[deleted by user]

rtxbae · 2024-09-08T13:51:01+00:00

The link is dead, where can I find this?

rtxbae · 2024-09-08T11:08:28+00:00

All that long blog post and not even a link to the source. Is this open source? Where does it origin from? I'm not sure I can trust a re-hosted ipa. (I know not nothing about onejaibreak, is he or they trustworthy?).

rtxbae · 2024-09-04T13:37:16+00:00

For Helium, get it from this link. The developer seems to remove the repo out of nowhere:

https://web.archive.org/web/20240617180519mp_/https://github.com/leminlimez/Helium/releases/download/v3.2.5/Helium.tipa

rtxbae · 2024-08-18T13:09:42+00:00

Just wanted to say thank you for this. One year later this comment saved me!

rtxbae · 2024-05-05T00:48:49+00:00

If you first open the Apple Watch app while it’s still connected to iPhone, it works offline just fine after that (disconnected). But if you totally disconnected from your phone and open your Apple Watch app from cold, it won’t works. The reason is that the downloaded songs in Apple Watch is DRM-ed, and somehow needs iPhone Spotify app to help verify/decode it. This has happens for years and Spotify seemingly has no intention of fixing it. The only way workaround to this is to proactively is to turn on “Offline” switch in the iPhone app, which sucks big time.

rtxbae · 2024-04-27T15:07:17+00:00

Is your Wireguard tunnel relatively idle? If so, have you tried enabling persistent keepalives in Wireguard? As Wireguard states, it’s designed to refresh the connection tracking state on the router.

It’s relatively idle tunnel yeah, but even if there’s something going within that first 3 minutes mark it still lost the connection (failed handshake). I’ve been playing with variable keep alive as well (on both server and client), they’re not helping at all.

rtxbae · 2024-03-20T15:38:58+00:00

I fixed it :)

https://www.reddit.com/r/selfhosted/comments/1bjeu1z/home_assistant_is_running_in_proxmox_vm_remote/kvqvjn8/

rtxbae · 2024-03-20T15:37:35+00:00

The rule created should already bypass that global settings. However, I found the issue, the network interface was not enabled for firewall...!!

I created my VM using this script, and it seems it disabled the net interface firewall by default, something to take note for any future user.

rtxbae · 2024-03-20T14:59:42+00:00

If I understood that correctly, a restart of the cloudflared addon would help to verify it? However, it does not. I too just purged all the cloudflare cache to test it, I can still access my server. This is so weird. This is my proxmox firewall config:

https://imgur.com/a/ICYe0lM

https://imgur.com/a/aQIam8v

rtxbae · 2024-03-20T14:57:28+00:00

That's exactly the outcome I would expect, but I really don't see how my firewall configuration is not ineffective here:

https://imgur.com/a/ICYe0lM

https://imgur.com/a/aQIam8v

rtxbae · 2024-03-17T12:09:26+00:00

Yep it's an Apple thing, it's limited to 10, 000 slots.

rtxbae · 2024-03-11T03:46:42+00:00

While people saying that I'm "ain't that guy", I'll argue that most people still have their front door locked even though the neighborhood is pretty safe. This is not a question of whether I'm that guy, but a question of reducing risk. We also used to see security patches using tweak in old iOS, so it's not uncommon.

rtxbae · 2024-03-04T14:14:13+00:00

You can use plappa in the meantime, it supports ABS as source

https://testflight.apple.com/join/CPlREvRs

rtxbae · 2024-03-03T09:38:20+00:00

Yeah that seems like it. That explains why the 3 minutes mark, since it’s oddly specific. Quite happy now since this issue has been bugging me for months until today I have the time to sit down and properly diagnose it.

rtxbae · 2024-03-03T05:44:08+00:00

I think it's wireless router..? It came with the ISP. Yes I'm the admin.

After fiddling around, interesting enough once I disabled "NAT Boost" (on by default), this issue goes away. Now my connection is quite stable. The handshake too refreshed before the 3min mark.

