networking

[lean pebble]

My l2tp VPN just stopped working properly after the last mtik upgrade

[molten eagle]

i need help, im trying to port forward and the username and password wasn't working, so i reset my router to the default settings, now every time i paste my ip into the address bar is says "You don't have authorisation to view this page"

[thick minnow]

Are you sure you're connecting to the routers ip address?

Since you reset it, it could've changed

[molten eagle]

how do i know

[thick minnow]

What ip address are you inputting now?

Most roputers default to 192.168.1.1 or 192.168.0.1

[molten eagle]

just the one from api.ipify

[thick minnow]

Try these

[molten eagle]

ok thanks it works

[grave rune]

What is a good 24 Port pos switch with sfp plus

And is the dream machine pro a good one gig router

[cedar igloo]

Anyone know if you can have more than one dswitch on each interface in vSphere? My server only has 6 network ports, and I am needing about 10 dswitches. Is there a way to give each dswitch a vlan trunk? Say dswitch0 has vlan 1-500 and dswitch1 has vlan 501-1000 using the same upstream interface

[tame carbon]

https://thehackernews.com/2021/05/over-25-of-tor-exit-relays-are-spying.html?m=1

[tidal frost]

So if i setup wireguard or something similar on a raspi/home server whatever. What does that get me in terms of outside access? Will it be essentially full control over any device on that network (as if i were home) or what?

I feel like thats a super luln00b question so sorry

[low pond]

Only if you port forward the VPN so it can be accessible publicky, yes

[lean pebble]

I fixed my home vpn 😁

[thick minnow]

Yay, congrats

[south blade]

man, what justification does Suddenlink/Altice has for increasing my internet bill by $20

And they're taking off channels and services to boot! LOL

[rocky badge]

They probably lost a contract or something

Plus using isp provided email is meh

[south blade]

I hadn't used their emails, but like what a slap in the face increasing the price at the same time they tell you they're removing a service. LOL

[autumn scarab]

anyone wanna play valornt now

[tame carbon]

#networking

also, bad game

[low pond]

Yes and yes

xD

[undone basin]

This may be a stupid question but is there a way to port forward securely without opening network to hackers or the world?

[rare echo]

Imagine forwarding all ports for cod mw and still having strict nat 😴

[undone basin]

Lol

[rare echo]

Like nat is worst thing ever

[undone basin]

Agreed

[clear igloo]

No, games that need you to open ports manually or (worse) enable UPNP are the worst thing ever

NAT in itself is fine, it's crappy games with lazy developers who don't code for it properly that causes problems, CG-NAT on the other hand is a whole other bundle of trouble

[rare echo]

Bruh all they have to do is make only open nat type able to host

[clear igloo]

There is no such thing as open nat/moderate nat/strict nat that's literally bullshit terminology made up by game devs, it's not an actual thing

CG-NAT is a whole different ball of wax too when your region has beyond exhausted public IPv4 addresses and they put you behind a double nat, you have no control over that and while it can be gotten around by proper development some game devs don't care

[little schooner]

@south blade well are you really surprised? it's in their name, suddenlink, to suddenly increase the bill on their customers at moments notice

[rocky badge]

Also promo credit, did you do something recently?

like first year promo pricing

[peak cloak]

Cgnat is fine

Only if you have ipv6

Done correctly too

Like at least a /56

Not just a /64

[clear igloo]

Yah, that's usually the problem, doing IPv6 right as well 😛

[peak cloak]

Idk if it was real, but I read something where an isp only gave one ipv6 address

[clear igloo]

that's more on mobile I think

[peak cloak]

Which defeats the whole purpose of v6 lol

[peak cloak]

Well on mobile makes sense

But it was a residential connection

[clear igloo]

that sounds like a possibility or was done early on in a roll out (I hope)

[low pond]

I actually believe it was in India

Not sure, I think even I've heard of that they'd give one v6 per household, because it can be used for abuse if ya gave a whole /64 was their reasoning

[peak cloak]

wut lol

IIRC it's literally recommended by the internet standard to give a /48 (maybe something smaller, not 100% sure tho) per a residential customer

[clear igloo]

I think it's a /32 minimum for each ISP and then a /48 to each customer per ARIN iirc

RIPE leaves it up to the end ISP or LIR but suggests n x /64 but not beyond a /48 per end site

[peak cloak]

I feel like the smallest subnet for ipv6 is too big

like

no one will ever use all those addresses in one LAN

[clear igloo]

It's down to the standards mostly

Neighbor discovery, privacy extensions, etc as part of the RFCs for IPv6

[rocky badge]

I know for Comcast at least

/48 is business, /56 is residential

[peak cloak]

that's fair

[clear igloo]

plus you have android with it's inability to comprehend DHCPv6 for SOME reason and anything smaller than a /64 used will not work with slaac

[peak cloak]

yep

if you have only one /64

[clear igloo]

shakes fist in rage

[peak cloak]

can't really subnet

[rocky badge]

[peak cloak]

to keep support for SLAAC and such

[clear igloo]

But yah, for most people a /64 is beyond any number of addresses they'll ever need for a lan

[clear igloo]

yah

[peak cloak]

who would use a /64

in one LAN

[clear igloo]

robots, lots and lots of nano robots 😛

[rocky badge]

IPv6 Christmas tree

http://ipv6tree.bitnet.be/

[peak cloak]

one address per light

[rocky badge]

*per pixel

*per hex color

[peak cloak]

oh

lol

wow

[rocky badge]

X Y coords and hex RGB values

[clear igloo]

I heard once that there are enough IPv6 address to cover the world in nanites a meter or something deep and give each of them 3 IPv6 addresses

[rocky badge]

Update 2020-01-17:
Ok, that actually took longer than expected... We were happily processing 96Mpps earlier today...
Then suddenly we got a call from our uplink provider... They were actually amused to see 180Gbit/s of ICMPv6 traffic...
They were not so pleased however with the saturated backbone links in 3 European countries...
Not sure when/if we'll be back. Stay tuned...
Please shut down the botnets and try to keep it fun for everyone...

it used to be an outdoor LED display

One segment of the IPv6 was X, other was Y, then RGB lol

[peak cloak]

oh people boted it lol

[rare echo]

Quick question if 2 ports are next to each other is it the same to open on the lower and close on the higher instead of fowarding both ports separately

[thorny vector]

@rare echo Most of the time, same thing

[south blade]

LOL, no, we've been jumping through hoops, changing who pays to get "new subscriber" pricing every once in a while, I've been paying for it since 2018. It jumped from this when I put it under my name, to $90.68 starting 2019 after the promo pricing, this $20 increase is just cause they can.

