networking

[peak cloak]

Like, bruh, DHCP exists for a reason

So you don't have IP conflicts

And easy setup

[thick minnow]

Oh I thought u meant the public

[frigid pine]

I always static my devices and rest people on DHCP. I like to know where I am connected without doing extra stuff.

[thick minnow]

I only the servers and laptop

[peak cloak]

Why

DHCP reservation exists

[thick minnow]

If I have ipv6 from isp but not on locally can I still connect with it publicly?

[frigid pine]

Yeah. But that will bind the IP to my MAC.

Anyways, reservation is another extra configuration so same as static IP.

[peak cloak]

Wdym

[thick minnow]

But u have only one way not on every port

[peak cloak]

Yeah, but then it's centrelized at the DHCP server, not on all your devices. And you can have it automatically add dns entries too

[thick minnow]

I mean my ISP gave me ipv6 and I wander how can I enable it with mikrotik but didn't see a way every where

[peak cloak]

You need to add the ipv6 package

[thick minnow]

I added that and then what

That where I stack

[peak cloak]

You know how you have IP

You should also have a menu, ipv6

[thick minnow]

Yes I do

But then some people say their is need for dhcp, their is no need for dhcp, so I don't know what to do

[peak cloak]

well you do

[frigid pine]

You'd need to enable the IPv6 option from your router towards the LAN side..

[peak cloak]

you have 2 types of dhcp in ipv6

you have dhcpv6-pd

and dhcpv6

the pd, stands for prefix delegation, so that is the standard for assigning ip blocks to customers

so instead of ipv4 where ISPs assign you one address, they assign a whole block aka prefix

[thick minnow]

Customers is my LAN?

[peak cloak]

no

your router

then the standard for assigning IPv6 addresses on LAN is SLAAC

not DHCPv6

[thick minnow]

I want to make it like ipv4 I know ther is no need

[peak cloak]

well ipv6 != ipv4

[thick minnow]

I mean I want one IP public and then one for all my PCs

[peak cloak]

not how it works

you don't have NAT in ipv6, that's the whole point of it

[frigid pine]

Who are your customers? I am with the assumption that you have a home connection. What do you mean by customers?

[peak cloak]

I mean like ISP side, customer I meant as in the customer's router

[thick minnow]

Take it from this message @frigid pine

[frigid pine]

I was directing this to @thick minnow.

[frigid pine]

?

[peak cloak]

so in ipv4 you had one public IP. IN ipv6 you get a whole block, the standard is /56 for home connection

so each LAN device has it's own unique publically routable IP

[thick minnow]

I mean I ask if the customers he meant are my LAN devises

[peak cloak]

but you still have a firewall

[peak cloak]

yeah no

[thick minnow]

Yes all ready clear :)

[thick minnow]

So I have to re creat my firewall?

[peak cloak]

if you enable the ipv6 package and then do a factory reset, it will setup a ipv6 firewall for you

right now you don't have one

but the default rules should always be:
-Allow established/related
-Block new

[thick minnow]

Block in coming allow out going?

[peak cloak]

and if you need to lets say let a computer host a server, you can just do: Allow port 80, to destination XX

[peak cloak]

no, block all new connections from WAN

and only allow established/related

so only internal devices can start connections to the internet

[thick minnow]

So the port fowrword are in the firewall?

Not like ipv4

[peak cloak]

ipv4 you still had a firewall

NAT != firewall

[thick minnow]

But to open I don't have to open in the firewall

[peak cloak]

but you had 2 steps technically, add NAT rules, then allow through firewall

[thick minnow]

No

[peak cloak]

most routers did both for you in the simple portforwarding menu

[thick minnow]

Only Nat

[peak cloak]

nope

see above

[thick minnow]

That what I do

Its working

[peak cloak]

^

[thick minnow]

But I have mikrotik is that doing it for me?

[peak cloak]

idk

maybe you may not have firewall

but it's even an option on the EdgeOS devices

[thick minnow]

Bec if I will look at the firewall their is no ruol for ports

[thick minnow]

Is that from routeros?

[peak cloak]

edgeos

complicated story, but I don't have the HEX S yet

well I do, but I don't

[thick minnow]

do u know about a arrtical that can help me?

To learn ipv6 spcily for mikro

[peak cloak]

https://www.medo64.com/2018/03/setting-ipv6-on-mikrotik/

found this

[thick minnow]

Thanks so match

[rose sparrow]

If I enable that particular option

This shows that isp isn't blocking 443, it's the router that's creating a problem

[frigid pine]

If you have factory reset your device with no default config then there shall be no firewall rules and all traffic is allowed from and to your device.

[frigid pine]

yes. If you can reach your router page from outside your local network on <your_public_ip>:443 but not your server, thats not an ISP issue.

[thick minnow]

@peak cloak @frigid pine sorry to ping u tow

I did factory reset to my router and ipv6 enable and still I m not connected with ipv6 did I miss somethong?

[peak cloak]

you still need to set it up

factory reset just adds the default firewall

you need to setup dhcpv6-pd

and router-advertisement

look at the guide

[thick minnow]

OK I thout that its like ppoe

Thanks

[peak cloak]

if you are using pppoe for internet access, you may need to change some stuff from the tutorial

[thick minnow]

like what?

im using it

[peak cloak]

like the listening interface for dhcp-pd

add add-default-route=yes interface=ether1 pool-name=general-pool6 request=prefix```

change the interface to the pppoe interface

and

add address=::1 from-pool=general-pool6 interface=bridge1 advertise=yes

change bridge 1 to whatever LAN is

I think by default it may be bridge1 but I'm not sure

and the firewall should be done for youe

although you may need to add a rule to allow dhcpv6-pd

[rose sparrow]

Yup that's what I am saying

Now i can't forward on 443 so I am using 8443

[thick minnow]

OK thanks

[coarse kraken]

can i combine two 30mbps connections into one 60mbps using load balancer ?

[peak cloak]

no

not on a single connection

aggragated, yeah

[coarse kraken]

what you mean

i have ONT which have 2 seperate outgoing ports so if i get 2 connections and i combine them both with a Load Balancer

[peak cloak]

you can have a total bandwidth of 60mbps, so for example have one person downloading a game at 30mpbs and another at 30mpbs, but not one person downloading at 60mbps

[peak cloak]

but that's not how it works either

ISP provides 30mbps plan I assume?

[coarse kraken]

yes

[peak cloak]

yeah no

[coarse kraken]

i can get 2 one same fiber

[peak cloak]

your provisioned to 30mbps

combining those 2 ports aint gonna do anything

[coarse kraken]

cant i use bonding?

[peak cloak]

the rate-limiting is done on the ISP router, wherever that is

it's not a pysical limitation

ethernet can do gigabit

fiber can also, you're just rate-limited by ISP

[coarse kraken]

i dont have any specific ISP router

[peak cloak]

the ISP router

not your router

[coarse kraken]

i have of the shelf ONT to convert fiber to copper and then im using my own router

[peak cloak]

give me a sec

[coarse kraken]

ok

[peak cloak]

@coarse kraken

rate-limiting is done by ISP router

you aint gonna change what the ISP provisions

[coarse kraken]

cant i split the packets half half on both connections

[peak cloak]

wut lol?

not how it works

you aint gonna get better speeds

you gotta pay more

[coarse kraken]

they dont have higher packages for homes

[peak cloak]

well

¯_(ツ)_/¯

[long tulip]

You can always try to call them, and negotiate with them

[coarse kraken]

tried but those guys are stuck that we can create custom package just for you

cant

[long tulip]

Then call them every day, multiple times. After a while, they will do it just to get rid of you

[coarse kraken]

nice

[stuck badge]

You can call and ask if your ISP allows the use of non ISP provided Modems... Sometimes it can net you more than what you pay for. @coarse kraken

[peak cloak]

nah

[rose sparrow]

Does that onu support bridging?@coarse kraken

[coarse kraken]

i dont know

[peak cloak]

again, you may be able to get 1-3 mbps more because rate-limiting isn't perfect, but you aint getting around it

[rose sparrow]

Which onu is it

[stuck badge]

I pay for 300mbps and I actually get 450mbps by using a non ISP Modem.

[coarse kraken]

yes i can choose my own devices

[peak cloak]

an ont doesn't route

[coarse kraken]

how?

[rose sparrow]

Nope, it does in some cases

[stuck badge]

Use your own router as well.

[peak cloak]

that's a combo unit

[rose sparrow]

Yup

[peak cloak]

but an ont itself doesn't

[coarse kraken]

simple without wifi its from Huawei

[stuck badge]

Make sure you get a good Modem - Router combo. @coarse kraken

[coarse kraken]

i dont need a modem

[stuck badge]

Modem and Router should be separate. @coarse kraken

[rose sparrow]

This one?

