| ↑back Search ←Prev date Next date→ Show only urls | (Click on time to select a line by its url) |
| Who | What | When | |
|---|---|---|---|
| grody | still need to get around to setting a new vps to run pfsense on, use as a virtual firewall to others | [03:50] | |
| ................................. (idle for 2h43mn) | |||
| *** | medum has quit IRC (Ping timeout: 265 seconds) | [06:33] | |
| ........... (idle for 51mn) | |||
| abthorpet has quit IRC (*.net *.split)
SpaceDump has quit IRC (*.net *.split) neish has quit IRC (*.net *.split) mike-burns has quit IRC (*.net *.split) tooth has quit IRC (*.net *.split) raptelan has quit IRC (*.net *.split) d^_^b has quit IRC (*.net *.split) dne has quit IRC (*.net *.split) hazardous has quit IRC (*.net *.split) up_the_irons has quit IRC (*.net *.split) ant has quit IRC (*.net *.split) d^_^b has joined #arpnetworks d^_^b has quit IRC (Changing host) d^_^b has joined #arpnetworks raptelan_ has joined #arpnetworks SpaceDump has joined #arpnetworks tabthorpe has joined #arpnetworks neish has joined #arpnetworks dne has joined #arpnetworks up_the_irons has joined #arpnetworks ChanServ sets mode: +o up_the_irons tooth has joined #arpnetworks hazardous has joined #arpnetworks mike-burns has joined #arpnetworks ChanServ sets mode: +o mike-burns ant has joined #arpnetworks | [07:24] | ||
| ........ (idle for 39mn) | |||
| _Zodiac has joined #arpnetworks
_Zodiac has left | [08:04] | ||
| .......... (idle for 47mn) | |||
| m0unds | grody: i'm building stuff on 10.1 as we speak, and it seems to have pretty normal i/o perf for me (w/virtio) | [08:52] | |
| *** | joepie91 has quit IRC (Ping timeout: 252 seconds)
joepie91- has joined #arpnetworks | [08:55] | |
| grody | m0unds, aye.. now i enabled virtio at boot, the io is considerably better
so used to 8.4, it was "as is, or not at all" to be honest, the difference was only noticeable when doing a portsnap extract and it was only barely noticable i am loving ezjails though my last jail scenario was scarey still want a small pfsense VPS and i see an ideal one for $10 | [09:07] | |
| m0unds | grody: gotcha | [09:15] | |
| grody | sorry, i babble a lot :D | [09:16] | |
| saddened i lost a 267 day uptime though, was my most reliable MTA/Webserver - hoping my new design will be just as
got a real good route from the UK to ARP | [09:28] | ||
| ............. (idle for 1h1mn) | |||
| *** | awyeah has quit IRC (Quit: ZNC - http://znc.in)
awyeah has joined #arpnetworks | [10:29] | |
| .............. (idle for 1h7mn) | |||
| mercutio | nothign wrong with losing uptime to do upates :/ | [11:36] | |
| .... (idle for 16mn) | |||
| *** | neish has quit IRC (Read error: Connection reset by peer)
twobithacker has quit IRC (Read error: Network is unreachable) gizmoguy has quit IRC (Ping timeout: 265 seconds) Hien_ has quit IRC (Ping timeout: 265 seconds) up_the_irons has quit IRC (Ping timeout: 265 seconds) dne has quit IRC (Ping timeout: 265 seconds) plett has quit IRC (Ping timeout: 265 seconds) jpalmer has quit IRC (Ping timeout: 265 seconds) gizmoguy has joined #arpnetworks Hien has joined #arpnetworks plett has joined #arpnetworks twobithacker has joined #arpnetworks up_the_irons has joined #arpnetworks ChanServ sets mode: +o up_the_irons jpalmer has joined #arpnetworks dne has joined #arpnetworks neish has joined #arpnetworks mkb has quit IRC (Ping timeout: 250 seconds) | [11:52] | |
| ............. (idle for 1h1mn) | |||
| grody | mercutio, indeed.. went from 8.2 when i first got the VPS, upgraded through the years and only lost uptime because of
now going 10 with a new deploy strategy, the idea is again very few outages once or twice a year (i did replace the server with temps until i get this back) so overall downtime to service has been 0 plus my script works much better with pkg, so i dont have to fubar things with portupgrade anymore being overly optimistic, i may never need to shell in again i mean, im not one for cheese, but from AAISP when i was ping monitoring my servers, when i had 100% uptime on my link, i had 100% connectivity to my ARP shame UK VPS providers cant offer anything as good :/ (unless you pay WAY over the odds) | [13:02] | |
| mercutio | yeah arp is pretty stable.
