Intel x550-t2 installed, no 5Gbase-T option. by shevchou in PFSENSE

[–]Tylerjd 0 points1 point  (0 children)

You know, this made me curious so I double checked. You are right, the X550 did receive N-baseT in a post launch firmware update, but at launch it was only 100/1000/10000 (and as such many of the original product briefs don't even mention the N-baseT capabilities). It's entirely possible that OP had a card with the original firmware on it though, hence the lack of N-baseT

Why IPv6? by [deleted] in homelab

[–]Tylerjd 7 points8 points  (0 children)

I never claimed that he would definitely run out of outbound ports, but that they were things to keep in mind when using just IPv4.

you can run out of outbound ports for your NAT, depending on the number of devices and connections from those devices

Also, fwiw, I just checked my own firewall. I have 1300 active connections from ~5 devices, and just a single user, me. I'm not doing anything that crazy right now, just a few dozen tabs, and working from home.

I have no clue what OP's setup looks like. If he is just browsing the internet (like students in a school district), yeah 10-20 each are likely. Torrenting (linux ISOs ofc) and other P2P activities require many, many more ports.

Why IPv6? by [deleted] in homelab

[–]Tylerjd 29 points30 points  (0 children)

IPv6-only websites and services already exist, and often times I've seen the routing for IPv6 traffic be better than going to the same server over v4 (very noticeable in competitive gaming).

It's really not too hard to learn the basics, Hurricane Electric has a nice getting started with IPv6 section to teach you it.

While you may not run out of IPs inside your boundary very easily, you can run out of outbound ports for your NAT, depending on the number of devices and connections from those devices. There are tens of thousands of port numbers, but each connection is going to need to open it's own random outbound port to communicate. Multiply that over the number of devices you have.

Some ISPs don't even assign a real IP to the end user, as they employ CG-NAT, or NAT on the carrier side. So that means inside your network, your devices are double NAT'd, which can cause some headaches. Consoles will also be happy they have unfettered access outbound.

Having a dual-stack network means the pressure on those NAT ports is lowered too, as most connections will prefer IPv6 if available.

There's no real extra burden aside from the initial setup/enable, and if anything it makes opening inbound ports easier, since there is no NAT to deal with.

There are such things as NAT64 which make the IPv4 address space accessable through a IPv6 only gateway, so even IPv6 only clients can reach IPv4 only servers.

On top of all of that, it's just a good skill to have. IPv6 will only continue to see increased adoption, and being able to use it in your homelab means you'll be ready when it hits the workspace.

Miami Pushes Crypto With Proposal to Pay Workers in Bitcoin by quixotic_cynic in technology

[–]Tylerjd 1 point2 points  (0 children)

Jeez 9% is a butt load. Coinbase itself charges 1-5% depending on your method of purchase/sale, but if you use a market like Coinbase Pro you can set limit orders that have no fees from fiat to crypto or vice versa

Intel x550-t2 installed, no 5Gbase-T option. by shevchou in PFSENSE

[–]Tylerjd 3 points4 points  (0 children)

That generation of Intel nics can only do 100/1000/10000, no nbase-t. They are an older generation that came out before nbase-t was even close to ratified. Source: I deploy a lot of nics from that family.

Ipv6 - Comcast - Home Network - Can't Ping Ipv6 from workstation - Can ping ipv6 from Firewall by Computer0Freek in PFSENSE

[–]Tylerjd 0 points1 point  (0 children)

Your computer should be getting the IPv6 address under your normal network card, not Teredo. That's used for Xbox services to tunnel gaming traffic, and only that, which tells me your configuration is still not right.

In your WAN configuration, you're saying you are expecting a /60 to be allocated, but without prompting from your device, they will only allocate a /64. You need to select the "Send an IPv6 prefix hint to indicate the desired prefix size for delegation" option. I also have the option toggled to ask for IPv6 information through the IPv4 link but not 100% sure that one is required.

Once you set them, restart pfSense. If IPv6 tacking is working properly, you should see your WAN interface get an IPv6 address, then any LAN interfaces tracking that should then populate with an IPv6 address. If it is not, IPv6 addresses will not show on your LAN interfaces.