[peak cloak]

he has fiber

[coarse kraken]

i can plug ethernet directly from ont to pc and i works

[rose sparrow]

Ok, @coarse kraken so it is doing routing

[stuck badge]

Ohhh... Fiber... welp. Lmao.

[rose sparrow]

You have 2 options now
@coarse kraken

[coarse kraken]

ok

[rose sparrow]

Get 2 onus and 2 connections and connect both of them to the load balancer

[peak cloak]

noooo

[coarse kraken]

thats what i suggested

[peak cloak]

wtf is this advice

as I said, you aint getting more than 30mbps if thats what the ISP provisions unless you find a way around it, and it won't be like that

[rose sparrow]

Second one is very unlikely to be done by the isp but it can be done technically. Ask them to provide 2 connections on single fiber. Put that onu on bridge mode. Uplink the load balancer to it and initiate 2 PPPoE connections on the load balancer or whatever your isp is doing

[peak cloak]

who said they used PPPoE

[rose sparrow]

@peak cloak I guess he is talking about mixing 2 connections

@peak cloak judging the isp they are providing 30mbps as their max plan they should be using PPPoE or Static Private ip

[coarse kraken]

that what i had in mind minus the PPPoE

[peak cloak]

nope

static private ip? wtf?

that's CGNAT ffs

[rose sparrow]

@peak cloakyup

[coarse kraken]

they dont provide static IP

[peak cloak]

DHCP exists

[rose sparrow]

ik

But my ISP is using static under CGNAT

was*

[peak cloak]

doubt

you had to manually enter the IP?

that they gave you

[rose sparrow]

Yup

[peak cloak]

wtf

that's so backwards, dhcp exists for a reason

[coarse kraken]

mine uses EPON

[peak cloak]

that's a transport technology

[rose sparrow]

They didn't have a proper BRAS and they were providing via a RJ45 cable

@coarse kraken it makes things much less complicated. There's no VLAN in EPON generally

[thick minnow]

i might be a dumass but is thus switch layer 2?

https://mikrotik.com/product/CSS326-24G-2SplusRM

[peak cloak]

all switches are layer 2

[thick minnow]

thanks, hhhh

[peak cloak]

layer 3 switches just have more features on top

[thick minnow]

so im a dumass

[thick minnow]

like?

[peak cloak]

they can route

so for example you have lots of vlans

[thick minnow]

so is this switch layer 3?

[rose sparrow]

QoS, Routing and all

[peak cloak]

instead of having all the traffic having to go back to the router, the switch can route it

[coarse kraken]

cant i use 2 wan router?

[peak cloak]

why

[rose sparrow]

@coarse kraken that's generally a load balancer

[peak cloak]

you aint gonna improve your speed

[peak cloak]

not really

[rose sparrow]

Oh

[thick minnow]

@peak cloak u know alot about mikroyik right?

[peak cloak]

a little

[peak cloak]

no just layer 2 from what I see

since it can only run SwitchOS from what I see

[rose sparrow]

@coarse kraken are you using mikrotik

[thick minnow]

can i use this switch to create a boinding ports?

[coarse kraken]

not at the moment

[peak cloak]

bond in what defenition? have one link over 2 cables?

[thick minnow]

yes

[peak cloak]

yeah, one implentation of that is LACP

[peak cloak]

https://wiki.mikrotik.com/wiki/SwOS/CSS326#LAG

[thick minnow]

i think i lost u

[thick minnow]

ok thinks

[stuck badge]

They do make non ISP fiber Modems. @coarse kraken I would talk to ur ISP and see what Modems they allow.

[rose sparrow]

I have done 100+100 = 200 on mikrotik, but that works only on speedtest (which uses multi connections)

[peak cloak]

if 30mbps is the plan, you aint gonna get much higher

[peak cloak]

yeah

[coarse kraken]

what you mean by modems?

[rose sparrow]

@coarse kraken onu

[peak cloak]

the whole multiple connections part is key for LAG

[stuck badge]

I used to think that to... @peak cloak

[peak cloak]

he's using his own

[peak cloak]

depends heavily on the type of limiting they do

I"m a noob at the whole qos and queue thing

nynameisjuan knows a lot more

[stuck badge]

Worth a try. @peak cloak

[peak cloak]

?

he's using his own ONT

[coarse kraken]

yep

i can use whichever ONT and Router i want

they give me fiber connection and thats all

[stuck badge]

WiFi 6 Router for sure. ie Netgear or Asus for speed. @coarse kraken Try that first.

[peak cloak]

wut

lol

[stuck badge]

If your Fiber Modem can’t keep up Google for a faster one. @coarse kraken

[peak cloak]

it's their connection

30mbps is super light

it's nothing

[rose sparrow]

Nope you cant simply do that

You'll have to get the ONU registered on thier ONU first and update the MAC if they are using mac binding

[peak cloak]

again, depends heavily on their backend

there is not standard with fiber like there is with coax (DOCISS)

[nimble sable]

whew there are ISPs out there that let you buy your OWN ONT?

[peak cloak]

it's possible, I have verizon fios, and there is no way to get around that. But works perfectly fine, with no issues so I aint complaining

[stuck badge]

Yep 👍🏼 you have to call and ask. Then get on the phone and have them set it up with you.

[nimble sable]

cool. i wanted to try that just for the lols andd also some learning. even the most agreeable (read: least evil) ISP here said no [this is an ISp that ACTUALLY tells people that a router is not a wifi ap and gives them both seperately]

[rose sparrow]

The technician said that I have got really good parameters in my locality.. How good are these?

[peak cloak]

what ISP?

or is it local?, people have been able to use their own ONT on ATT I heard

[hollow marlin]

Those are fine. Unlike copper/coax, fiber doesn't really have a scale. Its either within thresholds or not.

[nimble sable]

Beanfield in Canada. They're now owned by someone else i think but they're basically a small company trhat runs their own fibers. ISP in Canada is very much a oligopoly otherwise (even if you find a small local player they're 99% of the time just resellers, i think beanfield is the first one i've seen that isn't)

[rose sparrow]

hmm

[nimble sable]

oooh cool didn't know that

[peak cloak]

@nimble sable found this

https://www.reddit.com/r/CanadianBroadband/comments/ltfxh8/own_sfp_router_with_beanfield_possible/

can't read it tho, because reddit is having issues here

[rose sparrow]

My isp is using 255.255.255.255 netmask, still i can discover other people on the network using ip sanner ... how is that possible?

[nimble sable]

oh i saw that. it's technically possible ofc, their setup isn't htat complex (unlike others like bell that do weird things with vlan) but they won't let you. at least so far. the fiber that comes into my house is "spliced" (is that the right word?) into their modem so i'd def. need their help

[peak cloak]

show pic

It needs to have a connector

[hollow marlin]

PPPoE uses a /32. Its all handled via the concentrator (router your router is connecting to)

[rose sparrow]

oh ok

[peak cloak]

hence the name Point-to-Point Protocol over Ethernet

[rose sparrow]

like this is insane

[peak cloak]

how?

[rose sparrow]

I can even access other peoples routers

[peak cloak]

wait

that's not good

[rose sparrow]

yeah i know

[hollow marlin]

Those are other /32s in the pool. Its just being routed instead

[peak cloak]

oh, I meant, how is it insane

[nimble sable]

WOW tf, i've even had CGNAT before but never THIS, this is just SOBAD wow

[peak cloak]

I mean, that's less of an ISP problem and more router problem

[nimble sable]

it is?

[rose sparrow]

I can access other peoples routers and DVRs

[peak cloak]

unless that's the ISP provided router

[hollow marlin]

^

[nimble sable]

wouldn't the ISP usually block routes between people modems or whatever?

[rose sparrow]

They should have done it

[hollow marlin]

Depends. Some platforms we do, some we don't.

[nimble sable]

wait..is that CGNAT then?

[hollow marlin]

No, CGNAT is an entirely different implementation

[rose sparrow]

I can even access their BRAS using telnet
😆

[nimble sable]

when i was in india, i had the weirdest set of ISPs. most would cost like 50% of your salary for anythiugn even CLOSE to enough to do youtube everyday and like 5mbps speeds. then there was one that did FTTH 100Mbps...but used cgnat (and in some cases double cgnat)

[nimble sable]

whats that?

[rose sparrow]

ISP's router

[hollow marlin]

PPPoE is used to authenticate and grab a lease. CGNAT is just NAT but at a larger scale.