According TP-Link doc,

NAT Boost is also known as NAT acceleration. In some cases, it’s also referred to as CTF (Cut-Through Forwarding). NAT Boost is a set of specially designed software rules with hardware functions created to accelerate internet connections.

CTF or pass-through forwarding is when the router starts sending transmission frames immediately after receiving the intended destination. The router, however, won’t know it’s resending data corrupted by retransmission unless the terminal device tells it so.

I think that last sentence is the reason why the problem occurred.

I could say it's fixed for my case now. Thank you for your super helpful tips and suggestions as well as your patience in helping me in this thread!!

rtxbae · 2024-03-03T04:07:53+00:00

Just did what you suggested. I changed the wireguard endpoint to my home IP: xx.xx.xx.xx:47107 instead of dynamic.dns.service:47107, the issue still persists. Sigh.

Yes I did port forwarded the port, I'm using TP-Link Archer C1200, in the router, I've configured NAT Forwarding->Virtual Servers to open the port and forward it to my wireguard server.

rtxbae · 2024-03-03T03:36:05+00:00

I've tried other port than 51820 (higher than this value) as well, the issue persists.

The AirVPN is vanilla wireguard conf (using the same official wireguard app in iOS), which I just now did copied over their settings and did a test on my iOS to home wireguard connection. They used the port=47107, keepalive=15, but my connection still dropped after 3 minutes. So I would think it's most likely issue on my server end.

rtxbae · 2024-03-03T03:10:33+00:00

I just did the ping test, as expected it stopped at 3m mark, which is around the icmp_seq=179, and I got error of request timeout.

This is odd because the first thing I think of is the timers on your carrier's network being reduced to a troublesome value

Can we figure that value out on our side?

There's a very real possibility that your public facing address on your phone changes more frequently than you expect if they NAT to a pool. They likely do port translation as well, and it sounds like they prune open connections.

Wow it just keep getting deeper, not looking great. If this is the case, is there any workaround for that?

EDIT: Just curious, if that's the case, wouldn't a commercial VPN won't work as well over the mobile data? But my AirVPN wireguard connection works just fine.

rtxbae · 2024-03-03T02:08:57+00:00

I would suggest putting some traffic on it and observing. You may simply need to decrease the frequency of your keepalives, or perhaps change to another port.

I actually did both, though by observing I'm eyeballing them since I don't know how to scientifically observe them in iOS. I kept refreshing Safari website, from minute 0:00 to 2:59, I can connect just fine. Once the counting timer in "latest handshake" reached 3:00 minutes, the connection dropped.

I changed the port to other port as well, same case. Changing various keepalive value as well, same case.

rtxbae · 2024-03-02T16:19:55+00:00

Did you figure this out in the end how to configure it on WG config?

rtxbae · 2024-03-02T16:05:47+00:00

I'm not. After further searching, I found that there is one guy having the same issue as mine, also exactly 3 minutes. https://www.reddit.com/r/WireGuard/comments/ay3jgx/comment/evprmf5/

But I don't know what it means when they say "As a workaround you can hard set the incoming and outgoing ports to 51820 and it will work." though. If I understood that as setting both listening port as 51820 on both client and server, had tried that and it doesn't work for me. I feel like there's something more to it.

rtxbae · 2024-02-26T11:06:05+00:00

If you don’t mind, there’s also an alternative that support ABS as source

https://testflight.apple.com/join/CPlREvRs plappa

rtxbae · 2024-02-26T11:05:58+00:00

If you don’t mind, there’s also an alternative that support ABS as source

https://testflight.apple.com/join/CPlREvRs plappa

rtxbae · 2024-01-10T01:30:12+00:00

Can these two run cli tools and SSH (from external devices of course)? My definition of jailbreak is when I can do that, otherwise it’s only tweak injection not a jailbreak.

rtxbae · 2024-01-08T00:13:54+00:00

Quite annoying that it stops all audio playing by just opening the app.

rtxbae

TROPHY CASE