#networking | Linus Tech Tips | Page 315

waxen scroll Apr 1, 2021, 4:03 PM

#

@tame carbon no business reason, thus no funding allocated

tender hazel Apr 1, 2021, 4:51 PM

#

yes, they had the -EM devices with extra memory for BGP in routeros 6.. the extra memory is probably not necessary anymore with v7

tame carbon Apr 1, 2021, 5:00 PM

#

I bet unifi would do the opposite

#

they would add more ram, and have a 300% profit margin on the modules

#

their high end gear so expensive

hollow marlin Apr 1, 2021, 8:14 PM

#

@tender hazel Just saw the nanog email this morning of others talking about the Akamai traffic
https://mailman.nanog.org/pipermail/nanog/2021-April/thread.html

tame carbon Apr 1, 2021, 8:25 PM

#

@hollow marlin 🤣 https://mailman.nanog.org/pipermail/nanog/2021-April/212976.html

tender hazel Apr 1, 2021, 8:30 PM

#

thanks.. I was checking nanog yesterday and didn't see anything

tame carbon Apr 1, 2021, 8:51 PM

#

@hollow marlin lots of work ahead: https://i.imgur.com/4IS1ZpU.png

Imgur

#

AMX-IX hit new record

#

9.935Tbit/s

#

I compared some other exchanges

#

and turns out

#

this is actually the best one to be on

hollow marlin Apr 1, 2021, 8:59 PM

#

tame carbon 9.935Tbit/s

psh, 4 of our baby MX10003s can handle that no probs

tame carbon Apr 1, 2021, 8:59 PM

#

Its connected to everything

#

This complex

#

is the heart of european internet

#

https://eu-e25b.kxcdn.com/images/_contentBlockGraphicLarge/15401/website-full-width-image_amsterdam-colocations-map.png

#

@hollow marlin these are all within 5-30 mins driving

#

I guess 1 atom bomb

#

and rip europe

#

@hollow marlin whats the most extreme bandwidth in a single unit you've seen deployed?

#

like, how does an IX

#

do the actual peering, is that just a patch in the exchange?

#

between two switches ?

#

most of these buildings

#

do up to ~1tbit/s

#

except the national institute for particle physics

#

they were sucking 2tbit/s

tender hazel Apr 1, 2021, 9:09 PM

#

you all get an assigned IP on a common subnet

#

sometimes you may peer directly with others, but often you get the peering by peering with a single route server at the IX and everybody who peers with the route server exchanges routes

#

route servers are helpful because if you want to peer with all 100 people at an IX or however many there are, you don't have to contact them individually

tame carbon Apr 1, 2021, 9:10 PM

#

thats what AMS-IX says they do

#

they have a single route server

#

and provide their services through that

#

but how was just beyond me

tender hazel Apr 1, 2021, 9:11 PM

#

yeah but even when they have a route server, people don't always have to use it - some companies have a direct peering policy where they will only peer directly and not through the route server

tame carbon Apr 1, 2021, 9:11 PM

#

and what is that then?

#

you get a direct fiber link between your gear and the other peer?

tender hazel Apr 1, 2021, 9:12 PM

#

no, you still peer with them over the shared subnet, but you create the peering link with their IP directly, not the IP of the route server

tame carbon Apr 1, 2021, 9:12 PM

#

or do they do some kind of switching with vlans on the endpoint?

#

@tender hazel so this subnet

#

that's a public range ?

tender hazel Apr 1, 2021, 9:13 PM

#

yes, it is generally a public range

tame carbon Apr 1, 2021, 9:13 PM

#

what if you had two ISPs that wanted to directly exchange routes?

#

would they still use that common gateway from the exchange?

#

or is that what it literally means

#

one big giant street

#

and everyone sets up shop

hollow marlin Apr 1, 2021, 9:14 PM

#

tame carbon <@!462711605063450628> whats the most extreme bandwidth in a single unit you've ...

Nothing extreme, 80-100gbps. Majority of our customers are business but still a good amount of residential

tender hazel Apr 1, 2021, 9:14 PM

#

the exchange doesn't really provide a common "gateway", it is a shared network where people can peer over, and the route server will be used by most to automate that

tame carbon Apr 1, 2021, 9:15 PM

#

@tender hazel but what if I was to say, build a building with servers in it

#

and you get multiple x-connects with a fiber to different exchanges

#

you announce that route, to all three of those exchange points then?

tender hazel Apr 1, 2021, 9:15 PM

#

AMS-IX is looking at RFC5549 to help conserve public IPv4 space btw

#

https://archive.nanog.org/meetings/nanog56/presentations/Monday/mon.general.vijn.20.pdf

#

mikrotik supports that in routeros v7

tame carbon Apr 1, 2021, 9:16 PM

#

So the BGP is over v6

#

but the routes can be dual ?

tender hazel Apr 1, 2021, 9:17 PM

#

you can do BGP over either v4 or v6 and advertise both v4 and v6 but it is generally advised to peer over v4 for sharing v4 routes and over v6 for v6 routes

#

so you would set up two peerings with each, one for all of the v4 stuff with the ipv4 peering address and one for all of the v6 stuff over the v6 peering address

hollow marlin Apr 1, 2021, 9:17 PM

#

Much more than dual, there are tons of AFI/SAFI

#

Yes, v4/v6 are typically separate just for ease of management. Having them in the same peer can have some odd limitations

tame carbon Apr 1, 2021, 9:19 PM

#

https://i.imgur.com/s3XqLmA.png

Imgur

tender hazel Apr 1, 2021, 9:21 PM

#

I don't think RFC5549 has any specific dependencies on BGP.. but I don't think they are using it yet in production

#

they are just preparing for eventually going to that

hollow marlin Apr 1, 2021, 9:25 PM

#

It does, its based on a modified NLRI. Not sure I have seen OSPF/inter-as-inter-as allow v6 next-hop for v4

#

Im sure it exist in the latter

#

All our IX peers are /31. But at their scale it makes more sense to move to v6 next-hops

tender hazel Apr 1, 2021, 9:33 PM

#

ok

#

ahh yes, it's been a while since I read the presentation

#

slide 24 covers the behavior

tame carbon Apr 1, 2021, 9:35 PM

#

is v7 ready for production?

#

or does it not run on all devices yet?

tender hazel Apr 1, 2021, 9:36 PM

#

it runs on all devices, but it is not yet ready for production no

#

it is stable enough to use at home

#

but I certainly wouldn't put it in any sort of important role

thick minnow Apr 1, 2021, 9:36 PM

#

@tame carbon Just wondering do u know if its possible to watch blu ray disk copies on vlc on ur phone? (via that network sharing) The ones that u open on vlc by clicking 'open disk > blu ray', I'm thinking no rn because they have javascript menus and stuff but wondering if u know.

tame carbon Apr 1, 2021, 9:36 PM

#

@tender hazel So I'll do that fiber 1000/500 setup on v6 :P

#

@thick minnow you need a network stream for something like that

thick minnow Apr 1, 2021, 9:37 PM

#

oh so its in this case that streaming through vlc would actually be useful>

tame carbon Apr 1, 2021, 9:37 PM

#

well if you have a blueray

#

might just be easier to use handbrake or something

#

https://handbrake.fr/

HandBrake: Open Source Video Transcoder

HandBrake is an open-source, GPL-licensed, multiplatform, multithreaded video transcoder.

#

You can use this to turn DVDs and BluRays into files

tender hazel Apr 1, 2021, 9:55 PM

#

tame carbon <@!530075635423510548> So I'll do that fiber 1000/500 setup on v6 :P

Yes.. anything production like that I wouldn't run on v7

hollow marlin Apr 1, 2021, 9:55 PM

#

tame carbon is v7 ready for production?

Id like to run it on my AC2 but the forums say otherwise

tender hazel Apr 1, 2021, 9:55 PM

#

I'm running v7 at home on my rb4011 wifi

#

it's the first version that hasnt' been rebooting like crazy on me

#

it's stable with my config and I have a fairly kitchen sink config running on it

hollow marlin Apr 1, 2021, 9:56 PM

#

AC2 is reporting at least the last 2 betas causing reboots/freezes

tender hazel Apr 1, 2021, 9:57 PM

#

@hollow marlin most of the reboots/freezes in my experience are due to the config

#

routeros 7 doesn't properly update the config syntax when going from one version to the next like routeros 6 would

tame carbon Apr 1, 2021, 9:58 PM

#

the stable v6 on the rb4011

tender hazel Apr 1, 2021, 9:58 PM

#

so you can have a syntax that is invalid that gets loaded and it causes instability

tame carbon Apr 1, 2021, 9:58 PM

#

I've never had any issues with

#

the ac2 had issues with wireless once

#

after 120 days

#

reboot fixed it

tender hazel Apr 1, 2021, 9:58 PM

#

to upgrade with stability you need to export the config, upgrade, reset to no defaults and paste the config back in

#

that way it will be validated by the parser for that version

#

I don't really believe the people who stay it is not stable with the hap ac2

#

they probably did not reset to no defaults and paste the config back in like you should

#

you can always use partitions to test v7 on your hap ac2 safely

hollow marlin Apr 1, 2021, 10:00 PM

#

Yeah, Id recommend that regardless since v7 is almost built from the ground up. I know routing config not updating was a big problem for many.

hollow marlin Apr 1, 2021, 10:03 PM

#

tender hazel you can always use partitions to test v7 on your hap ac2 safely

I have not messed with that yet. Is there a second flash that the partition lives on or just single flash? AC2 only has 16mb and base package take up most of it. Only reason I ask is Cisco/Juniper have secondary flash for failover

#

That said, I have 2 more AC2s on standby and I could test with one

tender hazel Apr 1, 2021, 10:05 PM

#

oh only 16MB.. I thought it was a bit more for some reason

#

yeah for partitioning you need one with 64MB at least I think

hollow marlin Apr 1, 2021, 10:08 PM

#

Ill give it shot on a spare. If only Mikrotik will cut it out with the 16mb flashes

peak cloak Apr 1, 2021, 10:14 PM

#

microsoft is having dns issues

#

fun

#

https://downdetector.com/
You can see how everything related to microsoft is just having issues

downdetector.com

Status overview

vale reef Apr 1, 2021, 10:15 PM

#

NOO minecraft too

tame carbon Apr 1, 2021, 10:17 PM

#

@peak cloak soon discord will be down then too

#

you drop the a bomb on microsoft

#

and poof, no more fortnite

peak cloak Apr 1, 2021, 10:18 PM

#

tame carbon <@!222482269829332992> soon discord will be down then too

discord uses google cloud, if microsoft buys it I guess they will have to move to Azure?

tame carbon Apr 1, 2021, 10:18 PM

#

hahaha.

#

good joke

half holly Apr 1, 2021, 10:29 PM

#

peak cloak https://downdetector.com/ You can see how everything related to microsoft is jus...

might not just be related to microsoft

#

Cloudflare is still fine tho

#

unless Telus uses Microsoft

plain siren Apr 1, 2021, 10:31 PM

#

peak cloak discord uses google cloud, if microsoft buys it I guess they will have to move t...

itll be shoved into their global offerings clouds they set aside for public service use most likely. So yeah, Azure

dusky flame Apr 1, 2021, 10:44 PM

#

anyone here familiar with IIS URL Rewrite?|
I would like to add a site into IIS (fake directory since the app doesn't use IIS)
Then create a rule so that I can access this web app from the internet. myapp.mysite.com should point back to localhost:8080

peak cloak Apr 1, 2021, 10:47 PM

#

so reverse proxy basically?

plain siren Apr 1, 2021, 10:49 PM

#

dusky flame anyone here familiar with IIS URL Rewrite?| I would like to add a site into IIS ...