[rocky badge]

lol

[green forge]

i did pi hole today and my router wont let me set it as the dns so then i dont have to manually go to every device and change it in the settings, and to cover ethernet pcs too. How do i make it work?

[tender hazel]

get a better router instead of using TP-Link

[wild wren]

How do I get my ISP to upgrade the node in the area? They're overselling bandwidth and it goes from 50Mbps to 4Mbps during peak usage hours

[tender hazel]

@wild wren I'm guessing you're in Australia

[wild wren]

USA

[livid marsh]

sooo fun question how can i set my godaddy domain to point to a my no-ip ddns server?

[wild wren]

Change the dns server on your domain name

?

[livid marsh]

i set it to cname but the server on the end says invalid ip

[wild wren]

ehhhhhhh idk then

i haven't done dns stuff in like 10 years =\

[livid marsh]

thats good they are a pain

[wild wren]

i used to run my own hosting service

but i stopped doing that when i was 15-16

and haven't touched it since

[livid marsh]

how was that?

[wild wren]

I sold my "business" for $1,000

The guy who bought it, turned it into something decent and sold it for $50,000

And it's still active I think

[livid marsh]

nice!!

[wild wren]

https://www.semoweb.com/

Yeah, here it is

[livid marsh]

thats cool!!

[wild wren]

It has nothing to do with the name anymore though lol

SEMO = Southeast Missouri (where i'm from) and I used it to market toward local businesses.

Obviously they got nothing for that

https://www.whtop.com/review/semoweb.com

Here are some reviews lol

[livid marsh]

oh shit XD

thats pretty bad

[plain siren]

https://www.godaddy.com/community/Managing-Domains/Dynamic-DNS-Updates/td-p/7862

The post is DynDNS with No-IP With Godaddy

[wild wren]

Yeah Dustin the guy I sold the business too had 0 idea about running a webhosting business. He just wanted the business side of it.

[plain siren]

But, tbh, imho there is better ways to do Dynamic DNS with a Dynamic Residential IP

[livid marsh]

how would you recommend doing it?

[plain siren]

Do you use your ISP's router/gateway?

[livid marsh]

yes

[plain siren]

$mydomain = "YOUR DOMAIN HERE: example is like mydomain.com"
$myhostname = "your Hostname/subdomain like ww" so if you do www it will point www.mydomain.com to your IP"
$gdapikey = "api_key:key_secret"

$myip = Invoke-RestMethod -Uri "https://api.ipify.org"
$dnsdata = Invoke-RestMethod "https://api.godaddy.com/v1/domains/$($mydomain)/records/A/$($myhostname)" -Headers @{ Authorization = "sso-key $($gdapikey)" }
$gdip = $dnsdata.data
Write-Output "$(Get-Date -Format 'u') - Current External IP is $($myip), GoDaddy DNS IP is $($gdip)"

