networking

[lament night]

also if you threaten them that ull switch isps theyll knock off another 2 dollars a month

[lean pebble]

I wish I could get 100/10

😆

[low pond]

😂 sounds indian.

[lament night]

thats what airtel did lmao

[low pond]

Airtel VFibre is horrible. One of my friends has 300Mbit there, I told him to speedtest to bunch of european and US servers he got like 2Mbps and 5 or so. I told him, now speedtest to a Indian server he got 290 or so

This is pure ISP tactics

[lament night]

bro i swear airtel broadband is not good thass y i switched to ACT

[low pond]

One thing of airtel is they have a lot of coverage in the smaller towns now.

No more stupid ADSL from BSNL

🤣

[lament night]

i have airtel cell i get around 100/50 on that

[lament night]

lmaoooo my grandparents have that

[low pond]

Ah, 4G you mean. yeah the speeds can be pretyt fast if congestion is not present

[lament night]

yea, tried jio was pretty unimpressed with 4g speeds

[low pond]

Well all the congestion will build up 🤷‍♂️

There's congestion on the cell towers itself, limited TDD bands stuff, and then the actual bacbone between them

and then the actual actual bacone of it 😛

[indigo ore]

anyone here know what os and config i can use for a wireless/wired storage pc

[tame carbon]

@indigo ore what exactly are you looking for?

[indigo ore]

a good way to store audio video pictures wirelessly to a computer

[tame carbon]

So a NAS ?

[indigo ore]

pretty much yeah

[tame carbon]

NAS can be connected to your local network with a cable

Would be available over wired ethernet on your LAN, or WiFi

@indigo ore are you DYI-ing the storage box?

because you can just use a commodity NAS for this, hook it up wired

[indigo ore]

diy yeah

just a budget computer for it

[tame carbon]

a NAS isn't anything special, its just a computer with storage and network

and a program to provide this storage over the network

@indigo ore any experience with Linux? because if you don't, might want to look into TrueNAS or FreeNAS

Those are ready to use operating systems, that make it easier to manage volumes, shares and such

[indigo ore]

some experience with linux not alot

[tame carbon]

On linux you'd have to do it by hand

[indigo ore]

prolly gonna do truenas or freenas then

[tame carbon]

@indigo ore on linux its not that complicated, but you'll have to configure Samba by hand

on TrueNAS you can just use a web interface to configure

[indigo ore]

thanks for the help nonetheless

[lean pebble]

@tame carbon do you know by chance on a good hosting company that have cheap storage boxes in Europe ?

[peak cloak]

truenas is freenas

just rebranded

use truenas now

[tame carbon]

@lean pebble not really

[thick minnow]

truenas makes me happy

[lament night]

why is a netgrae ReadyNAS so expensive its just a shell with a low powered computer

[peak cloak]

its' not really a low powered computer

[tame carbon]

@lament night its a turn-key solution, ready to use. You pay for this

The product is "worth more" than the sum of its parts

[lament night]

so your basically paying for convenience moar than theparts

cool got it

but my rpi4 nas works fine whats the difference b/w that and readynas

[peak cloak]

pi doesn't compare

doesn't have that much io

[lament night]

i mean i only have 4 tb hooked o nto it rn

1 tb wd drives in each usb slot

i agree its not as fast as pcie

but its fine for what i do i rarely use it i just store pictures and stuff lol

[peak cloak]

any redudancy

[lament night]

yea raid 1

[tame carbon]

@peak cloak pi 4b+ at most gets you 300mbit/s

plenty for a NAS

[lament night]

i have the one with 8 gigs of ram

[peak cloak]

so you only have 2 tb?

[tame carbon]

@lament night just install samba on it

[peak cloak]

that's not gig tho

[lament night]

yea i use only arounf 100-150 gb at the moment

tho

[tame carbon]

@peak cloak still, that's 37.5MB/s

plenty of storage speed on a $45 board

[lament night]

i also have a pi 2b+ running pihole

[tame carbon]

those things are slow af

3b+ is slow compared to the Pi 4

[lament night]

ob yea the pi4 is like tho only one even worht buying

[tame carbon]

The Pi4+ has LPDDR4, and can push about ~4GB/s of memory

[lament night]

but i had pi2 on hand so y not

[tame carbon]

@lament night or for a DNS server its fast enough

[lament night]

hmm yea

[tame carbon]

but the Pi4 is great for a NAS, unlike the 3b, the pi4 has seperate busses to the CPU For the USB and network controller

[peak cloak]

I got rid of my vpn on a pi and it's on a VM now

[tame carbon]

on the pi3 the network controller is just a USB device on the same USB bus

so if you used it as a NAS, the network would bottleneck the USB bus

and vice versa

effective bandwidth out of a pi3b+ as a NAS was like 80-100mbit/s

300mbit/s on the pi4+ (if you do streaming from memory, it can handle ~800mbit/s raw throughput)

You wont ever get gigabit speeds out of the pi, regardless

[final pasture]

i have problem my internet speed is 100mbps, but i get like 300 ping on games. But on my phone everything runs smoothly in 20-60 does anyone know what to do

[tame carbon]

@final pasture open a terminal and run: tracert 1.1.1.1

post a screenshot with the output

[lament night]

y cloudflare

8.8.8.8 is giving me way less ping

[final pasture]

but will it give my ip address

[final pasture]

hey

[peak cloak]

no it won't

[final pasture]

ok im just scared

do you mean this thing

[peak cloak]

yes

show the ips

[final pasture]

hmmm

can you send urs just to know

im safe if ur safe

[peak cloak]

seems like schools routers block ICMP

so there is like no info

but here

[tame carbon]

crystal@servomat:~$ traceroute 1.1.1.1
traceroute to 1.1.1.1 (1.1.1.1), 30 hops max, 60 byte packets
 1  router.redacted.nl (192.168.88.1)  0.231 ms  0.207 ms  0.198 ms
 2  r2.serv.dro.weserve.nl (46.243.152.3)  6.178 ms  6.232 ms  6.281 ms
 3  46.249.55.194 (46.249.55.194)  8.871 ms  6.938 ms  7.244 ms
 4  185.8.179.33 (185.8.179.33)  12.512 ms  7.840 ms  7.875 ms
 5  ams-ix.as13335.net (80.249.211.140)  8.945 ms  8.886 ms  8.876 ms
 6  one.one.one.one (1.1.1.1)  8.136 ms  8.188 ms  7.900 ms

[peak cloak]

^

[tame carbon]

It only has the local IP of your router, and the IP of your ISP's router

your public IP is not listed

[peak cloak]

^

[tame carbon]

@peak cloak been using gitea extensively for 2 weeks now

[final pasture]

ok just sec

[tame carbon]

already found a bug

xD

So I'll be doing my FOSS duty, and reporting on it in detail

[final pasture]

but i cant screenshot it

it just goes away

[tame carbon]

Doesn't look like there's a line issue

checks out fine, ~9ms

@final pasture is the problem intermittened?

[final pasture]

???

i mean dont mind i play roblox

[tame carbon]

@final pasture do you know the server IP ?

if you ping that address directly, what does it report then?

[final pasture]

my laptop wasnt on for like 4months but before that everything was fine

[final pasture]

???

[peak cloak]

Its just Roblox

Roblox sucks

[tame carbon]

[final pasture]

heres other details

[peak cloak]

Try to traceroute to roblox.com

[final pasture]

i mean i have like 500gb storage

[tame carbon]

that is irrelevant

[final pasture]

what does that mean

[final pasture]

idk english that well

[peak cloak]

Literally what you just did

[tame carbon]

you did a traceroute already, but to 1.1.1.1 (cloudflare DNS)

[peak cloak]

tracert roblox.com

[final pasture]

ok

[tame carbon]

traceroute just shows us the path that your data takes

it helps with identifying where the lag is coming from

[final pasture]

bruh

it wasl like this to 16 and 17 is 127ms 127ms 127ms

[tame carbon]

chi1.he.net

isn't that in Chile?