<rewrite>
    <rules>
        <rule name="Reverse Proxy to webmail" stopProcessing="true">
            <match url="^webmail/(.*)" />
            <action type="Rewrite" url="http://localhost:8081/{R:1}" />
        </rule>
        <rule name="Reverse Proxy to payroll" stopProcessing="true">
            <match url="^payroll/(.*)" />
            <action type="Rewrite" url="http://localhost:8082/{R:1}" />
        </rule>
    </rules>
</rewrite>

#

https://docs.microsoft.com/en-us/iis/extensions/url-rewrite-module/reverse-proxy-with-url-rewrite-v2-and-application-request-routing/_static/image5.png

thick minnow Apr 1, 2021, 10:56 PM

#

I am trying to configure my Unifi Security Gateway for the first time. I am able to get through the configuration process to set it up with the Controller software, but when I click finish, it gives me this error.

"{Mac}" is not a valid Target.

#

And I know that the USG does not have wifi capabilities, but the setup process for the controller has me entering in a SSID and password for a wifi network. How could that be?

dusky flame Apr 1, 2021, 10:58 PM

#

@plain siren great, I'll try that. thanks

peak cloak Apr 1, 2021, 11:00 PM

#

thick minnow And I know that the USG does not have wifi capabilities, but the setup process f...

you can skip the wifi step

sturdy knoll Apr 1, 2021, 11:00 PM

#

can someone help me with a vm it keeps deciding to stop working

copper ginkgo Apr 1, 2021, 11:13 PM

#

i got this base station for a home security system and discovered it seems to function like a mesh router; i still don't quite understand how wireless mesh networks work, and i'm worried about it potentially impacting internet bandwidth

thick minnow Apr 1, 2021, 11:13 PM

#

peak cloak you can skip the wifi step

👍 Im in the controller. Now when I go to the Unifi devices menu, I can see the USG on the list, but when I hover over it, it says "Managed by other"

peak cloak Apr 1, 2021, 11:14 PM

#

thick minnow 👍 Im in the controller. Now when I go to the Unifi devices menu, I can see the ...

did you try setting it up before?

#

you may have to reset it to release it

dusky flame Apr 1, 2021, 11:15 PM

#

😩 http error 404

tribal ferry Apr 1, 2021, 11:15 PM

#

Present, would you know anything about setting up VLANs between Unifi and MicroTik?

#

Just got my switch setup but my VLAN WLANS and wired VLAN connections are not getting connection.

thick minnow Apr 1, 2021, 11:15 PM

#

Yes but I couldn't get passed that last error I was getting

peak cloak Apr 1, 2021, 11:15 PM

#

tribal ferry Present, would you know anything about setting up VLANs between Unifi and MicroT...

well I've set up vlans between my USW FLEX mini and my dlink switch

tribal ferry Apr 1, 2021, 11:16 PM

#

done it at all between unifi and mk?

peak cloak Apr 1, 2021, 11:16 PM

#

nope

#

what does your network look like

tribal ferry Apr 1, 2021, 11:16 PM

#

don't you use mk a lot or am i thinking of someone else?

peak cloak Apr 1, 2021, 11:16 PM

#

crystal

tribal ferry Apr 1, 2021, 11:16 PM

#

ah

peak cloak Apr 1, 2021, 11:16 PM

#

but vlans are standertized

tribal ferry Apr 1, 2021, 11:16 PM

#

yeah, it was 12 am for him so he wasn't able to help atm lol

#

it's just a sfp+ link from udmp to crs326

peak cloak Apr 1, 2021, 11:17 PM

#

so in the controller I would just make the link be trunked

tribal ferry Apr 1, 2021, 11:17 PM

#

i have all of my vlans untagged to all of my in-use ports

#

how do i trunk a port?

peak cloak Apr 1, 2021, 11:17 PM

#

in the controller it's the all option

tribal ferry Apr 1, 2021, 11:18 PM

#

ah

peak cloak Apr 1, 2021, 11:18 PM

#

make sure in your networks tab you have the correct vlan id setup

tribal ferry Apr 1, 2021, 11:18 PM

#

i've done this

#

#

i'll change it to all though

peak cloak Apr 1, 2021, 11:19 PM

#

https://wiki.mikrotik.com/wiki/Manual:Basic_VLAN_switching

Manual:Basic VLAN switching

tribal ferry Apr 1, 2021, 11:19 PM

#

i've been using the gui

peak cloak Apr 1, 2021, 11:20 PM

#

huh idk then

#

I'm getting a mikrotik device though

#

HEX S

tribal ferry Apr 1, 2021, 11:20 PM

#

oh cool

#

do i need to set up subnets or something for the vlans?

peak cloak Apr 1, 2021, 11:20 PM

#

no

#

all that's on the router

tribal ferry Apr 1, 2021, 11:21 PM

#

i assumed, yeah

peak cloak Apr 1, 2021, 11:21 PM

#

I can show my d-link config

tribal ferry Apr 1, 2021, 11:21 PM

#

sure

#

do you think anything looks wrong with this?

peak cloak Apr 1, 2021, 11:21 PM

#

peak cloak Apr 1, 2021, 11:22 PM

#

tribal ferry do you think anything looks wrong with this?

idk why bridge is there in untagged

#

is that your trunk port?

#

oh it's by vlans like that

#

@tribal ferry there is nothing tagged

tribal ferry Apr 1, 2021, 11:22 PM

#

what do i need to tag?

peak cloak Apr 1, 2021, 11:22 PM

#

your trunk port should be tagged

tribal ferry Apr 1, 2021, 11:22 PM

#

my uplink is sfp-sfpplus1

peak cloak Apr 1, 2021, 11:22 PM

#

trunk basically means all tagged

peak cloak Apr 1, 2021, 11:23 PM

#

tribal ferry my uplink is sfp-sfpplus1

yeah tag that

tribal ferry Apr 1, 2021, 11:23 PM

#

on all vlans?

peak cloak Apr 1, 2021, 11:23 PM

#

yes

tribal ferry Apr 1, 2021, 11:23 PM

#

and i guess i need to un-untag it

peak cloak Apr 1, 2021, 11:23 PM

#

tribal ferry and i guess i need to un-untag it

wdym?

sturdy knoll Apr 1, 2021, 11:23 PM

#

can someone help me with a vm it keeps deciding to stop working if u can help please dm or @ me

tribal ferry Apr 1, 2021, 11:24 PM

#

remove it from being untagged to make it tagged

peak cloak Apr 1, 2021, 11:24 PM

#

tribal ferry remove it from being untagged to make it tagged

oh yeah

tribal ferry Apr 1, 2021, 11:25 PM

#

peak cloak oh yeah

#

this is it now

elder hazel Apr 1, 2021, 11:25 PM

#

peak cloak Apr 1, 2021, 11:26 PM

#

tribal ferry

and two, you can only have a port be tagged or untagged per vlan, not have it be vlan 12 untagged and vlan 13 untagged

#

but you can gave vlan 12 tagged and vlan 13 tagged

#

on one port

tribal ferry Apr 1, 2021, 11:26 PM

#

well i need vlan traffic to be able to pass through all ports

peak cloak Apr 1, 2021, 11:27 PM

#

oh your connecting a vlan supported switch to distribute to the end devices?

tribal ferry Apr 1, 2021, 11:27 PM

#

yep

peak cloak Apr 1, 2021, 11:27 PM

#

ah ok

tribal ferry Apr 1, 2021, 11:27 PM

#

well

peak cloak Apr 1, 2021, 11:27 PM

#

then everything should be tagged

tribal ferry Apr 1, 2021, 11:27 PM

#

some of these are going to switches

#

one is going to an ap

#

another goes to my cable that goes upstairs

peak cloak Apr 1, 2021, 11:28 PM

#

yeah so any port that is going to another device that supports vlans needs to be tagged

plain siren Apr 1, 2021, 11:29 PM

#

Oh fun VLAN Trunks

peak cloak Apr 1, 2021, 11:29 PM

#

tribal ferry Apr 1, 2021, 11:29 PM

#

so what should i change in this config?

peak cloak Apr 1, 2021, 11:29 PM

#

because this is all a vlan is

peak cloak Apr 1, 2021, 11:29 PM

#

tribal ferry so what should i change in this config?

tag everything

tribal ferry Apr 1, 2021, 11:30 PM

#

and remove all untags?

peak cloak Apr 1, 2021, 11:30 PM

#

yes

#

the reasoning behind this is that it needs to be tagged so the final switch or ap will know what packet is on what vlan and untag it on the right port

#

or ssid

tribal ferry Apr 1, 2021, 11:31 PM

#

so what should i use untags for then?

peak cloak Apr 1, 2021, 11:31 PM

#

tribal ferry so what should i use untags for then?

anything going to a device that is only on one network or client devices

#

so for example

#

I have my AP on a port that is tagged both vlan 20 (trusted) and 30 (guest). The AP untags the packets that come in and sends it out to the clients, and tags packets coming back

#

but I also have a roku connected to my core switch, and that is untagged on IOT, since it's a client device

tribal ferry Apr 1, 2021, 11:34 PM

#

so, tagging every port in use besides the trunk will allow vlans to flow freely?

peak cloak Apr 1, 2021, 11:34 PM

#

tribal ferry so, tagging every port in use besides the trunk will allow vlans to flow freely?

well tagging every vlan is called trunking

plain siren Apr 1, 2021, 11:34 PM

#

thick minnow Apr 1, 2021, 11:34 PM

#

peak cloak did you try setting it up before?

WOOOOHOOOO!!! I got the USG to adopt. Now, since I'll be using the USG as my main router, and my Linksys WRT3200 as my WiFi access point, what do I need to do?

plain siren Apr 1, 2021, 11:35 PM

#

good diagram to wrap around for brain chewing:

peak cloak Apr 1, 2021, 11:35 PM

#

thick minnow WOOOOHOOOO!!! I got the USG to adopt. Now, since I'll be using the USG as my mai...

put the linksys in AP mode

peak cloak Apr 1, 2021, 11:35 PM

#

plain siren good diagram to wrap around for brain chewing:

yeah vlans are hard to explain, they finally clicked for me once

#

many people confuse vlans with subnets

#

it's more that a subnet is carried over a vlan

plain siren Apr 1, 2021, 11:36 PM

#

^

tribal ferry Apr 1, 2021, 11:36 PM

#

still got to wrap my head around this lol

peak cloak Apr 1, 2021, 11:37 PM

#

https://cdn.discordapp.com/attachments/387022787480387605/801831633644159016/Untitled_Diagram.png

plain siren Apr 1, 2021, 11:38 PM

#

a VLAN Trunk basically means you dont have to run 3 cables to another switch just to have 3 networks (subnets) sent to that switch

#

#

in this case, those 3 VLAN's cant talk.

#

not on same networks, but you could use the router, static routes for example to allow... VLAN 1 to talk down to 2 and 3 but only allow 3 to talk back up

#

It keeps the "Vision" clients have on your network limited to your walled garden... the vLAN

#

ofc there is more to it and it has more uses

peak cloak Apr 1, 2021, 11:41 PM

#

yeah unless you use a Layer 3 switch, if you want to go from subnet on a vlan to another you need to go through the router

plain siren Apr 1, 2021, 11:44 PM

#

Get 3 straws of diff colors, wrap them in something. The wrap is the trunk and each vlan is a straw. Your data can only pass through 1 straw despite being in the same wrap

#

A router would allow you to control mixing at what would be a "smart" junction/combine valve as needed (L3 would just be a junction valve without advanced reaching control like a router has)

thick minnow Apr 1, 2021, 11:47 PM

#

if i have a friend

#

and i wanna send him like a 200gb file

#

over the internet. what is the best way for me to go around this?