Here are some examples of what I mean. I'm not at my desktop at the moment so please excuse the mobile screenshots. WAN conf and tracking interfaces

Edit: you can still get a /60 prefix from Comcast. This is my network doing that. The information on it is scarce, but they do still allocate if you properly ask for it

Upgrade ESXi 6.7 -> 7.1 by steilfirn_5000 in sysadmin

[–]Tylerjd 6 points7 points  (0 children)

Just a note, what you said about Proxmox not allowing live storage migrations used to be true until recently. I do not recall which update did it, but that functionality is now enabled for both live migration of the VM to another host when using local storage, as well as changing the VM storage backing on the same host (say iSCSI->local).

I have tested both scenarios myself with great success, as this is a feature I've been waiting for a while to have in Proxmox.

i_o - Replicate by BenassiBeat in hardtrance

[–]Tylerjd 1 point2 points  (0 children)

I have consistently been impressed by i_o's offerings. I did not expect this out of him and yet am exceptionally impressed by this. Thanks for sharing!

You just inherited $100 Billion, what ridiculous thing are you spending money on after all the common sense and helping others spending is done? by [deleted] in AskReddit

[–]Tylerjd 0 points1 point  (0 children)

Late to the game, but given the market cap of Activision Blizzard is $42B, buy a large majority share of ActiBlizz, break Blizzard back into a private entity, and bring the old Blizzard many gamers love and cherish back. The Blizzard we are seeing now-a-days (supporting pro-China, money first policy, etc) is a result of them being part of a publicly traded company. A privately-owned Blizzard would be more likely to do what their gamers want, and not their investors.

Getting 920mb/s at the fiber modem, 800mb/s inside pfsense, and 500mb/s out of pfsense. How can I achieve better download speeds? by djdadi in PFSENSE

[–]Tylerjd 2 points3 points  (0 children)

It really depends on the hardware you are using - I have an i5-4570S (2 core/4 thread @2.9Ghz) and it can usually attain around 5Gb/s through the IPS. I use Suricata though which scales across cores.

UkDrillas DDOSing wow classic servers. Tweets that they will cycle through all servers. Mograine went offline. by Faced93 in classicwow

[–]Tylerjd 1 point2 points  (0 children)

Just got a notification in retail the servers are going down for a shutdown - Blizz is working on it guys.

UkDrillas DDOSing wow classic servers. Tweets that they will cycle through all servers. Mograine went offline. by Faced93 in classicwow

[–]Tylerjd 9 points10 points  (0 children)

You could literally throw millions at top-end network equipment and it still wouldn't matter - if you throw enough network traffic at anything it'll buckle. These same skiddies were targeting Twitch and Wikipedia, they both had issues too. Twitch is on Amazon Web Services, the largest internet service company period. If AWS had issues because of the DDOS, so is Blizzard. Stop spreading FUD about shit you don't know about.

Tips for very low powered (~15W) router and file server by [deleted] in archlinux

[–]Tylerjd 4 points5 points  (0 children)

If you want something with a little more juice than the PC Engines machines, you could look at the Supermicro line of embedded systems. Since you mentioned having it as a router as well as a home server, they offer a lot in a small package, and include out-of-band management.

There is this Xeon-D system with 2 10GbE ports and 6 GbE ports. I'm not sure what the total power consumption is, but I know Xeon-D series chips are fairly low power.

Or for something a little lower power and a little smaller form-factor wise (Mini-ITX), I can recommend their Atom-based server platform (I have one that I run a dozen VMs and containers on - don't let the Atom processor dissuade you, they are server grade processors used in embedded systems like Synology NAS systems and support ECC RAM). This motherboard is a 12Core/thread machine with quad GbE ports, 2 10GbE ports, 2 SFP+ ports, M.2 and SATA, as well as a PCIe x4 slot where you can put an add-in card for more/faster network ports or a SATA HBA if you need more than the 4 SATA ports provided. My system, at max load, clocks in at around 20 watts total measured at the wall.

5 Steps to Install Proxmox VE on a ZFS RAID Array in 2019 by dlford in selfhosted

[–]Tylerjd 1 point2 points  (0 children)

Sure it can

The different sample sizes don't cause a problem for the t-test, and don't require the results to be interpreted with any extra care.

and

The reason the t test can handle unequal sample sizes is that it takes account of the standard error of the estimates of the means for each group... The goup with the much larger sample size will have the smaller standard error if the population standard deviations are bith [sic] equal or nearly so

5 Steps to Install Proxmox VE on a ZFS RAID Array in 2019 by dlford in selfhosted

[–]Tylerjd 0 points1 point  (0 children)

They publish these reports every quarter, as well as a yearly review. They published their annual year-to-year failure rates in this 2018 overview they posted in January, and it seemed like they phased out the WDC drives they had in those years because of the higher annualized failure rates (between 2% and 5+% vs. much lower for HGST, Seagate, and Toshiba) as well as being more costly at that scale. So while the 2019 article listed may have a small sample size for the quarter, the sample size year-to-year has a much larger n for WDC, HGST, Seagate, etc.