[final pasture]

where

im form eu

[peak cloak]

Show it when finished

[final pasture]

BRuh

I CANt screenshot it that fast

[peak cloak]

Does it not just stay there

[final pasture]

it closes right away

[peak cloak]

Did you open cms first

[final pasture]

no

[peak cloak]

Then run traceroute

Yeah do that

Not in run

[final pasture]

it says its not recognized as file

interal command sorry

[peak cloak]

Open cmd

[final pasture]

how

i did

[peak cloak]

Ok

Then run tracert roblox.com

[tame carbon]

facepalm

chi1 is chicago

paris -> new york -> chicago

no wonder you get 120ms

[final pasture]

ok its working

[tame carbon]

its crossing the atlantic

[final pasture]

bruhhh i live in south eu

[tame carbon]

@final pasture look at the hostnames in the trace

they have the city-codes in it

[final pasture]

idk how to do that

[tame carbon]

look in that last screenshot you sent

you can see hop 9

that's in paris

then next router it hits, is on other side of atlantic

[final pasture]

but i dont live in paris

[tame carbon]

so latency goes up (this is normal)

@final pasture but the router routing your packets, is

Hop 1 is your router at home

[final pasture]

WTF I DONT Understand any of this

my router is fine

[tame carbon]

exactly

[final pasture]

ok

when im on ps4 my games run perfectly

[tame carbon]

@final pasture just to prevent you from getting confused: there's nothing wrong with your internet

all is working fine

[final pasture]

but how tf im getting 500ms

[tame carbon]

I was just explaining what that traceroute is showing you ;P

[tame carbon]

@peak cloak is roblox centralized?

or do people connect to a server?

[final pasture]

uhhh you just connect

[peak cloak]

No clue

[final pasture]

click play and

[peak cloak]

I don't think so tho

Like as in it has multiple servers

[final pasture]

you cant connect to the server, but the problem is 4mothns ago my roblox runed like perfectly smooth

[tame carbon]

@final pasture I think this is something on Roblox' end

[final pasture]

i can load up minecraft and see the ping

[tame carbon]

and not something you have any control over

[final pasture]

i think so

[tame carbon]

Your own internet checks out fine

its using HE's network, which is also fine

HurricaneElectric generally has very good reliability

[final pasture]

but tbh i was downloading something from internet its 4gb file but my speedownload was 50kbps

i tried from another site same file it was 20-25mbps

[tame carbon]

@final pasture mh hard to guess what that could be

without testing, we'd just be guessing

[final pasture]

ill try other games

it says i have 0 packet loss on google and 32 avg ms

but on roblox it says avrage 125

[peak cloak]

Yeah

[hollow marlin]

The issue is latency. Downloading single files at that high of latency will drop your speeds significantly depending on the latency to the site.

[final pasture]

ik

is this bad

[lone sun]

🤔 Never heard of Lifi before. Sounds like an interesting idea. Kind of like fiber technology that also uses light, except it'd be open air I guess. 🤷‍♂️

[low pond]

https://en.wikipedia.org/wiki/Li-Fi

[lone sun]

I think a wireless standard that utilizes both wifi and lifi would be best.

[thick minnow]

Think if i get a 350 foot ethernet cable and run it thru a small lake it will work?

Ofc having the plugs out of the water

Just the cable submerged

[low pond]

it would I think

[peak cloak]

I would use fiber

Corrosion resistant and future proof

Os3

[opaque stirrup]

anyone know how to hide local network devices from a ubuntu server and only allow traffic through wireguard ive tried this rule but it caused me issues like bad lag spikes and things not connecting properly ```#PostUp = iptables -I OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT && ip6tables -I OUTPUT ! -o %i -m mark ! --mark>
#PreDown = iptables -D OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT && ip6tables -D OUTPUT ! -o %i -m mark ! --mark>

[peak cloak]

So you want devices though wireguard to only be able to go to the internet

[opaque stirrup]

yeah so i run a minecraft server on it and the wireguard connection goes to a vps to hide my ip but if someone installs a dodgy plugin to the server it has access to my full network which is not ideal so that rule postUP makes all none wireguard ip addresses unreachable

[peak cloak]

So you want it to just have access to the server

Ok

Huh I'm not very good at iptables so idk

[opaque stirrup]

yeah i have iptables on the VPS set up to reroute any incoming traffic on certain ports to the wireguard client ip address

[tame carbon]

@opaque stirrup its routing packets

so a firewall rule would do

[unkempt lion]

well.... today is gonna be a fun one XD lost the password to my CA's key 😂

[tame carbon]

rip

[unkempt lion]

this is gonna suck big time.... time to reissue and trust a new CA cert 😂

[opaque stirrup]

but i dont know how

[tame carbon]

@opaque stirrup you have two networks right?

[peak cloak]

I don't think he does

[tame carbon]

just need an iptable rule with those filters, and then drop the traffic

[peak cloak]

as like in vlans or subnets

[tame carbon]

wait, between his wireguard server and client

[peak cloak]

ubuntu uses ufw

[tame carbon]

he doesn't use another subnet?

[opaque stirrup]

but if i drop the traffic then wireguard will go down

[peak cloak]

no

[tame carbon]

@peak cloak okay then use ufw

[peak cloak]

https://ubuntu.com/server/docs/security-firewall

[tame carbon]

ufw just modifies iptables

its no big deal

[peak cloak]

@opaque stirrup what is this? minecraft?

[opaque stirrup]

yeah

[peak cloak]

25565?

java

[tame carbon]

@opaque stirrup we've done this before lol

[opaque stirrup]

both

[tame carbon]

he needs NAT

[peak cloak]

ah

[peak cloak]

no?

he already has the tunnel setup

from what I see

[opaque stirrup]

the rule above that i sent works but it also drops the 127.0.0.1 traffic so everything takes a fit

[peak cloak]

just doesn't want the vps to be able to connect to any of the lan computers

[peak cloak]

yeah give me a sec

[tame carbon]

don't drop 127.0.0.1

[opaque stirrup]

i dont know linux networking

this is literally so simple on windows its 1 button lmao

[tame carbon]

no this is just networking in general

[peak cloak]

no it's not

this is networking

[peak cloak]

:doubt:

[tame carbon]

a button that is made for every scenario?

[tame carbon]

I wish

[opaque stirrup]

thats what i need

[thick minnow]

Pretty sure that 1 button hides layers of complexity,

[opaque stirrup]

all that button does is change this AllowedIPs = 0.0.0.0/0, ::/0

i do the same on linux and ip tables still routes in the background

[tame carbon]

That's on the server side, that only refers to the tunnel itself

what addresses can be reached by the client

0.0.0.0 means it can route out to anywhere

[opaque stirrup]

when i turn it off it shows this AllowedIPs = 0.0.0.0/1, 128.0.0.0/1, ::/1, 8000::/1

[tame carbon]

Yeah and I haven't a clue what that is

I need to see some configs

[opaque stirrup]

can someone write an iptables to drop 128.0.0.0/1 ?

[peak cloak]

ufw deny from wg0 to 192.168.1.1/24?

[tame carbon]

@peak cloak that's actually a bit more complicated

[opaque stirrup]

no its not just from wg0 its like i want the full ubuntu server unable to access my network

[peak cloak]

oh

[tame carbon]

@opaque stirrup where is the wg server

[peak cloak]

then that's not done on the server

[opaque stirrup]

the wg server is on a vps

[tame carbon]

ok and the client is what?

[opaque stirrup]

the ubuntu server in my house

is the client

[tame carbon]

you need to modify the fw on the client

[peak cloak]

so you want to be able to access it, but not allow the server to make connections to LAN

[opaque stirrup]

yeah

[peak cloak]

that would be done on a networking level

not on the server

[tame carbon]

and this ladies and gents, is why you buy a proper router

[peak cloak]

what you want is basically a DMZ or seperate subnet

I do that

[opaque stirrup]

yeah or just block the traffic altogether

[peak cloak]

where I isolate most of what I expose

[tame carbon]

technically you can do it on linux

with iptables you can do all of that

[peak cloak]

wdym

[opaque stirrup]

this rule worked though it just also removes 127.0.0.1
#PostUp = iptables -I OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT && ip6tables -I OUTPUT ! -o %i -m mark ! --mark>
#PreDown = iptables -D OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT && ip6tables -D OUTPUT ! -o %i -m mark ! --mark>

[peak cloak]

I configured it in a way that I can still ssh into the servers

but not the other way around

pretty simple

[tame carbon]

My VPN server is @ home

and my clients just get an IP on a different subnet, and there's no real fw in place between that and my LAN

[peak cloak]

why not put a fw in place?