[hollow marlin]

That ISP needs to fix that.... The ASR logged the connection attempt too BTW. But seeing how they seem to have no security in place, they'd probably not even care

[rose sparrow]

How do you know thats a ASR?

[rose sparrow]

oh

[coarse kraken]

And i confirmed with ISP they use PPPoE

[hollow marlin]

Yeah hostname was populated and the prompt layout gives it away. Typically in ISPs the PPPoE concentrator is an Cisco ASR, Juniper MX or with smaller ISPs, Mikrotik CSR. I have not scene any other models used for such

[frigid pine]

They have a security banner!

@coarse kraken I don't think we can LAG multiple layer 3 links. Your two connections, as soon as they complete pppoe negotiation, generates IPs. So if you LAG both links packets would get dropped coz they won't know where to go.

Though I can remember Linus did a video where he coupled 2 internet links into one. Dunno the name of that video or the device he used.

[rose sparrow]

https://youtu.be/tqbnjgbtDl0

[hollow marlin]

That works only because its DSL. DSL is a product of ATM which can do true bonding. Ethernet cannot..well technically it can but is usually not implemented because of the issues its causes . Two different technologies.

[hollow marlin]

L2 is LAG, L3 is ECMP (equal cost multi-path). Similar as both load balance packet flows (not per-packet) but ECMP does it all in routing

You can tweak it to do per-packet on some vendors but the issues with asymmetrical routing and FWs involved is why its avoided like the plague.

[thick minnow]

To make vlan 10 not seaaing my lan I need to that i n firewall right?

[peak cloak]

Yeah

On router

[thick minnow]

I still don't understand what the deferent bettwen VLAN and just creating a new DHCP, Bridge

[peak cloak]

VLAN is a way to have multiple lans on one pysical link

The packets are tagged with what VLAN they are

[hollow marlin]

LAN = broadcast-domain = bridge
Nothing is different in your question. Creating a new bridge and DHCP server for it is creating another LAN, but to identify which traffic belongs to what LAN, a VLAN tag is used to classify it.

[thick minnow]

ok, thanks u @peak cloak @hollow marlin

[peak cloak]

Basically what clicked for me was when I understand that each packet is actually tagged with the ID and I think of each VLAN being its own virtual switch in a way

Lots of people confuse VLANs with just multiple LANs when in fact VLANs just transport those multiple LANs

[thick minnow]

@peak cloak please tell me you some sotrefect, you have ensen knloged of network ;)

[uncut drift]

So... Is this channel networking as in "help me fix my router" or "hey I'm in LA, let's meet up." ?

Hmmm... channel context suggests the former.

[unique canyon]

Hey So Im having an issue with my router disconnecting my desktop from the router/internet completely. Its a wired connection and I have replaced 2 of the 3 cables that connect my desktop to the router (the third is a long one in the wall). I have also changed my motherboard recently (that the ethernet cable is connected to) and that did not fix my issue either. I have also tried to change the port that I am plugged into. While my desktop has been disconnected(kicked) I can unplug/replug at either end, restart the pc & restart the modem and none of these will solve the issue; It seems to only fix its self over time. I have tried to plug in my laptop white my desktop was kicked (using the cable that was in the desktop) and it also doesn't allow my laptop to connect.(White desktop is kicked I cannot access routerlogin.net it just doesn't load) I have not been able to find any correlation between the times that my desktop has been kicked off the net (It happens about once a month) and I am really stumped solutions. Please any advice is welcome.

[frigid pine]

Do you see the cable disconnected in the system tray while your desktop is kicked?

[unique canyon]

@frigid pine No it shows as if it wasn't plugged into anything at all.

[frigid pine]

That means the physical connectivity is getting disturbed. Since you have changed cables and your motherboard I am assuming your PC ethernet jack is good and the cables are good. Now only thing left is router. Do all other devices connected to the router lose internet simultaneously?

[unique canyon]

No other devices lose connection unless plugged into with the ethernet cable that was in my desktop. Also as a note, when I go onto Routerlogin.net on my latptop(connected through wifi) the ui shows my desktop under the attached devices tab and it shows it as connected.

There are only two things that I havn't changed. 1. The Cat6 cable that runs through the roof that connects the two wall sockets. 2. The router/modem its self.

[frigid pine]

When your PC is down, connect your laptop with a different short cable directly to the router port on which the desktop is connected. If the laptop comes up then there's a problem with your wiring.

[unique canyon]

Ok, this will be the next thing that I try. If not then I'm guessing that I will have to replace the modem/router?

[frigid pine]

If this doesnt work probably the LAN port on your router is fried. You may use anyothe port if there is any free. or else buy a router/switch as per your convenience.

[unique canyon]

The second to last time It happened I replaced the cable that goes from the modem to the wall and that Instantly fixed the issue, but then today it went out. Thing is none of the cables are getting moved or knocked for it to cause a disconnect. I have tried multiple different ports on the router and the issue persists (it also doesn't bring it back when the desktop goes out).

[frigid pine]

If you have tried changing the ports it is probably on of the cable in between that is loose.

[unique canyon]

@frigid pine Ok, thank you. I think that I will get that cable changed when I can. If that doesn't do anything then Ill replace the router. I really appreciate the help. I kind of guessed this was going to be what I needed to do, I was more wondering if anyone else could think of a different issue.

[low pond]

so the POTS port you see in today's ONT/FTTH modem's, can that be used with the old phones with a bell on it?

or the hand rotating thing, (you rotate the dial one by one for the number)

[ornate jungle]

Hardware wise, ONTs with RJ11 ports on them can indeed have a POTS telephone connected, however, it's entirely up to the ISP / phone company to decide if they wish to use the ONT for phone service or provide another piece of hardware.

[low pond]

I mean I have one connected to an cordless remote landline phone thingy, I just am wondering if I could use the old school stuff instead

[hollow marlin]

Yes, however old phones typically need the voltage increased to produce a ring. For rotary phones they should still be able to produce the correct tones

[ornate jungle]

You'd want to check with the manufacturer of whatever ONT you have, as they would know best whether or not the ONT can output the correct voltage for non-powered handsets or not. Rotary phones most likely aren't supported though, but again, that depends on the ONT hardware. For example, at least one local phone company where I live doesn't provide the correct tones for Rotary phones anymore.

[hollow marlin]

Our ONTs can handle older phones, POTS signalling has not changed in 50 years.

[low pond]

Don't they pulse AC voltage on ring? Yeah, given how small this ONT is I doubt it even has a inverter or whatever circuit in it which would allow it, my older ONT was WAY bigger and beefier, there could be a chance that has it

[ornate jungle]

Apologies, I replied to the wrong user. sometimes I wish I could throw this iPad far away...

[hollow marlin]

Size =/= output power. Normal ring voltage, is ~90v and any devices that uses POTS will output that voltage. We have had a few customers with older phones that the voltage gain is increased in the ONT so that it can move the heavier bells.

[low pond]

huh. so even the wireless cordless i have gets pulsed that high voltage when ringed?

[hollow marlin]

Yep, the device sending the ring does not know what is on the other end.

[low pond]

I see, I see interesting

Could I then still use one of those rotary phones? It'd take such a while to dial in a number but...

[hollow marlin]

You should be able to. Depending on the pause length on the dial pattern the ISP has setup, it could be too slow in some cases to not complete. But it should be able to work

[low pond]

Hmm, interesting, even if you put the number in the cordless, and then call, you hear the tune of each number, so from how this works it sends the numbers one by one

[hollow marlin]

Yep, its just listening for voltage patterns. Im trying to remember but I believe rotary phones rotate a spring when released generates a voltage

[low pond]

I see :P

[thick minnow]

i have a problem with dns.
The host that hosting the pihole container (docker) see the dns server as 10.0.10.1+3 (10.0.10.3 is the host ip) but it dosnt get any domains.
someone could help me please?

[rose sparrow]

Are you talking about these?

@thick minnow

Anyone with a static IP getting port scans from 89.248.165.164

I am getting atleast 30 port scans in a day from the above ip

[tidal frost]

not sure if this is the best place to ask this but idk. i was going through the recycling at work for homelab stuff, and i found an hdmi+ethernet cable. ive never seen these used together on one line before. i initially grabbed it because its a tiny cable i can use for raspi. what kind of real world stuff would this be used for?

standard hdmi on both ends

[thick minnow]

No

[rose sparrow]

Then you mean to say that the host server is not using pihole

[haughty granite]

it's a research project i think

[thick minnow]

Yes

But ping is working

Like I can ping 10.0.10.3

[frigid pine]

You are not seeing a domain name against 10.0.10.3?

