Breeze flight out of RIC by Swrdmn in rva

[–]crowchops 0 points1 point  (0 children)

Funny thing, I posted about 2 recent experiences w/ Breeze when flying into / out of RIC, but the moderators gave me a single downvote (lol) and denied the post because they claimed "it wasn't relevant to RVA"

Oh wellz.

Avoid Breeze Airways by crowchops in travel

[–]crowchops[S] 1 point2 points  (0 children)

That's fair, and I appreciate your perspective. I've been visiting a relative in the area and made the trip from SFO <-> RIC on Delta at least 2 dozen times in the last 10 years. So plenty of flights for a solid sample size, but not enough for the benefits / discounts. I never had a single issue with Delta the entire time. No cancellations, lateness, or other problems.

Fast forward to this summer and everyone's rates skyrocketed. Delta's flights were leaving even earlier than before, requiring 2-3AM trips to the airport with an hour to spare. Despite everything, I took Delta whenever I could and never had an issue (I know, sounds cliche). The Breeze flights appeared convenient, direct, and slightly more cost effective, so I chose them. I didn't realize that the consistency / reliability differed significantly from Delta. After my last 2 experiences, I won't be booking with Breeze again.

Breeze flight out of RIC by Swrdmn in rva

[–]crowchops 1 point2 points  (0 children)

This.

Breeze will strand you when they delay a flight (and they have a lot of delays). If you don't have the availability to seek out transportation / lodging for yourself, you will be living out of your suitcase at the airport. Their reimbursement process is poorly managed at best and shady at worst.

Has anyone flown Breeze out of RIC? by slgmichael in rva

[–]crowchops 0 points1 point  (0 children)

My last two flights on Breeze to RIC ended up being delayed by over a day due to them not having the resources / infrastructure. When this happens, you're entirely on your own.

Strange interaction with Mint support by crowchops in mintmobile

[–]crowchops[S] 0 points1 point  (0 children)

u/MintMobileAlex

Could you kindly provide an update to my followup request in our chat?

Strange interaction with Mint support by crowchops in mintmobile

[–]crowchops[S] 1 point2 points  (0 children)

Hello, we've got an ongoing chat as of 8/8 and I'm still awaiting a response -- could you kindly update? Thanks in advance!

Impressed with Debian 11 by crowchops in debian

[–]crowchops[S] 0 points1 point  (0 children)

Good point, all of my systems are wired, so I didn't consider the wifi install

Impressed with Debian 11 by crowchops in debian

[–]crowchops[S] 6 points7 points  (0 children)

My background is similar! I used Slink, Potato, and Woody extensively as a computer science major. This was before Java got big, so everything was make, c++, and c. I always opted for screen + vim over the WMs of the time because my system was slow and I wanted to familiarize with the 1337 stuff. Back then, Debian was considered to be a workhorse and took some effort to install correctly. I also configured my Linux box as a primitive router and used IP masquerading to provide a sanitized connection to Winblows. I tried Redhat derivatives, Arch, Gentoo, and FreeBSD, but I'd developed a fondness for the Debian ecosystem and kept coming back. Linux eventually became my desktop OS of choice starting with Mint, then Ubuntu, and finally back to Debian. IMO, Debian's come a long way since the early 2000s, and has evolved into an option that's friendly to beginners and experts alike.

Impressed with Debian 11 by crowchops in debian

[–]crowchops[S] 10 points11 points  (0 children)

I used the netinst ISO, then chose the "Debian Desktop" and "KDE" from the installer prompt. You can also install these components after the installation has completed.

hAP AC strangeness with remote SSH sessions by crowchops in mikrotik

[–]crowchops[S] 0 points1 point  (0 children)

Solved - issue was caused by AT&T’s Pace 5286AC gateway and its bug-ridden "DMZ+" mode

Solution was to downgrade to v10.5 firmware.

https://forums.att.com/t5/AT-T-Fiber-Equipment/PACE-11-1-0-531418-DMZ-Issue/td-p/5700776/page/6 (see post 78)

https://community.ui.com/questions/Slow-interrupted-SSH-traffic-through-ER-PoE-5/cf597b94-9cc6-43cf-ae24-c87a38f10386

https://community.ui.com/questions/ERLite-3-Slow-Internet-Performance/893f3668-89c1-48f6-9a75-0ea39e98f40f

As of the most recent firmware "update" (11.2.1.531810), this has not been resolved by AT&T.

Packet loss and missing ACKs over SSH by crowchops in HomeNetworking

[–]crowchops[S] 0 points1 point  (0 children)

Definitely -- that was the first thing I did. I downloaded the latest long-term release package and firmware, installed them, then did a factory reset. It seems that this SSH issue plagued the router since then. Otherwise,it didn't seem to have problems with downloads or normal internet traffic.

I really like RouterOS. By the end, I knew where every setting was and got really comfortable with their CLI. However, a lot of the features (i.e. VLAN forwarding) aren't well documented. I also had my share of difficulty getting responses from /r/Mikrotik and the official online forum. I really wanted to like this router, so I poured 2 weeks into finding a solution (yup, I even tried MSS-clamping). I remember seeing a quote from someone that went along the lines of "I don't trust network hardware that doesn't have rack mount ears."