[opaque stirrup]

is there a way to modify the rules above or add one after that allows the "lo" adapter to be used

[tame carbon]

Because I use it for remote access and management of my servers

[peak cloak]

just make it so you can access the servers

but they can't see your lan

[tame carbon]

what do you think my LAN is

[peak cloak]

wdym

[tame carbon]

I haven't really put any seperations on my local network

only really a DMZ for public range, and the Smart home devices

and wireless access

my servers each have their own public IP over a vlan, and another local IP on my lan

and then there's just a fw rule that prevents local traffic to these servers, from anywhere but the port that goes to my bedroom

and vpn

the key for which is on my laptop, encrypted as well

[opaque stirrup]

fixed it i think ```PostUp = iptables -I OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT && ip6tables -I OUTPUT ! -o %i -m mark ! --mark >
PostUP = iptables --append OUTPUT --protocol all --src 127.0.0.1 --dst 127.0.0.1 --jump ACCEPT
PreDown = iptables -D OUTPUT ! -o %i -m mark ! --mark $(wg show %i fwmark) -m addrtype ! --dst-type LOCAL -j REJECT && ip6tables -D OUTPUT ! -o %i -m mark ! --mark >
PreDown = iptables -D OUTPUT --protocol all --src 127.0.0.1 --dst 127.0.0.1 --jump ACCEPT

[hollow marlin]

Just create IPtables output rule of OUTPUT drop dst. [LAN-subnet]. This will block traffic to the LAN but allow incoming connections

[opaque stirrup]

is that it above because everything is running smooth now?

like this?/

iptables --append OUTPUT --protocol all --dst 192.168.1.0/24 --jump DROP

[hollow marlin]

Id have to brush back up on IPtables syntax but that'll work. Not sure why you have 127 rules because outside some specific scenarios it wouldn't be applicable

[opaque stirrup]

and iptables --append OUTPUT --protocol all --dst 192.168.0.0/24 --jump DROP since i have a double NAT

[opaque stirrup]

without the 127.0.0.1 rule the game done this https://streamable.com/93fu33

[tame carbon]

wat

reconnect

[opaque stirrup]

what?

this is with the https://streamable.com/lrjxx2 PostUP = iptables --append OUTPUT --protocol all --src 127.0.0.1 --dst 127.0.0.1 --jump ACCEPT

this would never have been an issue if i had managed switches and a decent router 😦

[thick minnow]

its going to be used for 2 weeks

and its only like 10 ft deep

[humble cloak]

u know that moment when the powerline adapters should work, but they just straight up dont

[tame carbon]

@humble cloak different phase

[opaque stirrup]

my tplink ones died after like a year of using them

[peak cloak]

typical

[humble cloak]

Oh no actually it does connect to each other, but it somehow won’t connect to the router

(All fritzbox)

To integrate it into the mesh network I need to press the WPS button on my 7590, but that model straight up don’t have one

okay so the wifi is my laptop, the first in the row (with the powerline next to it below the bridge) is the 1220E that is connected to the router via ethernet

but apparently it doesnt recognise that????

according to my router the 1220 straight up dont exist

[peak cloak]

you have 2 routers?

[humble cloak]

there is another powerline system in this house, so idk if im connected to that

no

[hollow marlin]

@tame carbon Cienas look so good when done right

[peak cloak]

what 1220

[humble cloak]

Fritz!Powerline 1220E

[peak cloak]

oh

[tame carbon]

@hollow marlin that looks beefy

[humble cloak]

does anyone know how i can check?

[tame carbon]

FRITZBOX

Ahhhh

[humble cloak]

(preferably without ripping the one out)

that other one is temporary there

[tame carbon]

@humble cloak you need to make sure both are on the same electrical phase

[humble cloak]

you mean like group?

[tame carbon]

well, some groups can be on the same phase

[humble cloak]

because they are on the same group lol

[tame carbon]

@humble cloak how many phases does the house have?

3

?

[humble cloak]

wait lemme check

All of em are connected to group 1

[tame carbon]

You got two phases ok

@humble cloak perhaps you need to pair them

[humble cloak]

yeah im getting an internet connection (somehow) when i pulled the other set out of the plug

as im connected to this network and can keep talking

but it should automatically take over all the mesh network settings

[tame carbon]

@humble cloak wait you have multiple?

that.. doesn't always fly

[humble cloak]

currently there are two different brands, a tp-link and the aforementioned fritzbox

but we want wifi in both my sleeping room and in the garden

(this ethernet is kinda cursed ngl, first it goes with powerline to the shed, then with a PoE injector to the camera)

[humble cloak]

so that means one set of 1220E + 1260E + 1260E

[glacial geyser]

I'm in a pickle rn. I am moving and I have a choice of two ISPs (Comcast and Starlink). I HATE comcast with a passion, but since starlink is in beta, it is not certain if I could get my dish right away. What would you recomend? Drop the 500 bucks and get the dish asap? or get a short plan for comcast then switch to starlink?

[rocky badge]

@clear igloo This guy in another server is getting 3.2Gbps on 5G UWB

[clear igloo]

Nice

[viral glade]

can anyone here explain to me why i have 100+ ms in discord and csgo but when i speedtest i get 41 ping ?

[lean pebble]

What?!? 😱

[peak cloak]

getting the dish I wouldn't really worry about I think

I would worry more about service disruptions

fyi the dish actually costs around 1500

they subsidize the cost tho

I'm really into spaceflight so ik all this

[glacial geyser]

So do I pay them the 500 or do they refund me the other grand or so

[peak cloak]

no for you it's 500

[glacial geyser]

Oh the parts cost is what they pay

[peak cloak]

I'm talking manufacturing costs

because the tech is so advanced

also apparently from other starlink users you prob want to get your own router

and you need to setup everything up yourself

[glacial geyser]

Thats ok with me, I mainly am frsutrated as I cant get a phone call to ask about all them about all this stuff

[peak cloak]

tesla and therefore starlink aren't very good with pr I heard

[glacial geyser]

I would have to wait. I know it is already Mid 2021

[peak cloak]

where do you live?

[glacial geyser]

America

[peak cloak]

general area

[glacial geyser]

Southwest

[peak cloak]

huh, the south should have pretty descent starlink coverage

[glacial geyser]

I mainly need to drop the money for it, but I have to get into the place first. Wheras with Corruptcast, I can get service in a week tops

[peak cloak]

yeah

[glacial geyser]

I have the 500 sitting there, but the wait is hard

Plus I am paying the bill for 5 people

[peak cloak]

spacex is REALLY rapidly launching them

almost all of their launches rn are starlink

it's like

[glacial geyser]

They just launched a bunch a few days ago

[peak cloak]

another starlink, urgh

yeah

this is pretty cool

https://satellitemap.space/

soonish we will have 2 other competiters

oneweb

and kuiper

[glacial geyser]

Its a tough descison I gotta make

because I dont want to keep them waiting

[peak cloak]

yeah

[peak cloak]

how long is the comcast service contract

[glacial geyser]

About a year.

Idk if they do month to month

[tender hazel]

If you have other options that are reasonable cost and bandwidth, you shouldn't use starlink

[lost barn]

Im looking to buy an openWRT gigabit router for my house, can anyone recommend one?

[tender hazel]

you can consider getting a mikrotik that is supported by openWRT

you would have the choice of running routeros or openwrt on it

[dusk saddle]

Is GNS that much better than PT?

[hollow marlin]

PT is a simulator, GNS is an emulator. For beginners, PT is great. But if you want a realistic lab, GNS or EVE-NG is where its at

[peak cloak]

do you need openWRT?

[waxen scroll]

@hollow marlin dont lab shame

[hollow marlin]

Screw labbing, straight to production

[waxen scroll]

i got some LOLs

[plain siren]

Production is just another name for "Balls out testing"

[little schooner]

Why test first when you can fix later? 😆

[neon fiber]

looking to bridge to homes within 1 km direct sight what should i get? i was looking at ubiquiti in the past

[peak cloak]

ik mikrotik has some products but I'm a complete noob with wireless p2p

[plain siren]

its basically a Mesh'd AP over a really long distance. Same config as you normally would

[peak cloak]

what about 50ghz I saw

[thorny vector]

Just built a python dynamic proxy that changes its ports based on an OTP process 😄

[lost barn]

I just want to make sure that stuff like DyDNS works and that there is a good interface. Both of those things are in openWRT

so technically, no but it might be nice.