#

for free

peak cloak Apr 1, 2021, 11:49 PM

#

thick minnow over the internet. what is the best way for me to go around this?

upload to a free file sharing site or self host a sharing service

thick minnow Apr 1, 2021, 11:50 PM

#

peak cloak upload to a free file sharing site or self host a sharing service

for 200gb?

#

at reasonable speeds?

#

do you know any such sites?

peak cloak Apr 1, 2021, 11:52 PM

#

thick minnow do you know any such sites?

idk

#

best is to self host

tender hazel Apr 1, 2021, 11:55 PM

#

@hollow marlin have you done any QoS at fairly high rates? like close to 1Gbps or so?

waxen scroll Apr 1, 2021, 11:56 PM

#

@hollow marlin lets talk about graceful failover again

hollow marlin Apr 1, 2021, 11:56 PM

#

plain siren not on same networks, but you could use the router, static routes for example to...

You wouldn't use statics as they are already connected, they'd already be routable. You would need ACLs to stop them from routing from one VLAN to another

waxen scroll Apr 1, 2021, 11:56 PM

#

do you know if BFD over BGP kills GF?

plain siren Apr 1, 2021, 11:57 PM

#

hollow marlin You wouldn't use statics as they are already connected, they'd already be routab...

I know I sinned by doing that but it was for the sake of simplicity despite being mostly wrong

#

I couldnt think of another way

thick minnow Apr 1, 2021, 11:58 PM

#

peak cloak put the linksys in AP mode

Is there a way to make it where I can access the USG interface at 19.168.1.1 & Linksys interface at 192.168.1.2?

hollow marlin Apr 1, 2021, 11:58 PM

#

tender hazel <@!462711605063450628> have you done any QoS at fairly high rates? like close to...

All our access edges are set with QoS. 10/40gb. Primarily for voice priority

peak cloak Apr 1, 2021, 11:58 PM

#

thick minnow Is there a way to make it where I can access the USG interface at 19.168.1.1 & L...

yes

plain siren Apr 1, 2021, 11:58 PM

#

thick minnow Is there a way to make it where I can access the USG interface at 19.168.1.1 & L...

Give .1 static IP to USG and .2 static IP to linksys?

hollow marlin Apr 1, 2021, 11:59 PM

#

waxen scroll <@!462711605063450628> lets talk about graceful failover again

Ooooo you have an update on the issue?

waxen scroll Apr 1, 2021, 11:59 PM

#

i do but this is not the same thing

thick minnow Apr 1, 2021, 11:59 PM

#

plain siren Give .1 static IP to USG and .2 static IP to linksys?

Do I do that in their respective interfaces?

plain siren Apr 1, 2021, 11:59 PM

#

thick minnow Do I do that in their respective interfaces?

Yus

waxen scroll Apr 2, 2021, 12:00 AM

#

@clear igloo I found a bug in NX-OS 9x that exists in 7x but they had no clue 9x did it. no code upgrade path

#

its rare to trigger it. I triggered it by flapping a VPC port channel multiple times using the interface range VS one interface at a time

tender hazel Apr 2, 2021, 12:02 AM

#

@hollow marlin we've been running into issues with mikrotik doing queueing for connections nearing 1Gbps.. we have one large site with hundreds of customers and 1Gbps coming in, and the best effort queue is only able to hit about 850Mbps at the highest.. if I disable the qos, the usage immediately increases to like 950Mbps

hollow marlin Apr 2, 2021, 12:02 AM

#

waxen scroll do you know if BFD over BGP kills GF?

Oh, I missed this comment. It shouldn't, BFD just informs BGP to pull the peer on loss, but by that time, BGP already knows the peers going down from GF

waxen scroll Apr 2, 2021, 12:02 AM

#

we're not seeing GF work 😦

#

we get packet loss the second BGP goes down

#

oh i should mention the links go down too

#

its complicated

tender hazel Apr 2, 2021, 12:03 AM

#

there is no individual CPU core that is even close to maxing out when the clients are hitting that maximum

waxen scroll Apr 2, 2021, 12:04 AM

#

FW A <> FW B, then to the switches. FW A has full link failure so FW B with the same peer IP turns up all its interfaces and tries to resume

#

we get like 30sec packet loss

#

this is how Palo failover works

#

standby FW keeps all links hard down

hollow marlin Apr 2, 2021, 12:06 AM

#

I'd get a PCAP, but if it's the same IP, FWB is going to be using a different sec/dst port and the session will have to time out.
Unless the FWs are clustered

waxen scroll Apr 2, 2021, 12:06 AM

#

clustered

#

i was not able to see what BGP was doing because the second I started to try that I hit that bug and OOPS

#

https://quickview.cloudapps.cisco.com/quickview/bug/CSCuy35913

Cisco Bug: CSCuy35913 - ethpm lockup when multiple vPC legs portcha...

Symptom: Ethpm got locked and causing vlan create/delete, copy r s etc relative operations fail. N9K-1# sh sys internal ethpm info all | in LOKD LOKD @ 838755 usecs after Wed Feb 17 20:06:38 2016 LOKD @ 977171 usecs after Wed Feb 17 20:11:06 2016 N9K-1# copy run st [########################################] 100% 2016 Feb 17 20:09:47 N9K-1 %SYSMG...

#

"quite timing relative and very hard to hit."

#

FU cisco

hollow marlin Apr 2, 2021, 12:08 AM

#

Hmmm... DM me a sketch with some dummy IPs

waxen scroll Apr 2, 2021, 12:10 AM

#

damnit where did my visio template file go

hollow marlin Apr 2, 2021, 12:11 AM

#

tender hazel <@!462711605063450628> we've been running into issues with mikrotik doing queuei...

I have not dived into Mikrotik queuing, do you have one of the configs I could take a peak at. WRED could be kicking in when you are getting that close

tender hazel Apr 2, 2021, 12:11 AM

#

yes we are using RED

hollow marlin Apr 2, 2021, 12:12 AM

#

Let me see if Mikrotik has the thresholds or if they're configurable.

tender hazel Apr 2, 2021, 12:14 AM

#

/queue type
add kind=red name=red-queue red-avg-packet=1000 red-burst=20 red-limit=60 red-max-threshold=50 red-min-threshold=10
/queue tree
add bucket-size=0.01 max-limit=980M name=Splitlake parent=MHT_347_SPL queue=red-queue
add bucket-size=0.01 limit-at=10M max-limit=10M name=7_monitoring_and_routing_splitlake packet-mark=\
    monitoring-and-routing parent=Splitlake priority=1 queue=red-queue
add bucket-size=0.01 name=0_best_effort_splitlake packet-mark=no-mark parent=Splitlake priority=6 queue=red-queue
add bucket-size=0.01 limit-at=5M max-limit=5M name=6_mgmt_traffic_splitlake packet-mark=mgmt parent=Splitlake priority=2 queue=red-queue
add bucket-size=0.01 name=5_ent_priority_splitlake packet-mark=ent-priority parent=Splitlake priority=3 queue=red-queue
add bucket-size=0.01 name=4_ent_splitlake packet-mark=ent parent=Splitlake priority=4 queue=red-queue
add bucket-size=0.01 name=3_retail_priority_splitlake packet-mark=retail-priority parent=Splitlake priority=5 queue=red-queue
add bucket-size=0.01 name=2_background_splitlake packet-mark=background parent=Splitlake priority=7 queue=red-queue
add bucket-size=0.01 name=1_scavenger_splitlake packet-mark=scavenger parent=Splitlake queue=red-queue

#

about 78,000 PPS going through the queue

#

mikrotik for the most part just uses the queue types and HTB support that is built into linux already, although they added their own in a few cases like pcq

#

I can change the queue type but I get the best performance from RED in general

#

we mark the packets by using bridge filters which are set from the MPLS experimental bits

#

thick minnow Apr 2, 2021, 12:26 AM

#

plain siren Yus

Are you able to walk me through the process on both the USG and Linksys to set the static IP?

plain siren Apr 2, 2021, 12:28 AM

#

The USG I know you just punch in https://192.168.1.1/ On first connect and the WebUI will ask you to set it a an IP

thick minnow Apr 2, 2021, 12:41 AM

#

peak cloak best is to self host

How?

peak cloak Apr 2, 2021, 12:42 AM

#

thick minnow How?

sftp, scp...

thick minnow Apr 2, 2021, 12:42 AM

#

What do those stand for

#

Is there any way I can just send someone a file with utorrent?

thick minnow Apr 2, 2021, 12:43 AM

#

peak cloak sftp, scp...

Because normally when letters are involved that means hard to set up.......

peak cloak Apr 2, 2021, 12:43 AM

#

I guess you can use torrent

#

just create a torrent

#

idk how torrent works

sturdy knoll Apr 2, 2021, 1:13 AM

#

can someone help me with a vm it keeps deciding to stop working if u can help please dm or @ me

thorny vector Apr 2, 2021, 3:45 AM

#

@sturdy knoll What's up with it?

#

And what are you running it in?

sturdy knoll Apr 2, 2021, 4:18 AM

#

I am using unraid the graphics card is a gigabyte rx590 and what’s happening is when I send it to the gpu it works for a couple min then black screens and is I try and start it again it freezes at the tianocore screen

#

@thorny vector I’ve also tried routing the vbios, booting in legacy, using Q35, using SeaBIOS instead of OVFM

thorny vector Apr 2, 2021, 4:58 AM

#

Any errors kicked back? @sturdy knoll

sturdy knoll Apr 2, 2021, 5:12 AM

#

The logs don’t show any errors

low kayak Apr 2, 2021, 5:13 AM

#

so i was tryna setup zerotier and i have 2 devices on a network rn both show tha status as ok but when they try to ping each other all packages end up as lost

#

did i miss something

#

also both show up as online in the website panel

#

anyone got any ideas?

honest wind Apr 2, 2021, 5:30 AM

#

@thick minnow no matter how you twist it, the initial transfer is limited by your internet upload speed, so self hosting is best. Look into a few options like sftp, scp or even a web server. If your upload speed is super slow, it might even be faster to just overnight ship a flash drive

#

I guess that last option isn’t really free

thick minnow Apr 2, 2021, 8:08 AM

#

honest wind <@456226577798135808> no matter how you twist it, the initial transfer is limite...

How does self hosting bypass the upload speed limitation?

tame carbon Apr 2, 2021, 8:10 AM

#

it doesnt

#

your service speed will be limited to your upload.

tender hazel Apr 2, 2021, 8:26 AM

#

@thick minnow sending something via torrent requires an online tracker managing the torrent connections (seeders and peers) in order to coordinate the flow of data

thick minnow Apr 2, 2021, 8:26 AM

#

Ohh ripriprip

#

Oh wait r u saying be my own tracker

#

This seems complicated

tender hazel Apr 2, 2021, 8:27 AM

#

If you are just trying to send a file to one person, torrent probably would not make sense - you would have to register the torrent with some kind of tracker and have the other person get the magnet link to get the seeders and peers from the tracker

thick minnow Apr 2, 2021, 8:27 AM

#

Oh ok

#

What do you recommend then?

tender hazel Apr 2, 2021, 8:27 AM

#

torrenting is only faster if you can potentially have a bunch of different people serving the file to one person

thick minnow Apr 2, 2021, 8:27 AM

#

Nah that won't be the casw

#

Just need to send a single big file

#

Well, it won't really be quick in that case, but from my experience it'll probably be a lot more reliable

#

So which method do you recommend?

tender hazel Apr 2, 2021, 8:29 AM

#

how big?

thick minnow Apr 2, 2021, 8:29 AM

#

330gb max

#

I'd say torrent for that size

tender hazel Apr 2, 2021, 8:29 AM

#

that's really big

thick minnow Apr 2, 2021, 8:29 AM

#

But how do I make the tracker?

tender hazel Apr 2, 2021, 8:31 AM

#

@thick minnow https://lifehacker.com/how-to-share-your-own-files-using-bittorrent-5534190

Lifehacker

How to Share Your Own Files Using BitTorrent

Most of us are comfortable using BitTorrent to download files, but the popular file-sharing protocol is also a great tool for sharing your own stuff with family, friends, or the world at large. Here's the basics of creating your own torrent.