i've hit a few network outages over the years, but none of them have lasted very long. the most recent was coresite having issues. | [13:24] | |
| ..... (idle for 22mn) | |||
| grody | never noticed any, even munin running on the VPS hasn't shown obvious signs of outage
quite impressed with latency from UK to LA though (if that is where the VPS is) rtt min/avg/max/mdev = 174.954/178.944/181.934/1.732 ms on ipv4 & rtt min/avg/max/mdev = 165.530/168.279/177.425/3.382 ms on IPv6 | [13:47] | |
| ..... (idle for 21mn) | |||
| mercutio | uk latency can vary a bit
that seems on the high side to me, but maybe you're on adsl/vdsl with interleaving or such | [14:09] | |
| grody | vDSL, stock 8ms bs due to PPP
considering it's to the other side of the US, i say thats pretty impressive i am loaded a little @home atm actually, so not a fair test http://imgur.com/DsVeCtH | [14:16] | |
| *** | jcv has quit IRC (Ping timeout: 264 seconds) | [14:21] | |
| mercutio | 8msec in each direciton?
plus transit to somewhere useful? | [14:21] | |
| grody | i get 9ms to 8.8.8.8 | [14:21] | |
| mercutio | oh
that's not much interleaving thnen | [14:21] | |
| grody | no interleaving on this line
no need | [14:22] | |
| mercutio | that is hard to read :) | [14:22] | |
| grody | im < 100m from the cabinet | [14:22] | |
| mercutio | i'm more than that from cabinet with vdsl and i get about 5 msec first hop | [14:22] | |
| grody | i synch at 79.9 and 19.9 im that close | [14:22] | |
| mercutio | wow :)
they cap it at 10 megabit upload here :( and i'm only on like 36/18 well 18 is attainable | [14:22] | |
| grody | yea they have two types here
40/10 default, 80/20 is usually business | [14:23] | |
| mercutio | vdsl is a lot better than adsl though | [14:23] | |
| grody | i have 80/20 plus priority in the network | [14:23] | |
| mercutio | there was a shift from atm to ptm at the same time. | [14:23] | |
| grody | hell yea | [14:23] | |
| mercutio | which has much lower overhead. | [14:23] | |
| grody | in theory vdsl3 can do 150mbit/s, but i only read a rumour, nothing solid | [14:23] | |
| mercutio | in theory vdsl can do gigabit :/ | [14:24] | |
| grody | my ISP can offer GEA via FTTC (vDSL) which loses the latency from PPPoE | [14:24] | |
| mercutio | it's crazy how much faster wifi is getting
i'm getting over 500 megabit on 802.11ac | [14:24] | |
| grody | but makes routing IP blocks (esp IPv6) difficult | [14:24] | |
| mercutio | same room, but still.. | [14:24] | |
| grody | useful for site-to-site of the same cab tho
yea, a/c is sickening | [14:24] | |
| mercutio | pppoe is very low overhead.
it's an 8 byte header tag. | [14:25] | |
| grody | i can only manage about 97mbit/s on 2.4
ah, i have a router with minijumbo on the PPPoE | [14:25] | |
| mercutio | i can do faster than that on 2.4 i think | [14:25] | |
| grody | 1508 payload, service supports it
so get full 1500 | [14:25] | |
| mercutio | but 2.4 gets random outages here.
i have no idea what it is | [14:25] | |
| grody | a lot of wifis on 2.4 here | [14:26] | |
| mercutio | but it happened at my last house too, so i want to blame my car. | [14:26] | |
| grody | 5 there is only 2
on 5 i can hit 300mbit | [14:26] | |
| mercutio | by outage i mean short breaks in connectivity without losing sync or whatever you call it | [14:26] | |
| grody | thats maxing out my fastest client | [14:26] | |
| mercutio | but enough to be annoying if you use skype or anyhting
are you using 802.11ac? | [14:26] | |
| grody | i have an ac
but only two clients using it most are an | [14:27] | |
| mercutio | yeah
my laptop does about the same speed as my tablet laptop is 433 megabit 802.11ac, laptop is 300 megabit i think they both do about 250 megabit | [14:27] | |
| grody | my midrange phone does the best on N
2.4 | [14:28] | |
| mercutio | but the cool thing is, my tablet still manages to do 100 megabit on the other side of the house | [14:28] | |
| grody | can hit 70mbit | [14:28] | |
| mercutio | even though in the same room 2.4 has dead spots in the room corners. | [14:28] | |
| grody | but if the neighbours are on the wifi, 2.4 is useless | [14:28] | |
| mercutio | it varies heaps by device though
my phone can do 32 megabit fine. | [14:28] | |
| grody | trying to force everything to 5 | [14:28] | |
| mercutio | well from everything i heard about 5 ghz before using it, it was only meant to be for "short" range. | [14:29] | |
| grody | my AP has been up 177 days, with my laptop on 'an' connect for 168 days | [14:29] | |
| mercutio | but even with lower signal levels it's way more stable and consistent | [14:29] | |
| grody | thats how blissful 5GHz is | [14:29] | |
