#networking | Linus Tech Tips | Page 337

tame carbon May 6, 2021, 4:56 PM

#

and then it routes using those labels

lean pebble May 6, 2021, 4:56 PM

#

So why the regular costumer would need it ?

tame carbon May 6, 2021, 4:56 PM

#

https://en.wikipedia.org/wiki/Multiprotocol_Label_Switching

Multiprotocol Label Switching

Multiprotocol Label Switching (MPLS) is a routing technique in telecommunications networks that directs data from one node to the next based on short path labels rather than long network addresses, thus avoiding complex lookups in a routing table and speeding traffic flows. The labels identify virtual links (paths) between distant nodes rather t...

#

no, but your ISP might

peak cloak May 6, 2021, 4:56 PM

#

lean pebble So why the regular costumer would need it ?

they don't

#

but ISPs do

tame carbon May 6, 2021, 4:57 PM

#

Your ISP has to get their internet from somewhere

#

and they probably use MPLS internally

#

to get the different customer blocks going to the right NAT router

#

to untangle the mess that they created

lean pebble May 6, 2021, 4:58 PM

#

to my own external IP gg ``` 2 * * *
3 10.250.3.78 (10.250.3.78) 7.677 ms 8.859 ms 9.843 ms
4 10.250.1.133 (10.250.1.133) 108.887 ms 149.874 ms 108.919 ms

low pond May 6, 2021, 4:58 PM

#

bru WAT

tame carbon May 6, 2021, 4:58 PM

#

yeah but you are pinging adresses of devices here that are just natted

#

so there's all kinds of translations going on in the background

#

that you can't see

lean pebble May 6, 2021, 4:58 PM

#

yeah I know

tame carbon May 6, 2021, 4:58 PM

#

thats why it sucks xD

lean pebble May 6, 2021, 4:58 PM

#

but 150ms

tame carbon May 6, 2021, 4:59 PM

#

overloaded

lean pebble May 6, 2021, 4:59 PM

#

lets make it explode

tame carbon May 6, 2021, 4:59 PM

#

but basically, MPLS is a layer 2.5 protocol

#

it essentially removes the need for layer 2

#

and allows you to operate an IP only network

lean pebble May 6, 2021, 5:00 PM

#

ok

tame carbon May 6, 2021, 5:00 PM

#

you can think of an MPLS network like a cloud

#

https://i.imgur.com/tUSEB4l.png

Imgur

lean pebble May 6, 2021, 5:00 PM

#

it seems to like a bad cloud with their configuration

#

omg it tooks the message 10 second to be sent

tame carbon May 6, 2021, 5:01 PM

#

If your link is saturated

#

like, the ISPs link

lean pebble May 6, 2021, 5:01 PM

#

They already moved me between all their servers xD

tame carbon May 6, 2021, 5:01 PM

#

its same kind of thing when you watch something in 4K and your netspeed goes down

#

except your ISP is cheapskates

low pond May 6, 2021, 5:01 PM

#

It's almost like a load-balancer

lean pebble May 6, 2021, 5:02 PM

#

I think they need new engineers.

tame carbon May 6, 2021, 5:02 PM

#

@low pond nah think of it as a way to route packets between two sites, instead of using a VPN over publicly routed IP

#

you get a tunnel

#

allows the two locations to basically exchange packets directly, they don't see the MPLS thing, its just a cloud

lean pebble May 6, 2021, 5:03 PM

#

This is the only ISP in Israel with the highest end ddos protection from ARBOR

#

but the internet still sucks

tame carbon May 6, 2021, 5:03 PM

#

from what i can read off wikipedia, it creates a label switched path

#

and it just routes packets using those labels

#

instead of looking at an address routing table

lean pebble May 6, 2021, 5:04 PM

#

basically NAT

tame carbon May 6, 2021, 5:04 PM

#

No

#

@lean pebble think of it this way

#

its a kind of VPN

#

provided by an ISP, to directly tunnel two locations to one another

lean pebble May 6, 2021, 5:05 PM

#

thats how it shows in the picture

tame carbon May 6, 2021, 5:05 PM

#

@lean pebble yeah but MPLS is just something that runs on routers that are in the ISP

#

each site probably has a WAN, and an MPLS vlan

#

but to the customer these are just two vlans

#

one vlan is internet, the other a direct layer 2 tunnel to their other site

#

so customer can directly route between their own routers

#

and MPLS allows the ISP internally, to switch those packets through their network

lean pebble May 6, 2021, 5:06 PM

#

That sounds annoying, and pretty stupid routing option.

short relic May 6, 2021, 5:07 PM

#

anyone got some decent access point recommendations that are not ubiquiti?

tame carbon May 6, 2021, 5:07 PM

#

@short relic Mikrotik

lean pebble May 6, 2021, 5:07 PM

#

for put the regular costumer in endless MPLS

short relic May 6, 2021, 5:07 PM

#

tame carbon <@!175025492745781248> Mikrotik

available in US?

tame carbon May 6, 2021, 5:07 PM

#

yes

short relic May 6, 2021, 5:07 PM

#

thx

tame carbon May 6, 2021, 5:07 PM

#

Made by European company

#

@short relic though they require a bit of know-how to set up

short relic May 6, 2021, 5:07 PM

#

lol as long as I don't have to like import from ebay haha

tame carbon May 6, 2021, 5:07 PM

#

you can use an app on the phone

#

or

#

use their configuration tools

peak cloak May 6, 2021, 5:07 PM

#

short relic anyone got some decent access point recommendations that are not ubiquiti?

tplink omada

tame carbon May 6, 2021, 5:07 PM

#

its quite advanced, ISP tier-stuff

lean pebble May 6, 2021, 5:08 PM

#

yeah

tame carbon May 6, 2021, 5:08 PM

#

but cheap and reliable

short relic May 6, 2021, 5:08 PM

#

with all the ubiquiti drama lately I am opening my mind to alternatives

tame carbon May 6, 2021, 5:08 PM

#

@short relic what exactly do you need then?

hollow marlin May 6, 2021, 5:08 PM

#

lean pebble That sounds annoying, and pretty stupid routing option.

MPLS is the only way to go. Farthest from a bad routing option

short relic May 6, 2021, 5:08 PM

#

for now im just looking at access points only

tame carbon May 6, 2021, 5:08 PM

#

@hollow marlin halp, I tried explaining mpls

lean pebble May 6, 2021, 5:09 PM

#

but too much services that they use that make everything work slower than usual and overloading the systems.
without mpls everything would work better I guess

peak cloak May 6, 2021, 5:09 PM

#

doubt

#

mpls helps

tame carbon May 6, 2021, 5:09 PM

#

@lean pebble MPLS has nothing to do with that

#

its just overloaded, that's all

short relic May 6, 2021, 5:09 PM

#

anyways, ill look up mikrotik and omada

lean pebble May 6, 2021, 5:09 PM

#

they provides the shittiest cyber ptoection to the end costumer they just block everything they don't like for the costumer xD

#

and you can't disable it until you call them

tame carbon May 6, 2021, 5:10 PM

#

@short relic are you looking for wall mounted access points?

#

or ceiling

#

or just a single AP. Give us some context

lean pebble May 6, 2021, 5:10 PM

#

crystal wanna hear something funny?

tame carbon May 6, 2021, 5:10 PM

#

idk, do I ?

short relic May 6, 2021, 5:11 PM

#

tame carbon <@!175025492745781248> are you looking for wall mounted access points?

lol not sure yet. Gonna be moving later this year so doing some pre-research for that

tame carbon May 6, 2021, 5:11 PM

#

@short relic mikrotik has certain geek-factor to it xD

short relic May 6, 2021, 5:11 PM

#

more looking for alternative ecosystems instead of specific hardware

lean pebble May 6, 2021, 5:11 PM

#

Only in 2021 the "government" here decided to eliminate option of the ISPs to force costumers to purchase or rent the ISP routers.

tame carbon May 6, 2021, 5:11 PM

#

incredibly versatile little routers

short relic May 6, 2021, 5:11 PM

#

since I feel confident finding the exact products i need on my own

#

lol current router is an '08 optiplex running PFsense

tame carbon May 6, 2021, 5:12 PM

#

@short relic what kind of netspeed do you have ?

short relic May 6, 2021, 5:12 PM

#

why does my router have 8GB ram and 16GB swap?

tame carbon May 6, 2021, 5:12 PM

#

that thing is a crime to run as router

lean pebble May 6, 2021, 5:12 PM

#

Now the ISPs can help you configure your own gear

tame carbon May 6, 2021, 5:12 PM

#

such waste of power

short relic May 6, 2021, 5:12 PM

#

960/35 at the current location

tame carbon May 6, 2021, 5:12 PM

#

uff

#

yeah

short relic May 6, 2021, 5:12 PM

#

tame carbon such waste of power

yeah i know but it was $5 at university surplus

tame carbon May 6, 2021, 5:12 PM

#

@short relic okay and how many APs you plan on operating?

#

xDDD

#

nice.

#

kinda insane how much juice you are cranking out of that box

#

must have a light fw

short relic May 6, 2021, 5:13 PM

#

tame carbon <@!175025492745781248> okay and how many APs you plan on operating?

dont have a new place picked out yet soooooooo idk

tame carbon May 6, 2021, 5:13 PM

#

well either way, the standard dual band ceiling mounted APs they have are like $60 each

short relic May 6, 2021, 5:13 PM

#

not bad

tame carbon May 6, 2021, 5:13 PM

#

have two ports, and support PoE in

#

you can use either one of the APs as controller,
or control them on your main router

short relic May 6, 2021, 5:14 PM

#

I guess for me the real question is if I stay with custom PFsense or move to a prefab router

tame carbon May 6, 2021, 5:14 PM

#

@short relic my RB4011 can do 10G, and at full load consumes ~13watts

#

with PoE attachments

short relic May 6, 2021, 5:14 PM

#

but again, just looking for other networking ecosystems to research on y own

tame carbon May 6, 2021, 5:14 PM

#

max of 27watt

short relic May 6, 2021, 5:14 PM

#

tame carbon <@!175025492745781248> my RB4011 can do 10G, and at full load consumes ~13watts

my RGB consumes like 15 watts

tame carbon May 6, 2021, 5:14 PM

#

https://mikrotik.com/product/rb4011igs_rm

MikroTik

MikroTik is a Latvian company which was founded in 1996 to develop routers and wireless ISP systems. MikroTik now provides hardware and software for Internet connectivity in most of the countries around the world.

hollow marlin May 6, 2021, 5:14 PM

#

lean pebble but too much services that they use that make everything work slower than usual ...