[thick minnow]

I mean that the host (10.0.10.3) know about 10.0.10.1, 10.0.10.3 as DNS severs

But when I ping google.com its stock its not saying their is no domain its just takink like 2m antil every ping

And to my phone exm pinging is fast then any

[frigid pine]

What IP and DNS does your phone use?

[thick minnow]

10.0.0.252 dns: 10.0.0.1, 10.0.10.3

[frigid pine]

And what is the Mask you are using?

[thick minnow]

?

Don't in understand

[frigid pine]

subnet mask?

[clear igloo]

It's a scam/lie to honey pot people into giving them information at best
the site claims it's been registered from 2014 to 2021, but it wasn't registered until January this year

[haughty granite]

thx for the info

[clear igloo]

I've seen sites like that before too, check lookup.icann.org and abusedipdb.com because almost every time they'll show up as recently registered and doing port scans

[thick minnow]

/24

10.0.10.0/24 is a vlan

[frigid pine]

Does this network know how to reach 10.0.0.0/24 network?

[thick minnow]

Is of course

But its not the problome

[frigid pine]

how?

[thick minnow]

Becthey can tallk fine

The problem the server can talk with him self

I can do ping 8.8.8.8 but not google.com

[frigid pine]

can you ping 10.0.0.252 from 10.0.10.3?

[thick minnow]

Yes

[frigid pine]

oh

[thick minnow]

The thing is 10.0.10.3 is the host and the pihole

So forget the 10.0.0.252

[thick minnow]

This is the real problem

[frigid pine]

what router are you using?

[thick minnow]

But it was working before I re install so I have no idea

[thick minnow]

Mikrotik

[clear igloo]

What DNS does the pihole have on the host?

[thick minnow]

But its not the router its something with server

[thick minnow]

Open DNS

[frigid pine]

your DNS settings are wrong.

[thick minnow]

And its on docks BTW

[clear igloo]

Hmmm, so something is blocking the pihole VM from doing dns lookups directly

[thick minnow]

Docker

[thick minnow]

No my phone is on the pihole and its working fine

[clear igloo]

Interesting, I would expect hosts to not be able to resolve stuff either

[thick minnow]

Let me get a paper and I will draw it to u

[clear igloo]

Sure, so the docker container for PiHole cannot lookup stuff and get the lists/updates but it can pass stuff through to the OpenDNS resolvers?

[frigid pine]

so Mikrotik (10.0.0.1, 10.0.10.1) <--> Pihole (10.0.10.3) <--> Phone [phone]) correct?

[frigid pine]

That'd help.

[thick minnow]

Hope that u can understand my writing

[frigid pine]

draw IPs also please

[thick minnow]

Its not the right image sorry

Give me a sec

The router is all so 10.0.0.1 (of course)

[frigid pine]

What's the DNSs on your router. and what's the primary DNS on your Pihole?

[thick minnow]

Pihole open dns's servers

Router 10.0.10.3

[frigid pine]

Why don't you put openDNS on the router?

[thick minnow]

Adds...

[frigid pine]

?

[thick minnow]

Ads?

I don't know not a native speaker

[frigid pine]

use 8.8.8.8 as DNS on your router instead of 10.0.10.3 and then check ping to google.com from pihole

[thick minnow]

Its working all ready check

But not on the router

Change in /etc/reslover.conf

Or something like that in the server

[frigid pine]

server and pihole are different things?

[thick minnow]

Pihole on docker in side the server

With port 8080:80, 53:53/TCP/udp

[frigid pine]

So 10.0.10.3 is for the server or for the pihole or for both?

never used pihole before, so meh.

[thick minnow]

Both

[frigid pine]

show pihole dns settings

[thick minnow]

But is working to any thing aols

[plain siren]

Do you have CAP_NET_BIND_SERVICE or CAP_NET_ADMIN set?

[thick minnow]

What

[plain siren]

Ports below 1024 are privleged and you need to set permissions on the container to allow them to bind to them

[thick minnow]

But thy are working fine

Like I can go to my web interface and get dns

But the host of the docker get dns slow like every ping making it 2 minutes

[plain siren]

is the host server pointing its DNS to the PiHole Container

[plain siren]

Also, I noticed you said 10.0.10.3 is shared between the container and Server

[thick minnow]

Is that how its wotk

[plain siren]

No, containers have their own IP Space

In a way they are doing NAT inside the server

So your server should have a normal IP Address thats within your LAN's Subnet

10.0.10.1 being router
10.0.10.3 being Docker Host Server
so on so forth

But the Containers will have their own IP Space

[thick minnow]

No I know I meant in general

[plain siren]

So lets say 192.168.0.2
.3 .4 .5 .6 etc

[low pond]

last time i used docker they didn't get any IP from the actual LAN, they got their own 172. something IIRC

[thick minnow]

Yes

[plain siren]

172.16 is the default space for the default bridge yeah

[thick minnow]

This is the bridge network (defualt)

[low pond]

mmmm i see

[plain siren]

When you expose with ports like 80:80, 53:53, etc, its doing NAT

whats prob happening is a Pinhole Loop with the host server

[thick minnow]

But u can't just ping 172.x.x.x its will not work

[plain siren]

You can however get a DNS lookup

[thick minnow]

I think I will just change the dns on the host and get over with it

[plain siren]

I will say this, if you cant ping that container.... there is some IP Tables routing issue

[thick minnow]

(Server)

[thick minnow]

I can

[plain siren]

do nslookup google.com 172.x.x.x (172 being containers IP) inside host server

[thick minnow]

I have a arch as server

[plain siren]

You cannot use the 10.0.10.3 IP as a lookup

[thick minnow]

Don't have ns

[plain siren]

sudo pacman -S dnsutils

[thick minnow]

Thanks

I will try it in a few min

[plain siren]

Your resolv.conf on the Arch server should be

nameserver 172.x.x.x```

It cannot use its own IP or Localhost/127.0.0.1

as the NAT is done outside the scope of the Host servers "local loopback" with MASQURADE

[thick minnow]

So u just solve it

I can't use the arch own ip?

[plain siren]

No, it has to be the containers

In the eyes of the host server, its not running the DNS Server, the Container is

[thick minnow]

So u solve it thanke u so match

[plain siren]

np

[plain siren]

sorry for not checking in earlier

[thick minnow]

Hhh

is this bad

[plain siren]

Heh sorry. Hope you get your shit sorted

[rose sparrow]

Why are they doing it?

[thick minnow]

?

[plain siren]

Security Projects, Metrics, etc

Identify and target common public security flaws, address them through use of media, patches, or updates

[peak cloak]

^ @plain siren @rose sparrow

[clear igloo]

They are checking for vulnerabilities and hoping people give them information to "opt out" so they can scan you more from other places or do more intense scans. The only "research" they do is to steal information and break into networks

[low pond]

I mean, not trying to sound like a dick but how are you sure

I mean it very well could be that, but like, is there any source or so

[clear igloo]

Well their website says copyright 2014 to 2021, it's actually not been registered until Jan of 2021

There is a single link and a single description on the site that claims they are doing research and a form to opt out, nothing more

[low pond]

I mean, hm, did you check the domain reg date or so?

[clear igloo]

No links to associated schools or research, nothing

icann lists domain registration dates

[low pond]

Yeah it seems sus on its own

[clear igloo]

Plus they are on every threat feed I've seen and listed as malicious, some places like the sans institute show they are constantly scanning ports 22 and 3389 just as an example hundreds of times an hour. If that's not sus I'm not sure what counts

[low pond]

wait, SSH and RDP

Yes that is just striaght up a botnet looking for open root logins or so

[clear igloo]

Yup

[plain siren]

Haha Its russian

Seems like there is a few websites sharing the IP they are using

They are russian sites

[low pond]

That makes it even susser

[plain siren]

godress.com.ua for example

Which is actually legit

[low pond]

they probably using the same provider or so for the hosting

[plain siren]

There is a dating site... in russian

And an underground grayhat forums...

oh and baby shit

[low pond]

That's.......

Yeah. 😂

[thick minnow]

How to can I check if my LAG is working?