If ( $gpid -ne $myip) {
  Write-Output "IP has changed!! Updating on GoDaddy"
  Invoke-RestMethod -Method PUT -Uri "https://api.godaddy.com/v1/domains/$($mydomain)/records/A/$($myhostname)" -Headers @{ Authorization = "sso-key $($gdapikey)" } -ContentType "application/json" -Body "[{`"data`": `"$($myip)`"}]";
}
``` This is a Powershell Script you could ask to Task Scheduler that will use the GoDaddy API to update your record.

https://developer.godaddy.com/keys < Get API Key here

So no reason to use a "no-ip" service

[livid marsh]

so (idk this stuff well) for the new api key what enviorment should i use? and have it run on task schedular on login?

[plain siren]

Production

[low pond]

Oh, we call that Cron Job in the GNU Land

[livid marsh]

so it will run daily and update the ip every day?

[low pond]

if thats what the script does yea,

that thing almost sets a cron job is what we call that in linux but yeah, it will run the script every time depending on the intervals you have set it

[lean pebble]

Is this windows or my imagination? Last time I saw this window was at 2010

[livid marsh]

it needs to be a ps1 file correct?

(im used to making .bat's lol)

[lean pebble]

I guess it should be ps1 it looks like powershell script

Did you put domain on dynamic IP on cloudflare?

[plain siren]

Yes, its a .ps1

[livid marsh]

no its on godaddy

and thank you!

[plain siren]

Yeah I got a Bash Script exactly like that one thats for Cron

[livid marsh]

that is much better than going from domain to no ip to router XD

[low pond]

hey stop fanboying winshit cron job is what we call it

😠

[plain siren]

If he was running linux I wouldve given him a cron job

[low pond]

you use winshit

[plain siren]

#!/bin/bash

mydomain="domain"
myhostname="subdomain"
gdapikey="api_key:key_secret"
logdest="local7.info"

myip=`curl -s "https://api.ip-if-y.org"`
dnsdata=`curl -s -X GET -H "Authorization: sso-key ${gdapikey}" "https://api.godaddy.com/v1/domains/${mydomain}/records/A/${myhostname}"`
gdip=`echo $dnsdata | cut -d ',' -f 1 | tr -d '"' | cut -d ":" -f 2`
echo "`date '+%Y-%m-%d %H:%M:%S'` - Current External IP is $myip, GoDaddy DNS IP is $gdip"

if [ "$gdip" != "$myip" -a "$myip" != "" ]; then
  echo "IP has changed!! Updating on GoDaddy"
  curl -s -X PUT "https://api.godaddy.com/v1/domains/${mydomain}/records/A/${myhostname}" -H "Authorization: sso-key ${gdapikey}" -H "Content-Type: application/json" -d "[{\"data\": \"${myip}\"}]"
  logger -p $logdest "Changed IP on ${hostname}.${mydomain} from ${gdip} to ${myip}"
fi

[low pond]

oh

[lean pebble]

I don't like godaddy xD they "accidentally" changed one of my costumers dns from cloudflare to their own DNS back and then all of her website was down for 12 hours

[livid marsh]

Dumb question

is there a way to have it run everything time it cant ping amazon? XD

WELL

nvm

ignore that

IM TO TIRED

wait i can set it to run like every 15 min

that works

thank you! @plain siren works great!

[thick minnow]

GNU? Nay, it shall be Linux/Linux

[lean pebble]

UNIX

[tender hazel]

@lean pebble I would imagine for people who make costumes for others to dress up in, a website being down for that length of time would be a big issue, especially around Halloween

[thick minnow]

/s

[lean pebble]

We couldn't do anything because godaddy name servers was down so the change not worked

She called them and they said they have an issue the their servers and it'll take time to fi x

[tender hazel]

It was a joke - I think you meant customers not costumers

[lean pebble]

yeah

xD

my bad

[plain siren]

GoDaddy is literally trash

[tender hazel]

Customers are clients of a business. Costumers make outfits for Halloween and other similar things

[thick minnow]

Reminds me of James Veitch

[lean pebble]

She act like a clown

[tender hazel]

hehe

@thick minnow I assume you mean those ted talks where the guy responds to scammers

[lean pebble]

Her developer once tried to run cron from the server and fucked up all of her server because this crown took all the memory and tried to export data by the domain that behind cloudflare and from the db by the same time.
I woke up at 4am because of her to fix this idiot mistakes

[thick minnow]

Yes

Tho he does have his own seperate channel

[tender hazel]

yup those are hilarious

I haven’t seen his stuff aside from that

[lean pebble]

My dog sniffing around xD

[livid marsh]

any idea why task scheduler wont run it? even when i hit run?

the script works tho

[plain siren]

For the "Program" to run, its "powershell.exe" and in "Add arguments" you add -FILE C:\Users\Me\Documents\DynamicDNS.ps1

[livid marsh]

ahhhhhhhhhhhhhhhhhh

OK

so as a basic task it opens powershell but closes right after and dose nothing

create a ordnary task. dose nothing

it only works if i right click and say Run with powershell

Same thing on a diff pc

[plain siren]

Set-ExecutionPolicy -ExecutionPolicy Bypass -Scope LocalMachine in Powershell as admin, I think this is needed for it to run from Task Sched

[livid marsh]

Pain..

[plain siren]

Yeah sadly, but you should only need to run it once

[livid marsh]

Same thing

[plain siren]

Yeah I made a mistake

[livid marsh]

If I just open it as a .ps1 it just opens and closes is all

[plain siren]

Add -ExecutionPolicy Bypass to the Arguments before -File

[livid marsh]

Hard to do this useing rdp on my phone lol

[plain siren]

Btw the task wont keep the powershell windows up

Itll close it as soon as its done

[livid marsh]

-ExecutionPolicy Bypass -File (file) ?

[plain siren]

ye

[plain siren]

remove -FILE *

Since were adding the diff args

I just tested it, its working on 2 machines for me now

[livid marsh]

Same thing

Open and close

Didn't run the script

[plain siren]

that... shouldve ran

[livid marsh]

whenever I open file it dose the same thing but only runs it if I right click and run as a powershell

.. do I need to add a run to the start of the script? XD

[plain siren]

AH Change the user it runs as to SYSTEM

If your user has spaces in it, add " " around the Script Location

[low pond]

house,

can you tell a quick tool softraid for winshit

[plain siren]

Storage Spaces, or just

[livid marsh]

Wdym? Like I the script?

[plain siren]

Right click the Task, Properties

"Change User or Group"

and "Run with the Highest privleges"

[livid marsh]

And dose not even open lol

Some reason if it's not a basic task it won't even open

At this point I might as well just use a looping script and just set it to run every 15 min lol

[plain siren]

Kek

Or stick it in your Startup folder

[livid marsh]

That too

[low pond]

and restart the machine every 15 mins

:v

[livid marsh]

Stick the repeating script in the startup

perfect

Restart ever 15 min xD

As it takes that long to start up the servers xD

[low pond]

Buy a raspberry pi make a cron job thats it let the rpi run 24/7

[plain siren]

Install-Module ps2exe
Invoke-ps2exe .\source.ps1 .\target.exe

Hehehe

[livid marsh]

I got one running the pieos thing

[low pond]

Ya gotta show love to PS's package manager

[plain siren]

Although uh, tbh, Your IP should not change UNLESS you restart the router

[livid marsh]

Idk our dam is changes it every 2 weeks xD restarts itself I guess at like 2am

[low pond]

Then

[plain siren]