MPLS actually makes things more efficient. Its what it was designed to do

peak cloak May 6, 2021, 5:15 PM

#

I just got a HEX S, going to put in prod this weekend

hollow marlin May 6, 2021, 5:15 PM

#

tame carbon <@!462711605063450628> halp, I tried explaining mpls

I got you, what were you trying to explain

peak cloak May 6, 2021, 5:15 PM

#

the config is overwhelming at first

lean pebble May 6, 2021, 5:15 PM

#

congrats present

tame carbon May 6, 2021, 5:15 PM

#

@hollow marlin literally 2 mins before, scroll up. But I think the moment passed

hollow marlin May 6, 2021, 5:16 PM

#

At a high level, that looks correct

lean pebble May 6, 2021, 5:16 PM

#

hollow marlin MPLS actually makes things more efficient. Its what it was designed to do

I guess it depends on who configured it

tame carbon May 6, 2021, 5:16 PM

#

@hollow marlin he is fuming over https://i.imgur.com/A3L4dME.png

Imgur

hollow marlin May 6, 2021, 5:16 PM

#

No, MPLS alone is less resource intensive

tame carbon May 6, 2021, 5:16 PM

#

because his ISP is trash

#

and it says MPLS, I think @lean pebble you just confused it :P

lean pebble May 6, 2021, 5:17 PM

#

haha

#

confused what?

tame carbon May 6, 2021, 5:17 PM

#

those things being related to eachother

lean pebble May 6, 2021, 5:17 PM

#

I'm saying they can't configured anything correctly

tame carbon May 6, 2021, 5:17 PM

#

I think they just have not enough bandwidth

#

or

#

suck at queues.

hollow marlin May 6, 2021, 5:17 PM

#

MPLS relies on the routing table, it wouldn't be MPLS's problem if their routes are not efficient

tame carbon May 6, 2021, 5:18 PM

#

@short relic this would be powerful enough for your use-case: https://mikrotik.com/product/hap_ac2

MikroTik

MikroTik is a Latvian company which was founded in 1996 to develop routers and wireless ISP systems. MikroTik now provides hardware and software for Internet connectivity in most of the countries around the world.

hollow marlin May 6, 2021, 5:18 PM

#

There is nothing I see wrong with the traceroute

lean pebble May 6, 2021, 5:18 PM

#

tame carbon I think they just have not enough bandwidth

they just added 25tb with a new fiber to europe

#

last week

short relic May 6, 2021, 5:18 PM

#

ill look into it

tame carbon May 6, 2021, 5:18 PM

#

@short relic if you do not require wireless functionality, but would like one additional ethernet port (SFP) https://mikrotik.com/product/hex_s

MikroTik

MikroTik is a Latvian company which was founded in 1996 to develop routers and wireless ISP systems. MikroTik now provides hardware and software for Internet connectivity in most of the countries around the world.

short relic May 6, 2021, 5:18 PM

#

probably ditching this optiplex when i move

lean pebble May 6, 2021, 5:18 PM

#

hollow marlin MPLS relies on the routing table, it wouldn't be MPLS's problem if their routes ...

ok

short relic May 6, 2021, 5:19 PM

#

even if I don't replace my Unifi AP immediately

tame carbon May 6, 2021, 5:19 PM

#

@short relic one of the reasons I like this system is:

#

You can remotely manage those access points

#

Omeda does this too, but idk. Tplink is cursed for me

#

they all die after 3 years

#

probably why its so cheap

#

but basically

#

#

its pick and choose

#

all runs same OS

#

so you can just mash it all together

short relic May 6, 2021, 5:20 PM

#

yeah

tame carbon May 6, 2021, 5:20 PM

#

for your use-case

short relic May 6, 2021, 5:20 PM

#

i just want to avoid cloud stuff

tame carbon May 6, 2021, 5:21 PM

#

this is entirely offline

short relic May 6, 2021, 5:21 PM

#

i was so close to buying a Dream Machine

tame carbon May 6, 2021, 5:22 PM

#

@short relic I like the simplicity of their config lol https://i.imgur.com/DaWSqcF.png

Imgur

#

lightweight wrapper for their CLI

lean pebble May 6, 2021, 5:22 PM

#

Who is trying to crack my machine? There were 751 failed login attempts since the last successful login.

#

Its not honey pot

short relic May 6, 2021, 5:22 PM

#

i took a computer networking for engineers class, but now i wish we had like an 'IT Networking professional' course lol

lean pebble May 6, 2021, 5:22 PM

#

not yet

#

huh omg here we go again ``` 7 10.250.1.5 (10.250.1.5) 169.660 ms 217.858 ms 185.366 ms

#

its ok like the ISP say

#

cya later

low pond May 6, 2021, 5:34 PM

#

lean pebble Who is trying to crack my machine? ``` There were 751 failed login attempts sinc...

🤣

lean pebble May 6, 2021, 5:37 PM

#

its just a testing for pufferpanel slave node xD

#

took me 5 minutes to install it again and 4 hours to understand how to connect between the two because their discord server is half dead xd

lean pebble May 6, 2021, 5:39 PM

#

low pond 🤣

stop attacking my server

#

😂

low pond May 6, 2021, 5:39 PM

#

ye im attacing from Hetzner FSN

lean pebble May 6, 2021, 5:39 PM

#

yeah for low latency xD

low pond May 6, 2021, 5:39 PM

#

YES :D

lean pebble May 6, 2021, 5:50 PM

#

like usual china trying to hack hetzner xD

low pond May 6, 2021, 5:52 PM

#

Ah yes

#

this is why i ban china.

#

all chineese IP's

#

doing it since a long time

#

works the best

tame carbon May 6, 2021, 5:54 PM

#

I hate windows

#

the POS server that needs windows (running w10 pro) has nuked itself

#

stupid 20H2 update

#

it just forced itself onto the machine

#

and not I cannot connect via RDP, and virtual console is borked too

#

3 reboots and now it works suddenly

#

I will never understand this OS ¯_(ツ)_/¯

thick minnow May 6, 2021, 6:13 PM

#

xD

low pond May 6, 2021, 6:16 PM

#

tame carbon I will never understand this OS ¯\_(ツ)_/¯

🤣

#

its simple.

#

Its windows.

#

k e k

thick minnow May 6, 2021, 7:23 PM

#

So I'm trying to send a http request to my own public ip address, but here is the thing I can only send one and the next time I try the packet never send to the server. I can't get why this is going on. I have a router from at&t, it seems to be something in there.

tame carbon May 6, 2021, 7:28 PM

#

mh

#

can only send one and the next time I try the packet never send to the server

#

what do you mean by this

thick minnow May 6, 2021, 7:32 PM

#

tame carbon > can only send one and the next time I try the packet never send to the server

Ok I can open the page in the browser, but all requests after this are dropped. Like the server isn't even running(I know that nothing is coming in on my test logs)

tame carbon May 6, 2021, 7:34 PM

#

do you have an address for me?

#

so I can have a look

#

you can send this in dm if you like

thick minnow May 6, 2021, 7:35 PM

#

tame carbon do you have an address for me?

It does this if I'm on the same network as the server

tame carbon May 6, 2021, 7:35 PM

#

so wait

#

what address are you using?

#

not a private range, are you?

thick minnow May 6, 2021, 7:35 PM

#

My public one

#

As I have a domain connected which I made sub domains for

#

tame carbon May 6, 2021, 7:36 PM

#

yes

peak cloak May 6, 2021, 7:36 PM

#

yeah ok, what's your goal tho

thick minnow May 6, 2021, 7:36 PM

#

They are ipv4 so, it's an A record

tame carbon May 6, 2021, 7:36 PM

#

yes...

#

did you port forward?

thick minnow May 6, 2021, 7:37 PM

#

They are

#

If I get off of the network that my server is on, my server works fine

tame carbon May 6, 2021, 7:37 PM

#

so it works from WAN, but not from LAN ?

peak cloak May 6, 2021, 7:37 PM

#

hairpin NAT

tame carbon May 6, 2021, 7:37 PM

#

yeah, that's what I was thinking too

thick minnow May 6, 2021, 7:37 PM

#

tame carbon so it works from WAN, but not from LAN ?

yes

peak cloak May 6, 2021, 7:37 PM

#

or use split horizon dns

tame carbon May 6, 2021, 7:37 PM

#

either works

#

hairpin is more elegant

thick minnow May 6, 2021, 7:37 PM

#

peak cloak or use split horizon dns

It's not the dns

#

dns is fine

tame carbon May 6, 2021, 7:38 PM

#

@thick minnow no this is a common problem

peak cloak May 6, 2021, 7:38 PM

#

thick minnow It's not the dns

no, you don't understand

tame carbon May 6, 2021, 7:38 PM

#

and there's two ways to fix it

thick minnow May 6, 2021, 7:38 PM

#

peak cloak no, you don't understand

typing my public ip without the domain does the same thing

tame carbon May 6, 2021, 7:38 PM

#

@thick minnow that port forward rule is currently only applied to traffic that enters your router from the WAN side

#

traffic from LAN to your public IP is not being translated

#

a Hairpin NAT is the solution to this

peak cloak May 6, 2021, 7:39 PM

#

basically what you do is have it so you have a DNS server on your LAN that for server.example.com resolves to 192.168.1.2, while public records of DNS point to your puiblic IP @thick minnow

#

that's split horizon dns

tame carbon May 6, 2021, 7:39 PM

#

fd8609d2f8f87aa0da9d571a21932d7d_hair-pinning_diagram_blue.png

#

This is more elegant

#

This is a hairpin ^

peak cloak May 6, 2021, 7:40 PM

#

tame carbon This is more elegant

idk I heard enterprise uses split horizon more

tame carbon May 6, 2021, 7:40 PM

#

@peak cloak yeah but in a home environment

peak cloak May 6, 2021, 7:40 PM

#

there's some issues I heard with hairpin juan was talking about

tame carbon May 6, 2021, 7:40 PM

#

you just want any dns server to work

peak cloak May 6, 2021, 7:40 PM

#

tame carbon <@!222482269829332992> yeah but in a home environment

oh yeah ofc

tame carbon May 6, 2021, 7:41 PM

#

@thick minnow what router do you have

thick minnow May 6, 2021, 7:41 PM

#

tame carbon May 6, 2021, 7:41 PM

#

can you create a new NAT rule

thick minnow May 6, 2021, 7:41 PM

#

tame carbon can you create a new NAT rule

Who can I create the nat rule

tame carbon May 6, 2021, 7:41 PM

#

oh fuck its one of those shitty ISP routers

#

:/

thick minnow May 6, 2021, 7:42 PM

#

tame carbon oh fuck its one of those shitty ISP routers

Well I did pay for 1Gbit ethernet from at&t

peak cloak May 6, 2021, 7:42 PM

#

thick minnow Well I did pay for 1Gbit ethernet from at&t

I don't get your point

tame carbon May 6, 2021, 7:42 PM

#

I have gigabit if I wanted to

peak cloak May 6, 2021, 7:42 PM

#

@tame carbon https://forums.att.com/conversations/att-internet-equipment/nat-hairpinning/5f3442694833935a92d560a8?commentId=5f35677872a09d671dae4b2e