(Ports bonding)

[novel silo]

Hey guys I need a network switch... ideally 2.5Gbit or more on german amazon

[rugged fern]

if you need A switch

https://www.amazon.de/-/en/QSW-1105-5T-2-5Gbps-Negotiation-Unmanaged-Switch/dp/B08CKT147N/ref=sr_1_3?dchild=1&keywords=2.5+gbit+switch&qid=1629567943&sr=8-3

if you need a BETTER switch for 50€ more

https://www.amazon.de/-/en/Ethernet-Unmanaged-Rackmount-Lifetime-Protection/dp/B07695FD9Q/ref=sr_1_5?dchild=1&keywords=2.5+gbit+switch&qid=1629567943&sr=8-5

[fallen bramble]

My pc is only getting 100Mbit instead of 1000Mbit despite my network card in windows saying it has 1000Mbit connection and it says 1000 in the router as well, I really dont seem to know how to fix it i tried putting my network adapter at 1.0gbit full duplex but I am getting low download speeds regardless of what router and network adapter says. Tried different settings and everything. Changed the connecotr on the pc side(it was a bit damaged so i thought that might have been it). ISP speed should be 1gigabit, getting the correct speeds on other deivces connected through ethernet. but my pc wont when i connect it either directly or through a switch. This problem only started occuring after switching to a new router through the isp despite using the exact same setup.

When I connect the ethernet cable to the switch it automatically gives off 100mbit on the settings page of the router and when i put it in my pc directly it says 1000 but i only get 100mbit speeds

[peak cloak]

The cable is the issue

What category is it?

And try a different one

[fallen bramble]

should be cat6 with the right connectors

[thick minnow]

@peak cloak Could u help me please?

[peak cloak]

should show in the end devices?

never used LAG, never had a need

[thick minnow]

Oh OK thanks ;)

[thick minnow]

Not see for sure

[heady lynx]

hey so if i bought a new roughter and turned my current roughter into a modem would i get better wifi or just the wifi the modem is geting

[clear igloo]

You mean wifi range? Depends on the new router
You mean speed? No
You mean stability? Possibly, depends

[thick minnow]

I need help trying to get my windows smb server port 445 to be allowed via public ipv4

and yes I have done this, I think it maybe a firewall

[thick minnow]

.

[worthy sandal]

Do I need VPN if i rarely use torrenting, don't use streaming services (except Spotify, which, i think, bonds your country's library with pricing, and i use Russian ones cuz i'm broke af) and my country doesn't censor anything?
[ping me]

the only geo restriction in common use i recall is Youtube Topic audios, which are mostly unavailable in Moldova (only by certain labels like Nuclear Blast or AFM Records)

[small glade]

0 dbm

[small glade]

Tl-Wr1043nd op

Especially when unlocked to full TX power in openwrt

But this is just too much for any sane use lmao

[livid compass]

Honestly. No.
I only use a VPN for p2p transactions.
Other than your IP there's all sorts of fingerprinting techniques that companies use to track you.

[red thorn]

No you shouldn't even worry about torrenting with a VPN. the most that can happen is your isp sends you a letter asking you to delete a specific album that you've torrented

[livid compass]

They'll shut the service to your house and fine you if you are a repeated offender.

However it depends on the ISP, honestly.

If someone is happy enough to get you for copyright infringment, they will go through other means like fingerprinting and looking for sites you've registered with both your email / username.

[waxen relic]

Still no Ethernet fix for my PC now there’s no connection at the switch but the Ethernet status menu has bytes passing in and out?!

@livid compass every thing else works on the modem?

Even the WiFi that barely makes it to my PC

@livid compass how about I try the PC on a different router?

[pastel plinth]

Hey guys I have a situation where it says “Ethernet doesn’t have a valid ipconfiguration

[odd wigeon]

Need help on my internet speed. Have a new xps 15 9510. Im getting about 400 download speed on my phone but only about 30 on my laptop. Not sure what the problem is

[sacred ocean]

This isn't the perfect place to ask this, but I feel like there would be a reasonable amount of overlap here. Does anyone know if the cheaper Yubikey security key will work with a 5 nfc as a backup, or should I buy something more expensive?

[north mulch]

You don't have to worry about yubikey to yubikey compatibility, you just need to make sure that the services you are using support both models / methods. or that they fully support having more than 1 yubkiey. I personally have 3 that i use for most services, 1 primarily, 1 as a backup, and 1 that stays on my keys.

[sacred ocean]

Alright, thanks.

[autumn condor]

I have a large multi building establishment that I need to upgrade internet for. Ideally, it would appear as one large network to upwards of 200 devices. I also hate to say this, but each entrance (3) also needs a stable connection. Is there any one solution that would be best for my use case? (Mesh, point to point bridge, etc.)

[peak cloak]

so you would need lots of APs

[autumn condor]

That would work, but some areas (entrances) don’t have wires run to them.

[peak cloak]

tbh, if it's multi building, and pretty big idk if you are qualified enough. You would want to split it up into multiple subnets, etc.. You don't want it on one flat network (broadcast storms, etc.)

[peak cloak]

then you gotta run wires to them

or use some P2P antanees

heavily depends on the specific details

[autumn condor]

Ok, thank you

[nimble sable]

dang 10G-SR transeivers are TINY, wow (very thin)

[north mulch]

compared to what?

10G-SR and 10G-LR are the same size, only when you move up to QSFP do they really get any larger

[low pond]

Sometimes I get amazed how tiny they are too

[clear igloo]

I expect SFP-DD to roll out in a few more years, then you'll have 100Gb in an SFP form factor

[low pond]

:o

Don't we have like 1Tb

Per transceiver

[clear igloo]

Nope, 400Gb in QSFP-DD rgith now, 800Gb in QSFP-DD800 soon

1.6Tbps interfaces are possible but nothing on the market probably for another 2-3 years depending on how things shake out

[low pond]

Pretty sure I remember seeing a Nokia router with one Tb or so

[peak cloak]

I mean you can have a tb/s on a fiber link with mux/demux

[peak cloak]

Maybe that's tb/s routing

[clear igloo]

Yah, but no native transceivers on the market. Mux/demux and DWDM for sure

[peak cloak]

Yeah, but you can plug that directly into a network device

Needs to be demuxed

[clear igloo]

https://www.globenewswire.com/en/news-release/2021/01/27/2164807/0/en/Nokia-and-Elisa-push-network-boundaries-with-world-s-first-1T-deployment.html

[peak cloak]

Unless there's a router with that

[low pond]

dwdm is pretty ahead tho right

Like so many tb's on few strand of fibers

[clear igloo]

Yah

[north mulch]

100gb is the pretty common right now though. At least in the data enter environment.

[plain siren]

DWDM Is basically the goto in the large cloud Providers rn

400Gbit Backbone Deployments and Multi T-Bit Bonded Bridges between Quadrant Zones

[terse nest]

Anyone know how to turn an Ethernet connection from a desktop PC into a mobile hotspot?

[pastel plinth]

Help

[smoky fern]

@terse nest you mean turn your wifi card into a mobile hotspot or are you trying to connect your ethernet into a wifi hub and use that to share your connection
@pastel plinth run command prompted as admin and then use the following commands [ ipconfig /release all ] then when that is done then do [ ipconfig /renew all ] and that should help to fix it if your connection is dynamic and not static

[frigid pine]

First of all you'll need a wifi adapter for your desktop.

[drowsy maple]

Hello Guys , so I've Patriot 3200 16 19 19 19, JJR Die 2 x 8GB.
OCed to 3800 / 1900 FCLK.
One day it ran fine even passed 14 TM5 Cycles, next day at night it failed TM5 and gave LOTS of WHEA (See file attached).

So, one on discord, suggested me increase vsoc from 1.1 to 1.125v and try again, so i changed to this ...changed back to 3800/1900 fclk and will now run 10-15 TM5 Extreme cycles... lets see, last night TM5 failed and couldn't finish as those WHEA errors came and self reboot... so now will be interesting, if VSOC bump indeed fixed it.

Also I did SLIGHT RAM voltage bump 1.35 to 1.37

P.S. CPU: 5800X, Board: X470F, 750W PSU Antec bronze, CPU cooler: AIO 240MM Xilence.

Note 21-22th was opziming PBO/Curve, but then disabled them to ficus on RAM optimization.

Also, CPU hitting 95c peaks at linpack extreme and also when runnun OCCT VRAM together with PRIME95 Large, together.

[peak cloak]

Sir, this is #networking

[livid compass]

Even thought this is networking. Your FCLK might be the instability there.
You can increase SOC voltage but over 1.2v is where I would draw the line between increasing the voltage.

[lime aspen]

Anyone know if a Cisco 10 GB PCI-e Dual Port Network Adapter 68-3544-04 73-12522-04 will work with a Asus m4a87td evo Motherboard?

[thick minnow]

How can I do a speed test in terminal (linux) on lan?

[peak cloak]

iperf

[thick minnow]

Its native or need to be installed?

[peak cloak]

installed ofc

[vestal spade]

what is the dist?