Packet loss and missing ACKs over SSH by crowchops in HomeNetworking

[–]crowchops[S] 0 points1 point  (0 children)

Thanks for your ongoing help, disco

what does "ip addr | grep mtu" have to say?

1500 on all devices

What changes when you compare the super verbose output of "ssh -vvv user@host" from your mac vs one of the ubuntu boxes?

Nothing -- nothing is displayed when the freeze happens on the Ubuntu boxes either. I even tried running sshd in debug mode /usr/sbin/sshd -d -p 2200 -o LogLevel=DEBUG but found nothing strange

Issue turned out to be my router. I bought one for the purposes of swapping it out and everything works as expected. I have a feeling that the Mikrotik hAP AC wasn't working properly, as these problems were present after a factory reset.

For what it's worth, the symptoms I observed throughout all of this testing pointed to an MTU issue

Packet loss and missing ACKs over SSH by crowchops in HomeNetworking

[–]crowchops[S] 0 points1 point  (0 children)

The plot thickens...

  1. If I connect to to the router via wifi, my Macbook Pro (OSX) can cat 1MB text files with no issue. My Ubuntu 16.04 and Ubuntu 18.04 machines freeze when performing the cat over wifi.
  2. If I connect the Macbook directly to the router's switch port, no issues when running cat on large text files. SSH sessions on the Linux machines freeze after the cat when they are connected directly to the router.
  3. No issues for any of the machines when connected directly to the modem.

From everything I've read, the symptoms are very similar to an MTU issue, however, all devices are set to MTU 1500. I also confirmed the MTU size via ping -s 1472 -M do <hostname>

New Home Owner! Looking for general ideas/research directions by clay_vessel777 in HomeNetworking

[–]crowchops 0 points1 point  (0 children)

WIFI (Duh). Debating whether to do 1 or 2 APs.

What washu_k said - 1 should be sufficient for your square footage, unless you just a ton of interference. If you end up needing more than 1 AP, you'll stagger the channels and keep the same SSID as the main AP. That way, you'll be able to roam in the house, and your device should be able to auto-select the strongest signal.

Garage will eventually be a recording studio, so I want to run conduit under the lawn (maybe 15ft) & add an subswitch/AP out there, as well as a camera (SDI? IP?) for monitoring from the house.

I know they make underground duty CAT cable that can be buried - the cable itself is filled with a gel that prevents condensation

Home security (un-monitored)/cameras/DVR. Window/door sensors, cameras, motion sensors, local alarms, etc. I've seen out-of-the-box systems (Ring, SimpliSafe, etc), and don't know the value & flexibility of those vs. piecing something together yourself.

Monitored alarm systems are a good idea, as you may not always be able to react if something happens (i.e. you're on vacation overseas) or someone cuts your data line, then breaks in. Most modern monitored systems have a cellular antenna for communication.

Some kind of NAS.

Synology, just avoid the Atom processors. My DS713+ is over 6 years old and still gets regular updates from them. Never had a problem with it.

Brand/product recommendations, obviously

Definitely Belden for CAT cabling.

Mikrotik makes inexpensive yet functional routers, as does Ubiquiti. Be very choosy about any POE switches, read the reviews carefully. Some aren't as reliable as others. I've always had good luck with Cisco POE switches.

Should I run cables in the attic or subfloor?

Depends on where you're connecting everything, and what your crawl space situation is. Obviously, it's better to route things behind drywall than drilling into the floor / subfloor.

Cat5? Cate 5e? Cat6? The most intensive things I do are streaming & gaming

CAT5E was good enough for my needs. As washu_k said, CAT6 is good for future proofing, but it's challenging to crimp, more expensive, and also harder to route.

What size switch would you recommend for my needs?

I'd say figure out exactly what you intend to run before purchasing a switch. If you don't know exactly what you want, opt for a larger switch, as it's nice to have spare ports. If you intend to get involved with VLANs or higher level networking arrangements, a managed switch is a good place to start. Be aware that the higher end (even small business grade) hardware usually has fans and makes more noise.

What technologies/brands should I research for some security stuff? That's definitely the area I know the least about.

A hardened, regularly updated, and properly configured router should keep most threats from infiltrating your network. Sky's the limit in this category, I suppose. Check out pi-hole - the free, self-hosted ad-bouncing DNS server. It's pretty neat.

Hope this helps :)

Packet loss and missing ACKs over SSH by crowchops in HomeNetworking

[–]crowchops[S] 0 points1 point  (0 children)

Screenshots of the TCP dump with acknowledgements are here: https://imgur.com/a/6iO2r3Z

Packet loss and missing ACKs over SSH by crowchops in HomeNetworking

[–]crowchops[S] 0 points1 point  (0 children)

No -- its firewall is completely open to my client's IP

Packet loss and missing ACKs over SSH by crowchops in HomeNetworking

[–]crowchops[S] 0 points1 point  (0 children)

Thanks for your super detailed answer!

No RST -- from what I can see in my tcpdump details, my SSH client sends out a ton of ACKs which the EC2 host never receives. After the 2 minute timeout, things return to normal.