AT&T Community Forums

nat hairpinning | AT&T Community Forums

how can i internally access a PC using a public IP? Need so users can access NVR inside and outside without changing nvr client settings.

tame carbon May 6, 2021, 7:42 PM

#

but I dont have any ISP gear :D

peak cloak May 6, 2021, 7:42 PM

#

tame carbon May 6, 2021, 7:42 PM

#

LOL

#

garbage.

peak cloak May 6, 2021, 7:42 PM

#

OMEGALUL

tame carbon May 6, 2021, 7:43 PM

#

@thick minnow join the light side of the force

peak cloak May 6, 2021, 7:43 PM

#

next solution is split-horizon

thick minnow May 6, 2021, 7:43 PM

#

Great at&t has no brain

peak cloak May 6, 2021, 7:43 PM

#

or just get a good router

thorny vector May 6, 2021, 7:43 PM

#

So you just set an internal DNS resolution to the private IP

tame carbon May 6, 2021, 7:43 PM

#

^

#

can you even do static dns on that AT&T thingie?

thick minnow May 6, 2021, 7:43 PM

#

tame carbon can you even do static dns on that AT&T thingie?

yea

peak cloak May 6, 2021, 7:43 PM

#

thorny vector So you just set an internal DNS resolution to the private IP

ATT boxes also don't support changing the DNS servers which could be used to resolve the private address internally and the public address externally, so again, you'll need a 3rd party router to handle this

tame carbon May 6, 2021, 7:44 PM

#

ATT modem that does support it.

#

Yeah you're screwed no matter what

#

Just be glad it at least supports passthrough CH_kek

thick minnow May 6, 2021, 7:44 PM

#

but where I'm I going to add this record into it

peak cloak May 6, 2021, 7:44 PM

#

wdym

tame carbon May 6, 2021, 7:44 PM

#

@thick minnow you can't. That thing has almost no features

#

Its crap compared to a proper ethernet router

thick minnow May 6, 2021, 7:45 PM

#

tame carbon <@456226577798135808> you can't. That thing has almost no features

Well then what can I do now

tame carbon May 6, 2021, 7:45 PM

#

you could order a router

#

doesnt have to be anything expensive

#

but I can recommend you something that can handle those speeds you require

#

https://mikrotik.com/product/hex_s

MikroTik

MikroTik is a Latvian company which was founded in 1996 to develop routers and wireless ISP systems. MikroTik now provides hardware and software for Internet connectivity in most of the countries around the world.

thick minnow May 6, 2021, 7:46 PM

#

You know what I will just program the server to read fake subdomain using other methods

tame carbon May 6, 2021, 7:47 PM

#

yeah you can just modify your hosts file

peak cloak May 6, 2021, 7:47 PM

#

^

tame carbon May 6, 2021, 7:47 PM

#

that's not network wide though

#

@thick minnow if I had a gigabit WAN I would totally get my own router

thick minnow May 6, 2021, 7:47 PM

#

I can use this

tame carbon May 6, 2021, 7:48 PM

#

I have 250M and I have a 10G router here lol

peak cloak May 6, 2021, 7:48 PM

#

thick minnow I can use this

what's that

thick minnow May 6, 2021, 7:48 PM

#

peak cloak what's that

peak cloak May 6, 2021, 7:48 PM

#

thick minnow

how will that help?

#

that's just a http url?

tame carbon May 6, 2021, 7:48 PM

#

no its not

thick minnow May 6, 2021, 7:48 PM

#

peak cloak how will that help?

I can use the auth as a fake subdomain for local ips

tame carbon May 6, 2021, 7:49 PM

#

its the URL scheme

peak cloak May 6, 2021, 7:49 PM

#

thick minnow I can use the auth as a fake subdomain for local ips

I don't get it

thick minnow May 6, 2021, 7:50 PM

#

peak cloak I don't get it

tame carbon May 6, 2021, 7:50 PM

#

yeah

#

http doesnt use auth

#

basic auth maybe

#

but those are headers

#

not usually supplied as a url

#

this applies to more things

#

like

thick minnow May 6, 2021, 7:51 PM

#

tame carbon but those are headers

they do

tame carbon May 6, 2021, 7:51 PM

#

ssh://crystal@server:/home/documents/pr0n.png

thick minnow May 6, 2021, 7:51 PM

#

tame carbon `ssh://crystal@server:/home/documents/pr0n.png`

still a url

tame carbon May 6, 2021, 7:51 PM

#

yep

#

but I fail to see your point

#

the issue you have is much lower in the network stack

#

all this is layer 7 overhead

#

@hollow marlin this is pretty accurate right? https://i.imgur.com/NGky9O4.png

Imgur

#

;)

hollow marlin May 6, 2021, 8:00 PM

#

Yep, L1-4 is where overhead usually lies

tame carbon May 6, 2021, 8:00 PM

#

@hollow marlin no I'm looking at it from another perspective lol

#

5-7 is overhead xD

#

to a network engineer

hollow marlin May 6, 2021, 8:01 PM

#

Well technically based on that photo, yes it is "over"head lol

tame carbon May 6, 2021, 8:01 PM

#

@hollow marlin I watched a 2h talk about longhaul fiber networks

#

the physical stuff

#

and this guy talked about layers 1-3 and how they do physical vlan transit

#

from fiber through to switch with x-connects and all

#

and he put up this diagram

#

I think layer 4 is where he put "overhead"

#

xD

hollow marlin May 6, 2021, 8:02 PM

#

Transport is a whole field in its own right

tame carbon May 6, 2021, 8:03 PM

#

https://i.imgur.com/LlIgvZn.png

Imgur

#

layer 8 is not to be further discussed

hollow marlin May 6, 2021, 8:03 PM

#

L1-4 is considered overhead, past that is the actually payload

#

Not sure what he was getting at there. I guess in terms of being transit, that payload is really their overhead from that point of view

tame carbon May 6, 2021, 8:04 PM

#

Its ment as a joke

#

xD

hollow marlin May 6, 2021, 8:05 PM

#

I assume L0 is referencing sales

tame carbon May 6, 2021, 8:05 PM

#

Wegerechte = permits for digging

#

trassen = those underground patch boxes where all tubes come together

#

rohre = pipes

#

kabel = cable, fasern = fibers

hollow marlin May 6, 2021, 8:06 PM

#

In telco space, 0 typically means sales and their sell first and make the engineer's make it work

#

lol

tame carbon May 6, 2021, 8:06 PM

#

they shared this img https://i.imgur.com/SaYKo6V.png

Imgur

#

of one of their jobs

#

they had to figure out which one was which, to get a x-connect going

#

and after years and years of this

hollow marlin May 6, 2021, 8:08 PM

#

Ive done fiber work in the pillars/pill boxes and thats about right. Documentation...I should say meaningful documentation is relatively new thing

tame carbon May 6, 2021, 8:09 PM

#

its just like in modded minecraft

#

@hollow marlin the place i started working at this week... they.. wow yeah

#

their organization is a mess xD

#

they have a single server for everything

#

prod, test and their source code repository is all on the same box

#

they have git without a frontend page,
no propper issue tracking, they are trying to use teams

#

and nothing is properly documented

#

they are a team of programmers, who desperately need some tooling and guidance

hollow marlin May 6, 2021, 8:12 PM

#

Yeah, sadly this is too common place. I have done tons of docs for my current workplace and even trained on how do it. People still cannot figure out why its needed.

tame carbon May 6, 2021, 8:12 PM

#

yeah but the thing is

#

they are saying that they all agreed to doing documentation

#

so I go through their docs

#

and I find a finely styled word document, with a table and coverage% of their unittests

#

and I am just sitting there... and thinking.. wat.

#

1 button in my IDE gives me this information

hollow marlin May 6, 2021, 8:15 PM

#

The key is to have it simple as possible, then break the docs down into more detail. Searching shouldn't be a chore

tame carbon May 6, 2021, 8:16 PM

#

@hollow marlin I am going to use a very simple kanban system in gitea

#

They are using git, but just from shell without a webpage

#

you can just have 5 lanes, backlog, to-do, in progress, review, done

#

and then we can just create issues and track them this way

#

can even create templates for these issues

#

this must be easy

#

so people do them.

#

@hollow marlin being able to create a wiki page on gitea, and referencing to source directly as well as issues

#

that will be a huge gain for the team

hollow marlin May 6, 2021, 8:20 PM

#

Spending time to clean up docs and processes early on save soooooooo much time later. Some of our older sites will have techs spending hours just on discovery before tshooting even takes place. But with docs and organized site structure cuts that down to mins

tame carbon May 6, 2021, 8:21 PM

#

@hollow marlin they are basically developing an old piece of software that used to be used in house

#

that is now to be sold to other businesses

#

they have refactored most of the backend

#

but have not got their infrastructure in order

#

the dev team is two older people, and a young inexperienced developer

#

they are all older than me

#

the young developer is promising, may not call him inexperienced, that I do not know yet

#

@hollow marlin but yeah, wednesday I was in a meeting, and I just overhear a situation of a bug that has just returned for the 2nd time

#

and I look at the visualization in git

#

and its just everyone working off master

#

Cleaning up a bit

#

helps a lot

#

@hollow marlin the only thing I am afraid of, is that I am going to step on people's toes :/

#

but from what I gathered so far, most of what i have heard so far is people agreeing to my ideas

#

they are just unsure about change

lean pebble May 6, 2021, 8:36 PM

#

tame carbon stupid 20H2 update

My windows vm begging me to finish this update xD

lean pebble May 6, 2021, 8:36 PM

#

low pond all chineese IP's

I just enabled fail2ban xD

hollow marlin May 6, 2021, 8:48 PM

#

tame carbon <@!462711605063450628> the only thing I am afraid of, is that I am going to step...