[thick minnow]

What the name of the pkg?

[peak cloak]

what os?

[thick minnow]

? Not a native speaker

[thick minnow]

Arch

[peak cloak]

idk, but on ubuntu it's just iperf3

[thick minnow]

ok thanks

[vestal spade]

pacman -S iperf3

[thick minnow]

Oh u meant distro?

[vestal spade]

yeah

[thick minnow]

Oh hhh

Thanks ;)

It's need to be on both the systems?

[vestal spade]

yes

because on one system you run iperf3 -s and in the other iperf3 -c <IP>

[thick minnow]

The -s is the one I'm going to be connected ?

[vestal spade]

-s is the 'server' and -c is the 'client'

[thick minnow]

So this the a way to check lag teaming to right?

[vestal spade]

it only shows network speed if i remember correctly

not latency

[lime aspen]

Anyone know if a Cisco 10 GB PCI-e Dual Port Network Adapter 68-3544-04 73-12522-04 will work with a Asus m4a87td evo Motherboard? I really need to know so I can upgrade my network for my TrueNAS system

[vestal spade]

I need help with a very technical thing, is the latency over SFP+ actually better than a rj45 connection?

[vestal spade]

what version of true nas?

[peak cloak]

the interface doesn't matter that much

iirc, but copper has less latency than fiber

so like a SFP DAC will have less latency technically than a fiber link

[lime aspen]

The Newest version that came out TrueNAS-12.0-U5.1

[peak cloak]

but copper degrades fast over a long link

[vestal spade]

ok, I have a latency sensitive service running on one server that needs access to another server, for now, it is just a meter of rj45 cable, running at 1Gb, will it improve if I add a SFP+ nic?

[vestal spade]

see here https://www.freebsd.org/releases/12.0R/hardware/

[vestal spade]

so basically my question is, SFP has lower latency than RJ45, even if it is just a couple miliseconds?

[lime aspen]

Then what do you think would be best low cost dual 1 gigabit or dual 10 gigabit PCI-e 2.0 card

[peak cloak]

probobly

with DAC

https://forums.whirlpool.net.au/archive/2715534

[thick minnow]

I meant link afourtion

Link to ports as one

[peak cloak]

that won't show on a single connection

however iperf3 has a -P flag

-P, --parallel # number of parallel client streams to run

don't know how useful that is

[thick minnow]

No I config port 2,3 on the router as one and did that on the proxmox

Nic teaming

[peak cloak]

yeah that won't show as a single high bandwidth

[thick minnow]

Oh ok

[peak cloak]

maybe with -P?

idk

Link aggregation these days is more used for failover from what other people said

[thick minnow]

I know to trat it like a road and cars

You have to rods of 1g each to drive

[lime aspen]

Well I just bought a " 394795-B21 - HP DL380 NC380T Dual Port PCI-E Gigabit Network Adapter 374443-001 " for like $8.00 LOL

and that one is on the list for what will work with TrueNAS

Should I upgrade all my Cat5 to Cat6 or 7 Cables for my True NAS?

[cedar igloo]

Cat5 should probably be upgraded, yes. I think it has a max of 100mbit. If it's cat5e, I don't see much point unless you have 10gbit

[blazing gorge]

Hey. Anyone have a recommendation for a cable modem for Spectrum? I’m looking at the Netgear CM1000

[lime aspen]

Best way to get a modem for your ISP is to check the ISP's website and see if they have a modem list. That way you get one that will be at the speed you need and are known to work with that provider. That is how I get all my modems.

Note: you may want o look at a faster modem on there list so that way if you upgrade to a better internet package you will know what you are working with.

[blazing gorge]

Yeah. I looked at their list and this one had top recommendations

[lime aspen]

if it's on there list then it should be good.

I've bought almost every modem for my ISP's on ebay. LOL

just make sure you read the listing page really well and if they have pictures of the modem info for the model number then it's all good 😄

[lime aspen]

Although I have never been a big fan of NetGear. I like my arris modems 😄

[cedar igloo]

Am i correct in thinking that a Windows Server 2019 Datacenter edition acting as a Hyper-V host can activate unlimited Windows Server VMs without needing additional licenses?

[smoky fern]

no cause you will need to activate each one with a different key. the only way that can happen is if you have a key for unlimited activations

[thick minnow]

This is a server UPS. Does anyone know how i can connect it to home products like a PC and monitor? It uses a different output plug than normal

[peak cloak]

that's common in datacenters

[thick minnow]

Do you know what kind of converter i need to connect it to my home products?

[peak cloak]

something like this

https://www.amazon.com/Tripp-Lite-IEC-320-C14-IEC-320-C13-P005-12N/dp/B006ZB30VE/

[thick minnow]

Maybe get a power strip with a compatible input plug and plug everything into it?

[peak cloak]

https://www.amazon.com/ACA1017-Adapter-Official-Certification-Standard/dp/B07DCWXTYM

idk how safe that is

[thick minnow]

I need a pure sine wave UPS and all pure sine wave UPS's are made for servers

At least from the shops here

[cedar igloo]

What does OS Stacking do/mean? I thought that would be the same license is stacked onto the vms

[pastel plinth]

Can someone please help me I’ve tried fixing my Ethernet that says it’s not a valid ip configuration but nothing has worked

[rocky badge]

Yes

https://docs.microsoft.com/en-us/windows-server/get-started/automatic-vm-activation

https://docs.microsoft.com/en-us/windows-server/get-started/automatic-vm-activation#avma-keys use the AVMA keys

[lean pebble]

Anyone here have experience with openvswitch?
I have a question, I can't find a good guide for it on centos 7 with ovirt.
I'm trying to configure lan nic on my cloud pfsense that I host on ovirt with openvswitch but can't make it work.

[waxen scroll]

safe as long as the product is rated for 200v+ thats why the plug is strange

[long tulip]

Can anyone recommend any 2.5GbE NIC's, which would work nicely with PfSense?

I've found one, quite cheap tbh, but it's with Realtek controller, and I've heard that PfSense tends to have issues with Realtek NIC's

[little schooner]

They also tend to have problems with low power cpus. won't even come close to line speed

most I could get out of mine was 200mbps ish

[peak cloak]

don't use pfsense

[bitter forge]

yeah pfsense and realtek dont like eachother, i ended up just running a sfp+ 10g to a unifi switch that has 2.5gb ports and doing it that way

also qnap has surprisingly cheap switches that support sfp+ and 2.5gb

whats your incoming bandwith that you're using 2.5 from pfsense anyways? you can technically bond ports if you need more lanes

[peak cloak]

also

pfsense itself

doesn't it suck for anything greater than 1gig

[bitter forge]

nah

[peak cloak]

without expensive hardware

and higher power usage

[bitter forge]

way back when, but it handles bonded 10gig if you have hte right hardware lol

[peak cloak]

well ofc with enough hardware

[bitter forge]

lol

[peak cloak]

still

at that point, dedicated routing hardware is better

[bitter forge]

i have mine running off of a gen 6 i5 i think

no issues

I am going to do a massive upgrade soon, waiting for hte new threadrippers to come out to drop the price on the current zen 2 ones, do unraid with file server, firewall, automation engine, home automation, some dockers, 2 windows vms, plex. all in one box

[peak cloak]

unraid...

[bitter forge]

yeah the easy gpu passthrough is the reason im going with unraid

[peak cloak]

is that with a 10gig routing load?

[bitter forge]

i have proxmox setup as my current hypervisor and i can do it but eh i want something easy to manage

[peak cloak]

unraid sucks btw

everyone know that

[bitter forge]

yeah theres nothing running atm i have my unifi down for upgrades

im aware on unraid but i had it up and running and for what im using it for should be fine. my only concern is (and i havent looked at it in a min) is if zfs sitll has a benefit over it, ive also never exp a drive failure with unraid so im curious how that looks

[peak cloak]

let me get you the unraid rant

[bitter forge]

i have esxi licenses and id be more comfortable running a hypervisor and some vm's including freenas off of that but theres no gpu passthrough support without some fuckery

[peak cloak]

unraid uses one or 2 drives for parity

that sucks

zfs strips it

[bitter forge]

yeah

but you need a shitload of ram for zfs too

and unbuffered ecc specifically

theres also Nutanix single node

but again the gpu passthrough would prolly be an issue

[peak cloak]

not really

it's just cache

[bitter forge]

1gig per tb

min 8 gig

zfs eats ram for metatdata for used blocks

[peak cloak]

let me ask a zfs dev

@bitter forge

It is somewhat of an oversimplification. Yes, ZFS will probably perform better if you don't have tiny amounts of RAM, or grossly mismatch your pool to your memory size. So say attaching a 100TB pool to a machine with just 4GB of RAM. That having been said, will it work? Absolutely. Will it work well? Probably, depending on what your definition of "well" is. Will it be optimal? No, probably not.