| mercutio | and i think people over dramaticised that. | [14:29] | |
| grody | 2.4 has better permiation through matter | [14:30] | |
| mercutio | cos at range you're more likely to be closer to neighbours too | [14:30] | |
| grody | 5 is relatively short ranged
although a/c is impressive over distance | [14:30] | |
| mercutio | hmm
they'll both do km's i thought | [14:30] | |
| grody | line of site, easily | [14:31] | |
| mercutio | 5 ghz can do like 10km can't it? | [14:31] | |
| grody | but if there are buildings or walls in the way, 5GHz fails | [14:31] | |
| mercutio | but if there are trees it's fine? | [14:31] | |
| grody | lower frequencies penetrate matter better
even trees | [14:31] | |
| mercutio | you really don't weant to do 2.4 ghz through buildings though! | [14:31] | |
| grody | microwaves bounce off everything
you, me, glass | [14:31] | |
| mercutio | yeah i understand that 5 ghz bounces al ove rthe place | [14:32] | |
| grody | even 2.4 | [14:32] | |
| mercutio | and no-one knows how to model it properly yet
so it's really hard to take routers in a building and say this is what coverage is going to be like | [14:32] | |
| grody | microwave ovens reap havock on some wifis
thats why they put 4G/LTE on like 600-800MHz | [14:32] | |
| mercutio | lte is higher than that here
i thnk it's 900 mhz | [14:33] | |
| grody | also uses 900, 1200 too | [14:33] | |
| mercutio | lte is amazing | [14:33] | |
| BryceBot | That's what she said!! | [14:33] | |
| grody | lol | [14:33] | |
| mercutio | google maps is fast | [14:33] | |
| grody | i was hittiing 56/7 on 4g the other day
i was aweing like a kid in a candy shop pings were amazing too, 30ms | [14:33] | |
| BryceBot | That's what she said!! | [14:34] | |
| grody | so the bot is triggered by..
amazing | [14:34] | |
| BryceBot | That's what she said!! | [14:34] | |
| grody | yep | [14:35] | |
| mnathani_ | is MTU generally the max size of a frame or packet? | [14:36] | |
| grody | depends on the L2 type used
ethernet, frame size ATM, cell size a packet usually has a prefixed length, carrying the header and payload.. they can vary in size depending on the medium used to transport it | [14:37] | |
| mnathani_ | right. | [14:38] | |
| grody | usually ethernet uses 1500 MTU, though in a gigabit network payloads of 9000 are often used
add VLAN tags, you incrase the payload/header use tunnels like L2TP/OVPN, to keep the standard 1500, the initial medium needs to accommodate higher MTUs like my using PPPoE, usually you have to clamp to 1492, but ISP, medium & my router supports rfc4638, which allows me to use an MTU of 1508, so my actual IP packets can be sent in 1500 payloads w/o fragmenting/mss-clamping | [14:38] | |
| mnathani_ | does IPv6 change things quite a bit?
not allowing fragmenting etc | [14:42] | |
| grody | IPv6 header is larger, so payload is smaller
but even at 1500, it's a whole packet, just a smaller body but by the time IPv6 becomes mainstream, 1500 MTU will be like dialup 576 (poor analagy, sorry) im not an engineer, im a tinkerer, so dont take my word on it ;P | [14:42] | |
| mnathani_ | nothing wrong with tinkering :-) | [14:46] | |
| mercutio | grody: i've never done a speed test, but the "feeling" is good on it | [14:48] | |
| grody | diffences are unoticable unless you're obsessive
im just happy it works | [14:49] | |
| mercutio | grody: 1500 mtu isn't going to increase on the itnernet it seems :( | [14:49] | |
| grody | nah not in general | [14:49] | |
| mercutio | grody: it's night and day difference ehre
that said, i used a different provider that had the faster hsdpa dual carrier? i'm not sure it was, but in between. | [14:49] | |
| grody | but a couple of dedis at sites peer directly with one another and with a nice email, they let you increase MTU to use tunneling protocols between them | [14:50] | |
| mercutio | lte on my provider changes pings from like 80 msec to 20msec.
oh you mean the mtu difference is unnoticable, yes. network mtus are going over 9k a little bit now so you can actually do 9k site to site over mpls etc now days. | [14:50] | |
| grody | LTE here yields about 30ms, thats what i saw it at on a random test.. for on my phone in a pub as i stopped off from a meeting that was impressive
considering the pub wifi was 80ms and like 6/0.3 | [14:51] | |
| mercutio | i've never used good public wifi
the best wifi i used was like 2/10 so i assuem they had a symmetric connection, and people were using the down more. | [14:51] | |
| grody | HSPA+ (DC) i yield about 17/2 and 90ms | [14:52] | |
| mercutio | it was about 50 msec for me grody.