#

I haven't done it before myself

#

and that's a really old link

#

the idea should still work as long as you use a current tracker

thick minnow Apr 2, 2021, 8:34 AM

#

tender hazel the idea should still work as long as you use a current tracker

That article doesnt explain the tracker.

#

It just says if your using a private tracker set it to private otherwise public like wtf?

tender hazel Apr 2, 2021, 8:36 AM

#

yeah so with torrents you probably need to use a public tracker which means someone else could download the file too as long as you are offering it

#

nothing to protect it

#

it may not be suitable for what you need

#

sending a file that huge is not a normal thing

#

may I ask what it is that you are trying to send that is so huge? you don't have to answer if you aren't comfortable answering

tame carbon Apr 2, 2021, 8:41 AM

#

@tender hazel summer beach photos of your mom

#

@thick minnow Torrents are for peer to peer sharing

#

eg: thousands of computers and users

tender hazel Apr 2, 2021, 8:44 AM

#

I need a way now to disable the quick setup feature in the mikrotik app for our users

#

I'm hoping that mikrotik will be able to add some kind of feature to allow control for that

tame carbon Apr 2, 2021, 8:45 AM

#

https://forum.mikrotik.com/viewtopic.php?f=1&t=93041

#

Already been requested

#

9 years ago

tender hazel Apr 2, 2021, 8:45 AM

#

yeah this is different though

#

I don't care about winbox, and we already remove it via webfig

#

this is just about the mikrotik phone app

tame carbon Apr 2, 2021, 8:46 AM

#

mh

#

@tender hazel ssh proxy? with commandlet filtering?

tender hazel Apr 2, 2021, 8:46 AM

#

the mikrotik phone app uses the winbox port so I don't think any sort of filtering will work

tame carbon Apr 2, 2021, 8:47 AM

#

attacking this from a developer's perspective xD

tender hazel Apr 2, 2021, 8:47 AM

#

the issue for me is that we can't have our users going into quick setup on the phone app

#

because here's what happens

tame carbon Apr 2, 2021, 8:47 AM

#

@tender hazel give them a presentation, with the threat of sodomization by baton

tender hazel Apr 2, 2021, 8:47 AM

#

if I go into quick setup on the phone app with one of our routers and just next next next next finish

#

it disables the PPPoE interface and changes all wireless interfaces to open authentication

tame carbon Apr 2, 2021, 8:47 AM

#

I always tell tik users to NOT TOUCH quickset after configs have been done xD

#

@tender hazel wait what about user groups?

#

can;t you restrict PPPoE setings and such?

tender hazel Apr 2, 2021, 8:49 AM

#

there is no group for controlling quickset access

tame carbon Apr 2, 2021, 8:49 AM

#

yeah but doesnt quickset do that through commands.

#

?>

tender hazel Apr 2, 2021, 8:49 AM

#

and the issue is that we actually want our users to have full control of their routers

#

even the ability to lock us out, if they wish, and if that helps them to avoid wanting to buy their own third party router

tame carbon Apr 2, 2021, 8:49 AM

#

you just want to protect them from themselves

tender hazel Apr 2, 2021, 8:49 AM

#

yes

tame carbon Apr 2, 2021, 8:49 AM

#

whelp

#

xD

tender hazel Apr 2, 2021, 8:50 AM

#

the problem is that in the phone app the quick setup is this enticing big icon with a magic wand and sparkles

#

displayed very prominently

#

practically screaming "click me" at the user

tame carbon Apr 2, 2021, 8:51 AM

#

I was looking for a click me meme

#

couldnt find one

#

https://www.youtube.com/watch?v=ofRhJjmvzno

YouTube

De-Phazz - Topic

Soulflakes

Provided to YouTube by The Orchard Enterprises

Soulflakes · DePhazz

Prankster Bride

℗ 2016 phazz-a-delic

Released on: 2016-11-04

Music Publisher: Copyright Control

Auto-generated by YouTube.

▶ Play video

tacit leaf Apr 2, 2021, 8:51 AM

#

I am not sure if this is the perfect channel, But I was trying to port forward on my router and it dosent seem to work. Any ideas please?

tame carbon Apr 2, 2021, 8:52 AM

#

@tacit leaf have you had any port forward on this network before?

#

You might want to check if you are not behind a CG-NAT, and have your own public IP

tacit leaf Apr 2, 2021, 8:52 AM

#

Never, I had them on previous network and it worked all fine

tacit leaf Apr 2, 2021, 8:53 AM

#

tame carbon You might want to check if you are not behind a CG-NAT, and have your own publi...

Is there any way to check it?

tame carbon Apr 2, 2021, 8:53 AM

#

@tacit leaf open commandline and run a tracert 1.1.1.1

#

you can look at the path it takes through the routers, if you are on a CG-NAT or not

tacit leaf Apr 2, 2021, 8:54 AM

#

tame carbon <@!484409542080331797> open commandline and run a `tracert 1.1.1.1`

Says trace complete

tame carbon Apr 2, 2021, 8:54 AM

#

ok screenshot?

tacit leaf Apr 2, 2021, 8:54 AM

#

tender hazel Apr 2, 2021, 8:55 AM

#

not CGNAT

tame carbon Apr 2, 2021, 8:55 AM

#

@tender hazel that ISP does have some shitty backbone lol

tacit leaf Apr 2, 2021, 8:56 AM

#

It probably does lol.

tame carbon Apr 2, 2021, 8:56 AM

#

@tender hazel you certain?

tender hazel Apr 2, 2021, 8:56 AM

#

tame carbon <@!530075635423510548> that ISP does have some shitty backbone lol

I don't recognize any of the providers, but what exactly do you mean

tame carbon Apr 2, 2021, 8:56 AM

#

@tender hazel what about the 10.0.0.0/8 ?

tender hazel Apr 2, 2021, 8:57 AM

#

that's not any concern - we use RFC1918 for point to point links inside our network since they aren't used for any customers and the only thing they show up in is traceroute

#

so if our own customers traceroute to 1.1.1.1 they will hop over a few RFC1918 links in the 10.0.0.0/8 space

tame carbon Apr 2, 2021, 8:58 AM

#

@tender hazel the other points break traceroute lol

tender hazel Apr 2, 2021, 8:58 AM

#

if there was CGNAT here you would see something in the 100.64.0.0/10 space and you don't

tender hazel Apr 2, 2021, 8:58 AM

#

tame carbon <@!530075635423510548> the other points break traceroute lol

yes they do, but that looks like their upstream similarly using RFC1918 addresses internally

tacit leaf Apr 2, 2021, 8:59 AM

#

I am soo confused xD

tender hazel Apr 2, 2021, 8:59 AM

#

when the upstream provider uses RFC1918 internally to save on IPv4 public space you will see timeouts for a few hops that are addressed via RFC1918

#

it is the only downside of using RFC1918 for point to point is that people who aren't on your network will see timeouts for those hops and think something is wrong

tame carbon Apr 2, 2021, 9:00 AM

#

@tacit leaf go to your router config

tender hazel Apr 2, 2021, 9:00 AM

#

but in actuality it is good practice for conserving public IPv4 space

tame carbon Apr 2, 2021, 9:00 AM

#

@tacit leaf find that port forward config, and have a look

#

send us screenshot if you can

#

@tender hazel I was always under the impression that they use 10.0.0.0/8 internally, but thought they use some kind of encapsulation to make it appear as though it is a direct link between two routers

tacit leaf Apr 2, 2021, 9:01 AM

#

tame carbon Apr 2, 2021, 9:01 AM

#

looks right

#

@tacit leaf does the router WAN IP correspond to the public IP you get if you search online for your own IP?

#

https://www.google.com/search?q=what+is+my+ip

tacit leaf Apr 2, 2021, 9:02 AM

#

It’s different

tame carbon Apr 2, 2021, 9:02 AM

#

@tacit leaf what does the WAN on the router report?

tender hazel Apr 2, 2021, 9:03 AM

#

tame carbon <@!530075635423510548> I was always under the impression that they use 10.0.0.0...

no, the problem with encapsulation is that it adds overhead which can impact MTU, so you don't want to do that when it isn't necessary.. you can use any sort of RFC1918 subnet to connect any two public subnets.. it works perfectly, the only downside is that you don't get a traceroute response from the RFC1918 subnet unless you are on the same provider network as the RFC1918 subnet

tame carbon Apr 2, 2021, 9:03 AM

#

those 40 bytes too much? xD

tacit leaf Apr 2, 2021, 9:03 AM

#

172.16.15.89

#

Ip is way different

tame carbon Apr 2, 2021, 9:04 AM

#

KEKW

#

@tender hazel well look at that? isnt that CG-NAT then?

#

172.16.0.0/16

tacit leaf Apr 2, 2021, 9:05 AM

#

Oh, is there anything I can do about it

tender hazel Apr 2, 2021, 9:05 AM

#

that's RFC1918, CG-NAT shouldn't use that range

#

where are you seeing that 172.16.15.89?

tacit leaf Apr 2, 2021, 9:05 AM

#

Status page of my router

#

Under WAN

tender hazel Apr 2, 2021, 9:06 AM

#

ugh

tame carbon Apr 2, 2021, 9:06 AM

#

So I was right?

#

Shitty ISP

#

@tacit leaf are you from india?

tender hazel Apr 2, 2021, 9:06 AM

#

then your ISP is using RFC1918 space as CG-NAT instead of the actual CG-NAT space

tacit leaf Apr 2, 2021, 9:06 AM

#

tame carbon <@!484409542080331797> are you from india?

Yeah

tame carbon Apr 2, 2021, 9:06 AM

#

Developing world has got the wrong end of the stick in ipv4

#

they started using internet widely after we already ran out of IP addresses

tender hazel Apr 2, 2021, 9:06 AM

#

india has better IPv6 deployment than most of the world

tame carbon Apr 2, 2021, 9:07 AM

#

yeah, v6 xD but not v4

#

@tacit leaf your public IP is shared amongst other users from your ISP

tacit leaf Apr 2, 2021, 9:07 AM

#

Is there anything I can do about it tho?

tame carbon Apr 2, 2021, 9:07 AM

#

thus, you cannot port forward.

tacit leaf Apr 2, 2021, 9:07 AM

#

Ohhh, bruh thats shit

tender hazel Apr 2, 2021, 9:07 AM

#

tame carbon So I was right?

yes you were right - it didn't show up in the traceroute though

tame carbon Apr 2, 2021, 9:07 AM

#

@tender hazel I didnt think they would have a public range on their PPPoE servers

tacit leaf Apr 2, 2021, 9:08 AM

#

Can I ask them to give a personal IP address?

tame carbon Apr 2, 2021, 9:08 AM

#

@tacit leaf usually a business plan would give you your own static public IP

#

Like, sometimes feels like here in europe its so easy to get your own public IP, even as a household consumer

#

and that everywhere else, its utter shit

tacit leaf Apr 2, 2021, 9:09 AM

#

Ohh, but getting one will fix my issue?

tame carbon Apr 2, 2021, 9:09 AM

#

South Africa still has a bunch of IPv4's

#

@tacit leaf the problem is that we are out of IPv4 addresses.

#

and getting your hands on one is a combination of the right ISP & some luck

tacit leaf Apr 2, 2021, 9:10 AM

#

Hmm, soo it’s worth a try atleast

tender hazel Apr 2, 2021, 9:11 AM

#

tame carbon <@!530075635423510548> I didnt think they would have a public range on their PPP...

