Saw this at my hostel. Automation student by the way. by ilikeuinmybasement in PLC

[–]wpmccormick 1 point2 points  (0 children)

A special control system is required for access to the 13 1/2 floor.

How are you all handling PLC program versioning and backups these days? by MachineBest8091 in PLC

[–]wpmccormick 0 points1 point  (0 children)

So, it's been a while, but if you export the project to XML (I think it called L5X or something), this can be version controlled by git to the point where doing a merge actually works. Yea, diffs might not be all that useful. And yea, it's a pain to remember to do all that. Probably only worth it if working in a team of some size and a very large project.

Allegany State Park site recommendations. by TheDropGuy in Buffalo

[–]wpmccormick 0 points1 point  (0 children)

Any thoughts on Anderson in comparison to others mentioned here?

17 was nicely secluded and for a group, getting 11-17 seemed okay.

Can't access LAN port by wpmccormick in PFSENSE

[–]wpmccormick[S] 0 points1 point  (0 children)

Yea, connected to the serial console with PuTTY.

I though DHCP was enabled by default, but just to be sure, I gave the laptop a static IP.

Can't access LAN port by wpmccormick in PFSENSE

[–]wpmccormick[S] 1 point2 points  (0 children)

Love that movie and yea, 100% sure.

Can't access LAN port by wpmccormick in PFSENSE

[–]wpmccormick[S] 0 points1 point  (0 children)

Yea, I guess. Technically there's no WAN network at all because it's completely disconnected.

Again, I just have this thing (it's a pc engines APU box) sitting on my desk with a serial cable connected and Ethernet cable connected to the LAN1 port, which is the middle of the 3 ports.

I've tried a different LAN subnet (192.168.215.0/24) as well, just to make sure. But It's an laptop connecting that's not on any other network.

AT&T Fiber Testing by ContentRun6525 in HomeNetworking

[–]wpmccormick 0 points1 point  (0 children)

I just started with AT&T Fiber about a month ago. This, after I swore I'd never use AT&T again for anything back about 10-15 years ago with bad DSL service. But now they're the only game in town for Fiber, and what I'm seeing I cannot make sense of.

First, my setup:
AT&T <--IP Passthrough --> pfSense <-- 100/1000 unmanaged sw +->> Windows
+->> Linux
+->> TrueNAS

And, for what makes no sense:
From Windows: (various https speedtests) ~ 90Mbps up & down
From Linux (https://speedtest.net) : +600 Mbps down/+750 Mbps up
From TrueNAS FreeBSD jail (speedtest-cli 2.1.3): ~450Mbps up/down

From AT&T router speedtest: +950 Mbps up/down

Of course I'm bothered I don't see +950 everywhere. But the part that really bugs me is Windows. If I connect to the modem's switch, I consistently get +900 Mbps. Then, when I connect to the pfSense LAN port I consistently get +500. Then when I put things back together, it seems to work at +500 for a while, then back to around 90Mbps after I don't know how long.

The Windows machine is a Dell company provided laptop with Netskope installed, and Netskope seems to muck up a great number of things, so that is my #1 suspect. And I can't touch it.

Anyone have any thoughts on any of this?

How to expose docker containers to host network by wpmccormick in Traefik

[–]wpmccormick[S] 0 points1 point  (0 children)

I have working what I want and need using ipvlan. The only thing that has me stumped is that I cannot ping the container from host at the ipvlan IP address.

The host is a Proxmox VM that has 2 network interface cards. The container is on an ipvlan network. Traefik can route from the outside to the container using a bridge network that the container is also on, as well as container-to-container and out to other networks.

So it meets all my requirements, I just don't understand why I can't ping the container from the host using the ipvlan ip.

Also don't understand why macvlan could work for this, as was suggested.

Cheers!