with a usb stick. | [14:52] | |
| grody | the only good network in the UK for data is H3G | [14:52] | |
| mercutio | i used my provider ina different city, and it was on hspa+ though
i semeed to get much worse battery life in that other city. does hspa+ use a lot of battery? i don't get 4g at home here, but there's a bit of coverage. and wifi is fast at home :) | [14:52] | |
| grody | EE and voda have a superior 4G network, but 3 have the best data service overall (and their 4G (where available) is highly impressive, better then EE and Vodafone) | [14:53] | |
| mercutio | lte has been here only a year or less i think
but all the providers seemed to hop on at once. | [14:53] | |
| grody | it's also the only UK network that allows RAW IP
all the others limit to TCP/UDP/ICMP | [14:54] | |
| mercutio | oh | [14:54] | |
| grody | so 6in4 tunnels are possible, also GRE and what not | [14:54] | |
| mercutio | sweet.,
i only care that google maps is fast :) | [14:54] | |
| grody | haha | [14:54] | |
| mercutio | well i mean i care a little bit | [14:55] | |
| grody | i prefer rawness
barebones or not at all i pay stupid amounts for internet @home and out and about just so i can do all the crazy nerdy stuff when i want to be a crazy nerd why i ♥ ARP, it's what i love, but over the pond i think they should get some servers out in EU :D | [14:55] | |
| mercutio | sounds nice | [14:57] | |
| grody | hint hint, nudge nudge, digestive digestive | [14:57] | |
| mnathani_ | what are some applications of using RAW IP? | [14:57] | |
| mercutio | i think practically speaking east coast is easier than EU
mnathani_: he was just saying... GRE... | [14:57] | |
| grody | mnathani_, simply 6in4 mainly | [14:57] | |
| mnathani_ | ok | [14:57] | |
| mercutio | GRE, GIF, IPIP. | [14:57] | |
| grody | where native IPv6 isnt available, tunnel it over IPv4 | [14:57] | |
| mercutio | you can cat /etc/protocols | [14:57] | |
| grody | the other way is using L2TP
which is UDP | [14:58] | |
| mercutio | l2tp is huge overhead.
well l2tp v2 l2tpv3 is being slow to take off | [14:58] | |
| grody | i dunno
it's used by some ISP's here | [14:58] | |
| mercutio | it'll come
mpls is getting very popular. | [14:59] | |
| grody | i've used it, but w/o the hardware to utilize it properly, it was needless for me
http://grody.me.uk/blog/tech/openwrt/mpra1 dont mean to spam but thats an example of RAW IP on 3G networks | [14:59] | |
| mnathani_ | I didnt see a picture of the device
I see what you mean about the RAW IP now | [15:03] | |
| grody | on the openwrt site
there are a variety of these even seem some with 8MB flash and 64MB RAM, so would be even more useful with having a /48 allocated by ARP too, and eventually get a pfsense running on here in front of my current, i could use some IPv6 off here just to impress ideally i want all my pfsense box to be in links, and be able to utilize IP addresses more efficiently ie: my box @home flaps, openwrt detects this, uses next available tunnel | [15:03] | |
| mercutio | you can use ip addresses better as /32s than /29s etc.
ipv4 utilisation is a pita | [15:07] | |
| grody | it is
im trying to minimize IPv4 usage and even trying 6to4 | [15:08] | |
| mercutio | i wouldn't be surprised if arp shifts to /31s soon. | [15:08] | |
| grody | im not doing well....
6to4 can be highly useful i just hope they don't up prices for small blocks :D its ideal having a few for when you run https sites and the prices of those licences that handle multiple domains off one IP are just shocking certificates* | [15:08] | |
| brycec | brycec recommends that users of pfSense consider its more-open, both politically and in source, fork opnsense | [15:12] | |
| grody | im confused...
what d'ya mean? | [15:13] | |
| mercutio | brycec: is it a fork? | [15:14] | |
| brycec | mercutio: yes | [15:14] | |
| mercutio | is it based on openbsd? | [15:14] | |
| JC_Denton | and what's wrong with pfSense? | [15:14] | |
| grody | freebsd | [15:14] | |
| mercutio | admn | [15:14] | |
| grody | it;s m0n0wall derived
pfsense works great | [15:14] | |
| mercutio | i found pfsense not too bad | [15:14] | |
| brycec | mercutio: No, alas. But maybe someday (though it's headed by a couple of DragonFly BSD devs, so...) | [15:15] | |
| mercutio | i really hate openwrt | [15:15] | |
| grody | i use it @home and in a DC for small blade | [15:15] | |
| brycec | I love pfSense, and use it everywhere. | [15:15] | |
| mercutio | it pains me greatly. | [15:15] | |
| grody | mercutio, it is annoying | [15:15] | |
| mercutio | what pains me even more is i really can't find any good alternatives. | [15:15] | |
| grody | i only use it for the minijumbos on PPPoE
else it;s a dumb router into pfsense | [15:15] | |
| mercutio | i'm using it for wireless bridging
so yeah it's a dumb wireless bridge | [15:15] | |
| brycec | But I'm not a fan of where the project leadership is slowly creeping, not to mention one of them I find personally repulsive. | [15:16] | |
| grody | i use ddwrt for wifi and a ubi | [15:16] | |
| mercutio | i was using gargoyle
but it doesn't seem to work well on archer c7 :( i didn't realise how muuch nicer gargoyle was than openwrt :) | [15:16] | |
| brycec | https://wiki.opnsense.org/index.php/OPNsense:So_why_did_we_fork%3F is worth a read | [15:16] | |
| mercutio | i kind of took it for granted.