It looks like they do

#

which is actually strange

#

afaik, there's no point in using a public IPv4 as the ISP address on a PPPoE tunnel

tame carbon Apr 2, 2021, 9:12 AM

#

KEKW https://i.imgur.com/j6AqqFc.png

Imgur

tender hazel Apr 2, 2021, 9:12 AM

#

I mean we do it but we only do it because we have a ton of addresses and it is just one of those

#

and it is already routed to the device

#

we could change it to an RFC1918 in a few seconds and it wouldn't do anything

tame carbon Apr 2, 2021, 9:13 AM

#

except it would free up some addresses

#

Meanwhile, I'm sitting on a /29

#

and not even using two of those addresses

tender hazel Apr 2, 2021, 9:13 AM

#

yup in the case of the provider in this case it makes sense to use RFC1918

tame carbon Apr 2, 2021, 9:14 AM

#

The ISP originally set me up with a /30

#

and that was such a stupid move xD

tender hazel Apr 2, 2021, 9:14 AM

#

every last address they can give to a customer is valuable

#

I think we have finally convinced mikrotik to add /31 support

tame carbon Apr 2, 2021, 9:14 AM

#

lol wat?

#

is there even space for ..

#

wat

#

how does that even work

tender hazel Apr 2, 2021, 9:15 AM

#

yeah.. /31 is a special thing

#

it was designed to conserve IPv4 address space

#

no network or broadcast address

tame carbon Apr 2, 2021, 9:15 AM

#

by adding more bogus broadcast?

#

oh

tender hazel Apr 2, 2021, 9:15 AM

#

the device has to be designed to support /31

tame carbon Apr 2, 2021, 9:16 AM

#

ok but a downstream client can use a /32

tender hazel Apr 2, 2021, 9:16 AM

#

when there are only two devices there is really no need for a network or broadcast address

tame carbon Apr 2, 2021, 9:16 AM

#

and not care ?

tender hazel Apr 2, 2021, 9:16 AM

#

yes, a /32 works too, but the problem is that /31 is so standardized, mikrotik seems like they are doing something weird by not supporting /31 and supporting /32 only

#

mikrotik and linux in general allow you to do /32's on both sides which in some ways is even better than a /31

#

because you can have point to multipoint with a /32 - one /32 address on the "hub" with multiple /32 addresses for each "spoke"

#

the issue is that /31 is considered so normal that to not support it, you seem to be strange

tame carbon Apr 2, 2021, 9:20 AM

#

I thought /31 was a gimmick

tender hazel Apr 2, 2021, 9:20 AM

#

in north america, the fact that mikrotik doesn't support /31 just makes them seem more like some tinkertoy router vendor

tame carbon Apr 2, 2021, 9:20 AM

#

and that /32 and /30 are the only ones that make sense

#

either you have full broadcast domain & network, or none at all

tender hazel Apr 2, 2021, 9:20 AM

#

every other major router vendor supports /31

tame carbon Apr 2, 2021, 9:20 AM

#

time for routerOS to step up to the challenge

#

they been struggling because of the old kernel

tender hazel Apr 2, 2021, 9:21 AM

#

the /31 support shouldn't really matter because they support /32 and it can do the same thing theoretically but it is just the optics of the situation

#

we had techs waste hours and hours and hours trying to figure out how to get one of our mikrotiks to connect to an upstream ISP that was giving us a /31

tame carbon Apr 2, 2021, 9:22 AM

#

F

tender hazel Apr 2, 2021, 9:22 AM

#

all they had to do was configure it for a /32 instead but that isn't exactly clear if you don't know what you are doing and the upstream says "assign this address with /31"

tame carbon Apr 2, 2021, 9:23 AM

#

@tender hazel that was me with 0 experience about vlans and subnets

#

setting up fiber on my RB4011, called my ISP like 5x

#

I think they are glad its all working now lol

#

IPTV was even worse

#

All they gave me was a tutorial for a draytek

tacit leaf Apr 2, 2021, 9:24 AM

#

@tame carbon what should i exactly ask my isp?

tame carbon Apr 2, 2021, 9:24 AM

#

@tacit leaf ask them if they provide public IPs to customers

#

probably not... but never know

#

its probably going to cost extra

tacit leaf Apr 2, 2021, 9:25 AM

#

Aight will ask

tame carbon Apr 2, 2021, 9:26 AM

#

@tender hazel lol shared IPs are so annoying when IP banning. On that minecraft server we had lots of issues with people from Comcast

#

you ban 1 person

#

and 1 week later ,you get another user complaining

#

"I am banned"

tender hazel Apr 2, 2021, 9:26 AM

#

IPv6 is the only solution to all this

tame carbon Apr 2, 2021, 9:26 AM

#

@tender hazel It got so bad to the point, that I started logging IPv4 <--> User

tender hazel Apr 2, 2021, 9:27 AM

#

the thing is that people are still asking what do we need IPv6 for? nat is great!

tame carbon Apr 2, 2021, 9:27 AM

#

So I could get a picture of who would be using what, and if I could ban without a problem..

#

and you sometimes find 1 public IP

tender hazel Apr 2, 2021, 9:27 AM

#

it is insane if you can't explain to someone what the problem is with NAT

tame carbon Apr 2, 2021, 9:27 AM

#

used by 20 different users over 1 year's worth of time

tender hazel Apr 2, 2021, 9:27 AM

#

why it is bad, always, always

tame carbon Apr 2, 2021, 9:28 AM

#

@tender hazel lol "please can you unban me, my brother was being an idiot"

#

nice NAT you have there.

tender hazel Apr 2, 2021, 9:28 AM

#

IPv6 is the solution

#

if two people have the same IPv6 address exactly, they are the same person 🙂

tame carbon Apr 2, 2021, 9:29 AM

#

Our mc server doesn't support v6

#

protocol might these days, but my own database doesnt lol.

#

It stores 32 bit unsigned integers

tender hazel Apr 2, 2021, 9:29 AM

#

well the thinking has to change to make things better

#

it is changing now - PS5 now actually uses IPv6

tame carbon Apr 2, 2021, 9:30 AM

#

DROP PROCEDURE IF EXISTS proc_ban_ip;
CREATE PROCEDURE proc_ban_ip(
  IN addr     INTEGER UNSIGNED,
  IN reason   VARCHAR(128),
  IN duration BIGINT
)
  BEGIN
    INSERT INTO ip_address VALUES (addr, NULL, NOW(), NOW(), duration, reason)
    ON DUPLICATE KEY UPDATE
      banreason = reason, banned = duration;
  END;

#

^ :D

tender hazel Apr 2, 2021, 9:30 AM

#

PS4 could get an IPv6 address but didn't use it for anything - you could ping it but it did squat

#

@tame carbon yeah so you will have to adjust that code to be more protocol neutral

tame carbon Apr 2, 2021, 9:31 AM

#

@tender hazel the problem is the internal code that calls this procedure

#

it uses InetAddress

#

which on minecraft only applies to v4

#

stupid stupid stupid

#

https://i.imgur.com/6C4DY5k.png

Imgur

#

@tender hazel ^ lol my schema

#

it logs who was the first user to use an IP

#

and any other users that might have used it

#

first time, and last use

#

and also tracks how often an address is used

tender hazel Apr 2, 2021, 9:32 AM

#

java?

tame carbon Apr 2, 2021, 9:32 AM

#

database is MySQL with PL-SQL Procedures

#

the application is java yes

tender hazel Apr 2, 2021, 9:33 AM

#

ok right, I just mean the InetAddress

#

https://docs.oracle.com/javase/7/docs/api/java/net/InetAddress.html

tame carbon Apr 2, 2021, 9:33 AM

#

lemme find the calling code

#

@tender hazel yeah but the server only listens on v4.

#

OVH doesnt support v6 KEKW

tender hazel Apr 2, 2021, 9:33 AM

#

what's OVH?

tame carbon Apr 2, 2021, 9:34 AM

#

idk

#

it burned down

#

@tender hazel see the problem is here

#

    @Override
    protected KnockturnPlayer login(UUID uuid, InetAddress address, String username) {
        try (Connection connection = KnockturnCore.getMySQLConnection()) {
            PreparedStatement ps = connection.prepareStatement(
                    "CALL proc_player_login(?, UNHEX(?), ?);"
            );
            ps.setString(1, address.getHostAddress());
            ps.setString(2, uuid.toString().replace("-", ""));
            ps.setString(3, username);
            ResultSet rs = ps.executeQuery();
            rs.next();
            Long discordid = rs.getLong("discordid");
            if (rs.wasNull()) {
                discordid = null;
            }
            return new KnockturnPlayerImpl(
                    rs.getString("username"), rs.getLong("firstlogin"),
                    rs.getLong("lastlogin"), uuid, connection, server, rs.getBoolean("banned"),
                    rs.getString("banreason"), discordid);
        } catch (SQLException e) {
            logger.error("failed to login", e);
            return null;
        }
    }

#

getHostAddress() always returns v4

#

interface is the same for v4 and 6

tacit leaf Apr 2, 2021, 9:35 AM

#

50$ yearly for a public ip KEKW

tame carbon Apr 2, 2021, 9:35 AM

#

@tacit leaf wow.

#

wait

#

no

#

that's not so bad

tacit leaf Apr 2, 2021, 9:35 AM

#

It is yes

tame carbon Apr 2, 2021, 9:36 AM

#

@tacit leaf I pay 16 euros/month extra for 8 extra public IPs

#

2 bucks/month/ip

tacit leaf Apr 2, 2021, 9:36 AM

#

I can get another isp and pay 2-3$ extra to get a public ip by default

tender hazel Apr 2, 2021, 9:37 AM

#

https://stackoverflow.com/questions/6908398/inetaddress-gethostaddress-ipv6-compliant

Stack Overflow

InetAddress.getHostAddress() ipv6 compliant?

Is InetAddress.getHostAddress() ipv6 compliant in JDK 1.6?

Specifically I am doing

InetAddress.getLocalHost().getHostAddress()
Is it ipv6 compliant? Does it work for both ipv4 and v6 addresses?

tame carbon Apr 2, 2021, 9:37 AM

#

@tender hazel its an interface that is subclassed based on the type

#

But that is moot

#

if the server only listens on v4.

tender hazel Apr 2, 2021, 9:37 AM

#

then you can't connect via v6 yeah

tame carbon Apr 2, 2021, 9:38 AM

#

any incoming connections will always be of Inetv4

tacit leaf Apr 2, 2021, 9:38 AM

#

Thanks a lot for helping yall 🙂

tame carbon Apr 2, 2021, 9:38 AM

#

https://i.imgur.com/bdX8eOF.png

Imgur

tender hazel Apr 2, 2021, 9:38 AM

#

either way it is incredibly frustrating to see so many people having to set up these crazy workarounds like doing a VPN to a VPS

tame carbon Apr 2, 2021, 9:39 AM

#

if (address instanceof Inet4Address) { //foo }

tender hazel Apr 2, 2021, 9:39 AM

#

to get a public IPv4 address when they most likely already have a public IPv6

tame carbon Apr 2, 2021, 9:39 AM

#

@tender hazel I wrote this code in 2014

#

and it still works :D

#

just needs to be dusted off for the eventual move to a new hoster

tender hazel Apr 2, 2021, 9:43 AM

#

hollow marlin All our IX peers are /31. But at their scale it makes more sense to move to v6 n...

@tame carbon this illustrates how commonly used /31's are

tame carbon Apr 2, 2021, 9:44 AM

#

@tender hazel could my ISP in theory use my FttH to provide a vlan which I can peer with in an exchange?