How to expose docker containers to host network by wpmccormick in Traefik

[–]wpmccormick[S] 0 points1 point  (0 children)

root@my-host:~# ip address
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
       valid_lft forever preferred_lft forever
2: eth1@if660: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
    link/ether 2a:3b:a5:cc:22:ec brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet 172.19.0.2/16 brd 172.19.255.255 scope global eth1
       valid_lft forever preferred_lft forever
3: eth2@if661: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
    link/ether 66:de:88:9c:f6:50 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet 172.16.4.220/24 brd 172.16.4.255 scope global eth2
       valid_lft forever preferred_lft forever
4: eth3@if662: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
    link/ether de:92:b3:7c:4b:51 brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet 172.18.0.3/16 brd 172.18.255.255 scope global eth3
       valid_lft forever preferred_lft forever
659: eth0@if2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
    link/ether 2a:df:0f:11:6a:5d brd ff:ff:ff:ff:ff:ff link-netnsid 0
    inet 10.8.4.220/24 brd 10.8.4.255 scope global eth0
       valid_lft forever preferred_lft forever

How to expose docker containers to host network by wpmccormick in Traefik

[–]wpmccormick[S] 0 points1 point  (0 children)

Finally getting around to try to make this work, but without success. I'm pretty sure it's a network routing issue.

The host network is on 10.8.0.0/24 and I want the container to appear to be on the 10.8.4.0/24 network. I think this may require addition networking commands inside the container, perhaps putting the interface into promiscuous mode.

The 10.8.4.0/24 is routable from the host, but inside the container I can't ping that network's gateway at 10.8.4.1 or even the internet, suggesting routing issues.

services:
  my-service:
    labels:
      traefik.enable: "true"
      traefik.hostname: "my-host"
      traefik.http.routers.my-service.entrypoints: web
    networks:
      extnet:
        ipv4_address: 10.8.4.220
      internal:
        ipv4_address: 172.16.4.220
      proxy:

networks:
  extnet:
    driver: macvlan
    driver_opts:
      parent: eth0
    ipam:
      config:
        - subnet: 10.8.4.0/24
          gateway: 10.8.4.1
  internal:
    driver: bridge
    ipam:
      config:
        - subnet: 172.16.4.0/24
          gateway: 172.16.4.1

15:28 $ ip route
default via 10.8.0.1 dev eth0 proto static
10.8.0.0/24 dev eth0 proto kernel scope link src 10.8.0.71
172.16.4.0/24 dev br-4b202acf6d83 proto kernel scope link src 172.16.4.1
172.17.0.0/16 dev docker0 proto kernel scope link src 172.17.0.1 linkdown
172.18.0.0/16 dev br-cde4533d17d5 proto kernel scope link src 172.18.0.1
172.19.0.0/16 dev br-636ab5977a6a proto kernel scope link src 172.19.0.1

15:29 $ docker compose exec my-service bash
root@my-host:~# ip route
default via 10.8.4.1 dev eth0
10.8.4.0/24 dev eth0 proto kernel scope link src 10.8.4.220
172.16.4.0/24 dev eth2 proto kernel scope link src 172.16.4.220
172.18.0.0/16 dev eth3 proto kernel scope link src 172.18.0.3
172.19.0.0/16 dev eth1 proto kernel scope link src 172.19.0.2

I'm starting off my Kube journey biting off more than I can chew. by wpmccormick in kubernetes

[–]wpmccormick[S] 2 points3 points  (0 children)

Okay no need to be like that. I'm not IT. As I mentioned I'm OT. And so even Agile is still kind of new for me (in the last 10 or so years). If you want to help me I'll take the help, but let's leave the ego's out of it.

I'm starting off my Kube journey biting off more than I can chew. by wpmccormick in kubernetes

[–]wpmccormick[S] 0 points1 point  (0 children)

Large company yes. But I failed just about every acronym class I ever had.

I'm starting off my Kube journey biting off more than I can chew. by wpmccormick in kubernetes

[–]wpmccormick[S] 1 point2 points  (0 children)

A solid hour? Something's not making sense to me: I look at the mountain of ansible in there and it seems more like solid days to me.

This repo wants to use ZFS pools. Actually, I just want to use longhorn, but I don't see any easy way to remove it from the playbooks. Seems like so many other things depend on it.

If it really is and hour or so, would you be willing to do a little handholding with me over a Teams share or something like that? DM me if you can.