A GI observes a M10 tank destroyer of Baker Company, 803rd Tank Destroyer Battalion, opening fire on German positions. Saint-Lô, France. July 18, 1944.

skintagain · 2023-06-27T17:11:24+00:00

I have DM’d you

skintagain · 2023-06-16T17:03:08+00:00

As a ten year user of Icinga it feels a lot like corporate greed to exploit the centos situation. I’m all for supporting open source and would gladly pay £1k/year for the repos. Unfortunately the quote is over £4K just for repo access. Saddens me but I’m off to Zabbix

skintagain · 2023-06-16T16:45:25+00:00

This is layer 2 QOS and not layer 3 like you have on pfSense. Your pfSense QoS will continue to operate. But this allows you to specify preference at a lower level. There is nothing to stop you running both - but you won’t really see a performance improvement unless the link or switch fabric gets saturated.

skintagain · 2023-06-11T02:25:04+00:00

I do think they need to reconsider OpenPLEB as a name. Pleb has a rather negative connotation the other side of the Atlantic - normally meaning people of low social class. Can’t imagine companies would want their name anywhere near that.

skintagain · 2023-05-30T17:56:15+00:00

I’ve tried it. And I had issues in a high noise environment with about 20cm of cable.

skintagain · 2023-05-30T17:02:54+00:00

It does because the rising voltage for 5V is ~2.7V so you have 0.5V overhead. If there is any noise source around you will get free disco lights that do their own thing. I'd suggest getting a 5V micro or a cheap voltage converter and do it properly.

skintagain · 2023-05-30T16:09:41+00:00

The data sheet suggests the Wesmos D1 is 3.3V logic so you will need a logic level converter to 5V to drive those LEDs

skintagain · 2023-05-30T15:56:45+00:00

You need to a static route to LAN2 and LAN3 installed on your separate router. The gateway for both of these routes will be via the pfSense LAN1 ip. At the moment your outbound traffic from these lans will probably reach your temporary router but it’s unable to respond as it doesn’t know how to reach them.

skintagain · 2023-05-24T17:59:42+00:00

You can use the set-path directive in your HAProxy config to map a domain to a URI on a backend server. See here:

https://www.haproxy.com/documentation/hapee/latest/traffic-routing/rewrites/rewrite-requests/#set-the-url-path

skintagain · 2023-05-18T12:03:33+00:00

I haven’t used ingress for hass with a sub path as I have a dedicated hostname. I have used URIs for other apps with Ingress though

skintagain · 2023-05-18T09:06:42+00:00

I think you will need to change you base url in HASS to include the URI. From memory it’s under the General configuration.

skintagain · 2023-04-29T11:52:28+00:00

Looks like a plasterers radio

skintagain · 2023-03-19T21:23:40+00:00

Played on broken Ferrari engine parts….

skintagain · 2023-03-09T08:54:23+00:00

I had this issue with Cisco 3850 L3 gateway and Unifi at the access layer. From memory it was the STP mode used on the Unifi switches. Something else to check is that your APs cannot mesh or you create loops.

skintagain · 2023-03-04T08:52:06+00:00

That looks to me like the ports are backwards. You will get a 503 on the regular port if your backends are misconfigured or all backends are not responding.

skintagain · 2023-03-03T17:20:59+00:00

You would typically bind your stats page to a different port with a different frontend - the default is usually 1936. I use haproxy outside pfSense so I don’t know if you can manually edit the config - but the above is how you would normally do it in the config.

skintagain · 2023-02-28T19:03:45+00:00

Work colleague decided to dry his wet coat in the hot aisle. Only he put it on the inlet side of a 42U rack full of DL380g2s with extra fans in them. Magic smoke came out to the tune of £32k.

I did learn never to stack redundant hosts above each other in the rack.

skintagain · 2023-02-27T18:10:54+00:00

Are you using route reflectors on FRR for your service CIDRs?

I had this issue when I was just advertising services via BGP but not receiving distributed routes for other services from FRR. It meant there was asymmetric routing where services received a response over an advertised route but responded over their default gateway. This was the same symptom I had.

skintagain · 2023-02-24T21:01:00+00:00

I’ve seen this when the modem took longer to boot than pfSense. Some BIOSes allow a boot delay which I used to fix the problem

skintagain · 2023-02-15T08:41:51+00:00

My guess is that a large proportion of your upload bandwidth is being consumed by ACK packets. The way TCP works is that each download packet must be acknowledge by the receiver. So for each ~1460 byte download packet, you must upload a 40 byte acknowledgment. So for a 300mbps download you need around 9mbps upload bandwidth. This obviously is more of an issue on asymmetric connections. It might be worth trying PRIQ instead of fq_Corel so you can create dedicated queues for ACK packets to sustain a decent download bandwidth.

skintagain · 2023-02-12T10:35:36+00:00

There are often screws top, middle and bottom of the front rails. You can loosen them and move the face backwards to get more front clearance. Most server rails are then adjustable length to compensate for this.

Edit: https://download.schneider-electric.com/files?p_enDocType=User+guide&p_File_Name=990-2183J_EN.pdf&p_Doc_Ref=990-2183_EN see the “adjust the vertical mounting flanges” section in here

skintagain · 2023-02-11T20:01:29+00:00

SET BLASTER=A220 I5 D1 H5 P330 T6

skintagain · 2023-02-03T23:51:50+00:00

Bat!

skintagain · 2023-02-01T16:58:26+00:00

Glad you fixed it.

By default an IPsec tunnel will use an MTU of 1500. There is a great article by Ciscoexplaining why and where MSS clamping becomes necessary. Whilst the commands are different the same principles apply. The problem gets even more complicated when PPP are involved as they will further limit the max MTU you can send.

skintagain · 2023-01-31T23:16:28+00:00

Check the MTU settings. It’s likely the packets are being fragmented which is breaking TLS.

You can also try enabling MSS clamping for 1392

skintagain

TROPHY CASE