[peak cloak]

mikrotik devices are nice but the OS can be pretty intimidating for newbies

but it's very powerful

[little schooner]

@peak cloak I got intimidated by it at first. setting up vlans was the hardest thing to understand

it worked different from say net gear or ubnt switch

I think it is still setup as software only I never changed it over to asic

I just wanted it to work for the cameras and forget about it

[keen ember]

What are the benefits of a managed network switch

[flat wagon]

Guys I was about to buy 3 of these and then I noticed it said "(U.S version)" but it's selling on the Canadian Amazon: https://www.amazon.ca/dp/B07ZG515K1/ref=cm_sw_r_cp_api_glc_i_F7HRP9TRF66NF91Z381A

Will this not work in Canada?

[keen ember]

Is there a Canadian version I’m in the us so I can’t test

[tender hazel]

@flat wagon yes they will work in Canada

The US version has country settings for the us and canada, no other countries

[flat wagon]

Okay, thank you.

[tender hazel]

it is common for distributors in the US and Canada to mainly offer the US version because there are a lot more people interested in buying product between US and Canada than with other countries, and the US version works in both countries - the international version is not officially permitted to be sold to customers in the US

we are a distributor in canada and we normally order and sell the US versions as a result

[rigid vault]

What’s the best cat for a Ethernet???

[tender hazel]

this one

[rigid vault]

Ok

Being serious I got a broken cat 5 and I’m looking and theirs cat6,7,8,9. Which is best

[tender hazel]

if your network interface is only 1Gbps and the run isn't super long, you are fine with cat5e even.. or you could get cat6

[thick minnow]

i use cat 5e, its super cheap and good

[rigid vault]

Kk ty

[tender hazel]

you're best to save money and not go overkill on the cable.. unless it is 10G ethernet and/or incredibly long

[thick minnow]

speaking how i run everything at 1/2 a gig so i have headroom

[thick minnow]

yea

these days you can get cat5e for like 20$ for 200+ feet

[carmine moss]

Cat5e or cat6 tbh

[thick minnow]

Broken where? If your doing cables through your wall id pick something future proof

[lone sun]

Cat 6 or Cat 6A at a minimum if you're doing something heavy duty.

[flat wagon]

i love how you have that picture ready incase someone ever says the keywords "cat" and "ethernet"

[flat wagon]

If you're doing long runs then Cat8, it's what we did to our whole home

[lethal marlin]

my internet has been SUPER SLOW lately, is there any way of telling where the problem lies without physically checking?

[tame carbon]

slowest backup server in existence, it takes... roughly 30 seconds to connect via scp

sftp> df -h
    Size     Used    Avail   (root)    %Capacity
  36.2TB    8.2TB   28.0TB   28.0TB          22%

but plenty of capacity

some $host in $country

[low pond]

😂

kek

[peak cloak]

Allows you to use things like vlans, stp, and much more

[tame carbon]

L2 features

and L3

802.1q - VLANs
802.3ad - LAG (Link Aggregation)
IGMP Snooping
STP/RTSP/MSTP

list is quite large

[lean pebble]

Well I bet that the slowest backup server that exists is where I used to work...

Every rsync over ssh took over an 50 seconds to connect.
Let's not talk about the upload speed that was inside the same network... Every upload took about 30 minutes even if the file was only 1/2GB

[tame carbon]

:P

[smoky estuary]

I have been thinking of getting a router/access point to use as a way to connect a usb drive to my network and use as a cheap NAS but wanted to know if anyone has any recommendations?

This is what I have been looking at at the moment https://www.amazon.co.uk/dp/B01NAYG15H/

[rocky badge]

@clear igloo you've heard of laptop servers

but have you heard of laptop routers/firewalls

https://www.reddit.com/r/PFSENSE/comments/nhoxx8/pfsense_running_on_a_macbook_pro_with_two/

[clear igloo]

neat

[rocky badge]

Sell the macbook and use the money to get a used dell micro

[tame carbon]

should have desoldered the HAL sensor

@peak cloak https://www.youtube.com/watch?v=e48eYElm1R8

ASUS considers thermal pad dimensions to be a company secret

[waxen otter]

https://c.tenor.com/BiTi5dbhbbQAAAAM/ass-fingering.gif

[barren nova]

Who can i ask for some assitance and advice ragarding a Ubiqudi Sector and 2 dishes ?
just need some clarity

[tender hazel]

you should just ask and not ask who to ask

[umbral jolt]

I am planning to switch from Windows Server 2016 to Ubuntu what is the basic cost for each server?

[peak cloak]

ubuntu?

it's free

unless you want some enterprise features

like kernel livepatch

extended security maintence

some crypto modules

landscape manamgent

among other things

[tender hazel]

if this is to be a server for windows desktops you may not be able to do everything well enough with ubuntu alone

ex. with no active directory

in like a corporate setting

[peak cloak]

oh yeah if you want things like that, that's one the the few actual uses for windows server

[tender hazel]

I mean we use linux for everything we can

but for authentication for windows desktops we still need windows server

[peak cloak]

yeah ofc

[umbral jolt]

Thanks I run 3 Dell 710 server for sans backup.

I am also looking to replace my 3 enterasys C2G 124 - 48 switches I use end of life equipment since you can get them at a reasonable price. I am leaning toward Cisco since there is a lot of information on the net for set up. I really don't need 48 ports, 6 or 12 port would do. Do you have any suggestions?

[peak cloak]

I've seen here people recommend microtik. I'm not very versed in their switch lineup, but they are a good value I heard if you don't need cisco

[umbral jolt]

Would you know off hand if they are managed or not managed switch, I need manage switch to subnet my DNS?

[tender hazel]

they have new 48 port switch models

they are managed

[peak cloak]

subnet my DNS
?

[tender hazel]

there are models with and without PoE

[peak cloak]

vlans?

[umbral jolt]

Subnetting is the strategy used to partition a single physical network into more than one smaller logical sub-networks (subnets). Copy this off the internet. Hope this will help to understand subnetting.

[peak cloak]

yes ik what it is

just "subnetting dns" is what confuses me

what do you mean by that

[umbral jolt]

DNS is the ip address can be A B or C class.

[peak cloak]

ik what dns is

and we don't really use class subnetting anymore btw

[peak cloak]

and dns is what resolves a hostname to an ip, it's not an IP

[rocky badge]

I setup a S2S VPN between my UDMP and a USG I'm setting up at grandmother's place

She can only access my VMs VLAN and Home VLAN

[umbral jolt]

An example of a DNS is 192.168.0.1 Mask is 255.255.255.0

[peak cloak]

no

that's not dns

that's an ip

in CIDR notation that's 192.168.0.1/24

but that's not DNS

I think you don't understand what DNS is

do you mean DHCP?

dhcp assigns IPs automatically

[umbral jolt]

DNS, or the Domain Name System, translates domain names into IP addresses so users can easily navigate to sites on the Internet without having to memorize long, specific strings of numbers and letters.

[peak cloak]

yes ik what googling is

and ik what it is

I'm just trying to help you since what you said was incorrect

[umbral jolt]

I do get this confused from time to time with all these initials.

[peak cloak]

this is just an address

[glossy widget]

i need a new router, current asus RT-N56U isnt cutting it for wifi range throughout my house, the asus RT-AC88U seems to have a decent rep for range, recommendations without breaking the bank?

[tender hazel]

if you're having that problem with range, why replace your router?

your router is unlikely to be having the biggest impact on range

[copper rover]

Anyone know when the UniFi WiFi 6 (AX) AP Pros will be out?

I just see the Lite version

[rocky badge]

They're EA right now

[copper rover]

Beta

[rocky badge]

yup

[copper rover]

Ok, yeah, soon then. I have a client that wants to replace his existing Unifi APs. So he's holding out for the WiFi 6

About 20 APs he's looking to get for main corporate office and a few branch offices

Bet they will be hard to get

[rocky badge]

Yeah, they have a limit of 2 per customer

[tender hazel]

there will only likely be a small improvement over the old unifi APs

initial tests show that wifi6 is about 10-20% faster than ac for most users unless you are very very close to the AP

[rocky badge]

Haven't tested it but I'd like to see high density and multi device

not just throughput

[tender hazel]

new routeros v7 beta has built in letsencrypt certificate request, which is cool - except for it to work, you have to open www port 80 to the internet, which means that webfig is open to the planet to log into your router if they figure out the password

[peak cloak]

no dns challenge?

