Meanwhile, “~x” is drooling on itself over in the corner.

Aren’t there a few VPN providers that don’t even install writable storage in their servers? I can’t remember which, but I’m sure there’s at least one that boots their machines off of read-only media and only installation hard drives in the servers used for storing login credentials.

I’m a big fan of 4k/who gives a shit.

Isn’t it wonderful when your VPN client refuses to connect repeatedly until you realize you need to reboot your PC or restart the VPN service… and then go change your underwear.

That’s great until they decide to stop providing whatever content you licensed.

If you’re not receiving physical media, and you’re not saving a copy to local storage, then you’re not buying anything. You’re renting it.

There are really two reasons ECC is a “must-have” for me.

• I’ve had some variant of a “homelab” for probably 15 years, maybe more. For a long time, I was plagued with crashes, random errors, etc. Once I stopped using consumer-grade parts and switched over to actual server hardware, these problems went away completely. I can actually use my homelab as the core of my home network instead of just something fun to play with. Some of this improvement is probably due to better power supplies, storage, server CPUs, etc, but ECC memory could very well play a part. This is just anecdotal, though.
• ECC memory has saved me before. One of the memory modules in my NAS went bad; ECC detected the error, corrected it, and TrueNAS sent me an alert. Since most of the RAM in my NAS is used for a ZFS cache, this likely would have caused data loss had I been using non-error-corrected memory. Because I had ECC, I was able to shut down the server, pull the bad module, and start it back up with maybe 10 minutes of downtime as the worst result of the failed module.

I don’t care about ECC in my desktop PCs, but for anything “mission-critical,” which is basically everything in my server rack, I don’t feel safe without it. Pfsense is probably the most critical service, so whatever machine is running it had better have ECC.

I switched from bare-metal to a VM for largely the same reason you did. I was running Pfsense on an old-ish Supermicro server, and it was pushing my UPS too close to its power limit. It’s crazy to me that yours only pulled 40 watts, though; I think I saved about 150-175W by switching it to a VM. My entire rack contains a NAS, a Proxmox server, a few switches, and a couple of other miscellaneous things. Total power draw is about 600-650W, and jumps over 700W under a heavy load (file transfers, video encoding, etc). I still don’t like the idea of having Pfsense on a VM, though; I’d really like to be able to make changes to my Proxmox server without dropping connectivity to the entire property. My UPS tops out at 800W, though, so if I do switch back to bare-metal, I only have realistically 50-75W to spare.

I have a few services running on Proxmox that I’d like to switch over to bare metal. Pfsense for one. No need for an entire 1U server, but running on a dedicated machine would be great.

Every mini PC I find is always lacking in some regard. ECC memory is non-negotiable, as is an SFP+ port or the ability to add a low-profile PCIe NIC, and I’m done buying off-brand Chinese crop on Amazon.

If someone with a good reputation makes a reasonably-priced mini PC with ECC memory and at least some way to accept a 10Gb DAC, I’ll probably buy two.

I appreciate the suggestion, but that looks like a Java library. Interpreted languages make me feel dirty. Java makes me feel even dirtier. If it’s not C, C++, or ASM, is it really worth using?

I’m okay with the “human-readability,” but I’ve never been happy with the “machine-readibility” of XML. Usually I just want to pull a few values from an API return, yet every XML library assumes I want the entire file in a data structure that I can iterate through. It’s a waste of resources and a pain in the ass.

Even though it’s not the “right” way, most of the time I just use regex to grab whatever exists between an opening and closing tag. If I’m saving/loading data from my own software, I just use a serialization library.

I thought I spelled something wrong; I didn’t, and now I’m lost. Aren’t most non-fiber connections asymmetrical connections?

This is only true when you have a single transmission medium and a fixed band. Cable internet is a great example; you only have a few MHz of bandwidth to be used for data transmission, in any direction; the rest is used up by TV channels and whatever else. WiFi is also like this; you may have full-duplex communications, but you only have a very small portion of the 2.4Ghz or 5Ghz band that your WiFi router can use.

Ethernet is not like this. You have two independent transmission lines; each operates in one direction, and each is completely isolated from any other signals outside the transmitter and receiver. If your ethernet hardware negotiates a 10Gb connection, you have 10Gb in one direction and 10Gb in the other. Because the transmission lines are separate, saturating one has absolutely no effect on the other.

You are absolutely correct; I phrased that badly. Over any kind of RF link, bandwidth is just bandwidth. I was more referring to modern ethernet standards, all of which assume a separate link for upload and download. As far as I am aware, even bi-directional fiber links still work symmetrically, just different wavelengths over the same fiber.

If you have a 10GBaseT connection, only using 5Gb in one direction doesn’t give you 15Gb in the other. It’s still 10Gb either way.

This is a really good explanation; thank you!

