I think Cobba anon from /hsg/ is kill.

Post racks

>>101201131
>Use a Broadcom / Intel / Mellanox NIC and try again. Preferably one of the latter two. I'm not personally interested to diagnose Realtek's drivers or its plausible lack of CPU offloading features.
On my desktop or the server? The server's NICs are all onboard, and the only expansion slot is occupied by the RAID controller.
There are some offloading settings in the device properties, should I switch any of them to disabled? Large send offload v2, tcp/udp checksum offload, ns offload, etc.
Tried updating my NIC driver, no change.

>If you have a managed switch in between, look at the counters for packet loss/errors. Use a good pre-terminated patch cable, connect directly with a patch cable and use static IPs if you need to test.
Did that, nothing changed. I have a switch inbetween, but it's a dumb little 5port TP-link.
Changed the RAID controller's cache ratio to 50-50 too, nothing.

My problem is, why is NFS download the only slow thing here?
Why is NFS upload as fast as SMB as a whole?

>Not my favorite, but it probably won't matter.
I'm poor this was good value ;_;

I was just thinking the other day that I don't need a home server but should I get one anyways? Maybe I can find a use for it later?

>>101201939
sure go for it

>>101201689
isn't it winter there? perhaps he's hibernating until september

>>101201939
>i'll buy a thing i don't need and won't use
why

>>101201836
NTA but there are a lot of possible variables that come into play here, starting with the NFS implementation.
Realtek NIC's can easily saturate Gigabit connection at their default driver options. You might want to:
>Run iperf on client/server, to test link speed
If this saturates the link then you might want to take a look at your I/O, if it doesn't then test your NIC's and switches
>Check your HDD's health
>Check your HBA/RAID health
>Do some hdparm -Tt on your drives for speed

In these type of scenarios I usually reboot to a live CD or something like that to isolate any possible configuration issues I might have introduced

>>101202044
You'll find a use for it right at the moment you're building it, don't worry

>>101201939
>I was just thinking the other day that I don't need a home server but should I get one anyways?
No. Things age. And you're dealing with electronics, not some sort of vintage wine.
By getting a server right away and making it gather dust, you're wasting it. And when you eventually find some practical use case for it, there are better options available for the same price you originally paid for.
>Maybe I can find a use for it later?
And depending on the hardware, it may be more suitable for other tasks. For example, you got something that is ideally suited for networking, but you want something to store data on. End result, you still need to get new hardware, but you also have some doing nothing more than drawing power and accumulating dust.
If you have no use case for it at the moment, wait until you have a need for something. Then go looking for something to fulfill those requirements.

>>101197689
unfortunately the one pci-e slot on my mobo is taken up but a wifi card

File: 54c0a036-a7ae-4fbc-953c-1(...).png (2.98 MB, 1516x2269)

2.98 MB PNG

Got a few of these and they're SO FUCKING COOL
If only they had iDRAC, they'd be perfect. Gonna dig into their IPMI today and see just how bad it is. I pray they won't make me use an old version of Java.

File: raid.png (94 KB, 704x942)

94 KB PNG

>>101202067
Link speed is fine across all hops, I even did a SpeedTest.net benchmark, and my 1G/1G internet connection can be fully utilized by the server.

IOPS and overall performance is fine, if you look at >>101201144

SSACLI shows no problems with RAID controller and its components, nor the HDDs themselves.

I'm also starting to think that this is MS's fuckup at implementing NFS...

File: omv.png (842 KB, 1920x1080)

842 KB PNG

>>101200395
Anyone have a guess as to why this is happening?
I've messed with the options in the SMB share a bit but nothing seems to work and now I'm back to not even being able to copy files over

>>101202430
Stop using that crap, you will be better with pure Debian and Samba or do like everybody and move to TrueNas.