Thats a fine line that is hard interpret at times. I only go head first in if I am confident but the hard part is knowing when to. Many bad decisions might already be known but for reasons outside control is why it cannot be immediately changed

tame carbon May 6, 2021, 8:48 PM

#

yeah but the change I am making now

#

will initially not really impact them

hollow marlin May 6, 2021, 8:49 PM

#

Its good you are making way. Id keep pushing

tame carbon May 6, 2021, 8:49 PM

#

all they have to do is change their remotes on git

#

@hollow marlin and the sales guy

#

was attempting to set up different instances for certain customers

#

or at least wants to

#

they lack someone that leads, I feel

hollow marlin May 6, 2021, 8:51 PM

#

Sales, you'll never change their ways

tame carbon May 6, 2021, 8:52 PM

#

@hollow marlin well the main thing is, they cannot expand at all right now

#

with 170MB free memory

#

you aint gonna do much

#

@hollow marlin and I managed to persuade the boss by basically doing a dead simple ROI

#

estimating a 2 hour time saved per week

#

per developer

#

for a $20/month vps, I think thats good deal

#

so he was on board quite quickly

hollow marlin May 6, 2021, 8:54 PM

#

And thats just face value estimates, Id be surprised if it wasnt much higher

tame carbon May 6, 2021, 8:54 PM

#

@hollow marlin they ahve a 3 license jira

#

me and 1 other dev dont have access

#

how is this supposed to work lol

#

so if I couldn't get this vps, yeah.

#

I would have used a raspberry pi

#

@hollow marlin feels like such a flashback from 8 years ago

#

where I joined a group of people on minecraft who had 2 people who were unorganized in developing minecraft plugins and maintaining a server

#

within a week, they were over from a managed hosting, to a dedicated machine, and I had full root access to everything

#

I still have access, I am just often not actively present anymore. I mostly am just there in case something goes seriously wrong with servers

plain siren May 6, 2021, 10:55 PM

#

tame carbon within a week, they were over from a managed hosting, to a dedicated machine, an...

You should join me in an adventure to the the "Minecraft Game Server" resellers community haven.

#

@dusty duneIIRC, its you running Pebblehost... or someone with similar PFP + Same name

#

Yeah it is, I knew you would be in here

thick minnow May 6, 2021, 11:56 PM

#

Hey there guys.. are there any ways to get lower ping/latency? In mobile networks..?
Thanks..

thorny vector May 7, 2021, 12:10 AM

#

Not really. You're at the mercy of the towers @thick minnow

thick minnow May 7, 2021, 12:10 AM

#

I see..
Thanks bro..

#

Its just i get speeds upto 40mbps..
However ping is like 80 to 150 ms.. sometimes even 200ms.. thats really annoying to have a higer speed with higer ping..
40mbps is pretty much good actually for mobile networks according to me at least in my area where i live...

plain siren May 7, 2021, 12:13 AM

#

If you have access to the SIM's AT Command Interface, perhaps locking in a better tower instead of having it flip to a neighbor cell may work out

thick minnow May 7, 2021, 12:13 AM

#

A 20 or 30 ms would do better

thick minnow May 7, 2021, 12:13 AM

#

plain siren If you have access to the SIM's AT Command Interface, perhaps locking in a bette...

Oooohh

plain siren May 7, 2021, 12:13 AM

#

For example, my Hotspot defaults to the tower nearest to me which is Band 6, but Band 71 which is a tower a bit further is way better

thick minnow May 7, 2021, 12:14 AM

#

Mine is probably band 40

#

But the signal strength lies between -60dbm 70asu.. to -75dbm 48asu.. at field testing..
Thats almost like touching tower.. pretty good..
But the ping keeps me

thick minnow May 7, 2021, 12:16 AM

#

plain siren For example, my Hotspot defaults to the tower nearest to me which is Band 6, but...

Ikr yeah

plain siren May 7, 2021, 12:16 AM

#

Whos your provider

thick minnow May 7, 2021, 12:20 AM

#

I live in india... i use vodafone (uk company) at 4g lte..

low pond May 7, 2021, 12:20 AM

#

Which circle too?

plain siren May 7, 2021, 12:21 AM

#

thick minnow I live in india... i use vodafone (uk company) at 4g lte..

Ah, yeah. Then toying with band priorities may truly help.

thick minnow May 7, 2021, 12:22 AM

#

Beats me!

thick minnow May 7, 2021, 12:22 AM

#

low pond Which circle too?

Its andhra pradesh.(state)

low pond May 7, 2021, 12:23 AM

#

Mmyea, you can try surely changing, Vi allows to change the bands

thick minnow May 7, 2021, 12:23 AM

#

I see... youre from india too?

plain siren May 7, 2021, 12:23 AM

#

low pond Which circle too?

I presume this means Caste

#

I hate that term personally

thick minnow May 7, 2021, 12:23 AM

#

Caste?

#

Oh i see

#

Technically speaking..

#

Haha

plain siren May 7, 2021, 12:24 AM

#

IIRC, India is very much "Classist" on Birth Right/Location/Geneology.

low pond May 7, 2021, 12:24 AM

#

No i mean the state actually heh

low pond May 7, 2021, 12:24 AM

#

thick minnow I see... youre from india too?

Ye TN, but I don't live in India

kindred oar May 7, 2021, 12:24 AM

#

Guys can i access my freeNAS setup over the internet?

low pond May 7, 2021, 12:25 AM

#

Ye

plain siren May 7, 2021, 12:25 AM

#

thick minnow Its andhra pradesh.(state)

This dude next to me named Vishal says Hi. hes from there too

plain siren May 7, 2021, 12:25 AM

#

kindred oar Guys can i access my freeNAS setup over the internet?

You could, but this is a terrible idea to just expose outright.
Instead you would want a VPN

kindred oar May 7, 2021, 12:25 AM

#

Is setting it up free of cost?

plain siren May 7, 2021, 12:25 AM

#

Yeah

low pond May 7, 2021, 12:26 AM

#

I'd directly host it, its a bit more simpler than going thru VPN

plain siren May 7, 2021, 12:26 AM

#

Using a VPN, you could basically "login" to your LAN as if you were at home next to the machine from anywhere

plain siren May 7, 2021, 12:26 AM

#

low pond I'd directly host it, its a bit more simpler than going thru VPN

Exposing NFS/SMB/CIFS over the internet is currently a very asking for it thing

thick minnow May 7, 2021, 12:26 AM

#

plain siren This dude next to me named Vishal says Hi. hes from there too

Ohh hmph

thick minnow May 7, 2021, 12:27 AM

#

low pond Ye TN, but I don't live in India

Alright..

kindred oar May 7, 2021, 12:27 AM

#

Or what could be a proper solution for a cloud storage type thing! We friends need to edit videos and all our gdrives our full and we could need over 500gb due to pandemic we cant meet hence the online solution

thick minnow May 7, 2021, 12:27 AM

#

Umm guys whats freeNAS? Never heard it out this is my first time

plain siren May 7, 2021, 12:27 AM

#

kindred oar Or what could be a proper solution for a cloud storage type thing! We friends ne...

S3 Buckets from AWS.

#

Seeing as S3 is dirt cheap rn

waxen saddle May 7, 2021, 12:28 AM

#

Mine chia?

plain siren May 7, 2021, 12:28 AM

#

thick minnow Umm guys whats freeNAS? Never heard it out this is my first time

Open Source OS for a DIY "network attached storage"

thorny vector May 7, 2021, 12:28 AM

#

Right, because all we need is another open S3 bucket

peak cloak May 7, 2021, 12:28 AM

#

thick minnow Umm guys whats freeNAS? Never heard it out this is my first time

a solution for a NAS on freebsd utilizing ZFS

thick minnow May 7, 2021, 12:28 AM

#

plain siren Open Source OS for a DIY "network attached storage"

Thanks..

plain siren May 7, 2021, 12:29 AM

#

thorny vector Right, because all we need is another open S3 bucket

Well.... dont click the checkbox that exposes it obviously

thick minnow May 7, 2021, 12:29 AM

#

peak cloak a solution for a NAS on freebsd utilizing ZFS

Thank you..

plain siren May 7, 2021, 12:29 AM

#

Just use aws-cli or fuse mount it

thorny vector May 7, 2021, 12:29 AM

#

Or, nextcloud

#

Pydio

plain siren May 7, 2021, 12:29 AM

#

Minio

kindred oar May 7, 2021, 12:30 AM

#

With freeNAS can i use next cloud ?

thorny vector May 7, 2021, 12:30 AM

#

Yes

plain siren May 7, 2021, 12:30 AM

#

lol I am using NextCloud on top of Minio rn I love it.
Yes FreeNAS can be a storage solution for NextCloud

thorny vector May 7, 2021, 12:30 AM

#

Just gotta mount the share to where nextcloud see's it.

kindred oar May 7, 2021, 12:30 AM

#

I am literally a noob in this trying networking for the first time

plain siren May 7, 2021, 12:30 AM

#

thats why were here

waxen saddle May 7, 2021, 12:30 AM

#

The important part of freeNAS is the “NAS” part. Network Attached Storage. There’s a lot of them out there and they all are a bit different and have different features. But at the end of the day, they all allow you to access a centrally-managed storage that can be accessed over a network

kindred oar May 7, 2021, 12:30 AM

#

Any helpful tutorial?

plain siren May 7, 2021, 12:31 AM

#

Not one that would prob get you through all the heartache of figuring it out. If you really want to, I(we) can walk you through it. Ill link one anyways

kindred oar May 7, 2021, 12:32 AM

#

So i think first i need to setup FreeNas!

After that nextcloud maybe

plain siren May 7, 2021, 12:32 AM

#

https://wiki.seeedstudio.com/ODYSSEY-X86J4105-Installing-FreeNAS/ This one is pretty good, its meant for the Odyssey, but the instructions apply for generic use

Installing FreeNAS - Seeed Wiki

Seeed Product Document

kindred oar May 7, 2021, 12:32 AM

#

Awesome thanks mate!

#

FreeNAS i can setup using tutorials i just need some steps or tutorials after that

#

For next cloud

waxen saddle May 7, 2021, 12:35 AM

#

plain siren lol I am using NextCloud on top of Minio rn I love it. Yes FreeNAS can be a stor...

Is Minio running on bare metal?

plain siren May 7, 2021, 12:36 AM

#

waxen saddle Is Minio running on bare metal?

