Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)N

non_burglar

@ non_burglar @lemmy.world

Posts
0
Comments
781
Joined
3 yr. ago

  • Revisiting Rule #3

    Jump

  • As others have mentioned here, there is a lot of natural overlap with vps renting, hardware re-use, gerenal approaches to managing infrastructure, docker, and Linux in general. I don't even mind networking questions here.

    When questions stray in that aren't really that relevant, like beginner Linux questions, someone is generally nice enough to point to a more appropriate community.

    What I think wastes time in this community are the gatekeeping topics like "your vps isnt self-hosting".

  • Analog Capture Server LIVES!

    Jump

  • Awesome.

    Reminds me of the pain setting up mythtv, but thr rewards were worth it.

  • PSA: Flow Control and Port Buffers are key to fix poor uplink speeds

    Jump

  • Well, seems like it was time well spent in any case.

    If you have classic upstream buffer bloat, there are a couple of traffic shaping algorithms (cake and fq_codel) that work really well with the majority of competent routers, including opnsense/pfsense.

    Traffic shaping is definitely a can of worms, but fun to learn.

  • PSA: Flow Control and Port Buffers are key to fix poor uplink speeds

    Jump

  • Wow, you diagnosed buffer bloat and applied the fix to your LAN side? Sooo much work...

    The problem is unlikely to have been on the proxmox side. Multiqueue only allows virtio to multithread TCP connections via the host CPU using more than one virtual cpu,, but this is essentially like aggregating a network link; it will increase bandwidth, but not throughput. Besides, the actual limit for the proxmox internal bridge and virtio NICs is "whatever the cpu can manage", which is sometimes over 10Gb. It's unlikely to be slowing down traffic coming from your vms.

  • NSFW Deleted

    You already know why you're reading this.

    Jump

  • Good lord. If you're trying to recreate cicada 3301, it's not going well.

  • [Meta] Removing definitions from Decronym?

    Jump

  • You are trying to de-jargon topics, and that's fine, but the two following categories do not help, they are localized habits and don't have any value to non-english or nontechnical people, or both:

    • shortenings: a11y for accessibility is not a common contraction, it's not helpful for anyone to understand the term itself
    • names of services: CF for cloudflare is not something worth defining. Names change, and you wouldn't see this in a professional document. It's like defining "lol", the acronym is shorthand in typed communication, not technical jargon.

    Side note, DNS stands for domain name system, it has never meant domain name service.

    I personally find bots annoying, half the content on the internet is already bots.

  • Ideas for self hosted door bell

    Jump

  • Ia it the best probably not but its still good well functioning equipment, for what it offers.

    Sure, for "power users", maybe a small business, it's fine. It's just not very sophisticated under the hood. The point of Ubiquiti is the "easy" part.

  • Ideas for self hosted door bell

    Jump

  • but also good gear mostly

    I used to believe this. Then I flashed openwrt on my two ubiquiti access points and they are actually more stable and faster.

    Ubiquiti is great at marketing.

  • Deleted

    Permanently Deleted

    Jump

  • It's fine for me

  • Strava just killed its free API, will require a subscription if you want to build on top of it

    Jump

  • once gadgetbridge finishes support

    You do realize gadgetbridge is entirely volunteer-driven, right?

  • A cited, filterable database of mini-PCs / SFF boxes by measured idle power (not TDP), for picking a low-running-cost box to self-host on

    Jump

  • Idle power is determined some by the system controlling its own load, but also by the PSU itself. HP and dell units lock down which PSU you can use with them, but lots don't, meaning you can get a 19v 90W power supply or a 19v 175W power supply, but it won't mean anything if the PSU doesn't have the ability to scale down with load.

    That's what those bronze/silver/fold/platinum ratings are about on atx PSUs.

    Anyway, good list. This was just a comment about that. Power is weird.

  • Kids who use ChatGPT as a study assistant do worse on tests

    Jump

  • These tools need to be studied, trained for, and applied purposely in order to be most effective.

    No shit, welcome to 2021, sir.

    Not sure what kind of engagement you want, this is the easy and obvious part. The real hard question is what we're going to do about it. I don't think anyone disagrees with this, we were all saying it in 2018.

  • Internal network monitoring

    Jump

  • Oh, yeah, absolutely. Suricata was created not long after snort, in the days when an ids did the gathering and the correlation.

    You're totally right, the way most people and orgs do it today is to ship ids logs to a siem for the correlation, overall easier to manage. ELK is the go-to for most, not sure about wazuh, I've only seen it in the homelab space, but it might work.

    There is a distro (not totally open source) called SELKS, which sets up suricata, elastic and some other tooling (kibana) in a commonly-used setup. I deploy it a lot because it saves time with the non-security setup with dB's and such. Pretty easy to point syslog to it and you can see alerts right away and start tuning.

    I'm envious of your position, I learned a lot setting this stuff up.

  • Internal network monitoring

    Jump

  • The mirrored traffic will retain their VLAN tags and Suricata can parse these tags.

    I'm not sure how far down this path you've gone, but suricata will not automatically correlate primitives into actual alerts from different vlans without transforms, which are cpu-intensive for what they do.

    You may want to pull your tap/span/mirror from a point where they converge, like internal side of network egress.

  • Internal network monitoring

    Jump

  • How did you monitor your vlans with suricata? I have enough trouble tuning a couple subnets, never mind tuning for correlation between 3 or 4. This assumes you have different subnets per vlan, of course.

  • Going nuts with networking of VMs on Proxmox (SOLVED)

    Jump
  • Removed

    Why are my VMs ignoring my DHCP server?

    Jump

  • Agreed. I've seen 172 addresses self-assigned before, even though the apipa spec says it should be 169.254.x.x.

  • How many and how much are your subscriptions?

    Jump

  • Easynews and nzbgeek.

    Well worth the 30euro each per year.

  • All You Proxmox Users - ProxCenter

    Jump

  • Am I about to make a mistake?

    Probably not. I've been a longtime Linux user/admin and I like to get under the hood with storage and networking.

    Nothing wrong with proxmox at all, I used it for almost a decade.