There is one thing I’m having a hard time understanding, though; I’m going to use my ISP as an example. They primarily serve residential customers and small businesses. They provide VDSL connections, and there isn’t a data center anywhere nearby, so any traffic going over the link to their upstream provider is almost certainly very asymmetrical. Their consumer VDSL service is 40Mb/2Mb, and they own the phone lines (so any restriction on transmit power from the end-user is their own restriction).

To make the math easy, assume they have 1000 customers, and they’re guaranteeing the full 40Mb even at peak times (this is obviously far from true, but it makes the numbers easy). This means that they have at least a 40Gbit link to their upstream provider. They’re using the full 40Gb on one side of the link, and only 2Gbit on the other. I’ve used plenty of fiber SFP+ modules, and I’ve never seen one that supports any kind of asymmetrical connection.

With this scenario, I would think that offering their customers a faster uplink would be free money. Yet for whatever reason, they don’t. I’d even be willing to buy whatever enterprise-grade equipment is on the other end of my 40/2 link to get a symmetrical 40/40; still not an option. Bonded DSL, also not an option.

With so much unused upload bandwidth on the ISP’s part, I would think they’d have some option to upgrade the connection. The only thing I can think is that having to maintain accounts for multiple customers with different service levels costs more than selling some of their unused upload bandwidth.

I think you might be misunderstanding what I’m trying to say. I’m not discounting the value of human culture. I enjoy various types of art, and I am grateful for the people who produce it.

What doesn’t interest me in the slightest is urban “culture.” By that I mean going to restaurants, attending parties, seeing live music, walking to the corner pub, etc. I haven’t done any of these things in years, and I’m happy. If I discover a musician I like, I’m going to spend some money and buy their record, but I don’t need to be surrounded by a crowd of people listening to them live.

You mention the term “anti-social behavior,” but that doesn’t describe everyone who’d rather live in a rural area than a city. Some of us just like our peace and quiet. As far as subsidizing roads and shipping to rural areas, you like to eat, right? Where do you think the food came from? You live in a house or an apartment, right? Where did the wood, concrete, and raw materials come from? A huge amount of agriculture and production comes from rural areas, and it’s always going to be necessary to have roads and infrastructure to support this. The fact that I live in the same area that supplied your food doesn’t mean that your tax dollars are paying for roads solely so that I can drive on them.

I understand that people like you enjoy the busy life of a city and that you can legitimately take advantage of what a city offers. I’m not like that. Large gatherings of people don’t make me happy; they just make me want to leave. My original argument was that a lot of people live in cities because they have to for work. Some of them, like you, live in cities because it makes them happy. For the people that live in urban areas because they have to, I was speculating that many of them might move to more rural areas given the option. I’m not trying to shit on your lifestyle (although I do have strong negative opinions about bicycles on roadways), and I would hope that you extend the same courtesy. Life is short, and in a perfect world, everyone could live in a place that they enjoy.

If you feel that way, then you probably should live in a city. Some people prefer city life; there’s nothing wrong with that, but it’s not for everyone. I have no desire to be around other people, and the “cultural” aspect of urban living holds no interest to me. I get enough human interaction through work. At home, I want to be un-bothered by other people and go about my business in solitude.

I’m interested to see if this rural/urban divide is going to shift in the future. With the ballooning cost of real estate and the rise of remote work, a lot of urban liberals are moving to more rural areas.

There’s certainly a group of people that enjoy city life, but a lot of people (myself included) just want some peace and quiet and only lived in or near cities to be close to work.

I think I’m misunderstanding how LDAP works. It’s probably obvious, but I’ve never used it.

If my switch is expecting a username and password for login, how does it go from expecting a web login to “the LDAP server recognizes this person, and they have permissions to access network devices, so I’ll let them in.”?

Also, to be clear, I’m referring to the process of logging in and configuring the switch itself, not L2 switching or L3 routing.

Like several people here, I’ve also been interested in setting up an SSO solution for my home network, but I’m struggling to understand how it would actually work.

Lets say I set up an LDAP server. I log into my PC, and now my PC “knows” my identity from the LDAP server. Then I navigate to the web UI for one of my network switches. How does SSO work in this case? The way I see it, there are two possible solutions.

• The switch has some built-in authentication mechanism that can authenticate with the LDAP server or something like Keycloak. I don’t see how this would work as it relies upon every single device on the network supporting a particular authentication mechanism.
• I log into and authenticate with an HTTP forwarding server that then supplies the username/password to the switch. This seems clunky but could be reasonably secure as long as the username/password is sufficiently complex.

I generally understand how SSO works within a curated ecosystem like a Windows-based corporate network that uses primarily Microsoft software for everything. I have various Linux systems, Windows, a bunch of random software that needs authentication, and probably 10 different brands of networking equipment. What’s the solution here?

I’m impressed that these drones can operate on Everest, especially carrying a payload. I would assume the air density would be too low for the rotors to generate sufficient lift.