>>101202329
>I'm also starting to think that this is MS's fuckup at implementing NFS...
I wouldn't be surprised, might as well test Linux's NFS under a live environment. I have the feeling you might (not) get a surprise

>>101202175
>wifi nas
please no

>>101201254
>don't use AsMedia/JMicron SATA controllers, only AHCI SATA or SAS HBAs (they work with SATA too)
asmedia controllers are fine, at least the not-ancient ones
its when the chinks combine them with jmicron sata port multipliers that you run into serious reliability issues, as in they start writing garbage data to drives. All port multipliers should be avoided, as well as anything made by JMicron, who mostly specialise in USB devices.

but yeah as long as you dont use them with port multipliers, asmedia sata controller is completely fine.

>>101202430
never used OMV and havent used samba in a decade but sounds like parent directory permissions arent cascading to new subdirectories, use setgid/setuid on the parent directory.
looks like you should check inherit acl or permissions but thats just a guess.

File: Screenshot_20240629_115837.png (41 KB, 962x566)

41 KB PNG

>>101202430
Select the share and go to ACL, change Others to Read/Write/Execute

>>101202566
>just chmod 777 bro
dont do this wtf
add whatever user you login with to the samba group (in that image its "users")

>>101202665
I dont wantvtovstart creating users this is for home use only and dontvwant to have to login each time I want to use a folder or directory.
>>101202566
I did that already and it still didnt allow me to move folders with content

currently my router + minipc server + external hdd are on the ground and want to move it somewhere
would getting a server rack cabinet + 1u shelf and panel with two fans for it a good idea

>>101202892
>I did that already and it still didnt allow me to move folders with content
tick recursive

>this is for home use only and dontvwant to have to login each time I want to use a folder or directory
ok but you should know its really dumb besides you would only need to login once on each device and not at all for read-only access

>>101202964
I ticked recursive and when I save and enter the settings again its unticked

>>101202920
yeah exactly get a 42u

>>101202453
>pure Debian and Samba
>TrueNas
You'll hurt yourself with both of these options. Make better decisions.

>>101202920
Mounting them all in a single rack is a reasonable idea the same way that placing your motherboard and all the connected hardware in a single case is a reasonable idea.
However, if none of the devices have rack mounts, a more efficient option would be getting a shelf. Not some rack mountable one, just a regular shelf.
If you don't have to remain within the Rack Units, you have a lot more options to choose from.
Or if you don't want a shelf, look for wall mounts for your devices. There's no need for an enclosure mostly full of empty space if the same function (getting them of the floor) can be achieved with a few screws in the wall.

>>101202210
Good luck finding any Bios or BMC firmware for QCT systems I have 4 D52B-1U and there is zero firmware or anything for them online aside from a CPU refresh package from 2019 and I know that there are newer firmware versions. If they use Java for the KVM's and you are on Windows try OpenWebStart I have had some luck with running old ass Java KVM's via that

>>101202494
>as long as you dont use them with port multipliers, asmedia sata controller is completely fine
the exact card i've tested in the post (>>98065723) is Axagon PCES-SA2N using a single ASM1061 with no port multipliers. I'm lucky i've used ZFS with RAID, i'm assuming i'd get silent memory corruption on plain ext4.

>>101202920
what are you going to buy, a 2u rack?

if you don't have multiple pieces of rackmount equipment, don't get a rack

anything useful i can shove into a pci slot?(non express)

File: thedatacube.webm (1.9 MB, 360x480)

1.9 MB WEBM

>>101201656
where / how do you guys store your storage mediums IRL?

>>101204117
tv tuner card

>>101204117
https://www.startech.com/en-us/cards-adapters/pciusb3s22

>>101203998
but it looks cool

I have no idea what self hosted stuff would be useful because I usually won't use it.

>>101203793
Yeah i know, but as long as there's no bugs I'm not too worried, as these servers will never be exposed to external traffic.
>Windows
I don't have a single Windows machine lol

>>101205027
>I don't have a single Windows machine lol
Rookie mistake.

>>101202430
Is there a similar web ui I can use for my existing samba server?