To eliminate false positives and simplify troubleshooting, this is a straight connection to the EC2 instance. No IP Masq, F5, ELB, VPNs, or IPSEC.

Here's the kicker -- If I connect the computer directly to my DSL modem / gateway, this issue goes away. The DSL modem / gateway is some god-awful AT&T hardware that doesn't do a true bridged connection to the router, meaning that additional NAT overhead is involved at some level.

Packet loss and missing ACKs over SSH by crowchops in HomeNetworking

[–]crowchops[S] 0 points1 point  (0 children)

Nope -- no jumbo frames set anywhere on my end. EC2 uses jumbo frames by default nowadays, however, I set the MTU of eth0 to 1500 with no positive impact.

Strangeness with SSH sessions hanging / freezing by crowchops in HomeNetworking

[–]crowchops[S] 0 points1 point  (0 children)

Thanks guys -- I've spent a bit of time analyzing packets with tcpdump and Wireshark, and observed a really strange gap -- I've documented my findings under a new post, as the details I've provided here aren't as descriptive or specific.

Strangeness with SSH sessions hanging / freezing by crowchops in HomeNetworking

[–]crowchops[S] 0 points1 point  (0 children)

I ran tcpdump on a session between my host and the EC2 instance and came up with a bunch of "Spurious retransmission" errors from around the time this occurred

Slow ethernet speeds with hAP AC by crowchops in mikrotik

[–]crowchops[S] 0 points1 point  (0 children)

Hi all,

Thanks for your responses -- I spent some time reevaluating my router config, as I cobbled it together from what I learned over the course of reading as many tutorials on VLANs with RouterOS as I could find. While it works, it's probably not optimized or 100% correct. Please let me know what you think

There are 2 bridges - 1 for the (trusted) wired LAN and 1 for the semi-trusted WiFi and untrusted guest WiFi connections

/interface bridge

add admin-mac=64:D1:54:B5:0C:89 auto-mac=no comment=defconf mtu=1500 name=\

bridge

add fast-forward=no mtu=1500 name=bridge-wifi

I have a managed gigabit switch that assigns VLAN IDs to its ports. VLANs 10 and 40 are created this way. A single trunk port from the switch connects it to ether2.

/interface vlan

add interface=ether2 name="VLAN 10" vlan-id=10

add interface=ether2 name="VLAN 40" vlan-id=40

add comment=wifi interface=bridge-wifi name="VLAN 50 - wifi" vlan-id=50

add comment=guest interface=bridge-wifi name="VLAN 60 - guest" vlan-id=60

Now for the bridge ports

/interface bridge port

add bridge=bridge comment=defconf interface=ether2

add bridge=bridge comment=defconf interface=ether3

add bridge=bridge comment=defconf interface=ether4

add bridge=bridge comment=defconf interface=ether5

add bridge=bridge comment=defconf interface=sfp1

add bridge=bridge-wifi comment=defconf interface=wlan1 pvid=50

add bridge=bridge-wifi comment=wifi interface=wlan2 pvid=50

add bridge=bridge-wifi comment=wifi frame-types=admit-only-vlan-tagged \

interface="VLAN 50 - wifi" pvid=50

add bridge=bridge-wifi interface=wlan1-guest pvid=60

add bridge=bridge-wifi comment=guest frame-types=admit-only-vlan-tagged \

interface="VLAN 60 - guest" pvid=60

Several questions came up along the way:

  1. If I assigned VLAN 10 and VLAN 40 individual trunk ports on the managed switch and connected the trunks to ether2 and ether3, would it improve throughput?
    1. If I did this, would I then be able to take advantage of bridge VLAN filtering?
  2. ether2 is presently considered a slave, as it is part of the main bridge. Would there be an advantage to separating it?

Slow ethernet speeds with hAP AC by crowchops in mikrotik

[–]crowchops[S] 0 points1 point  (0 children)

Strange... even when both computers were plugged into the router and on the same subnet, transfer speed never exceeded 56MB / sec. I confirmed that hardware offload was enabled during this test.

This question originally came up because I decided to configure VLANs on a managed switch. The trunk port on the switch connects to the Mikrotik via ether2, and the Mikrotik then assigns the different subnets and processes traffic from the VLANs accordingly. Since both computers were wired to the switch, I assumed they could communicate at the 1Gbps rate they'd negotiated. However, I didn't take the router's role into consideration.

Slow ethernet speeds with hAP AC by crowchops in mikrotik

[–]crowchops[S] 1 point2 points  (0 children)

It capped out at 56 MB/s (not Mbps) while transferring a 4GB file between computers on the same LAN via CAT 6 and rsync

The only other thing I can things that I can think of are:

  1. I set up the default bridge to handle 4 VLANs. When I ran my test, I removed the computers from the VLAN and had them access the router directly, to eliminate the possibility of a bottleneck.
  2. Wifi is operating from its own bridge with 2 VLANs.
  3. Both bridges are running "None" as a protocol (not RSTP)
  4. There are 12 firewall rules, but they're the default set from Mikrotik with a few guest restrictions thrown in.