whos your ISP?

[low pond]

you don't need to run the cron often

[livid marsh]

Centrylink

[low pond]

ah yes lovely single-home L3

[livid marsh]

Tbh I can't complain its gig fiber xD

[low pond]

gig fiber to L3's crappy network

[livid marsh]

I can live with the ip changes

[plain siren]

Ah yeah, Fucking Century Link, if you pay $15 you get a Static Single IP

[livid marsh]

15 a month?

[plain siren]

I think its $5/mth after

[livid marsh]

Ffs

[low pond]

when you realize a VPS on the cloud that too fron DO/Linode is same

[plain siren]

IPv4 is expensive as all hell

[low pond]

Pretty much 😛

Also uh doesn;t the godaddy API have a limit on how often ya can access it

[plain siren]

I dont even offer my customers IPv4 unless they require it/request it

[low pond]

hello mr rouing sir i need to access discord thank you.

😐

[primal ice]

H.E. tunnels

[plain siren]

NAT64 Is what I usually provide

[low pond]

wait so your customers do have v4 transit right

I taught you said it's single v6 only.

[plain siren]

Yes, just not direct

[low pond]

Ah alright

Discord is v4 only, so yea 😛

[livid marsh]

Looks like the api limit is 1 a second so I'll be fine lol

[low pond]

not bad at all wow

thats almost a heartbeat, 1 second

why would anyone wanna update that fast :v but whatever

[livid marsh]

I'll lrb do like 1 every 5 tbh

[plain siren]

I give a /48 v6 Block to each customer

[livid marsh]

Every 5 min*

[low pond]

you got /32 to your ASN or somethign else

[plain siren]

Ye

[low pond]

ah alright decent

[plain siren]

I mean I doubt customers will use 65536 Subnets but

[livid marsh]

Well thanks for the script though! I can just put it in a looping powershell script tommarow lol I got one on my work pc

[plain siren]

I guess they could use /52 Subnets and have 16 of them

heh

[low pond]

i doubt they will use "30" "/128"'s 😛

But i guess /64 - residental is how it works

[plain siren]

An IPv6 Subnet is /64 Minimum Sized

[low pond]

Summerhosts: lemme stop you there with a /66 an /80 blocks

[plain siren]

The last 64 Bits is generated from the MAC Addr of the Host

[low pond]

Ah yea

my IP 1a83:c8c1:da85:e8ef:9f10

i removed the prefixes till /48

wait wtf

yea

[low pond]

that is after /64

my /48 ALWAYS stays same.

but /64 gets dynamicaly allocated when i bonk the router off and on

[plain siren]

I have my prefixes setup to match the VLAN ID

[low pond]

i wonder if my isp does some allocation like that

there. its re annoucned 1623, in my case, and that statys staitc for me always, no matter how much times i bonk the router

[flat wagon]

s

[plain siren]

Yeah, you usually have a Prefix assigned to you and from there you do Router Advertising

And each device will just see the Prefix avail in the Router Advert and pick an IPv6 Addr (After checking it isnt taken) by itself

No need for DHCP

[low pond]

so my stuff uses SLAAC

or DHCPv6 stuff

[primal ice]

probably slaac

[plain siren]

SLAAC + DHCPv6 is also sometimes used

DHCPv6 only to carry DNS and DHCP Option, it wont be used to assign Addresses

[low pond]

I don;t know how this works <harold>

[plain siren]

Well that isnt going to detect SLAAC properly tbh

[low pond]

Yea true

let me see if my router has something respective to that

Heh Rouing, see this!

the "::1" of the /64 subnet, guess who took it?

My damn router 😆

[plain siren]

Yeah thats usually the case

[low pond]

Well it tries to host it on 80, but i guess my ISP doesn't allow that, so it doesnt go thru anywya, but I can access it from my end 😆

its on "auto detection" :/

v4 is on PPPoE

[plain siren]

Auto Configuration would be the "Router Advertisement" or the "Proper" way of doing it

6RD Is if your ISP isnt fully IPv6 Native yet, which in your case should be

[low pond]

wait is a tunnel or something

oh 6to4 stuff

[primal ice]

ipv6 over ipv4

[plain siren]

6RD

The Hurricane Electric tunnel is 6to4

[primal ice]

what I am doing. 2 ipv4 endpoints

[low pond]

thats interesting

[tame carbon]

NAT-444 all the things

[low pond]

😆

Make a NAT of the NAt of the NAT of the NATTED'D NAT

😂

[tame carbon]

Still 30% less evil than NAT-666

[primal ice]

my H.E. tunnel is almost as fast as my native ipv4

[low pond]

mine is probably very very bad

so im happy with my native v6

[tame carbon]

I get 0.2ms extra latency on v6

but

GeoIP is broken

[plain siren]

My IPv6 is 1ms faster latency wise

[tame carbon]

No point in me using v6, if all these services decide to region lock me

Looking at you: netflix

[low pond]

ping -6 took like damn 15 seconds to resolve on my terminal ffs why

ANd yes, my ping to hetzner.com in v6 is 118 ms, v4 is like 122ms

so a bit faster on v6 at least

[lean pebble]

I get higher latency with he 6to4 tunnel ipv6 to my server in Germany and to google I get 50ms extra while using he tunnel so I disabled it.

[plain siren]

Thats normal because you are tunneled to HE first before you get your IPv6

[lean pebble]

Ok little annoying since everything got slower when enabling it

[plain siren]

You could set windows to prefer IPv4

Since if you have IPv6 itll use that wherever possible

that way the IPv6 tunnel is just for IPv6 Only Services

[lean pebble]

My ISP can't provide ipv6 if I'm paying for static ipv4

😆

[lean pebble]

I'm on Linux and lazy to configure every device to prefer v4

[plain siren]

edit /etc/gai.conf

Uncomment

# For sites which prefer IPv4 connections change the last line to

#precedence ::ffff:0:0/96 100

[thick minnow]

nano

[plain siren]

LOL WOT

[lean pebble]

Yeah I know that I can do that but I have more than 6 devices to do it.

[plain siren]

Actually not "WOT" I know what the fuck they are doing

[low pond]

isp's around the world are crazy

its a different expeirnce per country :P

[lean pebble]

If you want ipv6 you must have dynamic ipv4

This is pretty damn stupid since we have other ISPs here that provides both

[plain siren]

They have their "DHCP" Profile, which is Dynamic IPv4/v6 that gets assigned to customers, and they only know how to configure IPv6 to only work on that single "Profile" and cant figure out how to cut off a few subnets for Static use

Either that, or they are using 6rd

Which is prob more likely

6rd would require an IPv4

[lean pebble]

I don't care to have dynamic ipv6 but not ipv4

[plain siren]

Ipv4 is slowly dissapearing anyways

[lean pebble]

Easier to remember

[plain siren]

Except 1 problem

We are officially out of IPv4 addresses.

[lean pebble]

Ik

[plain siren]

Any new service/server is only having IPv6

And providers are having IPv4 Blocks revoked from them in order to push the industry to deprecate v4

[lean pebble]

A friend that they took some subnets from 10.0.0/ something to be external IP address (ripe, apnic, ianna ) I think

[low pond]

they should rather snatch it from DoD but they aren't

[plain siren]

DoD Is giving them up

[low pond]

like, giving it away?

[plain siren]

But anything that is revoked/taken is not being reissued

[low pond]

Oh.

Bad.

[plain siren]

Good tbh

We dont want to enable the providers to keep on legacy network numbering.

And NAT is trash

[low pond]

Actually that's true.

XD

[low pond]

b-bu

b-b-b-b but SIR

NAT of NATTED NAT'S NAT of of NAT'ed NAT is so cool :c