[tender hazel]

no

not yet anyway

it's not something I would feel comfortable using with the current implementation

I can script it so that it only opens port 80 until it renews the cert, then close it again

but I think for this to be done in a secure way they would need to have a way to open port 80 without allowing global webfig access

[peak cloak]

firewall to only allow webfig access on a certain interface(s)?

[rocky badge]

Oof, I haven’t used www certbot in a while lol

[tender hazel]

The issue is that when you open port 80 it opens webfig with it

[peak cloak]

oh rip

[tender hazel]

so if you open port 80 to your internet uplink then webfig is accessible there too

so unless you script it is encouraging people towards bad security practice

like the old "remote admin" ports you used to have for routers back in the days (and still do sometimes), but I would never trust such a thing

especially bad when it is a login page on port 80

[peak cloak]

yeah

[tender hazel]

normal www certbot has a "standalone" mode where it starts up a web server on port 80 that is just for certbot itself, that is secure enough

but there's no standalone mode on mikrotik, at least not yet - it only integrates with the built in webfig server on port 80

I mean I can write a script that enables a firewall rule to allow port 80 everywhere, runs letsencrypt renewal, and then disallows port 80 again.. but I would bet that many users less comfortable with mikrotik scripting would just open port 80 everywhere all the time to get letsencrypt working with no fuss

the attack surface is minimal if you are opening port 80 for like 15 seconds every week or so to update the cert

[copper rover]

It's not the throughout that matters to my client. He wants the lower latency and less chance of packet loss that WiFi6 provides over 5.

Basically a better Zoom experience with laptops

[eager lodge]

@peak cloak thanks for the lead on tp-link. stupidly, a $150 tp-link AP manages to outclass every other AP i've tried so far... and cover my entire bizarro-world house with a single AP in a central location

[peak cloak]

which one did you get?

[eager lodge]

I dunno why the hell no other AP was working. i tried several mesh systems, a couple ubiquiti offerings, several very expensive consumer-grade "gaming" routers with a bajillion antennae...

EAP620

[peak cloak]

ah

the new wifi 6 ones

[eager lodge]

ya, picked it up for $120

[tender hazel]

@copper rover seeing the above, have you considered TP-Link omada?

I mean I've been hearing great things about it for a long time

might be better going that route

[copper rover]

Well, he has a UniFi controller and UniFi switches. So, keeping it UniFi AP

Controller is just the app ran off a Linux VM

[eager lodge]

omada controller is the same btw, java app running on linux

except i run mine in docker

[peak cloak]

I don't even run a controller

I just have one AP

[eager lodge]

unifi has a neat ecosystem but man the hardware kinda sucks

[copper horizon]

second hand ruckus is love

[eager lodge]

im really curious to see how the tp-link router and controller handle having an OPNSense node between the LAN and router

[peak cloak]

OPNSense doeing what?

routing?

NAT?

[eager lodge]

transparent filter

[peak cloak]

depends what you are using it for

if it does nothing with IPs and routing it should be fine

[eager lodge]

that's what i figure, but black box software always concerns me when doing weird custom crap

[rocky badge]

I'm glad I got off of pfSense lol

[tender hazel]

what do you need a transparent filter for?

[eager lodge]

funsies.

[copper rover]

I'm not a fan of their UniFi Switches. I do like the EdgeSwitches though. And their APs are nice. That's all I can really say about Ubiquity

[eager lodge]

their aps are kinda so-so imo but to each their own

[copper rover]

Buggy. And why use Mongo DB? It's crap and easily corrupted. Such a pain

[tender hazel]

the mikrotik switches are a better bang for the buck than either the UniFi switch or EdgeSwitch

MongoDB is great at storing JSON

[copper rover]

My does Mikrotik have ass for UI?

I don't doubt the performance. But UI sucks

[tender hazel]

their UI is fine, IMO.. the issue is balancing UI and feature set

[copper rover]

Well, I didn't like having to configure a RouterBOARD. was a nightmare

[tender hazel]

because they focus on features and so they use the same UI used in RouterOS

ubiquiti takes a different approach

they write a new OS for each usage - ex. wireless, routers

[copper rover]

TBH, I'm not like the whole cloud forced approach that Ubiquity seems to be going to. They might yet piss me off to where I abandon them.

[tender hazel]

the nice thing about the ubiquiti approach is that you get a customized UI for each device you are working on

the bad thing is that you lose features and different teams at UBNT have to recreate the same functionality independently

[rocky badge]

on UniFi routers

fuck wrong reply

[rocky badge]

So glad they're dropping EdgeOS

UbiOS is doing the routing, then UbiOS runs containers with podman for the different applications (Network controller, Protect, etc)

The cloud keys, UDM(P), UXG, UNVR run UbiOS and its all running within podman

[copper rover]

I had to lookup what podman was. But from what I can gleam, it's basically a more secure method similar to Docker. Runs without root access

But that's all abstract from me. I guess UbiOS then is inherently more secure?

[rocky badge]

Cloud keys before UbiOS were plain Debian

and USG was EdgeOS with UniFi added on

UDM(P) introduced UbiOS

[copper rover]

So what's the AmpliFi Alien router run on?

[rocky badge]

I have no clue lol

[copper rover]

Because that looks like a sweet replacement for an Apple Airport

[rocky badge]

UniFi OS = UDMP management/etc

Its a podman container

So UniFi OS can be restarted without interrupting routing

Since routing is handled by UbiOS

[frozen cobalt]

Ok so small question:
I pay for a 5MB/s internet connection, but i get around 500KB/s download speeds. Is this totally normal? If so, why?

[tender hazel]

@frozen cobalt internet connection speeds are not in megabytes per second or kilobytes per second, but instead megabits per second or kilobits per second

i.e. there is a difference between MBps and Mbps (with lower case b), and same with KBps and Kbps (with lower case b)

[thick minnow]

Also, download speeds depend not only on your internet but also the speed of the server from which it is downloading

[low pond]

Theres more to that actually

[slow sparrow]

BROWHATHEFUCK

I just installed macOS catalina on a vm after hours of pain

building the iso from my sister's mac, then creating a vm, doing all the configs (the vmx file), and then waiting an hour for it to setup

and for xcode, it needs big sur

[thick minnow]

damn

[plain siren]

https://drive.google.com/drive/folders/16G1d_XnOOppaervgbi00isNpzprupvCT?usp=sharing ISO
https://drive.google.com/file/d/116Dm_X_QZJ5eGMuk7NVN_j2Rhk-oAZQB/view?usp=sharing VMDK (part 1)
https://drive.google.com/file/d/116Dm_X_QZJ5eGMuk7NVN_j2Rhk-oAZQB/view?usp=sharing VMDK (Part 2)

[slow sparrow]

oh shit thanks

but I forgot, as we speak, im updating the vm. I didn't try because I thought it wouldn't work with a vm

if it doesn't work, ik what do to 🙂

[short condor]

Hi guys! I am in need of some tips. I have a pfsense-box in my system consisting of a Mac mini Server that has a quad-core in it. My internet speed at home is 1000mb/1000mb up/down and it works great at those speeds without slowdown. I even get those speeds with my vpn-provider. BUT there is a problem. It isn’t rackmounted and it isn’t passively cooled or silent (like me Ubiquiti switch and key). So! I am looking for a rackmountable, 1u enclosed, passively cooled silent unit that will do speeds of 1000/1000 with and without whole-network-vpn turned on. ☺️

Worth noting. It does not need to have that performance with pfsense. I could also install opensense or similar.

[peak cloak]

Mikrotik?