brycec: did you see openbsd are adding network smp support?> | [15:16] | |
| grody | not something i've heard of... | [15:17] | |
| brycec | mercutio: I did, yes. | [15:17] | |
| mercutio | so yeah that's the main advantage of freebsd over openbsd for firewals... | [15:17] | |
| grody | brycec, interesting.. | [15:18] | |
| brycec | I'm not preaching opnsense yet or anything, I'm not even using it (only tinkering with). But I want to spread the word | [15:19] | |
| mercutio | how many speedtest.net sites do you guys have in your cities? | [15:19] | |
| brycec | (I definitely /want/ to use it, just haven't had the time) | [15:19] | |
| mercutio | it seems there are /six/ here | [15:19] | |
| grody | indeed, not im curious and want to tinker
especially if the captive potal element works f**king hate pfSenses method | [15:19] | |
| mercutio | and that doesn't count the ookla ones not on speedtest.net | [15:20] | |
| grody | and i cant say that any more politer, sorry | [15:20] | |
| brycec | mercutio: I have 1 speedtest.net location in my metro area. | [15:20] | |
| mercutio | there used to be like 3
there's like two circles for my city on top of each other one of them has 1 speed test, the other has 5.. so i assume there's a limit of 5. and other regions don't seem to have more than 5 | [15:20] | |
| brycec | You may be right, or it may just be geography with the second circle being listed in a suburb of the other | [15:22] | |
| mercutio | oh los angeles has the same thing
with 5+1 | [15:23] | |
| brycec | And Miami
I've been looking around the US, can't find anywhere with more than 5 on 1 dot | [15:23] | |
| JC_Denton | brycec: where is pfSense leadership creeping? | [15:23] | |
| mercutio | and the second one is glovine
which is the same thing that's on auckland yeah los angeles has 5.. | [15:23] | |
| brycec | JC_Denton: locking it down and closing it off. Not in a "closed source" kind of way, but licensing-wise. | [15:23] | |
| mercutio | who the hell are glovine
is miami's 6th golvine? | [15:23] | |
| JC_Denton | ah
well, they want to make money it's tough for small FOSS projects to do that | [15:24] | |
| brycec | It would be nice to see code cleanup/improvement | [15:24] | |
| mercutio | oh miami only has 5?
code cleanup is always nice, buut tends to get deprioritised until necessary | [15:24] | |
| grody | as backwards as pfsense can be, i much prefer them to junipers | [15:25] | |
| brycec | I've felt that development on pfSense has languished for awhile. Bug fixes seem to take forever to be committed when it's a simple two-line fix.
Oh and when they pulled the build tools, ooooh that pissed off a lot of people. | [15:25] | |
| grody | fair that a new dual core w/ 8GB RAM wasn't a fair compromise for an IDP-10, but still
it was cheaper | [15:25] | |
| mercutio | why dual core? | [15:25] | |
| grody | it;s development side has slopped
it was an OpenVPN server | [15:25] | |
| mercutio | it seems you may as well go quad core these days | [15:26] | |
| grody | meh | [15:26] | |
| mercutio | well i suppose i3's are cheap and take ecc
and otheriwse you have to jump to e3 | [15:26] | |
| grody | im deferring to an arm project atm | [15:27] | |
| mercutio | i just got an amd cpu, .. it's really fast at aes, faster than my i7
but most things are really slow on it | [15:27] | |
| grody | a small array of pogo EO2's, load-balanced by a pfsense :P | [15:27] | |
| mercutio | ~50 microsecnd network latency at least.
