]

Also will it be better if I plug all these into a switch or something (because atm they are connected to a bt infinity hub which I'm guessing has limited bandwidth

I might just stick with 50 usb extensions and a laptop in the shed method then.

[desert briar]

If the inifnity hub has gigabit ports then no need to

but yeah a switch is always nice

[thick minnow]

If I'm doing this over wifi I assume this is the reason people buy expensive routers?

I have never understood the reason previously

[peak cloak]

wdym

expensive routers as in good wifi?

[thick minnow]

In the uk ur broadband provider gives u a router with ur wifi

[peak cloak]

or as in really high bandwidth ethernet ones

[peak cloak]

yeah most here do to

I just have my own

[thick minnow]

I've never understood why 'gaming' routers exist.

[peak cloak]

they are stupid

[thick minnow]

That look stupidly obnoxious like a house for spiders lol

[peak cloak]

wait

you said you have multiple routers?

[thick minnow]

Yea cheap crap ones tho

[desert briar]

wifi6 + 5ghz > wifi5 2.4ghz

[peak cloak]

ok why?

[desert briar]

will make a difference

[peak cloak]

to extend wifi?

[thick minnow]

Shed is many hundred meters away

[peak cloak]

yeah you would want an AP not routers

[thick minnow]

It cost 20 quid tho not 200

Yea I got a router functioning as an ap

[peak cloak]

ah ok

[lean pebble]

What do you think about my cable management 😂

[desert briar]

business in the front, party in the back

[lean pebble]

After a year of switching every piece of my network gear it finally happened

[desert briar]

what

you tucking the cables behind a monitor so that no one can see them?

[peak cloak]

what happened?

ISP fixed it?

[lean pebble]

ISP modem was failing all the time

I switched modem and router

And cables

[peak cloak]

so the modem was the problem?

[lean pebble]

And rearrange everything

Idk probably not

Just for be sure xD

Switched everything

[thick minnow]

can i run windows on an r420?

[lean pebble]

I had a new modem that wasn't connected because at the beginning he did some issues

[peak cloak]

probobly, but why. Just use linux

[lean pebble]

Then I fixed it

[thick minnow]

because then i have to learn linux.

[peak cloak]

and?

time to learn

[desert briar]

too much work

lol

[lean pebble]

You must learn the best os in the world

Linux

[desert briar]

read up presentmonkey

also, you have any experience with port mirroring by any chance? Wouldnt mind to brain storm some ideas

kinda stuck

[thick minnow]

im tempted to screw freenas and everything, get windows on a r420 and plug usb drives into it and use windows file sharing.

[desert briar]

in a dm though, dont want to "reveal" my home setup and "routes" in a public server

[lean pebble]

Lol

[peak cloak]

I wanted to do it once to capture some switch traffic but never got around to do it

I'm afraid I might break something

[desert briar]

Yeah, same boat. I want to implement it but I just cant get myself to get it to work with 2 switches

[peak cloak]

Setup is fragile

[peak cloak]

wdym with 2 switches?

[lean pebble]

Well present I'll let you know if there is any change in this saga 😂

[desert briar]

I want to port mirror traffic on 2 switches at the same time, instead of one.

Cisco uses RSPAN or ERSPAN for that, but im running cisco & mikrotik so its an issue

[lean pebble]

For now I just had to arrange my cables better because this stupid irobot that always taking everything down with him

[thick minnow]

can u run vm's in freenas?

[desert briar]

anyways, its fine. I will probs make a fool out of myself on r/homelab if i wont figure this out by the end of this weekend haha

[peak cloak]

you want to connect them together on the mirrored port? why?

[desert briar]

sec

[peak cloak]

kinda, idk. I don't have much or any real experience with freebsd

I know there are jails

which are kinda like containers

I think

[rocky badge]

bhyve

[lean pebble]

You probably can but not out of the box

[thick minnow]

because im thinking a server with straight windows on it would be so much better for me because i can straight run utorrent on it easily.