Hex s can do gigabit

Idk about the vpn part tho

[short condor]

The VPN part is important. 😕

[lean pebble]

Hex s have vpn

[glossy widget]

@tender hazelcoz current router only has 280ft range, whereas the AC88U has 2500sqft range and specifically comes up as a leader for range, i've used a repeater in patchy areas but the signal is inconsistent, so thought a router with much better wifi range would suit

[rigid vault]

https://www.amazon.co.uk/UGREEN-Ethernet-Gigabit-High-Speed-Raspberry/dp/B00QV1F1C4/ref=sr_1_5_sspa?crid=3L4IIH2AJFWY2&dchild=1&keywords=cat7+ethernet+cable+3m&qid=1621700787&sprefix=cat7+%2Caps%2C195&sr=8-5-spons&psc=1&spLa=ZW5jcnlwdGVkUXVhbGlmaWVyPUExNldUMVFOUkxMTjIwJmVuY3J5cHRlZElkPUEwODAzMTEyM043RjkxWUFZNTdFNSZlbmNyeXB0ZWRBZElkPUEwMDEyNDM4MkxDWTJQM1A1VlU2UCZ3aWRnZXROYW1lPXNwX210ZiZhY3Rpb249Y2xpY2tSZWRpcmVjdCZkb05vdExvZ0NsaWNrPXRydWU=

is this a good Ethernet

for streaming/gaming

[clear igloo]

Well Cat7 isn't an official standard so you run the risk of getting crap quality cable

I personally prefer monoprice or cable matters for Cat6 or Cat6a cable but honestly even Cat5e that isn't CCA (copper clad aluminum) is fine for gigabit or 2.5Gb up to 100m

[tender hazel]

@glossy widget where are you getting those range figures from?

your old router is N-only and you might as well have an AC router these days, so it won't hurt to upgrade, but there probably won't be a huge difference in terms of range

[eager lodge]

There’s nothing wrong with mongodb. It’s a great tool. And mongodb is not “easily corrupted.”

[copper rover]

It is on dirty shutdown or when RAM is filled up.

Ask me how I know. -_-. Many hours of frustration dealing with that

[eager lodge]

Lol maybe ancient mongodb, or someone’s shitty fork of it.

[copper rover]

Possible, I don't know. I only know that UniFi Controller uses it

[eager lodge]

Omada also uses mongodb btw

[copper rover]

I've had Mongodb corrupted on both a Cloud Key and the Controller app running in a VM

[eager lodge]

And it sounds like they have mongodb misconfigured or they are running a really old version to conserve resources

[copper rover]

Possible. I've just have very bad experience with it so far

[eager lodge]

I’ve been running mongodb clusters in production environments for… man, it’s gotta be over ten years now. Most of the time when corruption happens it’s because someone disabled safety mechanisms to eek out a bit more performance

So I betcha that’s what’s happening

[copper rover]

Interesting

One thing I do like about the UniFi Controller is that I can export just the config file. It's portable between the Cloud Key, App run in Linux or Windows (Java). For the most part, the mongodb just hold historical and analytical data. I really don't need that for the Controller to function.

When it gets corrupted or I can't compact the database through the UI option, sometimes it's a lot easier to do a fresh install of the Controller and import the config.

[tender hazel]

the biggest mistake that I see made with mongodb is that people do not run the command manually to update the database after upgrading mongodb

then they do something like a distribution upgrade that brings them to an even newer mongodb and there is no way to get the old one back

[eager lodge]

Oof.

[tender hazel]

so then you have to jump through hoops to get your data back

[eager lodge]

This is why dolts shouldn’t be in charge of running production services

[tender hazel]

I find often people who encounter that issue blame mongodb for not doing that automatically

people get used to being able to type yum update or apt upgrade and assume it does everything for them

[copper rover]

That should be coded in by the dev, or at least provide documentation to do that if this is a sold platform and solution. If it's an in-house application, then yeah, that falls on the developer to maintain as well

[eager lodge]

Shouldn’t even be doing that in prod, should be rolling uodated images out to whatever hardware/cloud servers and following proper upgrade procedures for the service in question.

[rocky badge]

I believe the unifi network upgraded its bundled version of mongo recently, idrm. I saw a db upgrade notice in a release note

[eager lodge]

Automatic upgrades are a terrible idea, and the process is documented.

[copper rover]

I think that's true in general. My favorite was doing a VMWare vCenter upgrade on a Windows server (back before it's now a VM Applianc). Watching it bomb-out on a .NET framework error was epic. Leaves the whole thing in an indeterminate state.

Restore from backups baby!!

[eager lodge]

XD

[rocky badge]

I hate upgrading vcsa lol

[copper rover]

Yeah, it's scary. Russian roulette

[eager lodge]

What’s really fun is upgrading ESX only to find they dropped support for your networking hardware for no good reason

[rocky badge]

that's why i use broadcom or intel lol

[copper rover]

Yeah, and finding info from a compatibility matrix is a PITA.

[eager lodge]

Oh I had an intel card last time that bit me. Not even a super old one

Vmware is just dumb.

[copper rover]

It's a love hate relationship.

[eager lodge]

Indeed

[copper rover]

Love it for its features, performance, and optimized data storage. HATE it for all the riddled bugs

[rocky badge]

esxi 7 dropped support for an older driver package lol

so if it was built upon that, esxi 7 doesn't support it

[copper rover]

Oh, ESXi 6.7 and 7 really FUBARed the whole process of booting from SD cards. Treats it as USB storage. Now have to add in custom boot parameters.

[rocky badge]

(vmklinux)

https://blogs.vmware.com/vsphere/2019/04/what-is-the-impact-of-the-vmklinux-driver-stack-deprecation.html

[copper rover]

lol, smelly turd logo

[rocky badge]

I have one ESXi host on 7.0u2 and one on 6.7u3 lol

The only thing keeping the 6.7u3 one behind is the raid controller (PERC H310 Mini (for monolithics))

[eager lodge]

The real problem with esxi is they went and wrote their own kernel instead of using a customized Linux kernel, so they can’t benefit from the huge Linux driver base at all, they have to maintain their own drivers for everything under the sun

And with no open source community to help out they have to obsolete drivers to keep their engineers sane

[rocky badge]

I mean, for actual enterprise its not really an issue

[copper rover]

Do do they get with the vendor to write the drivers? Or they just do the drivers themselves based on vendor HW documentation?

[rocky badge]

Yes

You have different acceptance levels

[eager lodge]

It’s an issue for a lot of enterprise use-cases.

[rocky badge]

https://blob.rocks/W7XjpHdQOf.png

[copper rover]

I think I've had to install Dell VIBs on a PoweEdge for OMSA

[rocky badge]

Dell, HPE, etc all provide customized ESXi ISOs with their drivers and stuff injected

https://www.dell.com/support/kbdoc/en-us/000176963/dell-emc-customized-image-of-vmware-esxi-availability-and-download-instructions

https://www.hpe.com/us/en/servers/hpe-esxi.html

[copper rover]

Well, starting with 6.7 and/or 7, those ISOs are now hosted on VMWare.com, not the vendor's site

[rocky badge]

Yeah

https://blob.rocks/UgMEdAYsbe.png

[copper rover]

I might upgrade from 7 U1 to U2. No pressing need though

Can't do it through the Update manager. Will have to load the ISO directly. Oh well.

[tender hazel]

we have to update ours

[rocky badge]

Can't make your own software depot in vcenter?

[copper rover]

Yes, I can push it out that way

[rocky badge]

That's how I patched mine

[copper rover]

Or I can just mount through the iDRAC

[tender hazel]

running into issues where one intel nic will stop passing traffic, then the other one follows hours or days later

[rocky badge]

A lot of my nics are broadcom with some intel lol

[tender hazel]

we upgraded the firmware on the intel nics first to see what that does

[rocky badge]

mainly because broadcom is what's built into the lom/mezz slot

[copper rover]

Well, we had a similer issue only to find out it was because the failover port was on another switch. Because it wasn't stacked, it didn't share the MAC table. Caused all sorts of flapping back and forth. So basically, we have a primary port with the secondary only being used if the primary physically fails.

[tender hazel]

in our case they are plugged into two different switches, but the switches are stacked

[copper rover]

Are these X710 adapters?

[tender hazel]

yeah

40G dual port

two cards per server, each card has a port that we use for data and one that we use for iscsi

first we see on the HPE switch an alarm that the ports went down and came back up again immediately

for the iscsi and data port on one nic

it stops passing traffic and we see an alarm in vcenter for that host saying that it lost uplink redundancy

then hours or days later the second card loses connectivity in the same way and then we have to reboot it via the ILO to get everything up again

[copper rover]

Fiber or Twinax?

If fiber, maybe a transceiver issue? Intel NICs are pretty particular about which ones to use as I understand it

IMHO, twinax is the way to go if the servers are within the same cabinet

[tender hazel]

I doubt it is a transceiver issue

since both ports go down in the same nic at the same time

and it is fiber, multimode

[copper rover]

Yeah, in that case I agree. Something with the NIC

Time is money and all that. An expensive proposition, but perhaps get a new NIC with new transceivers and swap it out the server. Worse case, you now have spare parts. But, if it resolves the issue you know.