[bitter forge]

yeah

[peak cloak]

but yeah, it's not a strict rule

[bitter forge]

im looking at 108tb raw disk

so id have to math that, but whats your recommendation on hypervisor? and i apologize i realize this is the network chat.

I am super new to discord, i miss IRC lol

[peak cloak]

@bitter forge ```Probably 64 gigs would be enough to get to nearly maximum performance. 128GB would be nice, but it also depends on how your workload is structured. Would your working set mostly fit into those 128 gigs of cache? Does it compress well? Is it mostly tiny blocks with random access, or large sequential reads? etc. etc.
Answers to these questions probably affect your RAM amount selection much more than the simple pool size parameter.

[peak cloak]

all the server people are in here

[bitter forge]

got ya cool just dont wanna violate rules

[bitter forge]

yeah im open to suggestions

if unraid isnt the right choice. i could do proxmox seems like a butload more work to get gpu passthrough for plex transcode

my current proxmox is on 2 skull canyon nucs so idont have any gpu to passthorugh and test

[peak cloak]

problem with unraid is it's just bad storage

what about one box to do storage and another for the hypervisor

[bitter forge]

could technically run freenas under its hypervisor

yeah i was trying to self contain

at htat point id grab a qnap and not bother with any of it lol

[peak cloak]

true

[terse nest]

Dont have a wifi card, just want to use the Ethernet as a hotspot

[terse nest]

Don't have one. Any other way?

[peak cloak]

wut

gotta somehow "make" wifi

best way is to just grab a switch and AP

or something like this

https://www.amazon.com/TP-Link-EAP235-Wall-Beamforming-Installation-Integrated/dp/B08HSNYH57
both AP and switch

[rare snow]

Anyone a PFSense/PFBlockerNG guru in here

Im trying to block several *.domain.com style URL's but not having much luck. I added the URLs to a custom part of a DNSBL List I use, but it appears to still be getting let through.

[bitter forge]

Not an expert but I've used pfblockerng. But why *.domain

Should just be domain. Com

[rare snow]

will domain.com block any and all subdomains?

[bitter forge]

Would block anything sub of that

Yeah

[rare snow]

hmm let me try

hmm I can still go to the site

[bitter forge]

Could make a fw and just block it

[rare snow]

I just added these URL's to the custom part of a Block List i subscribe to

yea I was thinking that as well, but if i make aliases and block them with a FW rule it will still block all subs?

[bitter forge]

Did you add it to DNSBL Domain name blocking custom list..

Yeah just use the whois feature in the ipv4/6 to query

[rare snow]

added it to the custom list at the bottom of that

[bitter forge]

Sorry on mobile. I'll load the package when I get home and try

Let me see the custom list

[bitter forge]

Copy and pasting

Thanks for the information. I added a new DNSBL list - no source defined, and the status = OFF.
Added the target domain to the Custom Block List, did a force update and the domain is blocked :-)

[rare snow]

hmm

maybe my testing is bad

hmm, my test machine is using pfsense as the dns server

[bitter forge]

Delete your source

And set it to off

[rare snow]

yea i just created a new list

[bitter forge]

Ipconfig /flushdns

And try to hit it

[waxen scroll]

It sucks for your power bill

[bitter forge]

@rare snow any luck?

[rare snow]

No not yet, I have up for the evening will try again tomorrow

[frigid pine]

hotspot is a wireless technology. You cannot do it anyother way. You need a wifi antenna of sorts.

[thick minnow]

I deabled my hearpin rule and I can still acsses as before, why is that? It's bec I'm using domains with a revers proxy?

[wraith tundra]

Hi, I have installed Windows Server 2022 on my HP All in One computer, but when I connect my SD card in the dedicated slot, it’s not detected in its file explorer. Does Win Server support SD cards ?

[thick minnow]

Did u format SD card?

[thick minnow]

.

[wraith tundra]

It’s new

Haven’t done anything yet

But it does get detected on my laptop with Win 10

[thick minnow]

No idea sorry ditch win long time ago

[wraith tundra]

Lool. So you use Linux now ?

[peak cloak]

Linux on servers 100%

Except when you need it for stuff like AD

Or games

[wraith tundra]

True, the problem is, my parents also use that computer for normal stuff. So no Linux 🥲

[peak cloak]

Oh, then why windows server...

[wraith tundra]

Cause it’s basically Windows 10

[peak cloak]

Not meant to be for general computing

[wraith tundra]

But without let the useless features

[peak cloak]

Not really

[wraith tundra]

See, my parents can use chrome, ma office and exe files just fine on that Win server

So no problemo

[peak cloak]

If you want windows without the bloat, use a debloater

[wraith tundra]

And I get the server features, that’s the main reason why I installed Server 2022

I use it as a NAS and Plex server

For my laptop which is my main PC and all the TVs

[peak cloak]

Ah, but tbh get a second box if you can

[wraith tundra]

Yeah. I’ve always wanted to. But no point now since I’ll be going to college soon

[peak cloak]

So am I, but I have 2 computers as servers

Used Office desktops are great

[wraith tundra]

👍🏻

I’ll see, I’ll ask my dad for an abandoned PC from his office, install 8gb ram and run FreeNAS

[thick minnow]

100%

[thick minnow]

Why not created VMS on it

[wraith tundra]

😂😂

It’s has a quad core i5-4590t with 6gb ram

[thick minnow]

its a super computer, what do u want

Look jus buy a rpi 4 8gb and make it a server

[wraith tundra]

Ohh you’re talking abt cloud service, I thought you meant virtual machine on my local computer

[thick minnow]

No

[thick minnow]

This was a jock

[thick minnow]

But was liagit, its bettwen 50-100$

Depends on the area u live in

[slow kestrel]

hello

my port fowarding doesnt work

i have no idea why

[peak cloak]

Does it work locally

And what are the first 2 octets to your WAN IP

so like 10.43.x.x for example

[slow kestrel]

external ip right?

[peak cloak]

Yeah, bit you gotta get it from router

[slow kestrel]

188.27

[peak cloak]

Not from Google

[peak cloak]

From router right?

[slow kestrel]

i think so

[peak cloak]

Ah good

What are you hosting?

[slow kestrel]

nothing i just tried opening a port

[peak cloak]

Well ofc it wouldn't show as open, since even though the port is open on the router, there's nothing listening on port 8008 on whatever 192.168.0.104 is. So the port scanner doesn't receive any response and assumes it's closed

[slow kestrel]

xd i am parallel with networking

[slow kestrel]

how can i male the computer listen i want to see if it actually works

[peak cloak]

webserver, netcat

there's lots, but on linux netcat is the easiest

[slow kestrel]

i am on win lol

[peak cloak]

https://nmap.org/ncat/

[slow kestrel]

it works thx

[pastel plinth]

whats a good dns server to use

[frigid pine]

8.8.8.8, 8.8.4.4, 1.1.1.1

[bold drum]

Multigig managed switch prices make me sad.

[peak cloak]

just get 10gig...

sfp+

[quiet geyser]

It is funny how hard it is to sell 10G switches 😆 tried to sell a MikroTik CRS309-1G-8S+IN router/switch

tried for close to 2 months now

[peak cloak]

for how much?

and where?

[quiet geyser]

I am located in Norway so i have just tried the local sales pages..

[peak cloak]

ah

don't think the market is that big in norway

not sure tho

could try on r/homelabsales too

[quiet geyser]

i am trying to sell it for 200$, new price on it here is 340$

[peak cloak]

good price tbh

[quiet geyser]

i know, 2/3 of msrp

not a single message recived about it

I replaced it with a USW-EnterpriseXG-24 (24x 10GbE RJ45)
and i have supermicro 2x 10GbE nics in all my systems

[bold drum]

Those prices make me even sadder.

$1400 for a 16 port.

[quiet geyser]

do you need 16 ports?