the joys of realtek not supporting colaescing on linux | [15:28] | |
| grody | my @home pfsense is a VIA Nehmiah with ancient Padlock aes-ni
yeww i try to avoid rtl got intel and via's in the @home | [15:28] | |
| mercutio | i have an intel card i can stick in it
intel ct | [15:28] | |
| grody | poor little thing can handle about 300mbit/s before it starst throwing a paddy | [15:29] | |
| mercutio | but it doesn't have enogh pci-e slots to stick a multiport card in | [15:29] | |
| grody | cripes, this thing is ancient | [15:29] | |
| mercutio | i could get > 100 megabit out of a pentium 75
i'm surprised you're struggling with 300 megabit | [15:29] | |
| grody | 800Mhz to handle an 80/20 WAN, plus a couple of wifi's and some tunnels | [15:29] | |
| BryceBot | That's what she said!! | [15:29] | |
| grody | haha | [15:30] | |
| mercutio | via's memory bandwidth really sucks doesn't it
enable coalescing on transmit | [15:30] | |
| grody | it copes for the most part | [15:30] | |
| mercutio | have high transmit queue size.
and do moderate coalescing on receive | [15:30] | |
| grody | it does IO up on net io | [15:30] | |
| mercutio | well actually if you have 80/20 net | [15:31] | |
| grody | even with the intels onboards helping | [15:31] | |
| mercutio | then 300 megabit is fine.
the new intel g cpus are pretty amazing btw if you wnat something cheap also j1900 are really cheap too | [15:31] | |
| grody | wan, two wifi's, VLANs (with an IGMP proxy) and goodness knows what else | [15:31] | |
| mercutio | and fanless. | [15:31] | |
| grody | OpenVPN too | [15:31] | |
| mercutio | are you using wifi cards on it? | [15:32] | |
| grody | it never gets hotters than 50C | [15:32] | |
| mercutio | my i7 keeps hitting 80c :( | [15:32] | |
| grody | nah, seperate wifi AP in domain
with VLANs for each VAP that gets fun routing between when using internet thats when it starts loading | [15:32] | |
| mercutio | layer3 switch :) | [15:33] | |
| grody | have made some rules stateless, pure routed
yea, i do need one | [15:33] | |
| mercutio | but yeah j1900 or g series cpu are pretty cheap | [15:34] | |
| grody | but even routing it puts a load up | [15:34] | |
| mercutio | g doesn't do aes though
butr it'll still do aes really fast anyway :/ yeah you can fiddle with coalescing it can make quite a significant cpu difference | [15:34] | |
| grody | i probably could route between the wifies on the actual AP | [15:34] | |
| mercutio | the newer intel cards are better htan the old ones too. | [15:34] | |
| grody | but i prefer the filtering offered by pfsense
yea they are | [15:34] | |
| mercutio | it's a em though i imagine? | [15:35] | |
| grody | original dual port was hell maxing out the WAB
this new one seems to only take 20% CPU saturating WAN fxp | [15:35] | |
| mercutio | you can adjust em's with sysctl dev.e.m.0
say what?! stick a gigabit card in it :) | [15:35] | |
| grody | err, original fxp, new is em
hah | [15:36] | |
| mercutio | oh | [15:36] | |
| grody | it has a single PCI port | [15:36] | |
| mercutio | yeah em's are the older ones. | [15:36] | |
| grody | it's proper old skewl | [15:36] | |
| mercutio | pci-e?
x4? | [15:36] | |
| grody | Neoware CA10 | [15:36] | |
| mercutio | bah
just stick j1900 in instead :/ it says running power use of 28 to 35 watts | [15:37] | |
| grody | compared to a PC... | [15:38] | |
| mercutio | yeah j1900s are good
| [15:38] | |
| grody | i am actually impressed by this thing
intel pro 100 dual port in it atm plus the onboard via, which isn't as bad as many make out | [15:38] | |
| mercutio | heh
i had a via c3? or something yaers ago, it had via rhine | [15:39] | |
| grody | it happily hits 160mbits (duplexing) whilst crapping the cpu out | [15:39] | |
| mercutio | it sort of worked. | [15:39] | |
| grody | i used to have an IDT Winchip Centaur Hauls
technically speaking, if a device is downloading at 60mbis and is then passing out of another interface, that is twice the original speed no? | [15:40] | |
| mercutio | sort of | [15:41] | |
| grody | or do i need to lay of the ale and step away from the keyboard | [15:41] | |
| mercutio | you don't have to do a memory copy
so it's lower overhead like you read the packet into memory from one network interface then you can just give it a pointer to that memory on the other one | [15:41] | |
| grody | ok i dont want to think about the 'real' bandwidthis this sweet old beast does | [15:42] | |
| mercutio | or if it does have to do a copy for some reason, it'll at least already be inc ache with no context swithces
i bet a lot of the load is from interrupts. | [15:42] | |
| grody | interupts are a bitch | [15:43] | |
| mercutio | newer stuff improved interrupt performance a lot | [15:43] | |
| grody | apparently in pfsense, nics that do polling perform better | [15:43] | |
| mercutio | you should be able to do 30k+ interrupts per cpu on modern gear. | [15:43] | |
| grody | but never been able to test | [15:43] | |
| mercutio | per second
coalescing is as good as polling usuaulyl | [15:43] | |
| grody | i doubt this think could handle that | [15:43] | |
| mercutio | polling really helped with stuff that didn't support coalescing
but you can disable interrupts on some devices and just read the data regulraly but coalescing means it can wake up after 30 micro seconds or such and give you all oft he packets. it also means that on intelligent nics it can have priority packets. that wake it up earlier. | [15:44] | |
| grody | sounds more like a pitfa | [15:45] | |
| mercutio | well it's automatic.