If that doesn't solve it, then clearly there's a firmware or driver level issue. That or the MB is dropping the PCIe card, but I doubt it would do that.

[tender hazel]

yeah, the four nics in the two servers are all doing it

[copper rover]

So yeah, firmware or a driver bug

[tender hazel]

they were running really old firmware, we just upgraded one a few days ago

[copper rover]

So better or worse after the upgrade?

[tender hazel]

don't know yet

nothing has happened yet

[copper rover]

🤞

[craggy osprey]

Hi! I am in need of network assistance

My issue: I have 1348mbps coming to the house. And cant seem to get over 930-940mbps, My cable is CAT6 (Despcription says it can handle 10gbps), And my motherboard is a Arorus z390 pro wifi (300series) mini itx

[clear igloo]

Unless you have 2.5Gbps or 10Gbps capable hardware across the entire chain, you're not getting over ~950Mbps because something in the chain is limited to gigabit speed

Also your motherboard only has a gigabit nic so not sure how you'll get higher anyway

[tender hazel]

yeah the motherboard only has 1Gbps NIC, and chances are the router only has 1Gbps ports

so even if you bought and installed a 2.5Gbps NIC in your PC you would still only get 1Gbps if the ports on your router are all only 1Gbps, as I would expect

[clear igloo]

Yup

[tender hazel]

Usually when ISPs give >1Gbps packages, it isn't with the expectation that a single wired computer would use it, but instead what it would do is for multi-user households where you have perhaps a few systems wired in and some people on wireless, the sum total of all bandwidth the group of users could use all at once is 1350Mbps

so for instance other people or devices could be using 350Mbps on your wireless and you would still get a full 1Gbps on your wired connection

[copper rover]

^

[craggy osprey]

Oooo okay lol well then I thought my motherboard was capable

I guess I’ll cancel the technician then

[tame carbon]

cable rating (CAT) only really refers to the speed and range its been certified for.

the network interface negotiates on the best available speed

need compatible cards to support 2.5 or 10G

[craggy osprey]

So all I need to do is get a network card thing that can support it?

[tender hazel]

no, probably your router only has 1Gbps ports

[ornate jungle]

Depends entirely on all networking equipment along each link of the network. What modem model do you have? Is there a router or switch in the mix, and if so, what are their model numbers?

[copper rover]

I don't get it. With 2.5 and 5gig adapters being discussed, why not just push with volume and go right to 10gig?

Seems logical to just keep with the rate of 10 / 100 / 1000/ and 10000

[craggy osprey]

the modem is one they supply, it is the xfinity modem

[ornate jungle]

Because many ISPs don't have the infrastructure to jump straight from 1gig to 10gig within "the last mile" to residential customer homes. Technically DOCSIS 3.1/4.0 support 10gig down, but all the equipment between the ISP's headend and neighborhoods must have capacity too, even for Fiber connections.
https://en.wikipedia.org/wiki/DOCSIS#Comparison

[ornate jungle]

Which one? Xfinity offers multiple modems. Do you have the newest XB7 or slightly older XB6 modem? You'll need the newest XB7 modem as it's the model with ONE ethernet port capable of 2.5gig link speeds. If you have this, then all you need is a 2.5gig capable PCIe network card for your PC. https://www.xfinity.com/support/articles/broadband-gateways-userguides

[tender hazel]

it's probably not worth the hassle just for an extra 350Mbps

you'll only notice the difference if you are downloading something that is massive, and even then 1Gbps is quite fast

[copper rover]

No, I mean beyond ISP. Why has the computing industry decided to mess with 2.5 and 5 adapters? Can 10gig switches even downstep to 2.5 and 5 per port?

[ornate jungle]

Ohhh you meant the industry as a whole. That I'm not 100% certain of, but I'd guess it's because there's a enough of a cost different when stepping up to 10gig that it makes sense to offer 2.5gig and 5gig options for prosumers who don't want/need to jump straight to 10gig.

[copper rover]

The only thing I can think of is that chip fabrication hasn't reached a low cost point enough where 10gig adapters becomes more consumer friendly option. But I'd worry 2.5 and 5 adapters would fragment the market due to a corresponding switch being needed as well. Just prolongs the adoption of 10 gig in the consumer space IMHO

[tender hazel]

doing 10G over copper requires a pretty flawless cable link

otherwise it won't be likely to negotiate at 10G

[copper rover]

Sure, but best-effort would be better than a hard gimp to 2.5

[tender hazel]

unless things start moving to PCs with built in SFP+ interfaces instead of copper ethernet ports

[copper rover]

SFP+ just allows for different interfaces. But the underlying NIC chip wouldn't change. So I can't see how that would help the consumer.

Enterprise, yeah, RJ45, fiber, twinax..

[tender hazel]

currently the 10G copper interfaces cost twice as much as the 2.5G copper interfaces

actually more than twice as much

switches and routers have for the most part made the jump directly from 1Gbps to 10Gbps

[copper rover]

https://www.intel.com/content/www/us/en/products/sku/211808/intel-ethernet-network-adapter-i225t1/specifications.html

60 bucks

[tender hazel]

it's mostly network cards that seem to have taken this path through 2.5Gbps on the way

[copper rover]

Is it part of the 10gig spec of a switch to step down to 2.5 or 5? Or if you plugged in a 2.5 NIC to a 10 gig switch, would that step down to 1 gig?

[tender hazel]

@copper rover what you just linked to says "Gigabit Ethernet Adapters (up to 2.5GbE)"

if you plug a 2.5Gbps NIC into a 10G switch, it should negotiate 2.5Gbps on the port

[copper rover]

Ok, I wasn't sure if it would

[tender hazel]

yeah it should in just about any case

as long as the 10G switch is reasonably new

I mean if you are using like one of the very first models to come out from many years ago

then I wouldn't necessarily count on it to negotiate down to 2.5Gbps properly

b/c I recall that the 10G copper spec came out before the 2.5G and 5G copper rates were added

[copper rover]

Well, I ask because I don't see any 2.5gig switches

[tender hazel]

yeah, there aren't any

for something like a switch it wouldn't make sense

[copper rover]

WTF, I must be blind. I can't find any Intel 2.5gig adapters. I see specifications for the I225-T1

[tender hazel]

my asus board has an intel 1Gbps adapter and a realtek 2.5Gbps

[copper rover]

Yeah, I see plenty of realtek

Thinking Intel never made the card??

[rocky badge]

https://ark.intel.com/content/www/us/en/ark/products/series/2469/gigabit-ethernet-controllers-up-to-2-5gbe.html

[copper rover]

Right. So where's the physical card?

[rocky badge]

They're chipsets/controllers

[tender hazel]

most people buying switches are buying for business use - and most business computers only have 1Gbps cards

[rocky badge]

That motherboard manufacturers can use

[copper rover]

So OEM market then?

Crap

Was looking for an actual PCIe card

[tender hazel]

I think the only reason that 2.5Gbps and 5Gbps are a thing are because people are getting >1Gbps connections at home and want to be able to use the full rate, but the motherboard manufacturers want to keep costs down because if they start building 10Gbps ports into the board and it raises the cost by $50 over the competition

[copper rover]

https://www.intel.in/content/www/in/en/products/network-io/ethernet/gigabit-adapters/ethernet-network-adapter-i225-t1.html

They have a picture of one

[tender hazel]

so it is really more of a consumer thing

[copper rover]

Oh, 1Q of 21...so that..like now

[rocky badge]

nbase-t is also on wifi 6 APs that don't have 10 gig

That's like the only place I've seen nbase-t tho....

besides consumer stuff lol

[copper rover]

I wonder if legit, because it's not even on cdw.com

https://www.directdial.com/us/item/intel-ethernet-network-adapter-i225-t1/i225t1

Fresh out of the oven it would seem

Pricey bastard at $64

[tender hazel]

it makes sense for an AP that can do >1Gbps theoretically but can't hit 10Gbps

to use 2.5Gbps or whatever

[copper rover]

Yeah, especially for high density APs

[tender hazel]

but making 2.5Gbps switches is not likely something that is going to happen, because those technologies have pretty much standardized on 1Gbps and 10Gbps, and it doesn't make sense to develop a 2.5Gbps model when the market for such a thing would be limited - it is easier to use existing chipsets to have a mostly 1Gbps switch with a few 10Gbps ports for the odd 2.5/5/10G device

it's a completely different ballgame to create a switch chip than it is to create an individual interface