#

The fiber operator here can support 10G as well

tender hazel Apr 2, 2021, 9:46 AM

#

in theory, but you need an AS number to peer

tame carbon Apr 2, 2021, 9:46 AM

#

yeah, but I need to be on a special block don't I ?

#

I can't just announce a route through my WAN

#

lol advertise 127.0.0.0/8

tender hazel Apr 2, 2021, 9:47 AM

#

BGP works over TCP so you can be several hops away from who you are peering with

#

like you can peer with someone halfway across the world separated from you by a dozen routers

tame carbon Apr 2, 2021, 9:47 AM

#

oh really?

tender hazel Apr 2, 2021, 9:47 AM

#

yeah

tame carbon Apr 2, 2021, 9:47 AM

#

SO THAT. is what my african friend wanted to do

#

he asked me if i wanted to peer

#

cus he sits on a pile of v4's

#

I thought I couldnt

tacit leaf Apr 2, 2021, 9:48 AM

#

Might be a super stupid question, I guess theres no work arounds for this?

tame carbon Apr 2, 2021, 9:48 AM

#

https://en.wikipedia.org/wiki/Pretoria_Wireless_Users_Group

Pretoria Wireless Users Group

Pretoria Wireless Users Group is a South African wireless users group. It is non-profit community organisation providing a wireless community network in Pretoria, the capital of South Africa.
PTAWUG has been created as the community’s answer to South Africa’s restrictive telecommunications environment. The South African telecommunications indust...

#

@tender hazel he wanted to peer with this ^ xD

#

he's the operator for them

tender hazel Apr 2, 2021, 9:49 AM

#

but just peering won't actually give you connectivity to that, you need to have routes installed outside BGP that will allow you to direct traffic there

tame carbon Apr 2, 2021, 9:49 AM

#

right

#

@tender hazel lol some of the crazy stories I've heard from them

#

like getting hijacked while on the job to fix a tower

#

by a guy with a BB-Gun

tender hazel Apr 2, 2021, 9:50 AM

#

christ

tame carbon Apr 2, 2021, 9:50 AM

#

they were in the car

#

@tender hazel yeah unlucky for the guy with the BB-gun

#

they had a real 9mm

#

I think they shot him in the leg and drove off

#

Pretoria is quite a rough neighborhood

#

@tender hazel opiate infested regions makes people do some bad things :/

plain siren Apr 2, 2021, 9:52 AM

#

That happens to AT&T dudes in Chicago too lol

tame carbon Apr 2, 2021, 9:52 AM

#

pfffft

#

@plain siren sounds like someone been playing Watch_Dogs

plain siren Apr 2, 2021, 9:52 AM

#

im not even joking

tame carbon Apr 2, 2021, 9:52 AM

#

taking down ctOS

tender hazel Apr 2, 2021, 9:52 AM

#

tacit leaf Might be a super stupid question, I guess theres no work arounds for this?

you might be getting an IPv6 address from your ISP and that should allow you to do the same stuff but it depends on what the games (or whatever else you are trying to access) support

plain siren Apr 2, 2021, 9:53 AM

#

I actually just had a guy tell me a story how someone was shooting at him cuz he was trying to upgrade their internet but it turns out they were trying to rob him

tacit leaf Apr 2, 2021, 9:53 AM

#

tender hazel you might be getting an IPv6 address from your ISP and that should allow you to ...

minecraft

plain siren Apr 2, 2021, 9:53 AM

#

chicago

tame carbon Apr 2, 2021, 9:53 AM

#

"Im the wireless guy come to fix your internet"

#

"PUT EM UP"

tender hazel Apr 2, 2021, 9:53 AM

#

@tacit leaf and minecraft doesn't have full support for IPv6 yet, and it is something that is more their problem I would say, than your ISP's

plain siren Apr 2, 2021, 9:53 AM

#

whistles https://tunnelbroker.net/

tame carbon Apr 2, 2021, 9:54 AM

#

@plain siren behind CG-NAT?

plain siren Apr 2, 2021, 9:54 AM

#

Does it matter? Its point to point

tame carbon Apr 2, 2021, 9:54 AM

#

I thought you had to enter your remote IP into the link

tender hazel Apr 2, 2021, 9:54 AM

#

yes you can use tunnelbroker over nat

#

you have to enter the remote IP but it doesn't have to be the remote IP that you actually have

#

it can be the remote IP you are NAT-ted to

plain siren Apr 2, 2021, 9:55 AM

#

^

tame carbon Apr 2, 2021, 9:55 AM

#

and if it changes?

tender hazel Apr 2, 2021, 9:55 AM

#

if it changes you have to change it, or you can automate it with scripts

plain siren Apr 2, 2021, 9:57 AM

#

tame carbon OVH doesnt support v6 <:KEKW:670048864052445204>

Neither did their IT.

#

Or their heads

tender hazel Apr 2, 2021, 9:58 AM

#

everybody seems to treat lack of support for IPv6 as no big deal.. super frustrating

tame carbon Apr 2, 2021, 9:59 AM

#

I'll use it once tunnelbroker allows me to set GeoIP

#

I cant watch american netflix, library is terrible

tender hazel Apr 2, 2021, 9:59 AM

#

your ISP should give you v6

tame carbon Apr 2, 2021, 9:59 AM

#

yet they don't

#

none of them do

#

they say they are "ipv6 ready" whatever that means

tender hazel Apr 2, 2021, 10:00 AM

#

you're in germany right?

tame carbon Apr 2, 2021, 10:00 AM

#

Netherlands

tender hazel Apr 2, 2021, 10:00 AM

#

I thought that was supposed to have pretty good IPv6 deployment

#

on the map anyway

tame carbon Apr 2, 2021, 10:00 AM

#

@tender hazel https://i.imgur.com/k2KvhN9.png

Imgur

#

that AS13335 I believe is Serverius

tender hazel Apr 2, 2021, 10:01 AM

#

the traceroute there is fine

tame carbon Apr 2, 2021, 10:01 AM

#

https://serverius.net/

Datacenter colocation, connectivity, DDoS IP protection, Qbine, ser...

European datacenter colocation, Connectivity, DDoS protection, Web Application Firewall, Qbine, IAaaS, NoCaaS, servers, internet exchange.

tacit leaf Apr 2, 2021, 10:01 AM

#

https://www.reddit.com/r/admincraft/comments/ljly6u/hosting_a_server_with_ipv6_help/ what about this>?

tame carbon Apr 2, 2021, 10:02 AM

#

@plain siren ooh btw, I called my soon to be employer again, and I agreed to take the job

tender hazel Apr 2, 2021, 10:02 AM

#

tacit leaf https://www.reddit.com/r/admincraft/comments/ljly6u/hosting_a_server_with_ipv6_h...

yeah I found that before, I don't play minecraft or other online games (I only play single player games myself) but it might work

tame carbon Apr 2, 2021, 10:02 AM

#

They gave me a week to decide, but I jumped the gun this morning

tacit leaf Apr 2, 2021, 10:02 AM

#

tender hazel yeah I found that before, I don't play minecraft or other online games (I only p...

Ill try 🙂

tender hazel Apr 2, 2021, 10:03 AM

#

we've been hit in the last few days by this stupid call of duty update

tame carbon Apr 2, 2021, 10:03 AM

#

akamai KEKW

#

I saw the mail chain

tender hazel Apr 2, 2021, 10:03 AM

#

we have hospitals not getting their required service because of call of duty

tame carbon Apr 2, 2021, 10:03 AM

#

I wonder why these ISPs dont upgrade their gear

#

Its only gonna get worse

tender hazel Apr 2, 2021, 10:03 AM

#

here's the problem in our case

#

our upstream requested a second bell cross connect one year ago

#

due to covid bell hasn't delivered yet

#

a cross connect in the same building they are in where they have facilities

tame carbon Apr 2, 2021, 10:04 AM

#

lol

#

oof

tender hazel Apr 2, 2021, 10:04 AM

#

so the call of duty update took them down

#

because they knew they would be running out of bandwidth over a year ago and it's taken over a year for bell to deliver

#

which is insane considering that it is a colo in the biggest facility in toronto

tame carbon Apr 2, 2021, 10:05 AM

#

and doing rate limits on akamai?

#

You are in the states

tender hazel Apr 2, 2021, 10:06 AM

#

and if bell takes over a year to deliver a simple service to a colo in the biggest colo facility in toronto

tame carbon Apr 2, 2021, 10:06 AM

#

net neutrality? lel.

tender hazel Apr 2, 2021, 10:06 AM

#

canada

tame carbon Apr 2, 2021, 10:06 AM

#

oh

tender hazel Apr 2, 2021, 10:06 AM

#

we have net neutrality

tame carbon Apr 2, 2021, 10:06 AM

#

also

#

why the fuck is a CoD update 50GB

tender hazel Apr 2, 2021, 10:06 AM

#

but bell says they could not install because they have to get this part that is out of stock

#

some like part worth a few dollars

#

out of stock for the past year due to COVID

tame carbon Apr 2, 2021, 10:07 AM

#

do they not do incremental patches?

tender hazel Apr 2, 2021, 10:07 AM

#

people are reporting anywhere between 50GB and 80GB for the update

#

50GB is the low end

#

I'm not sure why there is the 30GB difference between some users and others

tame carbon Apr 2, 2021, 10:09 AM

#

yeah but what is so big lol

#

like, are they reinstalling the game entirely?

tender hazel Apr 2, 2021, 10:10 AM

#

probably

#

they have updated most of the assets in the game

#

it is likely easiest to just update the entire thing

#

this is our third night dealing with those issues

#

it isn't as bad tonight but it is still impacting us

tame carbon Apr 2, 2021, 10:11 AM

#

right.

#

My 25 page report on comparison between Relational and Graph databases is FINALLY FINISHED.

#

omfg. I hate this course so fucking much

tender hazel Apr 2, 2021, 10:13 AM

#

tame carbon right.

There are a few services online that you can peer with for BGP monitoring purposes - you don't actually use them for routing but for monitoring

#

QRator is one

#

they are this monitoring service in russia

tame carbon Apr 2, 2021, 10:13 AM

#

I dont need russian service

tender hazel Apr 2, 2021, 10:13 AM

#

we aren't peering with them ourselves yet but I've signed up for an account there because they've picked up a few open ports in our network that we didn't notice

tame carbon Apr 2, 2021, 10:13 AM

#

all the russian blocks are on my drop list

#

who needs russians on their network

#

same is for the chinese.

#

they have no business on this network

#

@tender hazel doesn't HE support some kind of BGP monitor too?

tender hazel Apr 2, 2021, 10:16 AM

#

we don't really need to peer with them, and we don't, currently

#

no, not the same type

#

and the qrator service has alerted us to ports we have had opened that we should not

tame carbon Apr 2, 2021, 10:17 AM

#

My ISP did that for me

tender hazel Apr 2, 2021, 10:17 AM

#

we had a BGP port open on one router to the world and we only found out because of the qrator alert

tame carbon Apr 2, 2021, 10:17 AM

#

they werent happy with the exposed port 53

#

on my public subnet

#

so much so that they emailed me, and immediately dropped the route

tender hazel Apr 2, 2021, 10:17 AM

#

that's fine, except we are the ISP in this case

tame carbon Apr 2, 2021, 10:18 AM

#

I forgot to configure the FW on my mikrotik

#

to only allow 53 from the DMZ itself

#

not WAN

plain siren Apr 2, 2021, 10:18 AM

#

tame carbon <@!589542595341058048> ooh btw, I called my soon to be employer again, and I agr...