[lean pebble]

Starlink?

[low pond]

xDDD

[plain siren]

Your IPv6 Addr on your device is literally publically routable. You just need to open the Firewall on that particular IP

And bang, public IP.

No need for port forwarding

[lean pebble]

That's cool

But of I want only one port to be public?

🤔

[plain siren]

Open firewall for that 1 port

[low pond]

Also House, if you think Erina's condition also sucks, I know one guy who's ISP didn't give v6. He told from the ISP's managent that they force business to buy v4 so they can use RDP and shit, because well I think that's somehow related, they didn't give v6 because it'd be dedicated to each computer and the ISP got no profit.

[lean pebble]

Regular

[plain siren]

Yeah just a normal open port

[lean pebble]

Ok

[plain siren]

NAT just allows 1 Public IP Addr to be used with many personal devices. So it splits up the IP's ports to these many machines behind it. Thats why you have to port forward, so the public IP + Port translates to the private IP + Port

Well, if every device has its OWN Public IP, no need to do any port translation

[lean pebble]

https://www.peeringdb.com/net/1014
This is my lovely ISP

[plain siren]

Just open the firewall for said IP, and bang its exposed

[low pond]

LAMEOOOO

[lean pebble]

Yeah I know ipv4 port forwarding I learned networking but never used v6 because we don't have it here

[low pond]

erina what is your isp

blocking visitors from other counties

so rude

[lean pebble]

I learned it at 2017

Lol

BEZEQINT

[low pond]

what a name

just bash your head in the keyboard

[lean pebble]

Just use vpn from your hetzner server

😆

[plain siren]

The cool thing about V6 is that you get 2 IP Addresses, 1 "Device" Static Address which usually doesnt change, and 1 "Temp" IP

The Temp IP is used for Internet Browsing and such and is changed every so often to protect your IP

[lean pebble]

Nice

Can I buy ipv6 subnet and make my ISP advertise it to my router ?

[plain siren]

You can actually ask your ISP if they will announce your IP's

[lean pebble]

Or I can just set it up on my end and bum it'll work

[low pond]

that's why windows has "Temporary IPv6"

[plain siren]

A ton of them will

[low pond]

for now, my laptop only ha sa single v6

yep, under wlp3s0, a fe80 address and a 2001

[plain siren]

Yeet

[low pond]

xD

[lean pebble]

My ISP is stupid I had issues with surfing and downloading files so they replaced my IP

My windows vm had at least 7 ipv6

3 ipv6 and 4 temp

[plain siren]

The fe80 is the "LAN" Ipv6

[lean pebble]

With out it

[plain siren]

I usually disable Temp IPv6 Addresses on my devices

[lean pebble]

Why

You do it on every device manually?

[plain siren]

Awh nah

GPO or Config Management Server

It applies it to all my devices

[lean pebble]

Oh

[low pond]

whats even the fe80 anywya

its not local v6

it never works

:>>>>>>

[flat wagon]

time to go 100G, boys

[plain siren]

Its meant to facilitate the connection between you and the router for RA/IP Assignment

in most cases, Routers will isolate fe80 addr's between clients

[low pond]

im on my own laptop itself

it should've just loaded

its hosted on this machine itself :>

but no it just doenst work

why no local v6 :>

becuz link local is something else

[low pond]

how

how

[plain siren]

Whatever you are running locally is not using yoru Link Local address to expose itself

[low pond]

actually

[salifrt@salifrt-x556urk ~]$ ping fe80::5f32:e1fd:fed3:efbd
PING fe80::5f32:e1fd:fed3:efbd(fe80::5f32:e1fd:fed3:efbd) 56 data bytes

its not going thru

[grand flume]

when your local internet doesn't even support IPv6

[dark elbow]

will i get lower ping in games like valorant if i get faster wifi

[low pond]

Nope.

Ping doesn't work that way

[lean pebble]

haha my ISP finally providing IPv6 even if you have static IPv4

[low pond]

Wtf? all iin just few seconds

bruh

[lean pebble]

But I need to wait until they'll get to my account and update it

I hope one day I'll get to pay them 0$ (without canceling my account) 😂 every month I'm calling to ask about fiber and same answer but they get my bill down each time

[hollow marlin]

You need to specify the interface when you ping link-locals else it will fail

[low pond]

Oh

[little schooner]

Is it wrong to expect Wake-on-Lan to function as intended if the computers are connected to a switch that has 802.1X computer authentication configured? If I need to send a magic packet from an online computer with a 802.1X VLAN-assigned IP address, should it be able to reach and power on the offline computer that didn't do 802.1X authentication yet?

[thick minnow]

#skeelz lmao im not surprised for some reason but that takes some low end hardware to not support ipv6

[grand flume]

Shelter after all

[plain siren]

It should work since WOL Magic Packets are L2

They dont operate over TCP/IP

Similar to how DHCP Works

You just need your Switches/Router to broadcast the packets

[little schooner]

ahh okay

ty ty

[shell hamlet]

does anyone know if cloudflare proxies traffic for ex. minecraft? or if it's only http/https?

if only http/https, then how would i go about protecting my origin ip for a subdomain on minecraft?

[peak cloak]

It doesn't proxy like http does

However just recently cloudflare made Argo tunnels free

[lean pebble]

Really?
Free free or free for 5gb?

[peak cloak]

Free for 5gb prob

[lean pebble]

Ah

[plain siren]

Cloudflare does offer Spectrum for Minecraft

[low pond]

Spectrrum? :P

[plain siren]

https://www.cloudflare.com/products/cloudflare-spectrum/minecraft/

[lean pebble]

Yeah with limited 5gb traffic to I think

Last time I checked

[plain siren]

Spectrum is Cloudflares TCP/UDP Proxy basically

[lean pebble]

I proxied my old Minecraft server without spectrum on cf

[peak cloak]

For free?

[plain siren]

No

[lean pebble]

From pro package

Free for 5gb

[plain siren]

You can ditch Bungee and use an rProxy like Traefik now to have subdomains point to a MC Server Instance

Which is cool

[lean pebble]

Subdomains always were possible I think

[peak cloak]

Yes

[lean pebble]

Just point a record to your subdomain for Minecraft and it'll work

[shell hamlet]

free is 5gb and pro is inf?

[lean pebble]

No you pay for pro

[shell hamlet]

yea ik

[peak cloak]

Or if you want on one ip, just use srv records

[shell hamlet]

exposes origin

[lean pebble]

And have 5gb spectrum for free

[peak cloak]

Mc respects that

[shell hamlet]

mc respects that?

wdym

[peak cloak]

Ik, but I'm talking about the subdomain thing

[plain siren]

Yes but not over the same port through NAT

[peak cloak]

Not to you

[lean pebble]

I used a record with srv to proxy my mc server with cf

[plain siren]

Traefik will allow 1 IP with 25565 to point to multiple MC Servers with Subdomains

[peak cloak]

How would that work with traffic?

[lean pebble]

It worked perfectly fine before spectrum

[peak cloak]

*traefik

[shell hamlet]

but that's what i have, a srv record but it doesn't proxy

[lean pebble]

Before spectrum today I don't know if it still works or not

[peak cloak]

It's not like http where the requested hostname is in the packet @plain siren

[peak cloak]

Yeah which makes sense

[plain siren]

It does SNI now

So yes it does work

[peak cloak]