[rocky badge]

There's some 2.5gig switches but they're, again, mainly used for the 2.5 gig aps lol

https://www.cisco.com/c/en/us/solutions/enterprise-networks/catalyst-multigigabit-switching/index.html

https://www.arubanetworks.com/products/multi-gigabit-ethernet/

[tender hazel]

I'm pretty sure the aruba switches are only 10G

I don't think they have 2.5/5G switches

[rocky badge]

https://www.arubanetworks.com/products/switches/access/2930m-series/

"Smart Rate"

[tender hazel]

ahh interesting

so basically they have two different models with 24x5G ports for APs

most likely the only reason they exist is because of PoE

I haven't really seen any 10G PoE switches because there isn't a need for PoE on 10G ports

but for wifi6 APs, you still want to use PoE to power them

so it is a relatively niche thing then

[rocky badge]

only crazy APs with 10 gig lol

[tender hazel]

I haven't had to deal with any of that stuff

we only provide like 10Mbps to most of our customers

so not being able to go above 1Gbps on an AP doesn't usually matter so much for our customer base

[hollow marlin]

Juniper 4300-48MP has 10gig PoE. 24 are 1/2.5/5/10 and 24 are just gig. All full PoE support

[thorny vector]

Just added a bit of history to my lab. Might be one of the oldest pieces of hardware I have, but she look guuud

[tender hazel]

@hollow marlin ahh ok.. not really familiar with Juniper's product line

[hollow marlin]

Outside that single model/version that's the only one I know of. Fairly new as well. I doubt many more exist. I'm pretty sure I remember it targeting the up coming trend of PoE in switches now that wattage is high enough

[copper rover]

I think that very server processed one my Google searches in the past 😉

[thorny vector]

Ever since I’ve started a homelab, I’ve wanted a google server, no matter what. Plus, was able to beef it up to 72gb of ram with just sticks I had lying around, so she’ll still do some work.

[copper rover]

That looks like a Dell PowerEdge. Or maybe the same chassis manufacture that makes those make a modified version for Google?

[tender hazel]

72GB is pretty good - I have 64GB in my home desktop

[thorny vector]

R710. Literally, no major changes I can see.

[copper rover]

So a real R710? I wonder if Google in-house painted them yellow

Or is that a powder coat?

[thorny vector]

My desktop is still my most powerful single host with 128gb. And I think they had a non-standard configuration with it, I don’t remember my other r710 I had having these particular pcie expansion cards. And yeah, powder coat.

[tender hazel]

Google might have had Dell make them specifically customized with that color scheme

what's a powder coat?

[thorny vector]

Like paint, but instead of a liquid, it’s a powder that’s cured under heat or uv

[copper rover]

^

[tender hazel]

ahh ok

[copper rover]

Clings to the object via static

So the powder out the nozzle is charged

[rocky badge]

They're R710 OEMs

[copper rover]

Much better finish

[tender hazel]

oh I didn't realize Dell offered standardized OEM stuff

[copper rover]

Well....if you have pockets as deep as Google, I'm sure even Dell would make an exception for a very large contract

[rocky badge]

https://www.dell.com/support/home/en-us/product-support/servicetag/0-a1BrR1MxaXdpenRneGFOeHBmUndwZz090/overview

https://www.ebay.com/itm/283722910233?hash=item420f340a19:g:CcoAAOSwwxFbciXY&autorefresh=true

https://blob.rocks/Hxe1vjiAWH.png

https://blob.rocks/wStaCFJJ9h.png

[thorny vector]

Yeah, managed to get this one locally because I guess the guy didn’t see how much you can mark up the google branded stuff

150 bucks

[copper rover]

I didn't think there was much of a markup. From Google's perspective, it's decommissioned equipment making rack room for new stuff.

And, they don't want to deal with EOLed stuff

[thorny vector]

But the middle men know people like me will pay extra for the branding, lol

[copper rover]

Sure. I mean there's certainly some nostalgia factor there.

[thorny vector]

Also, just found the google front bezel on eBay for 35 bucks, scoooore

[copper rover]

https://www.servermonkey.com/

[flat wagon]

Guys, what's the max length an AOC network cable at its full theoretical speeds?

I bought a 100FT AOC cable for my 10G networking upgrade and just curious about it's max length.

[ocean pivot]

100m

[flat wagon]

okay, thank you.

[tame carbon]

@flat wagon AOC's dont have limits, they are rated for the given lengths they come as

speed is irrelevant with fiber, its just the module that decides that

[sacred harbor]

Hi there, i have problems with my Ethernet.
My ethernet port is 1gbps.
My cable is Cat5e.
But i am only able to pull 60mbps.
Can anybody help me?

[flat wagon]

kk, thank you crystal! :D

[tame carbon]

@sacred harbor what kind of internet plan do you have?

[sacred harbor]

idk how to check

[flat wagon]

.

u probs got 60mbps then

even if ur port is 1gbps

doesn't mean ur gonna get that without the plan

[sacred harbor]

but where can i check my plan

[flat wagon]

probs by logging in on your ISP website

[tame carbon]

... well aren't you paying for this?

[sacred harbor]

no, it was my dad paying for it

[tame carbon]

@sacred harbor ethernet is either 100M or gigabit speed, but this has no merit on the actual speed if your internet is only, say.. 60mbit/s

Gigabit ethernet just means, that the computer and router themselves can transfer at gigabit speed

but your internet connection will likely be much less than that

[sacred harbor]

how do i check my plan without my dads account

[flat wagon]

u rlly cant

tbh

[tame carbon]

Well, you just did, didn't you?

~60mbit/s

[flat wagon]

he did a speed test

[tame carbon]

if that's what speedtest is telling you

[sacred harbor]

yes

[tame carbon]

yeah, so you got 60mbit/s

[flat wagon]

but he's asking a way to check directly from his isp

somehow without logging in

which u cant rlly do

[tame carbon]

You'd have to ask what plan you guys are paying for

furthermore, often the advertised speeds are not the actual speeds

[sacred harbor]

ask who

[flat wagon]

ur dad

[tame carbon]

^

[sacred harbor]

my dad died 2 weeks ago

[tame carbon]

Oh, my condolensces

[sacred harbor]

thats why im asking how to do it without his account

[sacred harbor]

thanks

[tame carbon]

Contact the service provider

They would have to terminate the account, or have it transferred

[sacred harbor]

also is it weird that my Ethernet has the name of my WiFi, bc downstairs on my dads pc its just named Ethernet

[tame carbon]

local dns name

[sacred harbor]

ok

[tame carbon]

@sacred harbor with 60mbit/s you are at least in the speed range that is "good enough"

I was on 4mbit/s for many many years

that's not even enough for HD youtube

[sacred harbor]

oh wow i was able to login with my dads account

thank god for autofill

[flat wagon]

it should say somewhere on there

cant rlly tell u where exactly since diff isp have diff website layouts

[sacred harbor]

its on Proximus

i cant find it

just checked, my plan is Flex S and its 100mbps

the thing im confused about is that the ethernet downstairs is 1gbps

[flat wagon]

no ok so basically as crystal said

[sacred harbor]

but where did my other 40mbps go

[flat wagon]

I'll word it differently but basically your equipment supports 1GBPS throughput. meaning, if you had the plan for it from your ISP, your equipment can sustain speeds at the maximum of 1gbps

[thick minnow]

Well, there is also the added factor that it depends on the servers it connects to

Also

[thick minnow]

^

[flat wagon]

and if you're on cooper running 100mbps instead of fiber, you probably won't get full 100MBPS. also, other devices on your home network may be saturating the 40MBPS

it's not a 100MBPS per device if that's what ur thinking

it's 100mbps for your whole home

so it has to share with all your devices

[sacred harbor]

ok

thanks for the help

[flat wagon]

np

[tame carbon]

@sacred harbor those link speeds, 100M and 1Gbit, those are the connections between your network devices locally

[dull mirage]

i want to protect my server... I have there webserver... With A record? Any way to make it secure... So no one can see ip or ping through cloudflare?

[tame carbon]

the upstream connection from your router to your ISP is often far less, you said you have a 100mbit plan, chances are they can't even deliver those speeds

or contact the provider, call them, and ask

@dull mirage wat. you need an IP, for people to connect to