there's also this thing called netmap where people are trying to get even fsater speeds http://info.iet.unipi.it/~luigi/netmap/ and there's intel ddo on linux that's freesd. | [15:45] | |
| grody | and here is me with trunking 100mbit hubs because im too lazy to get gbit | [15:47] | |
| mercutio | heh
intel nuc's may be more plug and play :) and quiet/small/low power | [15:47] | |
| grody | well, i only do it from the fileserver since it resides on two networks | [15:47] | |
| mercutio | if it's a question of not wanting to put too much effort in | [15:47] | |
| grody | STP is stupid fun | [15:47] | |
| mercutio | stp is a waste of time in home networks. | [15:48] | |
| grody | nah, routers/switches all do it, it works now it was done right
to a degree | [15:48] | |
| mercutio | my swithc still has it enabled heh | [15:48] | |
| grody | it knows when one port is saturated.. but only when it is literally savaged to hell
all my switches do full speed port port but some are crapper than others | [15:49] | |
| mercutio | i had problems with using wireless routers as switches
and wanting to do jumbo frames. | [15:50] | |
| grody | tp-link stuff.. cheap, but use atheros, and atheros stuff is usually pretty good | [15:51] | |
| mercutio | the switch c hips they use do jumbo frames :/
yheah i use tp-link stuff :/ | [15:51] | |
| m0unds | brycec | But I'm not a fan of where the project leadership is slowly creeping, not to mention one of them I find personally repulsive.
i wonder if it's the same dude i'm thinking of haha | [15:51] | |
| mercutio | they use that 8327N switch chip thing
that does hardware nat | [15:51] | |
| brycec | lol m0unds | [15:52] | |
| mercutio | and that no-one seems to know how to program properly yet | [15:52] | |
| grody | im guilty for that | [15:53] | |
| mercutio | y'know if i can pass over 500 megabit with my wireless router on it, and it has a slower than 800 mhz cpu
that must mean that via is slower than the cheap wirelss routers. | [15:53] | |
| grody | thats why i never release my code, it's shameful
i find openwrt is shyte for wifi vs. ddwrt on the same hardware but openwrt is more featureful | [15:53] | |
| mercutio | i had to copy a firmware image
scp firmware-3.bin_10.2.2.39.6-1 root@192.168.1.247:/lib/firmware/ath10k/QCA988X/hw2.0/firmware-3.bin | [15:54] | |
| grody | openwrt is sofa king easy to make | [15:55] | |
| mercutio | then it was fine. | [15:55] | |
| grody | i tinker so much for my devices with it | [15:55] | |
| mercutio | yeah i was going to build my own image
there's meant to be some transmit batching for atheros | [15:55] | |
| grody | these little hame clones im playing with for example | [15:56] | |
| mercutio | and i want to see if i can raise the speed :/
not cos i need to but default tp-link firmware does 600 megabit/sec+ | [15:56] | |
| grody | using a custom build i can make it a full ipv6 router, or a media server with usb storage support, or even a wireless webcam server
with the usb storage method, can use a usb pendrive for storage to make it a micro-oc pc* yea the default firmware on the now ddwrt did perform better but it lacked IPv6 and VLANs it's weird, in dd the first wifi (when i force HT40) says 300mbit.. but every VAP shows as 144.44mbit but yet will accept HT40 clients at (upto) 300mbit always confused me that | [15:56] | |
| mercutio | i want a vi that doesn't suck
but vim is kind of huge | [16:01] | |
| grody | like now, a VAP at 144.44 has a STA at 150 down and 75 up | [16:01] | |
| mercutio | that's for clients to it? | [16:01] | |
| grody | i'll let you into a secret...