Sni?

Interesting

[lean pebble]

BTW you can proxy Minecraft server with nginx because it's TCP

[peak cloak]

Yes

[plain siren]

Traefik is NGINX

[peak cloak]

But not with multiple severs

[plain siren]

Thats literally what we are doing, multiple servers

1 IP, 1 Port

[lean pebble]

You can do multiple servers I think

[peak cloak]

Never knew about sni

Mc protocol supports it?

[plain siren]

SNI is how your Rproxy/LB knows which Subdomain/domain you are requesting

[lean pebble]

1 IP 1 port to all of the servers ?

🤔

[plain siren]

Yup, it does IP:25565 > RProxy (Traefik) and depending on the Domain + Subdomain, itll redirect you to a specific MC Server

[lean pebble]

Ok

[low pond]

MC already on it's level of sides has a load balancer like this (plugins, Bungeecord), I guess doing this in the network level is a bit... ehhhhhh

[lean pebble]

I misunderstood each server have it's own IP address with the default port

[plain siren]

Yeah, you would have each server have its normal Private IP + Normal Port, and that would be how Traefik finds the MC Server

[lean pebble]

Ya ya ok

I thought something else 😅

One server with a bunch of mc servers that have same IP and same port

[plain siren]

Similar to this but add more MC Servers

[lean pebble]

Ok I understand now

[tame carbon]

@plain siren Minecraft doesn't have a hostname reference when connecting

[peak cloak]

That's that I thought

[tame carbon]

https://i.imgur.com/l0AAkab.png

There's no hostname

Its not like HTTP/1.1 where the client sends along the hostname that was used

@peak cloak the way this is done with those cheap-ish cloud hosters

they use SRV records

and multiple ports

[peak cloak]

Yeah

[low pond]

Don't they use different "sub domains" but same 25565 ports? I'm pretty sure that's how they did it

[tame carbon]

@low pond no, they create an SRV record, all the subdomains point to the same IP

and the A records for say minecraft1.example.com would point to the same IP.

then you have another record, SRV on _minecraft._tcp which points to 25565

[plain siren]

traefik.tcp.routers.minecraft.rule=HostSNI(`homemc1.ardoin.me`) Works for me

[tame carbon]

This is strange.

[plain siren]

homemc1,homemc2,remotemc1,remotemc2 internally is how I have it setup, 4 Servers on a raspi

[tame carbon]

How does the protocol do this then

[plain siren]

Dockerized each

Fuck if I know, I just know it works

Never did really look too far into it after that

[tame carbon]

SRV records.

SRV>

I was right.

[plain siren]

I dont gots SRV Records tho

Only an A + CNAMEs

[tame carbon]

then how the fuck

Mh

Bungeecord has this feature as well

[plain siren]

Thinking about it, i was asking the same thing at first, but I never did jack around to find out the change log that added this overlooked shit

[tame carbon]

It must be a protocol spec then

[low pond]

What's exactly going on here 😆

[tame carbon]

Its just

stupid. I've questioned this before

never got a clear answer

@plain siren DERP

https://i.imgur.com/iodsLUp.png

[lean pebble]

1 sub domain that point to 4 servers with the same port 🤔

[tame carbon]

Its just part of the spec.

https://wiki.vg/Protocol#Handshake

[plain siren]

Its the handshake huh

Yeet

[tame carbon]

@plain siren ah, so the confusion comes from this: The Notchian server does not use this information.

Vanilla MC does not use this

But the protocol can do it

[peak cloak]

Ah fun

Interesting

[tame carbon]

https://i.imgur.com/ocz3yOJ.png

Odd. this information is not even on the Bungee API

[peak cloak]

Love undocumented stuff

[tame carbon]

@peak cloak the minecraft protocol is pretty well documented

[peak cloak]

Ik

I was joking

[tame carbon]

https://wiki.vg/Main_Page

[peak cloak]

Like

Geysermc is insane tbh

[tame carbon]

@peak cloak oh damn

https://i.imgur.com/c77w0Sm.png

getVirtualHost()

https://ci.md-5.net/job/BungeeCord/ws/api/target/apidocs/net/md_5/bungee/api/connection/PendingConnection.html

So yeah, it can do it

[plain siren]

https://github.com/MohistMC/Mohist I need to try this

[tame carbon]

@plain siren Cauldron is cool

I've used this before when hosting Tekkit servers, back in 2015

[plain siren]

Cauldron was the shit

[glacial hedge]

I have no idea

[peak cloak]

what are you trying to do

[glacial hedge]

Connect wifi

[peak cloak]

wifi?

[glacial hedge]

I only have this

[peak cloak]

what's a phone cable?

not wifi lol

[glacial hedge]

I think its a rj11 dsl cable

[peak cloak]

yeah

[glacial hedge]

But my house only have this hole

[plain siren]

Pretty sure thats to feed Telecom service to inside your house

[tame carbon]

I just threw up

[thick minnow]

Need a tissue?

[tame carbon]

Why are there loose ends on the cable

and does it look like it has just been ripped out?

[thick minnow]

Apple just did this btw, for their Home stuff: https://imgs.xkcd.com/comics/standards.png

[tame carbon]

http://harmful.cat-v.org/software/operating-systems/linux/audio-mess.png

thats 2008, status update: anno 2021: situation has only gotten worse, but support has been improved

[low pond]

pulseaudio gang

[tame carbon]

^

and I use JACK for my Focusrite

just for that card

it has a pulseaudio frontend

but. I am afraid I have to re-do the entire hours and hours of configuration and painful googling, reading documentation, looking at kernel source code

to get this working on my old ubuntu 16 install

I hate ALSA.

Its nice, but so difficult to configure

[low pond]

one of my friends using gentuu uses that JACC

I mean, okay imma be honest I REALLY dont know the differences o fthes

i just know they exist.

Like X11/Wayland

systemd/openrc

other stuff like that

[thick minnow]

What about Pipewire?

[tame carbon]

jack gives you pluggable control over your input/output

[low pond]

actually not sure 😛

[tame carbon]

and it has lower latency than pulse

[low pond]

Ah, I've heard the latency stuff

[tame carbon]

https://mintguide.org/wp-content/uploads/posts/2015-12/1450164990_jack-connecting_alsa.png

[low pond]

I guess I do use pulse afterall

[tame carbon]

JACK basically plugs directly ontop of ALSA

[low pond]

how to change it anyway

[tame carbon]

and doesn't run its own sound engine

less code

less latency

it has virtual devices

which are emulated in software by the kernel, and jack partly

You can even use these things side by side

Pulse and JACK

[low pond]

mmmmmm

but do i need to change to JACK

you see, i actually needed a requirement

i wanted mp3 to play, DIRECTLY onto a virutal MIC

so i can well, use it in a discord clal and just switch the mic's on my software side itself

sadly i didnt get enough resources and didnt do it correctly

[tame carbon]

I've used pulse to configure a home radio server lol

MPD -> Pulse -> Icecast2

https://www.musicpd.org/

https://icecast.org/

then you can just use various open source clients for desktop, tablet, phone whatever to connect to MPD

and search your library, queue songs and such

my friend had this also, but he had it even nicer

where, he had during a big house party, and all the rooms, playing the same music xD

anyone could go on the wifi network, and queue songs

no more arguing of what song is played

[low pond]

wha

[peak cloak]

you talked about this before