Containerized

thorny vector May 7, 2021, 12:36 AM

#

Gross. Cloud AND containers

plain siren May 7, 2021, 12:36 AM

#

I aint using AWS personally

waxen saddle May 7, 2021, 12:36 AM

#

Containerized on bare metal? Or docker in a VM?

plain siren May 7, 2021, 12:36 AM

#

Containerized on Bare Metal. Alpine on the host

peak cloak May 7, 2021, 12:37 AM

#

thorny vector Gross. Cloud AND containers

what's bad about containers

plain siren May 7, 2021, 12:37 AM

#

peak cloak what's bad about containers

They are different.

#

So thats hard

thorny vector May 7, 2021, 12:38 AM

#

Overused, don't really grab onto hardware like some stuff likes, is used by lazy devs as an excuse to not try to make things cross-compatible. They have their uses, but they are not the end all be all that some people laud them to be.

plain siren May 7, 2021, 12:38 AM

#

Honestly they whole containers thing is so misconstrued with half-assed info its no surprise people dont move to them after seeing the jank'd up documentation

waxen saddle May 7, 2021, 12:38 AM

#

thorny vector Gross. Cloud AND containers

I used to hate docker. Thought it was garbage and a waste. Turned out I was trying to use broken images. Once I found good ones and set them to run on Portainer, I’m FLYING. I can host way more than I ever dreamed of and far faster than I ever could before.

plain siren May 7, 2021, 12:39 AM

#

thorny vector Overused, don't really grab onto hardware like some stuff likes, is used by lazy...

Containers should be way more interop'd with hardware..

peak cloak May 7, 2021, 12:39 AM

#

thorny vector Overused, don't really grab onto hardware like some stuff likes, is used by lazy...

yeah they are overused

plain siren May 7, 2021, 12:39 AM

#

They share the host kernel so the emulation layer is removed

thorny vector May 7, 2021, 12:39 AM

#

You have never had to deconflict someone elses container BS to fix their product for them

waxen saddle May 7, 2021, 12:39 AM

#

I’ve even rolled my own containers that can tap into hardware to stream TV real-time to my network using multicast.

plain siren May 7, 2021, 12:40 AM

#

I dont set my shit up half-assed so that wont happen

plain siren May 7, 2021, 12:40 AM

#

waxen saddle I’ve even rolled my own containers that can tap into hardware to stream TV real-...

Multicast support needs net_host IIRC or CAP_ADMIN

waxen saddle May 7, 2021, 12:40 AM

#

If I’m having to debug someone else’s container, I try to roll my own. It usually turns out pretty good.

thorny vector May 7, 2021, 12:40 AM

#

I'm not arguing that you can't tune them to what you want. But give me a nice phat VM for a service any day over a container.

waxen saddle May 7, 2021, 12:40 AM

#

Yup. I use host net

#

I run all my containers in a VM. 🙂

thorny vector May 7, 2021, 12:40 AM

#

waxen saddle If I’m having to debug someone else’s container, I try to roll my own. It usuall...

Gotta use the vendor's stuff, or the FOSS solution that's allowed for

plain siren May 7, 2021, 12:41 AM

#

I rather not have to mess with shit like NTP ... 2 times to run a single service.

#

I already got the damn core OS setup, I dont wanna set up a whole other one

thorny vector May 7, 2021, 12:42 AM

#

Don't have the time to finish my replacement product, and get it assessed and approved. I'm not getting the dev time I need for it.

plain siren May 7, 2021, 12:42 AM

#

Thats usually the pinch

thorny vector May 7, 2021, 12:42 AM

#

So I'm having to use my free time/time at home to work on it

plain siren May 7, 2021, 12:42 AM

#

To actually make containers "good" at what they do, your stack has to be architected to make advantage.

#

And thats... time consuming

nocturne harness May 7, 2021, 12:43 AM

#

Containers are really good when services are trivially scalable, and bad for a lot of other tasks

plain siren May 7, 2021, 12:44 AM

#

nocturne harness Containers are really good when services are trivially scalable, and bad for a l...

The one thing that comes to mind is:

Databases.

thorny vector May 7, 2021, 12:44 AM

#

I need to have a robust, easily built and maintained sensor environment. And I do NOT trust zeek, snort/suricata, or stenographer in a container

nocturne harness May 7, 2021, 12:44 AM

#

Mm, stuff like webservices, stream processors, etc are generally easy to scale

plain siren May 7, 2021, 12:44 AM

#

I got snort in a container, its working fantastic, havent ever used zeek or stenographer

nocturne harness May 7, 2021, 12:45 AM

#

Basically anything that doesn’t require complex synchronization

#

Job running cluster etc

plain siren May 7, 2021, 12:45 AM

#

nocturne harness Basically anything that doesn’t require complex synchronization

MariaDB Galera Cluster

thorny vector May 7, 2021, 12:45 AM

#

How is snort handling network traffic? AF_Packet? PF_Ring? Are you having to do multi-gigabit traffic AND verify that you are having less than 3% packet loss?

nocturne harness May 7, 2021, 12:46 AM

#

plain siren *MariaDB Galera Cluster*

👁

plain siren May 7, 2021, 12:47 AM

#

I have 0% loss across my entire platform (Im picky on that), PF_Ring Cluster is running fine.

thorny vector May 7, 2021, 12:48 AM

#

Yeah. Our in house testing of security onion's containerized network monitoring services has left us less than impressed

plain siren May 7, 2021, 12:49 AM

#

So heres the trick with PF_Ring: /lib/modules/$(uname -r)/kernel/net/pf_ring/pf_ring.ko In my container I build the Kernel Module and since the Kernel is shared with Host, its as if its running Bare Metal

thorny vector May 7, 2021, 12:50 AM

#

And because they using "easy to build" containers, and aren't devving their own solutions, they make ad-hoc work arounds to get everything set up, we have to go in and tune everything

plain siren May 7, 2021, 12:50 AM

#

Yeah, cant half-ass this.

#

"Oh boy containers!" without concept understood and half-assed attempts will leave this looking like a joke

thorny vector May 7, 2021, 12:51 AM

#

We don't have the luxury of doing custom work like that on our sensors. We move at a tactical pace, so the longer we build, the less time on network we have

#

Already the tuning we do is finicky enough stuff will still occasionally break

plain siren May 7, 2021, 12:51 AM

#

Ideally you would CI/CD your containers and use a Config Management System to make it ez

thorny vector May 7, 2021, 12:52 AM

#

lol

plain siren May 7, 2021, 12:52 AM

#

But thats a whole other job

#

build_pfringkern() {
    if [ ! -f /lib/modules/$(uname -r)/kernel/net/pf_ring/pf_ring.ko ] 
    then
    echo "Building Kernel Module"
    cd $SPWD/PF_RING*/kernel
    make
    make install
    else
    echo "Kernel Module Already Exists"
    fi
}

in muh run.sh

waxen saddle May 7, 2021, 12:53 AM

#

Oh that’s nifty. Works even when you change the host kernel

thorny vector May 7, 2021, 12:53 AM

#

The solution I'm working on is a super simple "use salt to bootstrap a centos box into a sensor", installs zeek, snort3, and stenographer, and joins the federation. I'm still working the federating solution, and backend.

plain siren May 7, 2021, 12:55 AM

#

waxen saddle Oh that’s nifty. Works even when you change the host kernel

Oh this is a huge gain on Containers. Remember: The container shares the Host Kernel instead of the Hypervisor layer sooo
Expose /lib/modules to the container and it can build modules for you kernel and have them "Configurationally Isolated" yet as if you did the changes on the Host OS. This also means I could launch another container without this build option since its already injected into the kernel.

#

If you ever have to build a kernel module but dont wanna muck up your Environment, a "Build Container" is awesome

plain siren May 7, 2021, 12:57 AM

#

thorny vector The solution I'm working on is a super simple "use salt to bootstrap a centos bo...

Ever seen this?

#

https://i1.wp.com/rackn.com/wp-content/uploads/2021/01/DRPProvisioningWorkflow.gif

thorny vector May 7, 2021, 12:59 AM

#

lol, a vendor solution?

plain siren May 7, 2021, 12:59 AM

#

I did a fun little POC with Digital Rebar. A raspi that configured a whole datacenter from scratch

thorny vector May 7, 2021, 12:59 AM

#

Don't got the money for that

plain siren May 7, 2021, 1:00 AM

#

Neither did I lol, the Trial had an easy bypass OMEGALUL

thorny vector May 7, 2021, 1:00 AM

#

Can't do that in government work

plain siren May 7, 2021, 1:00 AM

#

Yeah. Def dont

thorny vector May 7, 2021, 1:00 AM

#

https://tenor.com/view/you-dont-say-nicolas-cage-wow-really-no-kidding-gif-5343842

Tenor

You Dont Say?

▶ Play video

plain siren May 7, 2021, 1:01 AM

#

But damn, it even configed my PDU's, Switches, and TCG Opal (Self Encrypting Drives)

thorny vector May 7, 2021, 1:01 AM

#

Don't care about thoses. Just need sensors and a master

#

And salt + install script solves that problem perfectly

plain siren May 7, 2021, 1:01 AM

#

What are you working on that has Sensor Telemetry so high

#

Unless its just InfraOps

#

(if you can even say)

plain siren May 7, 2021, 1:02 AM

#

thorny vector https://tenor.com/view/you-dont-say-nicolas-cage-wow-really-no-kidding-gif-53438...

Also lol, I deserved that

thorny vector May 7, 2021, 1:05 AM

#

Hunting novel malware, where ever we're invited

thorny vector May 7, 2021, 1:06 AM

#

plain siren What are you working on that has Sensor Telemetry so high

So, we need to see everything, because we can't rely on any existing signatures/alert rules

plain siren May 7, 2021, 1:06 AM

#

Active Protection

thorny vector May 7, 2021, 1:06 AM

#

Yes and No

plain siren May 7, 2021, 1:07 AM

#

Or is this like... I just stuck an extra LZMA Layer into your BIOS Kinda thing

thorny vector May 7, 2021, 1:07 AM

#

We don't stay active on a network for an extended period of time. We come in, we hunt, we find, we leave. And take our kit with everywhere.