[rocky badge]

BSD hypervisor

https://wiki.freebsd.org/bhyve
https://www.ixsystems.com/documentation/freenas/11.2/virtualmachines.html

[lean pebble]

Blob to the rescue

[peak cloak]

ah I get it now

[desert briar]

Im stuck on this for the past 3 days

but ever since that north korean attack on security researchers im hellbent on adding some security measures

so I want to port mirror all the traffic to an ubuntu server VM with packetbeat & surricata on it. Logs get shipped to ELK with filebeat and voila

sEcUrItY

[peak cloak]

tbh, no clue. I don't have any experience with this stuff

[desert briar]

thats fine, thanks for your time though

[rocky badge]

The only time I've used port mirroring was pushing traffic from a core switch to a VM lol

Extreme though

into an Extreme Analytics VM

https://www.extremenetworks.com/product/extremeanalytics/

[desert briar]

Worst comes to worst ill just port mirror the port which goes to the internet so I can track outgoing traffic. But thats meh

[lean pebble]

Lol

[desert briar]

Idea is the same

[hollow marlin]

You can SPAN to more than 1 destination port

[desert briar]

push traffic through to a VM where u put an interface into promiscuous mode and sniff sniff sniff

[lean pebble]

Why not vpn on the router ? 🤔

[rocky badge]

Although, for Suricata

I just run that on pfSense

[desert briar]

+1 for an ssl proxy which strips the protection layer for inspection

but I have all that implemented already

[rocky badge]

squid

[desert briar]

just needa port mirror solution

[lean pebble]

Ya squid is awsome I use it

[desert briar]

yeah. Squid ssl bump or polarproxy or sslproxy

many solutions out there

as I said, I have all of that configured already. Everything except the port mirrors haha

[lean pebble]

I have openvpn with ssl + tls + tcp connection can be good to I guess

[desert briar]

Yeah, but I cant SPAN to a foreign switch, which is the main issue

[rocky badge]

The only way to remote into my network is wireguard lol

Besides the ports I have forwarded

[lean pebble]

Or fortivpn

[hollow marlin]

RSPAN to the VLAN and on the Mikrotiks turn off MAC learning on said VLAN

[rocky badge]

Sensitive ports are restricted via source IP

[peak cloak]

I need find a day to finally setup vlans to my AP and to my other distribution switches

[rocky badge]

https://blob.rocks/xJ8eCi3adG.png

[rocky badge]

yup, my access switch only gives APs VLANs they need lol

[desert briar]

Yeah, but how do I send lets say mirrored traffic on the mikrotik switch to a port on the cisco switch?

[rocky badge]

Would be cool if I could tunnel traffic to a point, kinda like EoGRE

[peak cloak]

also, I have the USW flex mini, and I need to setup vlans on that. How does that work?

[rocky badge]

So APs only have one VLAN

Port profiles

[desert briar]

I cant use RSPAN, as I said. RSPAN is a cisco thing, Mikrotik doesnt support it.

[rocky badge]

@peak cloak https://blob.rocks/XkgEmMWcH9.png

[desert briar]

you guys with ur fancy web UIs

[rocky badge]

I like and hate it

[peak cloak]

I only need unifi for this one switch

[desert briar]

cries in vyOS

[peak cloak]

cheapest active poe "managed" switch

I used vyos

[rocky badge]

my access switch is CLI though :P

[hollow marlin]

set switch1 mirror-source=ether2 mirror-target=[enter-vlan-interface-here] then just have the VLAN on the Cisco

[peak cloak]

was kinda familar as it's similar to edgemax

[rocky badge]

but yeah https://blob.rocks/2MBvL35yS2.png

[desert briar]

vyOS is one of the things which ur afraid to touch after u configure it

[rocky badge]

APs only get VLAN 20, 30, 40, 666

20 - Home
30 - IoT
40 - Guest
666 - Management

[peak cloak]

so just add Port Profiles?

[rocky badge]

one night I went through every switch and removed trunks that allowed every VLAN

Yea

[peak cloak]

does it care about IP

[rocky badge]

no

[peak cloak]

ok good

[desert briar]

Im currently not using any VLANs. So what do you suggest? VLANing the whole network? Actually, might I just dm you so we dont crosstalk?

[rocky badge]

oop no vlans

[peak cloak]

I'm always just scared of being locked out

that's a pain

been there, done that

[desert briar]

+1 I just NAT everything behind pfsense or vyos

[hollow marlin]

RSPAN requires a VLAN and honestly is the better way to set it up. And sure feel free to DM

[rocky badge]

I typically do untagged management

[desert briar]

my switch failed once and my whole network stopped working because VLANs

hah

fun times

[rocky badge]

So the native VLAN is 666

[peak cloak]

I configured a port on my router just for management if I need to (to avoid getting locked out of if I get locked out)

[rocky badge]

but depends on the device

[peak cloak]

also

how do APs get their IP when there are VLANs? Does it do it based on the untagged vlan?

[rocky badge]

Whatever their management VLAN is

[clear igloo]

Depends on the setup

[rocky badge]

https://blob.rocks/cf8Z45mXQ2.png