[tame carbon]

ye

[peak cloak]

but was it just a website

[tame carbon]

MPD frontends look like this: http://ario-player.sourceforge.net/images/ario-main.png

[peak cloak]

how was it presented to the client

[tame carbon]

Yeah

Ario Player

That's the only one I know of

there's many

I use MPDroid on my phone

[peak cloak]

so people needed to download an app

[tame carbon]

punch in the local address

and it brings it up

I'm sure there's web interfaces too

https://i.imgur.com/WT3hRHR.png

Plenty.

https://i.imgur.com/7kbdcVa.png

[peak cloak]

link?

[tame carbon]

https://www.musicpd.org/clients/

[peak cloak]

thx

[tame carbon]

Its basically a headless music player

if you set up the source and drain in pulseaudio

drain normally is output on your sound card

but could also be icecast, which turns it into a webstream

which is just a url you can tune into with those Ethernet capable hi-fi things

quite a few of them support internet radio these days

@peak cloak oh, archwiki says

Do this if you dont need icecast: https://wiki.archlinux.org/title/Music_Player_Daemon/Tips_and_tricks#HTTP_streaming

it just allows only 1 stream

which makes the whole premise kinda pointless

icecast can handle thousands of streams at same time

[lean pebble]

Yesterday my ISP told me that they can give me ipv6 even that I have static ipv4 and today they can't 😂

[low pond]

@plain siren look ^

[plain siren]

Id rather have Static IPv6 Personally hehe

Use NAT64 https://docs.microsoft.com/en-us/powershell/module/networktransition/new-netnattransitionconfiguration?view=windowsserver2019-ps

• a DNS64 https://developers.cloudflare.com/1.1.1.1/support-nat64 And suddenly you are Natting IPv4 to your IPv6 Only LAN

[lean pebble]

They can't provide it

[tame carbon]

https://arstechnica.com/tech-policy/2021/06/1-billion-piracy-ruling-could-force-isps-to-disconnect-more-internet-users/

[low pond]

I knew crystal cut the cable

😆

[lean pebble]

That's how our ISPs cooperate 😂

[waxen scroll]

@hollow marlin just got a QSFP quote back

🤮

[low pond]

from whoom

[waxen scroll]

a VAR but its half palo alto, half cisco brand

[low pond]

ah heard of that 😛

[waxen scroll]

$600k

[low pond]

seems cheap af 😛 /s

[clear igloo]

for 2?

2x QSFP-DD-400G-ZR optics 😛

[waxen scroll]

100G

but a bunch of them

we have no 400G anywhere

[slate sonnet]

Hey guys, I was wondering what could I troubleshoot why my internet on only my pc is like 1mbps

While I'm trying to load speedtest.net speed is like 0.1mbps according to task manager

[weak dagger]

ubuntu server

with gpu

network works 👌

without gpu

it doesn´t

any idea why

[peak cloak]

how are you checking it doesn't work?

[weak dagger]

with the ping command

and with ssh acces

access

i have read

[peak cloak]

do you know if it's even booting

could be failing to boot or something

[weak dagger]

it might be because the harware chnages so does the configuration

[weak dagger]

no it botts

boots

beacuse

i can see it via analog display

[peak cloak]

so you do have a display

[weak dagger]

yes

[peak cloak]

and can input commands

[weak dagger]

yes

[peak cloak]

ok

try

ip addr

[weak dagger]

wait

beacuse im trying to install it without the gpu

a new install

to see if it works

[weak dagger]

but thanks anyway

y will try it

[peak cloak]

show what you get

[timber wigeon]

prolly not the most ideal place to ask but I'm having difficulty with my friends connecting to my minecraft server. i've done everything from port forwarding, editing the ports, disabling firewall entirely, and i'm running out of ideas. been doing it all day. surely it's a network problem so that's why i put it here so any help offered would be greatly appreciated

[peak cloak]

Could be cgnat

Go to your router

And look for wan ip

Once you found it, share the first 2 octets

Example: if it was 123.255.255.255

Give 123.255.x.x

[timber wigeon]

i don't see one anywhere

[timber wigeon]

not that i can find tho

[peak cloak]

Show screenshot of main page?

[timber wigeon]

hold on let me censor some things

@peak cloak

[tender hazel]

ipv4 address starts with 74. so not cgnat

[peak cloak]

Yep

Hmm

You have only 1 router right?

[timber wigeon]

yeah

[peak cloak]

you have fios?

I see

[timber wigeon]

yeah

[peak cloak]

I remember I saw something with their router where the firewall disabled port forwarding or something like that

I have verizon fios too

but with my own router and everything

[timber wigeon]

ah nice

yeah we only have one router in the whole house

[peak cloak]

well same

[timber wigeon]

I tried playing around with ipv4 and ipv6 settings but that didn't do anything

i have both ports on TCP and UDP on 25565

dunno what more it wants I already did the Windows Firewall thing

[peak cloak]

just as a sanity check, try with a different computer to connect locally

using the local ip

[timber wigeon]

I don't have another compu- nvm I have a laptop I can use

[haughty venture]

I needed some help for a router

I have a D-Link DIR 825 and a TP Link router

And I want to make the D-Link my access point for my TP link network

Can someone help me with it?

[peak cloak]

wait what

I'm confused

so you want the TP-Link to just be an ethernet router

no wifi

[timber wigeon]

nope. did not work

[haughty venture]

No no

[peak cloak]

and the D-Link to be an AP

[haughty venture]

So I have my WiFi on the TP link router

And I just want my D-Link to become an access point for that so I get better coverage around my house

[peak cloak]

so you just want another AP, got it

[haughty venture]

Yeah

[peak cloak]

let me check if it has an AP mode

[haughty venture]

Dm me, if you can help

I guess this channel isn't really for network tech support

[peak cloak]

it kinda is

ok, so it has no AP mode

however

[haughty venture]

Oh ok. But in the description of this channel it's written that no basic tech support questions

[peak cloak]

you can just plug in the ethernet cable in the LAN side

[haughty venture]

Yeah, that's the problem

[haughty venture]

Would it really work though?

[peak cloak]

yes

it should then just get an IP via dhcp

[haughty venture]

Ok. I'll try it then

[timber wigeon]

keep getting a network is unreachable error. must be new with minecraft cus im not seeing any results with the exact error

[peak cloak]

huh

[peak cloak]

what ip are you using

[timber wigeon]

my external. one beginning with 74

[peak cloak]

no

for local testing

use the local ip

[timber wigeon]

oh you mean like localhost

[peak cloak]

no

[timber wigeon]

192?

[peak cloak]

yes

[timber wigeon]

yeah no that doesnt work

192.168.1.1

[peak cloak]

that's the router ip

you want the ip of the server

wait

show me your port forwarding settings

[timber wigeon]

that would be my external ip

one sec

[peak cloak]

no it wouldn't

[peak cloak]

oh you did it like that

on that machine

do

[timber wigeon]

yeah because both config wasnt working either

[peak cloak]

ipconfig /all

[timber wigeon]

in cmd prompt?

[peak cloak]

and find the 192.168.x.x ip

yes

[timber wigeon]

yeah its .1.1

[peak cloak]

just curious, with verizon do you get ipv6

https://test-ipv6.com/

[peak cloak]

wait wtf

no

[peak cloak]

ok

since it said working v6 on the router pic before