MikroTik CRS309-1G-8S+IN (8x 10GbE ports + 1GbE PoE boot) = 280$
MikroTik CRS317-1G-16S+RM (16x 10GbE ports + 1GbE PoE boot) = 320$

SFP +, Not RJ45 on those models.. idk what you are looking for. 10G trancivers can cost a bit so

[bold drum]

Wow 8 just I'm just terrible at shopping for network gear

[quiet geyser]

https://www.amazon.com/Cloud-Router-Switch-317-1G-16S-RM/dp/B0747TC9DB/ref=sr_1_5?dchild=1&keywords=MikroTik+10gbe&qid=1629929919&sr=8-5
https://www.amazon.com/Cloud-Router-Switch-317-1G-16S-RM/dp/B0747TC9DB/ref=sr_1_5?dchild=1&keywords=MikroTik+10gbe&qid=1629929919&sr=8-5

[bold drum]

Oh right $FP

:(

[quiet geyser]

They are SFP+, not RJ45

[bold drum]

Id be fine with like a 16/24 copper gig and 2 or 4 SFP+ that can do 10 gig but everything I can find is spendy af or sold out.

[quiet geyser]

https://www.amazon.com/MikroTik-12-Port-Switch-CRS312-4C-8XG-RM/dp/B07VS1XJZ6/ref=sr_1_2?dchild=1&keywords=MikroTik+10gbe&qid=1629929919&sr=8-2
This MikroTik have 8x 10GbE RJ45

and 4 SFP+ / 10GbE shared / combo with 4 10GbE RJ45's

[bold drum]

Like an HP 1810-24G with 10G SFP support instead of only 1G would be perfect.

[quiet geyser]

So you do want a switch with SFP or SFP+

Like an HP 1810-24G with 10G SFP support instead of only 1G would be perfect.
If you dont mind SFP+ then i would just go with either of the switches i mentioned first, if you want RJ45 i would have gone with the 12Port i linked last.
@bold drum if you are on a tight ish budget

[bold drum]

CSS326-24G-2S-RM

[quiet geyser]

That switch only have 24x 1GbE RJ45 + 2x 10GbE SFP+

you only want to have 10GbE uplink and "downlink"? not the rest of the ports?

[bold drum]

Yeah that's fine. The file server and my main PC are really the only things that would be able to use the 10G. I don't get internet upgrades until December so I won't even have gigabit internet for a few months. I was mainly complaining because I'm installing 10G copper under the house now and getting the entire network 10G capable was comically expensive.

And for some reason I have a hell of a time tracking down suitable products in the networking market, used or new.

[quiet geyser]

hmm well than that switch will work fine for you

but you are not able to expand to more 10GbE links with that switch

[bold drum]

Yeah I don't forsee a need for a few years at the earliest.

[quiet geyser]

Right now in my home network i have a 24Port 10GbE switch, but i only have 2 systems using it
so i have room to expand.

[bold drum]

By then I would hope prices drop.

[quiet geyser]

i do have 2x 10GbE from each system (LAG)

so only 4 ports used, 20 free

[bold drum]

Half of what will be connected will be IP cameras. So not a huge concern.

[quiet geyser]

Prices for 10G are good now, 2-3 years ago they where worse

you can also try to look at used older switches

[bold drum]

I think you underestimate how cheap I am lol 😂
$130 for a switch is pushing it for me already

[quiet geyser]

ohh

[bold drum]

Arent pure 10G copper switches still like $500?

Used I mean

[quiet geyser]

depends

mine new was 1100$ 24 ports

[bold drum]

What're you running?

[quiet geyser]

USW-EnterpriseXG-24

you could take a look at Juniper EX2200 switches

used on ebay.. 70-90$

wait.. nvm it is only SFP

[bold drum]

I'm seeing used SFP 10G RJ45 is abut $9 each

[peak cloak]

@bold drum you need whole network more than gig?

[bold drum]

Don't need...

[quiet geyser]

He only wants 2-4 10G ports

only uses 2 as of rn

[bold drum]

Itd be nice to buy once and be fully ready but I'mma cheap bastard

[peak cloak]

then get this

https://mikrotik.com/product/crs305_1g_4s_in

plus imo, 10gig copper really isn't the best

at that point, just use fiber

[quiet geyser]

that switch will do the work just fine for that yes, but from what i understod from earlier 130$+ is pushing it

[bold drum]

The CRS326 24G 2+rm is fine for me.

[quiet geyser]

that is also a good switch

[bold drum]

If only I didn't have insulation and drywall to fix.

And sprinklers.... Car shocks.... Carpet.... The joys of adulting.

[peak cloak]

like, pretty sure that's one of the cheapest if not the cheapest 10gig switch

[quiet geyser]

you can find good deals on used switches, yes that switch is SUUUPER cheap. i own one+ other mikrotik switches

and they are okay for home users

[peak cloak]

wdym by okay

too advanced?

[quiet geyser]

not advanced enough

they are good for normal+ home use

[peak cloak]

really? don't they run routeros?

[quiet geyser]

yes, you can use RouterOS or SwitchOS

[peak cloak]

routeros is pretty advanced tho?

[bold drum]

If it's managed and can do vlans, it's fine by me

[quiet geyser]

yes, fine for most home users. but if you are using a lot of features in the switch is not really specced for that

[peak cloak]

well routing ofc won't be 10gig

only pure switching

[unborn sun]

Is this ok? I already have coax through my house and cant snake a cord.
Actiontec Single Dual-Band Wireless Network Extender and Ethernet Over Coax Adapter (WCB3000N) (Renewed) https://www.amazon.com/dp/B07FTX1TNL/ref=cm_sw_r_apan_glt_fabc_TBJTVM5SHZWQVSJH53GF?_encoding=UTF8&psc=1

Please do @unborn sun

[zealous spindle]

Anyone know what router cpu temps are meant to be normally

And if they are measured in fahrenheit or celsius

Because I am really really hoping it is fahrenheit

https://i.imgur.com/aIDRYHa.png

[twilit dune]

does anyone know if i can use ip addresses assigned to kubernetes worker nodes to be assigned as endpoints across the cluster via endpointslices?

[lean pebble]

Any one have a good idea how to fast transfer on 10gig ports 2.3tb between 2 vms ?

[quiet geyser]

teoretical speed is 32 minutes, reality is closer to 38-40 minutes. (this is if you are not bottlenecked by hardware)

[low pond]

Try compressing it to one one machine if bandwidth is a concern

[quiet geyser]

This is the speeds when i try what you asked @lean pebble

[ivory egret]

Can anyone recommend a good Wifi 6 router

[lean pebble]

All switches are 40gig and all the DD servers have 2 ncards with 2 10gig each ports

Transferring between 100MiB to 415MiB

[rocky ocean]

anyone knows what this onnet, int and gtr means

[crisp bay]

uhh I'm having some problems with my NIC..so I updated the driver for it, nothing, can't connect to the network, tried /renew, unable to contact my DHCP server...I know it's the NIC since I'm able to connect to the server beside me or browse the internet on other PC..

[crisp bay]

found the issue, it was a dead cable

[autumn bay]

do you really need it and do you have wifi 6 cards installed ?

if you have a low budget it literally doesnt matter

[ivory egret]

Yeah I have a device that takes WiFi 6 and no budget.... Brought an AP instead

[autumn bay]

probably the best idea

netgear and tp link seem to be the only companies worth buying one from but a AP would probably better unless your current router is trash

[low pond]

@clear igloo Woo :/ seems like the recyber BS is troubling one of the members from a another group

This time tryna break into weird ports and whatnot

[frank tree]

https://www.amazon.com/XIAOLO-Bluetooth-5400Mbps-802-11ax-Tri-Band/dp/B08Z3F9T6X/ref=mp_s_a_1_1_sspa?dchild=1&keywords=gaming+wifi+card+6gb&qid=1630074201&sr=8-1-spons&psc=1&smid=A3L9GNMCQ41KU4&spLa=ZW5jcnlwdGVkUXVhbGlmaWVyPUFQQlExNk81MUI1TUwmZW5jcnlwdGVkSWQ9QTAzODIyODAxVlc1UTJCWjVZWjg3JmVuY3J5cHRlZEFkSWQ9QTA3MTkzOTc5RVpMNFJGNFRWT00md2lkZ2V0TmFtZT1zcF9waG9uZV9zZWFyY2hfYXRmJmFjdGlvbj1jbGlja1JlZGlyZWN0JmRvTm90TG9nQ2xpY2s9dHJ1ZQ== anyone have wifi card suggestions?

[queen edge]

amogus is stll funny

[tulip rivet]

Does anyone have any suggestions for a Internet Provider that has really fast internet for a good deal? I live in Nevada if that matters

[clear igloo]

Yah, you check your local providers, it matters a lot

[peak cloak]

check what's available in the area

[frigid pine]

So people in US ask this question too, I thought it's in India only. 😄

[tulip rivet]

Yes lol

I have cox internet i got 180mbps download and 10 upload and i need 30 upload and 400mbps for download

[peak cloak]

@tulip rivet https://broadbandmap.fcc.gov/#/