File: mini_servers_smaller.jpg (22 KB, 240x212)

22 KB JPG

>>101201656
Can one of you serverGODS please help me identify what model servers these are? They look like optiplexes.

>>101203983
I do wonder if its a firmware issue. bit worrying if not, company i used to work for used a lot of asmedia chips in their products.
even if not they're still miles ahead of jmicron. fuck jmicron.

>>101206717
they're ancient optiplex 780 desktops, not servers.
think intel core/core2 era

>>101204191
in a server

File: backup.jpg (220 KB, 754x754)

220 KB JPG

>>101206936
>I do wonder if its a firmware issue
or maybe Axagon fucked up the circuitry around the ASM1061 somehow?
It's one more issue i see with those AsMedia/JMicron/Marvell SATA controllers: fragmentation of cards, there's just so many models and manufacturers who use those chips, it's hard to find any reliable info on them, and they come and go. For example the mentioned PCES-SA2N model is already deprecated and replaced with a JMicron based model.
LSI HBAs come only in a couple OEM variants (like Dell, Fujitsu, Supermicro) and those had and still have huge userbase in datacenters worldwide (especially now with the raise of software RAID like ZFS), it's easy to find testimonies and reviews of them.
Shame, 2x SATA on PCIe x1 is the one niche those SATA controllers could fill, but i just can't put my trust in them.
>>101204191
here's the cold backup i sync every month

>>101207807
Question, are you gay

File: 514NtDtUZtL._AC_SL1000_.jpg (60 KB, 885x834)

60 KB JPG

how can this 2.5 gigabit nic be powered by a pcie 2.0 x1 lane when pice 2.0 x1 caps out at 500megabits? is the card throttled?

>>101207807
hope that's anti-static

>>101207807
>Axagon fucked up the circuitry around the ASM1061 somehow?
unlikely, theres not that much going on for that
could be heat though, thats a big problem for the jmicron chips and I don't see a heatsink.
anything using ASM1061 should be deprecated anyway its over a decade old
i thought firmware because I know some asmedia chips had major issues a few years ago causing hundreds of smart errors in a matter of hours

anyway you're always better off, except budget-wise, with a sas hba, even with sata drives.

>>101207966
pcie 2.0/2.1 is 500MB/s per lane not 500Mb/s
thats 4Gbit.

>>101207931
let's see your storage, straight guy

can i just disable ipv6? is there any downsides specifically wrt mail servers?
my isp doesn't give static ipv6 and my modem has no way to configure port forwarding for ipv6. so at least for now i can't configure it properly.
is no ipv6 preferable to misconfigured ipv6?

I need suggestions on how to get Zabbix alerts to mobile. Is Gmail SMTP —> carrier SMS gateway the way?

>>101206717
those optiplexes aren't worth the power they are consuming, literally would be better to buy three pi 4's

hello, I upgraded my PC some years ago and I have a motherboard with an old 4th gen i5 + 16 ddr3 ram memory. Can I begin my home server journey with this? What should I buy/upgrade next?

>>101209469
what is your budget and goal?

that's plenty to get started learning linux and running a few services, learn docker, etc.

I was looking into Thinkcentres with the pcie riser slot to cram a U.2 into one but found some beat up P340 i5-10400 SFF for $150+tip instead.
You get cockblocked out of a second fat due to the optical drive however.
>All listings for the tinies are $300
The fucking internet knows. And I can't locate the psychos that soldered on the slot in one that's unpopulated.

>>101202892
I only ever need to login once on a fresh boot because I don't make it save the password. You probably don't need to login if it's the exact same user name and password as windows.
There also happens to be a way to make samba allow any NT login from the correct workgroup if you need it to automagically manage users, but you need to give it a set of uid/gid to use and that means diving into the mess of samba documentation. Probably won't have a webui way to set it up either.

>>101206717
optiplex SFF
I thought the gen is impossible to tell since Dell never fucking updates anything about the front, but that's definitely from before their current look. Don't get one that old.