#

And I don't do that kind of stuff, but our host guys do

#

I do network analysis and system architecture for our kit

plain siren May 7, 2021, 1:08 AM

#

Oh I was just using terminology, I understand the job

I presume you are "Certifying" of some sort?

thorny vector May 7, 2021, 1:09 AM

#

Nope, no certify. Literally, all we care about is the bad stuff. We don't care if our customer is following policy, or up to standards. We'll advise on it, but in general we don't really care.

plain siren May 7, 2021, 1:09 AM

#

Purely research then?

thorny vector May 7, 2021, 1:10 AM

#

We do the rule making for everyone else, essentially

plain siren May 7, 2021, 1:10 AM

#

Hello FireEye

thorny vector May 7, 2021, 1:11 AM

#

lol, I wish. Don't get paid near that much.

plain siren May 7, 2021, 1:11 AM

#

Stupid me 4 years ago turned down a job offer from them

#

I still punch myself

plain siren May 7, 2021, 1:12 AM

#

thorny vector I do network analysis and system architecture for our kit

This is the actual cool areas of the job.
Maybe not paid like Redmon/FireEye but shit, the industry you work in alone is fascinating

ivory pivot May 7, 2021, 1:12 AM

#

someone offered you job? lol

#

mistakes were made

#

😄

plain siren May 7, 2021, 1:13 AM

#

ivory pivot someone offered you job? lol

In security no less, so def a mistake

ivory pivot May 7, 2021, 1:13 AM

#

they'll hire 19 year olds via temp agencies now for 6 month contracts

thorny vector May 7, 2021, 1:13 AM

#

Yeah, and nice benefits like getting paid to go the defcon

plain siren May 7, 2021, 1:13 AM

#

ivory pivot they'll hire 19 year olds via temp agencies now for 6 month contracts

Grrrrrr

ivory pivot May 7, 2021, 1:13 AM

#

that's the reality

plain siren May 7, 2021, 1:14 AM

#

I know

ivory pivot May 7, 2021, 1:14 AM

#

source: am looking for internship, fuckers don't even want interns anymore.

thorny vector May 7, 2021, 1:14 AM

#

lol, not for high skill jobs like malware analysis

ivory pivot May 7, 2021, 1:14 AM

#

i've got 4,65/5,0 GPA and I'm not even getting interviews

plain siren May 7, 2021, 1:14 AM

#

Dont underestimate the cost cutting nature of the CFO's of these "Big Players" now...

ivory pivot May 7, 2021, 1:14 AM

#

so i'm slighlty getting disillusioned about education

plain siren May 7, 2021, 1:15 AM

#

Honestly, the quality of their work (especially the most recent) is showing it

thorny vector May 7, 2021, 1:15 AM

#

Education and certs are nice, but its all about relationship building. That's where you get the foot in the door

plain siren May 7, 2021, 1:15 AM

#

Who you know, not what you know Every damn time 100/100 times

thorny vector May 7, 2021, 1:16 AM

#

Gotta make friends every step of the way. It's if I leave my current job, I already got the next thing lined up.

plain siren May 7, 2021, 1:16 AM

#

thorny vector Gotta make friends every step of the way. It's if I leave my current job, I alre...

My father taught me this. You quit when you are already hired. Easier to find a job when you are employed

#

You can also take the offer back to current employer and see if they have deeper pockets

peak cloak May 7, 2021, 1:18 AM

#

this cybersecurity firm has taken a couple of previous students as interns during senior year

#

going to apply

thorny vector May 7, 2021, 1:18 AM

#

What firm?

little schooner May 7, 2021, 1:37 AM

#

thorny vector Education and certs are nice, but its all about relationship building. That's wh...

I agree with this statement. If you know enough of the right people, opportunities do pop up every now and then to move up

tender hazel May 7, 2021, 4:21 AM

#

monday is going to be a nightmare for our poor service desk.. one of our resellers hasn't entered any payments in the billing system, so basically every single one of their customers (about 70 in total) are going to go delinquent on Monday and get service cut off

#

and it is possible that they actually paid but that the reseller hasn't recorded the payment yet

plain siren May 7, 2021, 5:59 AM

#

tender hazel monday is going to be a nightmare for our poor service desk.. one of our reselle...

If you happen to have the ability to do so: Prevent that

#

Yeah you dont have permission right now

#

But this is one of those moments where its good to do so

tender hazel May 7, 2021, 6:00 AM

#

we contacted the reseller - they never responded

#

I expect they are doing it on purpose, to throw us under the bus when the customers get cut off

#

and claim it was our fault

#

and tell all of their customers that it was our fault

plain siren May 7, 2021, 6:02 AM

#

CYA, Send an Email, CC the Executive Board

lunar spade May 7, 2021, 6:53 AM

#

My computer has a 192.162.X.X IP address, how could I find the IP address of my router?

ornate jungle May 7, 2021, 6:57 AM

#

lunar spade My computer has a 192.162.X.X IP address, how could I find the IP address of my ...

Assuming you're on Windows, you can normally run ipconfig /all in command prompt then look for the gateway IP. If your device IPs are 192.168.x.x your gateway is probably 192.168.1.1 or 192.168.0.1

lunar spade May 7, 2021, 6:57 AM

#

thanks

lone sun May 7, 2021, 7:01 AM

#

😆 I swear you nerds are badly needed on the forum. People ask all kinds of network questions there.

tame carbon May 7, 2021, 7:02 AM

#

they should come here

thick minnow May 7, 2021, 7:06 AM

#

That could work

lone sun May 7, 2021, 7:06 AM

#

Well, maybe. I think the forum format is better suited for troubleshooting. Discord is fine here only because its not often super busy like that other discord channel called 'buildapc'.

low pond May 7, 2021, 9:02 AM

#

tame carbon they should come here

ye who uses forums now

lean pebble May 7, 2021, 12:01 PM

#

Ya who uses the internet this days

clear igloo May 7, 2021, 12:17 PM

#

who uses a computer these days?

little schooner May 7, 2021, 12:42 PM

#

clear igloo who uses a computer these days?

for 8 months at my school, very very few

#

I was supporting an environment that gets no foot traffic lol

#

should change by summer and fall semester

clear igloo May 7, 2021, 12:45 PM

#

lol

lean pebble May 7, 2021, 12:57 PM

#

clear igloo who uses a computer these days?

Yeah everyone working from smart phones

thick minnow May 7, 2021, 1:07 PM

#

low pond ye who uses forums now

I use it, but usually only for tech news (and that too to get featured on Techlinked/the wan show)

thick minnow May 7, 2021, 3:26 PM

#

hi how many $ could 15Meters of ordinary optic cable cost ?
ill do pic w8

cosmic bronze May 7, 2021, 3:27 PM

#

idk if this is the correct channel but everytime i try to watch baby driver on netflix it doesnt go above like 480p, it seems to be only this one movie. any idea why or is it just the movie? but then again on the little preview at the start it shows good quality

hollow marlin May 7, 2021, 3:45 PM

#

You would need to specify a bit more. 15m for fiber is cheap but what are going to be using it for?

low pond May 7, 2021, 4:02 PM

#

I think those cables are LC

peak cloak May 7, 2021, 4:21 PM

#

low pond I think those cables are LC

LC are the connectors?

#

it's not terminated

#

fiber termination can be a pain I heard

#

without expensive eqipment

#

termination means putting on the connectors

#

doubt it's worth much

clear igloo May 7, 2021, 4:23 PM

#

Yah, you can get 15m of cable for like $15-20 pre terminated and everything

peak cloak May 7, 2021, 4:24 PM

#

clear igloo Yah, you can get 15m of cable for like $15-20 pre terminated and everything

seems like that cable, I just looked it up is a bundle

#

https://www.novalight.com/ofs-midia-micro-fx-288-fiber-loose-tube-micro-cable-AT-3CE453T-288.htm

NovaLight Telecom Supply

OFS Midia Micro FX 288-Fiber Loose Tube Micro Cable

Features • Optimized for air-blown, microduct installation • Reduced outer diameter and high fiber density • Compiles with Telcordia GR-20 standards (as a special applications cable) • Passes ICEA-640 Section 7.34, MidSpan Buffer Tube Storage Test •...

#

did he steal it...

low pond May 7, 2021, 4:42 PM

#

who steal what xD

#

WTF, why did he deleted all his messages

violet hound May 7, 2021, 4:49 PM

#

just got word from our ISP's techs, our middle-of-nowhere village house now has gigabit internet

#

maybe if a few years we'll also get tap water that doesnt lose pressure when too many people in the village use it PepeLaugh

low pond May 7, 2021, 4:54 PM

#

XD haha

#

Depends on the total bandwidth to the village itself tho

tame carbon May 7, 2021, 5:52 PM

#

@low pond honestly, invest in a CCR

#

and you are done.

#

https://i.imgur.com/AYyTEtl.png

Imgur

#

8x 10G

#

couple of those

#

and you can run a small ISP enough to provide 40gbit or more to a town

#

then its just a matter of the expensive permits and tunneling/cable laying that will bankrupt you

#

its 80% of the costs

#

CCR1072 is like $3000, equipment is the least of your problems

#

the physical infrastructure is where the trap is

low pond May 7, 2021, 6:01 PM

#

Ye it is the well the whole deploying of fiber over a longer distance to their POP's

tame carbon May 7, 2021, 6:03 PM

#

@low pond I hate the fact that they are doing GPON all over the place :/

low pond May 7, 2021, 6:03 PM

#

Ye actually even in India many fiber providers do use GPON

tame carbon May 7, 2021, 6:03 PM

#

its not even that big a problem

#

if only their ONTs would be at least standard

low pond May 7, 2021, 6:03 PM

#

In what sense 😛

peak cloak May 7, 2021, 6:04 PM

#

low pond In what sense 😛

like dociss

tame carbon May 7, 2021, 6:04 PM

#

You plug your pc into port 1 to configure

peak cloak May 7, 2021, 6:04 PM

#

so you could just get a modem

tame carbon May 7, 2021, 6:04 PM

#

and you set up vlan ports for each service

#

in the device

#

thats it

peak cloak May 7, 2021, 6:04 PM

#

no ont/router combo

#

that's the worst

tame carbon May 7, 2021, 6:04 PM

#

you need an ONT that can seperate the IPTV and VoIP stuff from your ISP to one ethernet box

#

this box, is responsible for all that crap

low pond May 7, 2021, 6:05 PM

#

peak cloak so you could just get a modem

ah, in India the providers Airtel and Jio do use AIO. They are branded also (Jio's), but Airtel use Huawei/Nokia ones

