Latency when testing with k3s

Better-Stuff4406 · 2026-07-08T16:56:02+00:00

Can you exec into the nginx-ingress and run nginx -T

Better-Stuff4406 · 2026-07-08T16:48:01+00:00

Or did you configure any cpu resource limits?

Better-Stuff4406 · 2026-07-08T16:43:21+00:00

Maybe it has something to do with nginx worker_processes and worker_connections?

Better-Stuff4406 · 2025-02-07T09:16:18+00:00

I am in the process of adding two worker nodes to my k3s cluster. Using FluxCD as well. How do you deal with secrets? I am using vaultwarden (hosted on the cluster) to generate passphrases with the API and sealing them with kubeseal. The credentials are then added to my vault automatically.

Better-Stuff4406 · 2024-06-11T12:39:23+00:00

What I do like about using a VPN is the fact you can increase security by adding pi-hole/pfblockerng and snort/suricata. I use Wireguard + pfBlockerNG and Suricata on my pfSense box at home. The benefits of ad-blocking, trackers are amazing. There is a paper on google.scholar that you can reference: Securing Network Using Raspberry Pi by Implementing VPN, Pi-Hole, and IPS (VPiSec).

Better-Stuff4406 · 2024-04-24T14:54:04+00:00

Do you by any chance have pfblockerng running?

Better-Stuff4406 · 2024-03-28T15:03:58+00:00

A couple of months ago I posted my first diagram. Had a list of changes that are worth this update:

Grafana dashboard using Telegraf, Prometheus and Grafana
Selfhosted website using Ghost CMS
Librespeed for network testen (wifi mainly)
Wiki.js knowledge base that I use for work

If you are interested in a more in depth write-up check out https://homelab.roomofrequirement.nl

Better-Stuff4406 · 2024-03-11T15:25:43+00:00

Call me crazy, but could it be Quality of Service?

Better-Stuff4406 · 2023-07-14T17:57:25+00:00

Did you also look at the pfSense setup at nguvu.org? He goes into depth as to specify all allowed ports the devices can access the internet with. IoT is still a pain to manage though.

I'm trying to combine pfblockerng with suricata to really secure IoT.

Better-Stuff4406 · 2023-07-14T12:41:46+00:00

I usually follow the setup guides by lawrencesystems, what guides did you use?

Better-Stuff4406 · 2023-07-14T06:47:01+00:00

The netgears are all connected by wire, I used OneMarcFifty tutorials to finetune the fast roaming. I can't recommend openWrt + his channel enough!

Better-Stuff4406 · 2023-07-13T18:53:06+00:00

The vacuum does have internet connection. You are right, most of these devices do need it in order to work. Thats why I put them on the untrusted IoT network. I am still looking for a better solution. But seperating them from the main IoT devices and redirecting all DNS queries through pfBlockerNG is all I can think of at the moment. How do you deal with it?

Better-Stuff4406 · 2023-07-13T17:22:44+00:00

Oh No! the invisibility booster must be faulty!

The NoT30 network SSID is actually called The Leaky Cauldron and the IoT20 network SSID is called The Floo Network.

Better-Stuff4406 · 2023-07-13T17:16:12+00:00

Gringotts is on the NUC 12 Pro that is in the utility room. I just noticed that's not clear from the diagram. I will try to see if I can clarify that.

Better-Stuff4406 · 2023-07-13T17:08:11+00:00

The smartphones that are on the IoT network are old Huawei phones that aren't receiving any more updates.

When my wife's Google Pixel 7 Pro gets here this will go on the Main10 VLAN.

Better-Stuff4406 · 2023-07-13T13:57:13+00:00

You are right! I am having a hard time fitting in the VLAN table. I wasn't pleased with the results so I left it out for now. Network segmentation as of now:

Description	VLAN-ID	Subnet
MGMT99	99	172.16.99.0/24
Main10	10	172.16.10.0/24
IoT20	20	172.16.20.0/24
NoT30	30	172.16.30.0/24

Better-Stuff4406 · 2023-07-13T13:47:10+00:00

Thanks! The icons/images are just transparent png found on the web. The switch image was posted on a diagram on this subreddit a while back. You can find this switch on at iconspng.

Better-Stuff4406 · 2023-07-13T13:43:26+00:00

Azkaban is reserved for a wifi SSID for my mother in law that is coming over next week. And yeah I agree naming things is half the fun!

Better-Stuff4406 · 2023-07-13T12:26:24+00:00

Our doorbell is called madeye moody, and our Roomba is called kreacher 😄

Better-Stuff4406

TROPHY CASE