@timber wigeon under ipv4 address

not the default gateway

just show a screenshot

[timber wigeon]

cmd prompt or fios

[peak cloak]

you can dm if you want

[peak cloak]

cmd

[thick minnow]

Sorry, had to

[plucky crescent]

I have a question - could my city's internet be bad even though it's high capacity?

Like, I don't understand how in every FPS I play, the majority of my experience is only like what I see on videos every once in a blue moon. Usually I have to shoot people a whole lot more than they have to shoot me, and it's regardless of the game. I know enough to know when I'm just bad, and I use shadowplay to make sure I'm not crazy. Any idea why? I've had this experience with all kinds of network devices, all kinds of hardware, including consoles, and I'm to the point of wondering if Comcast is not just expensive and terrible value, but bad in some way I don't know how to quantify?

[peak cloak]

If anything it's the last mile that's bad

[jovial oriole]

What are the benefits of a Static IP over CGNAT

[clear igloo]

Well one lets you port forward and CGNAT doesn't

[jovial oriole]

I know that. But are there any others?

[peak cloak]

You get your own ip

With cgnat your sharing a connection with others

What it really is cgnat vs public ip

Not static

Static just means you get one ip dedicated to you, but one requirement to have a static IP is for it to be Public

In the summer I may try to join this https://dn42.us/

Seems interesting to learn bgp and that type of stuff

[balmy pond]

Hey can anyone tell me how to make a minecraft server in 1.17 i ran the start.bat but nothing came up

[plucky crescent]

I have experienced it all over town, I've moved several times, and always had the same experience 😦

[peak cloak]

Maybe could be congested link

Idk, that's really only something a network engineer for the isp could figure out.

You could do a mtr

And see where the worst ping is

That's the best method that I can think of for a end customer to troubleshoot, but icmp packets are usually lowest priority and get dropped and rate limited

[balmy pond]

can anyone help me port forward to run a minecraft server

[peak cloak]

what's the issue

[balmy pond]

i tried port forwarding but it ended up like that

[peak cloak]

are you trying to connect locally

[balmy pond]

no

[peak cloak]

well then that's a local ip

[balmy pond]

so i made a mistake in the port forwarding?

[peak cloak]

no I'm just confused

that sceenshot is on a computer inside your home?

[balmy pond]

no thats on another house

[peak cloak]

ah ok

so basically you need to give him your public ip

[clear igloo]

192.168.x.x is a private address range, unless you're connected to their network with a VPN you cannot connect to that address over the internet

[balmy pond]

how do i know my public ip

[peak cloak]

to do this, just search what's my ip

[balmy pond]

ok i'll try it one sec

OMG it worked

Thanks @peak cloak ! sorry to be a bother

[light citrus]

I need to ask a question about potentially switching from cable internet to fiber optic(fiber IS available in my area)

does a worker have to come into the house to install anything?

or is it all outside

[peak cloak]

yes

usually

[light citrus]

alright

[cunning shoal]

Alright, so about 3 weeks ago or something like that I noticed that the bluetooth quick toggle in the quick settings had disappeared. I checked my bluetooth settings and noticed that there was no option to turn bluetooth on or off. I dont use bluetooth that much so I didnt bother trying to fix it, hoping that a couple restarts or windows update would fix the issue. I have more recently noticed that my wifi speeds have not been the greatest on my desktop, which sits pretty close to the router and is using the 5ghz band of which it is the only device on it. Today I opened device manager and saw a couple things. First, under the bluetooth adapter tab thing, it was giving me error 45 and saying that the adapter was not connected. The second thing that I noticed was that it appeared that several of the wifi adapters were also not connected giving the same error code. I uninstalled the bluetooth adapter from device manager, and now whenever I do a check for hardware changes scan, its not showing up again. I have downloaded the latest drivers for the wifi adapter and am still having the same issue. The pictures should show a little better what I mean. I have an asus tuf b series motherboard with the bundled realtek m.2 to pcie wifi and bluetooth combo card. Any help would be wonderful.

Any ideas??

[plucky crescent]

any domains or IPs to MTR that would be a particularly useful diagnostics?

[peak cloak]

1.1.1.1?

[plucky crescent]

K I will try that

super definitely gonna do that.

the averages seem OK, but there are spikes that seem concerning for a DNS server

[peak cloak]

why are you spamming it

[plucky crescent]

Am I doing it wrong? Using WinMTR

[peak cloak]

that domain doesn't even have an A record

[peak cloak]

no

[plucky crescent]

Yeah, I dun really know what that means

[peak cloak]

nothing seems too out of the ordinary there

[plucky crescent]

OK so it's settled: I should give up shooters forever

[tender hazel]

router.lan makes me assume you have a mikrotik router

if that is the case you can probably use the mikrotik traceroute instead of MTR

[primal ice]

or you can use a service like https://www.wtfast.com/en/ the problem is most likely how the game's ISP peers with your ISP and how that effects your packets.

[peak cloak]

lol

[primal ice]

it works though it helped me prove that EA was using craptastic peering through zayo networks which were dropping up to a third of the packets causing all sorts of weird in game stuff to happen. like npc and players a like to jump around on screen. half my actions to not even register in game, etc.

[peak cloak]

oh yeah, it could work in some situations

the marketing tho

[thick minnow]

Hello everyone! I was just wondering how hard it would be to configure PFSENSE with a /24 public ip address block. I do not even want a firewall on those IP Addresses. I can purchase IP Addresses
or lease
@everyone
I believe that i found some of the things necessary in the PFSENSE docs here
https://docs.netgate.com/pfsense/en/latest/nat/1-1.html
https://docs.netgate.com/pfsense/en/latest/firewall/virtual-ip-addresses.html

[peak cloak]

it should be pretty simple

ik how to do it on vyos

not pfsense tho

you would want a firewall

[thick minnow]

ok

why tho

im not going to have any machines running thered

im trying to run an ISP

[peak cloak]

then why do you need a /24 public block

oh

umm

you would want an AS number

[thick minnow]

the people would have their own firewalls

[peak cloak]

and pfsense for an isp

no

[thick minnow]

why not

[peak cloak]

vyos would be ok

[peak cloak]

pfsense is kinda eh for routing

also

[thick minnow]

but is it possible

[peak cloak]

no hardware acceleration

it is

[thick minnow]

thats ok

[peak cloak]

but vyos is much better imo

or even better

can a mikrotik router

[thick minnow]

ok

not really

[peak cloak]

why not

[thick minnow]

i want to do pfsense

[peak cloak]

why

[thick minnow]

its very well documented

[peak cloak]

so is routeros

[thick minnow]

idk