Where I am currently (UAE), we have a Huawei Modem and then connected to a DLink router so yea

tame carbon May 7, 2021, 6:05 PM

#

it has a WAN and a single LAN port

#

or a switch in it

#

but the whole point is

#

that the ONT should be able to hand off WAN to a designated port

#

so you can run your internet service on your own gear, and run the additional services through the ISP gear

low pond May 7, 2021, 6:05 PM

#

tame carbon this box, is responsible for all that crap

We have that box here XD, wehave a deeicated ITPV port and a Telephone port and internet port

tame carbon May 7, 2021, 6:06 PM

#

the problem now with GPON

#

is getting the ONU to work in your own gear

#

I'm helping @151100377331138560

#

mh

low pond May 7, 2021, 6:06 PM

#

did he leave the serevr or soemting

tame carbon May 7, 2021, 6:07 PM

#

no

#

he has a space in his name

#

so I cant @ him

low pond May 7, 2021, 6:07 PM

#

oh i see

tame carbon May 7, 2021, 6:07 PM

#

I thought using his id might work

#

But he's about to get GPON directly to his mikrotik

peak cloak May 7, 2021, 6:07 PM

#

tame carbon that the ONT should be able to hand off WAN to a designated port

that's what fios ont does

tame carbon May 7, 2021, 6:07 PM

#

waiting on final parts

#

@peak cloak yeah I am about to learn something here

#

see if it works directly

#

if not

#

we need to.. mod the ONU

#

short 4 pins out

#

with blob of solder

#

its kinda uhm

#

the problem in it lies that, it has a nonstandard pin-5

#

vendor lockin crap basically

#

and its just a pullup resistor

#

you just short it

#

problem solved

#

if we can't have a driver for the interface

#

we can SSH into it

#

and clone the serial and password

#

and move that onto a mikrotik ONU

#

hopefully then

#

we can get GPON service up

#

and then we need to figure out how to get the VLANs seperated

#

for IPTV and internet

#

since they enter the network on a switch

#

and not a router

#

complicated stuff

peak cloak May 7, 2021, 6:11 PM

#

tame carbon complicated stuff

yeah reverse engineering the isps connection

tame carbon May 7, 2021, 6:12 PM

#

https://github.com/hwti/G-010S-A

GitHub

hwti/G-010S-A

All about Nokia G-010S-A GPON SFP. Contribute to hwti/G-010S-A development by creating an account on GitHub.

peak cloak May 7, 2021, 6:12 PM

#

fios apparently is really complicated

tame carbon May 7, 2021, 6:12 PM

#

This recently appeared ^

hollow marlin May 7, 2021, 6:12 PM

#

ONT are essentially managed switches, not much too them

tame carbon May 7, 2021, 6:12 PM

#

@hollow marlin He was afraid to pick up a soldering iron

peak cloak May 7, 2021, 6:12 PM

#

but no point, ONT works fine with no routing

peak cloak May 7, 2021, 6:13 PM

#

hollow marlin ONT are essentially managed switches, not much too them

yeah but the whole auth part, keys, etc.

tame carbon May 7, 2021, 6:13 PM

#

@hollow marlin my backup plan is.. some tin foil and stickytape

#

@peak cloak its not even that

#

its just username password basically

#

very mundane

peak cloak May 7, 2021, 6:13 PM

#

well depends on isp

#

fios is apprently like that

tame carbon May 7, 2021, 6:13 PM

#

oot@SFP:/# onu gtcsng
errorcode=0 serial_number=ALCL98765432
root@SFP:/# onu gtcpg
errorcode=0 password=1234567890
root@SFP:/#
Set password and serial
root@SFP:/# fw_setenv nPassword 1234567890
root@SFP:/# fw_setenv nSerial ALCL98765432

#

This is Telus

#

Canadian ISP

#

@hollow marlin do you know what they run?

#

https://cdn.discordapp.com/attachments/829722257700945920/838476437551972392/image0.jpg

#

idk if this is going to work

hollow marlin May 7, 2021, 6:18 PM

#

I am not sure what equipment they run at the access layer. Majority is Calix/Adtran

tame carbon May 7, 2021, 6:18 PM

#

they use AlcatelLucent

#

on the CPE

hollow marlin May 7, 2021, 6:18 PM

#

For the SFP that should technically work

tame carbon May 7, 2021, 6:18 PM

#

@hollow marlin yeah but they are pulling some kind of vendor lock

#

https://rsaxvc.net/blog/2020/8/15/Nokia_G-010S-A_Pin_6_Issue.html

#

Quite interesting

#

The fix seems to be simple enough, short out this resistor(there are three white boxes above the 5 pin chip, the middle box has two resistors, the left is a zero-ohm, and the right is our 1k culprit, it's connected to pin 6, starting with pin 1 on the far right).

#

so they have a pulldown resistor

#

that breaks compatibility

hollow marlin May 7, 2021, 6:19 PM

#

Vendor lock as in the console access or something else?

tame carbon May 7, 2021, 6:20 PM

#

As part of setting up a GPON lab at home, I noticed that my Nokia G-010S-A SFP refused to connect to my HP 530SFP+ NIC. Some research showed that a NIC modification was needed.

#

I decided to dig in a little deeper to figure out what was wrong.

hollow marlin May 7, 2021, 6:20 PM

#

Oh yeah, you can buy cheap boxes that change the ID of the SFP

#

FS.com used to sell them, let me find the name of them

tame carbon May 7, 2021, 6:21 PM

#

@hollow marlin oh

#

really?

#

so we may not need this sfpmod?

#

because the plan was to mod it

#

snatch the ID

hollow marlin May 7, 2021, 6:22 PM

#

https://www.fs.com/products/96657.html

FS

FS Box, Multi-Functional Transceiver Tool Kit, Support FS Transceiv...

FS Box, Multi-Functional Transceiver Tool Kit, Support FS Transceivers & DAC/AOC Cables,Part Number:FS-BOX-V3:Supported Form Factors:SFP, SFP+, XFP, SFP28, QSFP+, QSFP28,Part Number:FS-BOX-V3:Supported Form Factors:SFP, SFP+, XFP, SFP28, QSFP+, QSFP28:Supported Operating Systems:Windows (10 or newer), Mac OS (10.13 or newer):Supported Browsers:C...

tame carbon May 7, 2021, 6:22 PM

#

and then use the mikrotik onu he bought

#

cheap

#

wat

#

you are joking

#

and not even gpon

hollow marlin May 7, 2021, 6:23 PM

#

Many vendors lock their SFP port down to first party or certified 3rd parties. All you do is plug in the SFP and you'll get the binary, just flip the bits to the approved bits and done

tame carbon May 7, 2021, 6:23 PM

#

@hollow marlin I just need those two values though ?

#

those onus use SSH

#

and a default pw

hollow marlin May 7, 2021, 6:25 PM

#

To access the ONT, you'll need to find the credentials. To modify the SFP you need a reprogrammer unless their ONT has special sauce that can actually do that

tame carbon May 7, 2021, 6:25 PM

#

@hollow marlin no no

#

we are not using the ONT at all

#

the GPON SFP goes directly into the network

#

into a CRS309

hollow marlin May 7, 2021, 6:26 PM

#

That may or may not work

tame carbon May 7, 2021, 6:26 PM

#

exactly

#

so we got this mikrotik ONU

#

which might work

#

and I am unsure as to, if telus lets you register another S/N

#

or maybe sends it to you

#

this is just like PPPoE details

hollow marlin May 7, 2021, 6:27 PM

#

ONTs typically are provisioned via MAC or 802.1x auth. Its not always as simple as plug and play. Some ISPs allow you to use your own and publicly give out the VLAN.

tame carbon May 7, 2021, 6:27 PM

#

he contacted the ISP

#

and they somehow

#

'agreed' to have him run his custom stuff

#

and they are providing the phone service over copper now

hollow marlin May 7, 2021, 6:28 PM

#

Most don't to avoid situation where customers can potentially get free service or MITM

tame carbon May 7, 2021, 6:28 PM

#

and IPTV will be a vlan supposedly

#

@hollow marlin thats why its a shitty implementation

hollow marlin May 7, 2021, 6:28 PM

#

All services will be VLANs, even voice

tame carbon May 7, 2021, 6:28 PM

#

@hollow marlin yeah but TV and internet they do with their home hub "router"

#

but POTS is the ONT

#

and the issue we have

#

is that they provide 1.5G fiber

#

but their ONT only has gigabit

hollow marlin May 7, 2021, 6:29 PM

#

Yep, even the POTs is on a VLAN. SIP is used to register the lines

tame carbon May 7, 2021, 6:29 PM

#

CH_kek this is why we're in this shithole

hollow marlin May 7, 2021, 6:31 PM

#

If they agreed to this, they should be giving you 3 VLANs, voice, IPTV and data

#

Hopefully should be straight forward if they give out all the info you need

tame carbon May 7, 2021, 6:31 PM

#

They don't

#

thats the problem

#

or

#

haven't yet

#

idk

#

@hollow marlin I got some rough idea on what i need

#

vlan is probably in the lower range somewhere, 35 probably

#

and tv 36

#

hoping that dhcp just clears up all

#

and if I cannot figure it out

#

I will configure a switch port forward

#

and plug in the ISP router

#

and run a packet sniffer

hollow marlin May 7, 2021, 6:34 PM

#

If they allow this, you could technically plug in a GPON SFP and run a PCAP to see which VLANs are being broadcasted

tame carbon May 7, 2021, 6:34 PM

#

oh

#

so there is a way to do this

#

see what vlans are on a pipe

hollow marlin May 7, 2021, 6:34 PM

#

But thats assuming a very simplistic setup

tame carbon May 7, 2021, 6:35 PM

#

@hollow marlin the ISP router gives 0 information. literally
https://i.gyazo.com/thumb/1200/6e227c69613b00740616312f28bf6dcc-png.jpg

#

is that a stock photo?

#

Status

hollow marlin May 7, 2021, 6:35 PM

#

Yeah the ONTs shouldn't show that info

tame carbon May 7, 2021, 6:35 PM

#

yeah all wires are still inside me

#

@hollow marlin this isnt the ONT

#

but the the Router

#

it does the IPTV stuff

#

so it should have both VLANs

#

because its seperately connected

#

through a 1G service

#

not 1.5G

#

but it has 10G itself on the back

#

buuuut

#

gigabit switching ports

#

so kinda useless again

#

no way to get rid of the ISP crap

#

because of the ONT

#

and the mediocre router

hollow marlin May 7, 2021, 6:38 PM

#

Here is what it looks like from the SP perspective in Calix for ONT provisioning

tame carbon May 7, 2021, 6:39 PM

#

@hollow marlin the problem with Telus is that they are a canadian company with Indian robots on the support phones

#

its hard to get through to a human

hollow marlin May 7, 2021, 6:40 PM

#

Thats became the standard unfortunately

tame carbon May 7, 2021, 6:41 PM

#

@hollow marlin meanwhile, govt put all kinds of laws in place here, to make sure that support lines are free of charge, and waiting lines are at most 10 minutes.