Oh shit, get the whiskey, hes an adult now

tame carbon Apr 2, 2021, 10:18 AM

#

something a bout DNS servers used for DDoS >_>

plain siren Apr 2, 2021, 10:18 AM

#

DNS Reflection

tame carbon Apr 2, 2021, 10:18 AM

#

@plain siren I had some junior positions at two other companies, and I am also self-employed (I have VAT number)

tender hazel Apr 2, 2021, 10:19 AM

#

we wanted to do a scan of our network for ports that could be used for DDoS amplification

plain siren Apr 2, 2021, 10:19 AM

#

I know im being an asshole

tame carbon Apr 2, 2021, 10:19 AM

#

<3

tender hazel Apr 2, 2021, 10:19 AM

#

but one of our employees was against it

plain siren Apr 2, 2021, 10:19 AM

#

your an asshole too so doesnt work I guess

tame carbon Apr 2, 2021, 10:19 AM

#

No, I just suck at detecting sarcasm lol

plain siren Apr 2, 2021, 10:19 AM

#

Same difference

tender hazel Apr 2, 2021, 10:20 AM

#

he was saying that if we started scanning for open ports that we would start calling our customers every day about open ports and that eventually we would be doing nothing except calling customers about open ports and go out of business as a result

#

so therefore due to the slippery slope we shouldn't ever scan for open ports

tame carbon Apr 2, 2021, 10:20 AM

#

@tender hazel you want to portscan my network? :P

tender hazel Apr 2, 2021, 10:20 AM

#

which of course doesn't make sense at all

#

no.. I wouldn't portscan anybody else's network unless they asked.. our own network is different, I think it is good practice to see if our customers are vulnerable

tame carbon Apr 2, 2021, 10:21 AM

#

That's why I am asking lol

#

I have no idea. I did an NMAP scan when I first finished the config

tacit leaf Apr 2, 2021, 10:22 AM

#

how do i check if I have ipv6?

tame carbon Apr 2, 2021, 10:22 AM

#

didnt turn up anything

#

@tacit leaf ipconfig /all

tender hazel Apr 2, 2021, 10:22 AM

#

http://test-ipv6.com/

Test your IPv6.

This will test your browser and connection for IPv6 readiness, as well as show you your current IPv4 and IPv6 address.

tame carbon Apr 2, 2021, 10:22 AM

#

or that

tender hazel Apr 2, 2021, 10:22 AM

#

if you get 10/10 you have ipv6

tame carbon Apr 2, 2021, 10:23 AM

#

https://i.imgur.com/1ugLwAm.png

Imgur

tacit leaf Apr 2, 2021, 10:23 AM

#

I am soo sad lmao 0/10

#

Ig theres no way for me 😦

tame carbon Apr 2, 2021, 10:24 AM

#

https://i.imgur.com/KTmD6gZ.png

Imgur

tender hazel Apr 2, 2021, 10:24 AM

#

unless you can switch ISPs your only workaround is to get a VPS somewhere and set up a VPN tunnel to that

tame carbon Apr 2, 2021, 10:24 AM

#

See, I can do v6 just fine

#

but i dont want to set up a mailserver to finish the certification

#

I am too lazy

#

so I am limited to ~60mbit

tender hazel Apr 2, 2021, 10:25 AM

#

you can do v6 just fine over an HE tunnel yes but that won't solve the netflix issue

tame carbon Apr 2, 2021, 10:25 AM

#

See this kind of shit wouldnt ever trend in EU: https://i.imgur.com/q4sdNOT.jpg

Imgur

tender hazel Apr 2, 2021, 10:25 AM

#

that's the same reason we couldn't use netflix on HE

#

we actually get blocked

#

we can't use netflix at all

#

if we are on HE

#

so I would have to turn HE tunnel on and off every night before being able to use netflix

#

I got sick of it and just left it off

tame carbon Apr 2, 2021, 10:26 AM

#

https://i.imgur.com/WyaZJzf.png

Imgur

#

Trending in NL ^

tender hazel Apr 2, 2021, 10:27 AM

#

I assume those aren't trending in NL and are instead just trending in US and you are getting them because of that

tame carbon Apr 2, 2021, 10:27 AM

#

whole library changes

#

subtitles not available

#

etc

tender hazel Apr 2, 2021, 10:27 AM

#

in our case it is blocked entirely

tame carbon Apr 2, 2021, 10:28 AM

#

within europe there's no difference to netflix content

tender hazel Apr 2, 2021, 10:28 AM

#

netflix won't even load

tame carbon Apr 2, 2021, 10:28 AM

#

because single market EU

tender hazel Apr 2, 2021, 10:28 AM

#

if I turn up an HE tunnel

#

and go online with it

#

I can get to everything except netflix

#

netflix says sorry you are blocked because you are on a VPN

tame carbon Apr 2, 2021, 10:28 AM

#

ye it doesnt for me

#

https://i.imgur.com/4tERFm4.png

Imgur

#

I can just toggle this entry ^

tender hazel Apr 2, 2021, 10:29 AM

#

yeah probably due to netflix not tracking everything

tame carbon Apr 2, 2021, 10:29 AM

#

to enable/disable v6

tender hazel Apr 2, 2021, 10:29 AM

#

I am in canada so netflix seems to have created special programming for that

tame carbon Apr 2, 2021, 10:30 AM

#

I hate going to germany and watching youtube

tender hazel Apr 2, 2021, 10:30 AM

#

if you are in canada and connecting to HE, netflix is blocked entirely

tame carbon Apr 2, 2021, 10:30 AM

#

because when I return home

#

all the ads on youtube are german

#

for couple weeks

#

my HE tunnel is somewhere in New Jersey

tender hazel Apr 2, 2021, 10:30 AM

#

our server administrator is from russia originally

#

sometimes he does updates for software

tame carbon Apr 2, 2021, 10:31 AM

#

but I get 7ms to 1.1.1.1 even on v6

tender hazel Apr 2, 2021, 10:31 AM

#

and our software changes to russian language

tame carbon Apr 2, 2021, 10:31 AM

#

my ISP Peers directly with HE

#

so I dont understand

#

why I dont get v6 from them

tender hazel Apr 2, 2021, 10:31 AM

#

it detects his preferred language on his computer and tries to be helpful and chooses that as the language

tame carbon Apr 2, 2021, 10:31 AM

#

helpful

tender hazel Apr 2, 2021, 10:32 AM

#

so suddenly we go into the calendar and the months are in russian

#

or other crazy things like that

tender hazel Apr 2, 2021, 10:33 AM

#

tame carbon why I dont get v6 from them

it is work to try to figure out how to roll out IPv6 on an ISP-wide basis

#

and the problem is that a lot of ISPs don't really see a benefit for them

#

they see it as just extra work for nothing, so they ignore it

tame carbon Apr 2, 2021, 10:33 AM

#

because everyone wants a v4 at least

#

because if they are v6 only, they will cri

tender hazel Apr 2, 2021, 10:33 AM

#

yes

tame carbon Apr 2, 2021, 10:34 AM

#

the curse of IPvX

tender hazel Apr 2, 2021, 10:34 AM

#

I had to push to get IPv6 rolled out at our ISP

#

we are completely dual stack now

#

but I had to push for it

tame carbon Apr 2, 2021, 10:34 AM

#

I remember that time, when it took 8 months to convince my coworkers that git was better than svn

tender hazel Apr 2, 2021, 10:34 AM

#

even in an ISP there are people saying "but we don't need IPv6 for years and years, IPv4 is fine"

tame carbon Apr 2, 2021, 10:35 AM

#

"merges" were an all-day ordeal.

#

and while in progress, nobody could push code

#

@tender hazel how are the IPv4 reserved addresses handled in v6?

tender hazel Apr 2, 2021, 10:36 AM

#

yeah it is really that, you get so stuck on what you know well (Ipv4 or svn) that you are totally oblivious to what can be done better

#

sorry?

tame carbon Apr 2, 2021, 10:36 AM

#

Like, isnt there a range in v6

#

that maps the v4 addresses?

thick minnow Apr 2, 2021, 10:37 AM

#

If my ethernet cable is damaged can it affect my ping

#

I've been getting really high ping lately.

tender hazel Apr 2, 2021, 10:37 AM

#

@tame carbon yes, but I only know it because I've seen a few things online that reference it.. but it isn't automatic

#

I think it is designed for 464XLAT

tame carbon Apr 2, 2021, 10:38 AM

#

@tender hazel an ideal dual-stack would be a NAT'ed v4 locally, and a public V6
The outgoing v4 would prefer v6 addressing

#

both addresses can be reached on v6

#

v4 only on v4

tender hazel Apr 2, 2021, 10:38 AM

#

dual stack and 464XLAT are two different solutions

#

dual stack means the client has IPv4 and IPv6 at the same time, usually CGNAT on v4 and public v6

tame carbon Apr 2, 2021, 10:39 AM

#

then...

thick minnow Apr 2, 2021, 10:39 AM

#

@thick minnow

tame carbon Apr 2, 2021, 10:39 AM

#

what are those v4 mapped v6 addresses even for

#

if nobody uses them

#

@thick minnow wifi?

thick minnow Apr 2, 2021, 10:39 AM

#

im using ethernet

#

the cables damaged

tender hazel Apr 2, 2021, 10:39 AM

#

464XLAT is a way for the client to only have IPv6 but be able to access ipv4 resources without having an ipv4 address to begin with

tame carbon Apr 2, 2021, 10:40 AM

#

@thick minnow I see nothing wrong

thick minnow Apr 2, 2021, 10:40 AM

#

my ping has been high lately

tender hazel Apr 2, 2021, 10:40 AM

#

tame carbon what are those v4 mapped v6 addresses even for

my understanding is they are for 464XLAT

thick minnow Apr 2, 2021, 10:40 AM

#

ever since it was damaged

tender hazel Apr 2, 2021, 10:41 AM

#

you don't need an IPv4 address you can just have an IPv6 address, you can make a request to that IP with a system that has Ipv6 only and it will respond

tame carbon Apr 2, 2021, 10:41 AM

#

@tender hazel I'd imagine that the ISP would have some kind box that did this for you then?

tender hazel Apr 2, 2021, 10:41 AM

#

yes

tame carbon Apr 2, 2021, 10:41 AM

#

so you can connect to v4 from a v6 network

#

sounds neat

#

why arent we using this?

#

or is that the million dollar question xD

tender hazel Apr 2, 2021, 10:41 AM

#

we actually are using this for cell phones in many cases

#

most cell phones in the US get only IPv6 addresses

#

tmobile for instance

plain siren Apr 2, 2021, 10:42 AM

#

tender hazel my understanding is they are for 464XLAT

Nailed it

tender hazel Apr 2, 2021, 10:42 AM

#

they are using 464XLAT to get to all IPv4

plain siren Apr 2, 2021, 10:43 AM

#

It was a waste of space for a small point in what couldve been replaced with many other things that are avail now

#

The fact the assignment table is tainted with a transitional block just looks bad on the paper 😦

tender hazel Apr 2, 2021, 10:44 AM

#

but one issue is that 464XLAT works great for all websites but doesn't always work with VPN's.. that is what is starting to impact meraki, when tmobile moved their cellular to 464XLAT, the meraki customers could no longer connect to their corporate VPNs which were IPv4 only

steep kettle Apr 2, 2021, 10:44 AM

#

Every time I look at this I get conversation I get more confused, people do realize networks don't work solely on just getting sent out over what standard protocol for IP addresses they're using right?

#

I'm about to break out my cisco textbook and do some explaining lol

plain siren Apr 2, 2021, 10:44 AM

#

tender hazel but one issue is that 464XLAT works great for all websites but doesn't always wo...

Honestly this whole thing should be moving much faster

#

ffs

tame carbon Apr 2, 2021, 10:45 AM

#

someone needs to worm the v4 protocol

#

so we can ditch it

tender hazel Apr 2, 2021, 10:45 AM

#

yeah that's exactly what I was saying @plain siren

#

it's too slow

tame carbon Apr 2, 2021, 10:45 AM

#

OUT

tender hazel Apr 2, 2021, 10:45 AM

#

we are this small-medium ISP and we moved to v6 dual stack a long time ago

plain siren Apr 2, 2021, 10:45 AM

#

The longer some are without IPv4 and some are without IPv6....