i've been using linux since 1998, freebsd since 1999... i've only recently started learning vi(m) to the 144.44 VAP | [16:01] | |
| mercutio | i been using linux since about then too
and i started with joe but swithced to vim in like 99 | [16:02] | |
| grody | joe, pico, nano, edit
(edit is freebsd builtin) | [16:02] | |
| mercutio | i started with pine for email too | [16:03] | |
| grody | pine, then mutt | [16:03] | |
| mercutio | so that used pico
yeah i went to mutt too :) i still use mutt. | [16:03] | |
| grody | mutt is good i still have it too | [16:03] | |
| mercutio | in '99 i screwed up my fetchmail and setn a whole lot of mail to root@<my isp> | [16:03] | |
| grody | im still an mc whore too | [16:03] | |
| mercutio | oh it was bounces. | [16:04] | |
| grody | best fm ever
never liked fetchmail | [16:04] | |
| mercutio | neither, i ran my own mail server with dynamic dns :)
then i got a server in 2001 i think | [16:04] | |
| grody | always and still do think it's a twot | [16:04] | |
| mercutio | pentium pro running openbsd. | [16:04] | |
| grody | i had a freebsd 4.11 server for years, even when 6 was RELEASE | [16:05] | |
| mercutio | with screen/muutt | [16:05] | |
| grody | it never failed me until i went to update gallery2
it broke everything | [16:05] | |
| mercutio | i didn't even have lights out. | [16:05] | |
| grody | see i never used screen | [16:05] | |
| mercutio | it never gave me lots of issues. | [16:05] | |
| grody | i always suspend (ctrl+z), bg, do my thang, fg | [16:06] | |
| mercutio | but as spam started piling up, i found that i started getting more into swap
spamassassin etc is a memory hog and 64mb of ram only lasts so long ... | [16:06] | |
| grody | secret, mail to mta, dumb stattion with a decent client with spam filters and what not, do all the trickery on that client (forwarding and all)
always found that more easier than adding it all into the server | [16:07] | |
| mercutio | nah it's nicer on the server
then you can just remote in | [16:07] | |
| grody | use SPF, DNSBL etc in the MTA, but apply little on what is received.. if the client filtering (offsite) sees it good, resends it to a preferrfer email address which comes to a designated address with clean SPF and DKIM | [16:08] | |
| mercutio | sounds complicatged.
i just amavis/spamassasin works well enough and i use the same host for email and irc | [16:08] | |
| grody | the amount of spam and the rate limiting that google applies, it's what i've found workd | [16:09] | |
| mercutio | with the same tmux session
so i can easily see if various mail boxes get mail. i relaly hate google's spam filtering. it marks things as spam when they're not way too much. bloody annoying. i hate spam filters more than spam :) nothing worse than having to check spam folder regularly "just in case" | [16:09] | |
| mjp | i would ask for my money back | [16:10] | |
| mercutio | i only use gmail for supermarkets etc
that want to send me annoying html mails with specials that i may or may not feel like reaidng but that's the kind of thing that can end up in spam folder. and thre doesn't seem to be a setting to say "be leniant": | [16:10] | |
| grody | working with googles spams filters, i ensure i receive all the spam i intend for testing and applying/creating my own filteres
as soon as SPF/DKIM is all sound, Google will allow wtfever | [16:11] | |
| mercutio | http://joe.siegler.net/2013/03/turning-off-spam-checking-in-gmail/
oh you can disable | [16:12] | |
| grody | may work for what you receive
but not for what their MTA's accept | [16:12] | |
| mercutio | yeah gmail doesn't accept my mail sometimes
i bounce normal mail to them | [16:12] | |
| grody | they rate limit IP's that send bulk emails | [16:12] | |
| mercutio | and sometimes i have to bounce twice. | [16:12] | |
| grody | or appear to send bulk emails | [16:13] | |
| mercutio | maybe it's grey listing.
i should get on with thing anyway nice chat :) | [16:13] | |
| grody | they post a resonse, it's to limit unsolicited mail to protect users
im suppose to be rebuilding my server :P i got as far as postfix, dovecot and LAMP well, FAMP | [16:13] | |
| mercutio | heh
try nginx :) | [16:15] | |
| grody | meh
i like it but it doesn't i i seem to have apache where i want it | [16:15] | |
| .... (idle for 15mn) | |||
| *** | m0unds has quit IRC (Quit: brb) | [16:31] | |
| m0unds has joined #arpnetworks | [16:45] | ||
| ............... (idle for 1h13mn) | |||
| m0unds has quit IRC (Quit: WeeChat 1.1.1) | [17:58] | ||
| ........ (idle for 38mn) | |||
| m0unds has joined #arpnetworks | [18:36] | ||
| ..... (idle for 24mn) | |||
| m0unds | brycec: do you remember what the weechat config var is for setting the character inserted when a user speaks multiple times? | [19:00] | |
| brycec | Remember? No, but I can dig it up real quick...
weechat.look.prefix_same_nick = "⤷" (default: "") m0unds: ^ | [19:00] | |
| ....... (idle for 33mn) | |||
| m0unds | thanks! | [19:35] | |
| *** | m0unds has quit IRC (Quit: bork bork bork)
m0unds has joined #arpnetworks | [19:36] | |
| brycec | wb | [19:40] | |
| ............................ (idle for 2h18mn) | |||
| *** | toeshred has quit IRC (Read error: Connection reset by peer) | [21:58] | |
| ......... (idle for 41mn) | |||
| toeshred has joined #arpnetworks | [22:39] | ||
| ↑back Search ←Prev date Next date→ Show only urls | (Click on time to select a line by its url) |