#

for things like large businesses

#

still idiots on the phone

#

but you can ask for them to make an appointment with their technical team

#

and this usually takes a bit longer, but gets the right gears turning quicker

#

they call you back at a given time

#

and you can have someone who's a bit more... skilled

#

my current ISP has a 24/7 NOC I can call for urgent problems

#

and 6 hour SLA

#

I only had to call them once... to configure my network

vale reef May 7, 2021, 6:44 PM

#

Are you trying to replace the ont?

tame carbon May 7, 2021, 6:44 PM

#

@vale reef Yes.

#

Helping someone else doing so

vale reef May 7, 2021, 6:45 PM

#

I forget if it was Telus but I remember if you "upgrade" to the router with sfp to the back of it you can take it out and put it straight in your router

#

It needs to be their ONT SFP module

tame carbon May 7, 2021, 6:45 PM

#

@vale reef the problem with that SFP router they have, I know, the Home Hub, is that it only has gigabit LAN

#

you can't get the full 1.5G to a single machine

#

and that's the whole point of this

hollow marlin May 7, 2021, 6:46 PM

#

tame carbon and 6 hour SLA

Is that for all customers? If so, damnnnnn

vale reef May 7, 2021, 6:46 PM

#

https://youtu.be/5WWO_4p4UP0

YouTube

Tech with Shae

I connected my fiber internet directly to my pfsense router via SFP!

I completely bypassed my ISP provided ONT and Wifi Router. I was able to install a SFP+ card in my PfSense box and plug the ISP provided SFP GPON Module "Nokia SFP ONT" with success.

I got 1.5 gig internet! Video Below:
https://youtu.be/gzk69kHLu1o

FOLLOW UP:
https://youtu.be/2P6Miz-wRcw

Router Specs:
Supermicro X9SCL
https://www.supermicro...

▶ Play video

#

Watch this

tame carbon May 7, 2021, 6:46 PM

#

@vale reef we're already got their ONU

#

we have all the gear mostly too

vale reef May 7, 2021, 6:47 PM

#

Is it the Nokia ont on a stick?

tame carbon May 7, 2021, 6:47 PM

#

its just an issue with a potential hardware incompatibility

#

@vale reef ONT and ONU are two different parts

#

ONU is the fiber transceiver itself

#

ONT is the box it plugs into

vale reef May 7, 2021, 6:47 PM

#

Ok

tame carbon May 7, 2021, 6:47 PM

#

https://cdn.discordapp.com/attachments/829722257700945920/838476437551972392/image0.jpg

#

However

#

https://rsaxvc.net/blog/2020/8/15/Nokia_G-010S-A_Pin_6_Issue.html

#

It has a hardware issue

#

that makes it not work with some chipsets

hollow marlin May 7, 2021, 6:48 PM

#

ONT/ONU are just interchangeable terms for an endpoint.

vale reef May 7, 2021, 6:48 PM

#

If you watch that video it might give you some info about the issues he ran into

#

He had to get a different nic

tame carbon May 7, 2021, 6:48 PM

#

I'm hoping the Marvell 98DX does not have this issue

#

@vale reef yes

#

I'm hoping the Marvell chips will work

#

otherwise, i need to mod the SFP

#

you need to short out a resistor

#

and then it works

#

@vale reef we have a mikrotik ONU as well

#

we can just clone the credentials from the ISP provided one, to the mikrotik one

#

We have an intel 10G NIC which we can also attempt to use

#

intel never fails anyone

#

we'll see

hollow marlin May 7, 2021, 6:52 PM

#

Its work just trying to just plug the SFP in an see if its approved. I would assume in that blog, that NIC cannot accept GPON SFPs

tame carbon May 7, 2021, 6:53 PM

#

@hollow marlin so what limits this?

#

https://i.imgur.com/7OsHvRH.png

Imgur

hollow marlin May 7, 2021, 6:53 PM

#

Just the NIC really

tame carbon May 7, 2021, 6:53 PM

#

But Marvell

hollow marlin May 7, 2021, 7:13 PM

#

@tame carbon do they already have a 309 to test with?

tame carbon May 7, 2021, 7:19 PM

#

probably

flat wagon May 7, 2021, 7:19 PM

#

d

tame carbon May 7, 2021, 7:20 PM

#

@hollow marlin he just informed me ^ that he hasnt yet got the ONU*

#

the isp will give it to him apparently

flat wagon May 7, 2021, 7:20 PM

#

we do one ONE ONT though

#

i mean

#

one ONU*

#

which is

#

connected

#

to the ONT

#

currently

tame carbon May 7, 2021, 7:20 PM

#

please don't multiline so much in here ;)

hollow marlin May 7, 2021, 7:20 PM

#

ONT=ONU, same thing

flat wagon May 7, 2021, 7:20 PM

#

okok

tame carbon May 7, 2021, 7:20 PM

#

@hollow marlin he's talking about the SFP

#

apparently its removeable

#

from his current device

hollow marlin May 7, 2021, 7:21 PM

#

Most are, even if in a housing, you open them up they still have an SFP cage

tame carbon May 7, 2021, 7:21 PM

#

yeah it just has a screw and a plastic bracket that locks it in place

#

but you can just remove it

#

and take itout

#

@flat wagon you could test the setup rn

#

if you power up the CRS309

hollow marlin May 7, 2021, 7:22 PM

#

Even a simple test of the SFP plugged into the 309, if you get a link you are pretty much golden

tame carbon May 7, 2021, 7:22 PM

#

we can at least verify if the link works

flat wagon May 7, 2021, 7:22 PM

#

wait

tame carbon May 7, 2021, 7:23 PM

#

You have your switch right?

#

@hollow marlin oh ye, sidenote. I setup the git, with nginx proxy and ssl in like 1.5h today at work

#

I came into my Boss' office just before 1pm, 2h after he sent the email with the VPS hoster credentials

#

done

#

He was like: wait what, already?

flat wagon May 7, 2021, 7:25 PM

#

We can try to do it in about an hour ish

hollow marlin May 7, 2021, 7:25 PM

#

Keep it up, small things like that push you up the ranks faster, just make sure they are following through

tame carbon May 7, 2021, 7:25 PM

#

@hollow marlin yeah but being able to lock down branches and enforce reviews for commits

#

will be a big change

#

I just uploaded the code repository

#

and the developers were actually already working on it

#

so you could immediately see the 5 issues I tossed in as a demo (they were actual issues)

#

@flat wagon sure.

flat wagon May 7, 2021, 7:30 PM

#

@tame carbon bro legit i dont see the module behind the ONT

#

it's just a green cable

peak cloak May 7, 2021, 7:30 PM

#

some onts don't have a sfp module

tame carbon May 7, 2021, 7:30 PM

#

@flat wagon you sent us a picture ages ago

peak cloak May 7, 2021, 7:30 PM

#

fyi

flat wagon May 7, 2021, 7:30 PM

#

ikik

#

hold on

peak cloak May 7, 2021, 7:31 PM

#

https://cdn.discordapp.com/attachments/387022787480387605/829745263618687046/image1.jpg

tame carbon May 7, 2021, 7:31 PM

#

I know I am stoned, but my memory isnt that bad

#

Exactly yeah

#

there's a plastic cover in front of it

peak cloak May 7, 2021, 7:31 PM

#

there may not be a sfp there

tame carbon May 7, 2021, 7:31 PM

#

you remove that

flat wagon May 7, 2021, 7:31 PM

#

yes

#

i did

tame carbon May 7, 2021, 7:31 PM

#

and what is it now?

flat wagon May 7, 2021, 7:31 PM

#

it flips up

#

let me take a pic

tame carbon May 7, 2021, 7:32 PM

#

yeah there should be a latch

#

https://i.imgur.com/mHeL2Df.png

Imgur

#

like this green thing

#

you pull that down

#

and it disconnects the SFP

#

and then you can pull it out

#

may need to remove the fiber

#

make sure you dont leave the fiber unplugged, and immediately put it back in the SFP

#

if any dust gets in you are screwed

peak cloak May 7, 2021, 7:34 PM

#

#networking

flat wagon May 7, 2021, 7:34 PM

#

am i blind

peak cloak May 7, 2021, 7:34 PM

#

@tame carbon doesn't seem to have sfp

tame carbon May 7, 2021, 7:34 PM

#

blast.

#

ok then I guess not

#

:3

tender hazel May 7, 2021, 9:11 PM

#

@tame carbon what are you doing with the 309 / ONT?

tame carbon May 7, 2021, 9:12 PM

#

forwarding vlans

#

to a trunk

tender hazel May 7, 2021, 9:12 PM

#

I was reading the history but couldn't make what was being discussed, almost like there were missing messages

#

is this for the campground?

tame carbon May 7, 2021, 9:12 PM

#

He wants to use the 1.5G fiber internet speed

#

no

#

this is for someone else

tender hazel May 7, 2021, 9:12 PM

#

ok

tame carbon May 7, 2021, 9:12 PM

#

basically

green forge May 8, 2021, 12:27 AM

#

Guys, so now I have a new problem. My Ethernet dies for no reason a lot randomly. I'm not 100% sure but ive noticed it goes out when i start scrolling through a youtube video, or like skipping forward. Usually it comes back if I disconnect and plug it back in but most of the time it just dies and requires me to restart my router. Wifi works perfectly fine, no problems. If you have a fix, please ping me!

#

@tame carbon

#

@tender hazel

#

Sry for ping

tender hazel May 8, 2021, 12:33 AM

#

I was saying before that it was strange that the MAC Winbox was disconnecting when you tried connecting to the router with the mac address

tender hazel May 8, 2021, 12:54 AM

#

@green forge

little schooner May 8, 2021, 12:56 AM

#

green forge Guys, so now I have a new problem. My Ethernet dies for no reason a lot randomly...

Did you try a different cable?

green forge May 8, 2021, 1:02 AM

#

yep

#

nothin

#

@little schoonermaybe its software related?

#

my other computes work fine

little schooner May 8, 2021, 1:04 AM

#

Doesn't sound like it

#

I had it happen to me too. In my case, the cable tested fine but it was a CCA cable of poor quality

#

once I replaced mine, my issue went away

#

I've seen it happen where the modem was the culprit, too

#

But since you said it doesnt affect other devices on wifi

#

then maybe you can test with a different router if you connect directly to it with copper cable

green forge May 8, 2021, 1:06 AM

#

you see

#

the routers in a closet

#

and im currently using in wall ethernet

#

the router that im using as a access point is also in wall ethernet connected

#

so it cant be the cable

little schooner May 8, 2021, 1:07 AM

#

I'd try connecting directly to the router, not using the in-wall ethernet to test