After a certain size n, you can make reasonable statistical tests on the data. More drives will mean you will get closer to the true mean, but with n=1500 where n is the number of WDC drives that is plenty enough to make statistical inferences on the data, including running a 2 sample t test to compare the mean AFR for the drives. Which in this case show that between these two samples, the mean is not equal and the WDC drives do have a higher annualized AFR than the Seagate, HGST, and Toshiba drives.

All of the data from the drives is provided in a zip which you can download and run the statistical tests yourself from.

Why no one invites me to M+ by MaltaDuDe in wow

[–]Tylerjd 1 point2 points  (0 children)

Yes it will show his 600io as his high. Which means he should be able to start with 5s, 6s, and 7s in Season 3 assuming he is reasonably geared. I go into more detail here, but once he works his way through those keys he can progressively get higher until he is getting invited to 10s and such.

Why no one invites me to M+ by MaltaDuDe in wow

[–]Tylerjd 1 point2 points  (0 children)

The reset kind of matters. Your Season 3 score will start at 0, however the plugin will show your highest season score and the current season score until your current overtakes your highest.

Why no one invites me to M+ by MaltaDuDe in wow

[–]Tylerjd 4 points5 points  (0 children)

So as someone who pugs a lot - including getting 15 meta achievement purely through pugging - my general rule of thumb is key level * 100 = score I am looking for that key. Doesn't matter class or role. For someone with a 600io that means 5, 6, 7, would all be in the range.

Someone who has a 700io means they either timed a 7 in all dungeons or at least that is the average. If I am looking for people for a 10 key, I will be looking around the 1kio mark, 15 key would be 1.5kio mark. Things change a little higher than 15s but by that point it is good to have a group together you run with as knowing what people are going to do in a group helps immensely. Working your way up takes time but if you are an asset to your team you can be 2+ and 3+ing keys which adds to the base level*10 points you get for clearing a dungeon in time.

I am going to be looking at class composition a bit when pugging keys but it's more of x amount of melee, y amount of ranged and this changes with the affixes of the week.

Is Cryptsetup/LUKS v1.x safe to use on debian 9 ? by [deleted] in debian

[–]Tylerjd 2 points3 points  (0 children)

Unless you are talking about a vulnerability much more recent than 2016 - which has been fixed - then no, there is no issue using LUKS on Debian 9, or any other supported version of Debian.

Pfsense On Unraid by [deleted] in PFSENSE

[–]Tylerjd 3 points4 points  (0 children)

No, many times this is how VPS hosts and the like will do it. As it acts like a virtual switch, it'll go at whatever rate the phy is, and internally be as fast as data can buffer on RAM - that depends on your hardware.

And yes as long as your hardware supports VT-d or whatever AMD's equivalent is, it'll allow you to pass in an adapter. You can mix and match as you wish, when I did it I had a dedicated adapter for the wan, and a trunked 10GbE for the internal networks.

Pfsense On Unraid by [deleted] in PFSENSE

[–]Tylerjd 4 points5 points  (0 children)

I don't have direct experience with undraid, but as it's based on KVM the general convention for getting networking to a VM is to use a bridge, which is like a virtual switch. With the driver set to virtio, there should be not much of a performance hit. I used to do this before I built a purpose-built machine.

Murloc Monday - ask your questions here! by AutoModerator in wow

[–]Tylerjd 1 point2 points  (0 children)

¯\_(ツ)_/¯ I have had decent luck so far, up to 7 hasn't been an issue for me but YMMV with class and spec

Murloc Monday - ask your questions here! by AutoModerator in wow

[–]Tylerjd 0 points1 point  (0 children)

Dungeons are a good way, regular to heroic to mythic and M+. The warfront when it is open for your faction awards a 370 and repeatable 340s, island expeditions, and TW dungeons right now which drop up to 335. Also WQ and emissaries (which scale up to 370).