We have a problem

#

that leaves regions becoming inaccessible and growing

thick minnow Apr 2, 2021, 10:46 AM

#

whats v4 and v6

tender hazel Apr 2, 2021, 10:46 AM

#

a lot of people think that there is no point in IPv6 that we are fine with IPv4 forever with NAT

#

it is horrible

plain siren Apr 2, 2021, 10:46 AM

#

192.168.0.1
4 Octects in the Address. The IP Address. IPv4

tame carbon Apr 2, 2021, 10:47 AM

#

IPv6 is 128 bits, 4x as large address space as v4

#

@thick minnow what do you mean more complex? KEKW

#

no NAT

plain siren Apr 2, 2021, 10:47 AM

#

the largest address you can have is 255.255.255.255
If you were to check the largest number in binary (11111111) for a Byte (in base8)... its 255.

4 Bytes makes up your IP Address

tame carbon Apr 2, 2021, 10:48 AM

#

... that's a non-issue

#

upgrade your brain ram

#

and use dns

steep kettle Apr 2, 2021, 10:49 AM

#

Ok I don't understand the problem? Is the problem scalability or security?

tame carbon Apr 2, 2021, 10:50 AM

#

Sounds more like a you problem, than a protocol problem

steep kettle Apr 2, 2021, 10:50 AM

#

Because they solved the scalability problem all the way back in the 90's for IPv4

#

But the protocol works just fine?

tame carbon Apr 2, 2021, 10:51 AM

#

pretty sure you can configure your firewall to filter invalid packets

tender hazel Apr 2, 2021, 10:51 AM

#

the extension headers are often ignored because there are issues with the idea

#

but here's really where the problem is

#

they came up with an improvement for IPv4 like 30 years ago

#

we still don't have it rolled out

steep kettle Apr 2, 2021, 10:51 AM

#

Gooooot it

tender hazel Apr 2, 2021, 10:52 AM

#

if you want to make a new better protocol to replace it, we wait another 40 years?

#

not going to happen

#

they can't

#

IPv6 is it

#

and the longer that people fight against it, the longer it will take to get there

tame carbon Apr 2, 2021, 10:52 AM

#

@thick minnow https://ipv6excuses.com/

clear igloo Apr 2, 2021, 10:53 AM

#

IPv8, it's 1024 bit addresses!
You have extensions for days!

steep kettle Apr 2, 2021, 10:53 AM

#

ok I thought your problem with IPv4 was scalability.

plain siren Apr 2, 2021, 10:53 AM

#

The fact that IPv6 is actually easier to work with but its apparently hard for engineers to grasp and roll out is frankly pathetic.

tame carbon Apr 2, 2021, 10:54 AM

#

@thick minnow https://i.imgur.com/ymfvHoC.png

Imgur

#

https://i.imgur.com/pOZmUQP.png

Imgur

tender hazel Apr 2, 2021, 10:54 AM

#

so you're happy with people having to buy VPS's to be able to play online games?

steep kettle Apr 2, 2021, 10:55 AM

#

Honestly I can subnet all day, but for some reason I can't figure out hexadecimal so I'm part of the problem lmao

plain siren Apr 2, 2021, 10:55 AM

#

Im happy with IPv4
Except any new website or server that is currently acquired doesnt have an IPv4 address.... So how are you going to access it?

#

Fade away

tame carbon Apr 2, 2021, 10:55 AM

#

I think I have a bingo guys https://i.imgur.com/POXgrSh.png

Imgur

tender hazel Apr 2, 2021, 10:55 AM

#

yup, we have a bingo

plain siren Apr 2, 2021, 10:56 AM

#

What if Discord moved to a new host when Microsoft Purchases it and you dont have IPv6

steep kettle Apr 2, 2021, 10:56 AM

#

plain siren > Im happy with IPv4 Except any new website or server that is currently acquired...

Wait. What?

plain siren Apr 2, 2021, 10:56 AM

#

Were out of IPv4

#

There is no more

tame carbon Apr 2, 2021, 10:56 AM

#

yet internet is still growing.

plain siren Apr 2, 2021, 10:56 AM

#

So anything new is out of your reach

tame carbon Apr 2, 2021, 10:57 AM

#

My local exchange: https://i.imgur.com/FTeUdou.png

Imgur

#

The internet is growing. FAST.

#

and the amount of people behind a NAT is already annoying enough

#

every single user who is behind a CG-NAT cannot port forward.

#

or host services

#

And its even worse

#

because they only do NAT444 and no v6 support.

steep kettle Apr 2, 2021, 10:58 AM

#

plain siren There is no more

We've been out of IPv4 addresses since the 90's scalability isn't the issue, we solved it literally DECADES ago

plain siren Apr 2, 2021, 10:58 AM

#

IPv6 has proven to be in both terms of Management, Reliability, and an actual reduction on a switch stack thanks to the lack of NAT, an improvement. There is 0, and not a damn single one, excuses to not want to push and implement IPv6 other than pure laziness or complacency.

steep kettle Apr 2, 2021, 10:58 AM

#

So that really really shouldn't be a part of your argument lol

plain siren Apr 2, 2021, 10:58 AM

#

What...

#

https://www.lacnic.net/1039/2/lacnic/phases-of-ipv4-exhaustion#:~:text=The term IPv4 exhaustion refers,of their size and frequency.&text=In this case%2C exhaustion refers,address needs of our members. Are you even talking about?

Phases of IPv4 Exhaustion

tender hazel Apr 2, 2021, 10:59 AM

#

plain siren IPv6 has proven to be in both terms of Management, Reliability, and an actual re...

Yes, this, exactly

plain siren Apr 2, 2021, 10:59 AM

#

Each regional IP Numbers authority recently hit P3 Ending.

#

They are Revoking addresses to force the change.

tame carbon Apr 2, 2021, 11:00 AM

#

lol

#

awesome

steep kettle Apr 2, 2021, 11:00 AM

#

This is some mental gymnastics lol I'm goin' to bed.

plain siren Apr 2, 2021, 11:00 AM

#

Mental Gymnastics
Documented by the horses mouth on said website

#

yeah you are

#

Yeah like Ubiquiti and they dont even support IPv6

#

Point?

#

@tender hazel sometimes...

tame carbon Apr 2, 2021, 11:04 AM

#

Those are all excuses

plain siren Apr 2, 2021, 11:04 AM

#

No there isnt. They are nullfied by the fact we have no choice.

tame carbon Apr 2, 2021, 11:04 AM

#

v6 is current. v4 is old.

plain siren Apr 2, 2021, 11:04 AM

#

We are OUT of IPv4. time is UP

tame carbon Apr 2, 2021, 11:04 AM

#

@thick minnow lol I dont think you know who you're talking to

plain siren Apr 2, 2021, 11:04 AM

#

The IP Authorities have made their statements

#

You follow or you fade

tame carbon Apr 2, 2021, 11:05 AM

#

Rouing is anything but pretentious

plain siren Apr 2, 2021, 11:05 AM

#

No I am pretentious,

tame carbon Apr 2, 2021, 11:05 AM

#

👍

plain siren Apr 2, 2021, 11:05 AM

#

Im also an asshole and a douchebag

#

The problem is, what are you going to do about it and I dont care.

#

OmegaLUL

tame carbon Apr 2, 2021, 11:07 AM

#

Yeah but that is irrelevant

#

Vendors have had enough time to adapt.

#

more than 10 years

plain siren Apr 2, 2021, 11:07 AM

#

Vendors already have adopted it. Its not vendors

#

its implementations

#

They are adapting to adopting as thats the goal but either way

tame carbon Apr 2, 2021, 11:08 AM

#

Semantics

#

yawn I'll just wait for my ISP to provide v6

#

@plain siren what even: https://i.imgur.com/XiEfwBV.png

Imgur

plain siren Apr 2, 2021, 11:09 AM

#

Find me an enterprise device that hasnt meant industry standards of all points (Security, Reliability, etc etc) by any one of the big 17 out there that hasnt already implemented and even begun focusing on IPv6

#

2017 was 4 years ago

#

I said enterprise, not ubiquiti tier

tame carbon Apr 2, 2021, 11:10 AM

#

kek

tender hazel Apr 2, 2021, 11:10 AM

#

some customers were forced to abandon meraki because of the lack of proper Ipv6 support and the mobile networks moving to 464XLAT

#

entire teams of salespeople prevented from connecting to the corporate VPN because the meraki didn't support IPv6 and tmobile on 464XLAT

plain siren Apr 2, 2021, 11:11 AM

#

Not the mobile networks faults that terrestrial providers are fucking idiots.

#

They were faster now they have to compensate for the other sides lack of ability

#

Well someone just gave away their eyes.

tame carbon Apr 2, 2021, 11:14 AM

#

https://arstechnica.com/information-technology/2021/04/man-indicted-for-allegedly-tampering-with-computer-at-public-water-plant/

Ars Technica

Feds say man broke into public water system and shut down safety pr...

Indictment underscores the potential for remote intrusions to have fatal consequences.

tender hazel Apr 2, 2021, 11:14 AM

#

the issue is that no single person or company has the ability to phase IPv4 out

tame carbon Apr 2, 2021, 11:14 AM

#

officials in Massachusetts later said that the Oldsmar facility used an unsupported version of Windows with no firewall and shared the same TeamViewer password among its employees.

tender hazel Apr 2, 2021, 11:15 AM

#

if there was someone with that control we would have been on ipv6 by now

tame carbon Apr 2, 2021, 11:15 AM

#

FUCKING, Brilliant.

clear igloo Apr 2, 2021, 11:15 AM

#

tender hazel the issue is that no single person or company has the ability to phase IPv4 out

Japan disagrees

#

Rakutan is fully IPv6 only, management infra included

tender hazel Apr 2, 2021, 11:15 AM

#

but if people don't have to do something, they won't feel like they have to do something

#

yes, but they would be risking people abandoning their own platforms for ones that still supported IPv4

plain siren Apr 2, 2021, 11:16 AM

#

uhhh does no one know about the. you know what never mind, this ones mine.

tame carbon Apr 2, 2021, 11:16 AM

#

even more reasons to use v6.

clear igloo Apr 2, 2021, 11:16 AM

#

Google, Amazon, and Facebook are full dual stack already

tender hazel Apr 2, 2021, 11:16 AM

#

and its not worth the risk for them

plain siren Apr 2, 2021, 11:17 AM

#

You will soon enough anyways

#

Network Acceleration Alliance? There is a cutover agreement already?

#

Its this year?

#

Like guys?

#

Anyone?

#

no

#

ok

#

Its signed under the ONF

#

Although AT&T is tarded, they wont make it

tame carbon Apr 2, 2021, 11:19 AM

#

just start dropping all v4 traffic

plain siren Apr 2, 2021, 11:19 AM

#

Neither will comcast

tame carbon Apr 2, 2021, 11:19 AM

#

you'd be surprised how fast people would switch

tender hazel Apr 2, 2021, 11:20 AM

#

we are paying a fortune for public IPv4 right now

plain siren Apr 2, 2021, 11:20 AM

#

ouch I feel that

tender hazel Apr 2, 2021, 11:20 AM

#

if we actually didn't have to pay that, we would be able to expand our network so much more quickly

#

faster service for customers, higher packages

plain siren Apr 2, 2021, 11:21 AM

#

how big of a block

#

~~ ~ ~ Doesnt matter on IPv6

#

So amazing

tame carbon Apr 2, 2021, 11:22 AM

#

can I have a /4 ?