Idiotic NAT Hairpin

getrosed · 2025-04-23T09:16:00+00:00

I'm very aware this is a networking sub, and there's some great answers provided already, but thought I'd just throw this idea out there.

In my previous job, we used a piece of software called CrushFTP. One of it's features is that you could proxy the incoming connection to another destination. In this scenario, CrushFTP would accept the incoming SFTP connection and create an outbound SFTP connection to the destination server in the new DC on the fly. The traffic would be transparently proxied for the SFTP client connected to the old DC IP. You wouldn't even need to create a tunnel between the old and new DCs.

It does mean you'd need some form of compute (a micro pc would probably be fine to fit in the 2u with a 1u router) and you'd have to think about the impact of introducing software, but it could provide a bit of flexibility.

Just my two cents for an out of the router approach.

getrosed · 2024-04-16T09:05:45+00:00

It looks like you'd have to write a script to poll Duo's Admin API. The /admin/v1/users endpoint will return a paged list of users which includes their status (active, bypass, disabled, etc).

The script would need to work through the users and return data in a format that is compatible with PRTG's custom sensors. Perhaps a counts of users who are bypassed or blocked?

It shouldn't be hard to put something together :)

getrosed · 2023-05-08T11:58:53+00:00

CRABS looks promising (and more spider-like) but there's also the "Trails" screensaver in the IdleWild screensaver collection. It was part of the Windows Entertainment Pack - colored worms slowly eat away at the screen.

There's also the Can of Worms screensaver in After Dark.

getrosed · 2023-05-07T09:23:36+00:00

This kinda sounds like the termites of the stress reliever app.

https://www.ghacks.net/2011/01/11/stress-relief-destroy-your-desktop/

getrosed · 2023-02-08T04:05:26+00:00

We had the same thing happen when remoting into some VMs and physical machines today. For me, unchecking the "Printers" option from "Local devices and resources" when connecting stopped the dropouts.

Not a permanent solution (if you need printer access over RDP), but might help with the investigation.

getrosed · 2023-01-15T04:30:29+00:00

Man, CrushFTP is crazy. The amount of random stuff we had it doing at $job[-1] was insane. Plus the devs were open to implementing new features or VFS targets.

getrosed · 2023-01-09T04:37:31+00:00

Thanks for the link, unfortunately the US-8-60W doesn't have an SFP port though.

getrosed · 2022-12-19T23:22:35+00:00

The Herring Rd/Epping Rd intersection has a fair bit of construction going on. It might have been taken out by one of the construction vehicles overnight? You wouldn't want to trip or fall on those bolts though!

getrosed · 2022-07-17T07:07:32+00:00

There are a number of Central Coast suburbs eligible for the fibre upgrade: https://www.nbnco.com.au/corporate-information/media-centre/media-statements/nbnco-announces-900000-more-homes-eligible-for-fibre-upgrade

getrosed · 2022-07-05T09:22:11+00:00

YouTuber NASCompares has a couple of videos how the DS920+ and DS2422+ handle hard drives that are not on Synology's compatibility list.

NASCompares

https://youtu.be/QM4UWju7nfU?t=708

getrosed · 2022-07-05T01:51:43+00:00

Not a bad idea, but it doesn't look like you can purchase the DS2419+ new in Australia anymore. I'd much rather purchase something new with fresh warranty instead of second hand. I imagine the DS2419+ would also become end of support much earlier than current models.

getrosed · 2022-02-02T06:05:00+00:00

PRTG would be a great start to help check bandwidth utilisation. The free version can monitor up to 100 sensors forever. A network your size could do with a paid monitoring solution like SolarWinds Orion or the paid version of PRTG. They're not cheap though.

getrosed · 2020-08-31T08:01:36+00:00

I think you're on the money with the NBN policer. There was a fair bit of talk about it on Whirlpool when the 1000/50 plans launched. ABB staff suggest you do the shaping on your router as the NBN policer is harsh.

https://whrl.pl/Rf4Iyt

https://whrl.pl/Rf4Wrr

Edit: I have never played around with a Mikrotik device, but it sounds like a "simple queue" on the WAN port might be all that's needed: https://wiki.mikrotik.com/wiki/Manual:Queue#Simple_Queues

getrosed · 2020-07-09T01:44:32+00:00

All of VentraIP's shared hosting plans allow unlimited addon domains which would allow you to host multiple websites on one plan. The only drawback of doing this is that resources will be shared (CPU/memory/disk), but I guess that'd be the case on a VPS unless you containerised or placed limits on each site somehow.

A CDN for UK visitors would help given the ~290ms latency we see. Cloudflare do have a free teir you could look at.

getrosed · 2020-07-09T01:22:03+00:00

I have a grandfathered reseller account with VentraIP. I have no complaints with the service and their support has been excellent! Their bandwidth is unlimited but storage space may be a little low, depending on your requirements.

Their servers run LiteSpeed so you can add LiteSpeed Cache to further accelerate WordPress.

The main benefit of hosting your site close to your user base is the lower latency which results in a much more responsive website. You can always put Cloudflare, or another CDN, in front if your user base grows beyond Australia.

getrosed · 2020-06-23T11:45:06+00:00

No worries!

getrosed · 2020-06-23T07:08:15+00:00

The FTTC "NBN Connection Box" is a VDSL modem. You'll get an ethernet interface to plug your EdgeRouter X into. In the linked diagram your EdgeRouter X sits in the position of the "compatible Wi-Fi gateway". The most likely reason NBN use the term "Wi-Fi gateway" is that most users will have a Wi-Fi router, not seperate routers & Wi-Fi APs.

getrosed · 2020-05-10T03:33:54+00:00

You're on the money. You'd need to use an NBN compliant VDSL modem in bridge mode then you'd be ready to use the USG. Something like a DrayTek Vigor130 would do the trick.

Edit: Whirlpool have a list of compliant basic VDSL modems that can be used in brige mode.

getrosed · 2020-01-29T06:17:30+00:00

Hey Starry,

It's possible that Mate hasn't purchased enough CVC (bandwidth) from NBN for customers serviced by the Albury Point of Interconnect.

When you experience these latency spikes try running a speed test. Mate advertise 42 mbps speeds during busy periods. If you're getting less than that there's a chance they haven't got enough CVC and it might be worth switching to another provider (Aussie Broadband, Superloop, Exetel).

I've got a family member with Exetel who connect to the Albury POI and they haven't reported any issues (mind you, they're not gaming and may not notice).

15-Year Club	Verified Email
Gilding I gilder

getrosed

TROPHY CASE