>>101209469
Give it an ssd for the OS and throw it in a case with some disks.
It won't be efficient compared to newer stuff but you already have it lying around. Assuming you don't have to buy more shit to get it working first.
Once you start hitting limitations in what you want to do, you can find something else to get or upgrade.

>>101209557

>budget
I can't measure very well to dollars my budget due to my country having so many different taxes on hardware but lets say 500 USD.

>goal
Mostly making use of my old hardware lying around, store college research stuff (which uses alot of space, currently hitting almost 260GB) that I put on google drive and the many movies I download and like to watch.

>accidentally got 5-20P UPSs
Well fuck, guess I can't procrastinate on getting those new circuits installed anymore

>>101209469
That's exactly what I have. I added another 16gb ram, added an HBA and put it in a FD r5 case to hold more drives.
4 cores can handle a lot. I have databases, monitoring, full torrenting stack, jellyfin transcoding, nextcloud and more running on it just fine. You won't need to upgrade for a long time.

>>101209469
>Can I begin my home server journey with this?
No, not a good idea.
Not all 4th generation Intel Core i5 processors support VT-d extension. This is e-waste anyway, no TPM for Windows 11 and arguably the last officially supported client operating system would be Windows 8.1 (or Windows 10).
If you must, use it as a client for testing your Windows environment (e.g. Active Directory).
Intel 8th generaration desktop and later is not e-waste (yet). Intel Xeon SP 2nd generation (Cascade Lake) and later is not e-waste yet. Intel Xeon SP 1st generation (Skylake) is on the edge of being e-waste (due to hardware vulnerabilities) but can be upgraded to 2nd generation.

File: GRAfLWNaEAAytdS.jpg (1.2 MB, 1549x1756)

1.2 MB JPG

What should I use the edsff connector in my home server for?

File: Screenshot from 2024-06-3(...).png (67 KB, 866x629)

67 KB PNG

Are you keeping your home servers up to date, /hsg/?

>>101211178
I don't there is no point.

I upgrade my servers only because my desktop/laptop configuration has moved on and is using new nixos release, and I need to change something on one of my servers(rarely). My server config is quite stable so I barely ever touch them.

I see no point in keeping up with upgrades for hardware that's hidden in a LAN and doesn't expose anything publicly, only via zerotier VPN.

>>101212607
A home server that holds some movies, photos, music, and maybe some research materials into female homosexual relationships, does not need a weekly upgrade schedule and CVE monitoring like some banking servers. Calm down.

>>101209469
My current desktop is basically still this except with 32Gb ram. I'm in the process of upgrading next month and when I do this will become my new home server.

>>101210717
MY board and prcessor does support VT-d etc but I also run servers at work that are twice as old as this and completely antiquated but it all just depends what you're doing with it. A little file share/archive requires no processing power or modern tech.

How do you large volumes of datacleanup, /hsg/?
I just had a hdd recovered, but it came with 3 copies of every file, it's fairly easy to see which copies are corrupted but doing this manually is pretty tedious and haven't found a script that adresses this.
>write it yourself
I'm a bashlet/UIslut I can't do that shit

>>101205027
Well if you have a Ubuntu/Debian machine I know that OpenWebStart should work on there with no issues.

File: de-850-evo-sata-3-2-5-inc(...).jpg (68 KB, 892x684)

68 KB JPG

I have a bunch of old SATA SSDs. Can I just put them all in an older PC that I could then just run as a NAS? Or is it a waste of SSD space?
No RAID unfortunately since they're all different sizes (250gb, 500gb, 1-2tb etc.)

>>101210648
>4 cores can handle a lot. I have databases, monitoring, full torrenting stack, jellyfin transcoding, nextcloud and more running on it just fine.
not that anon but could a 4-core i5 from 2017 handle all these tasks just as well. I'm thinking of turning an old PC I got into a NAS + Torrent box through proxmox but still have relatively little idea what the "proper" way to go about it is.

>>101213598
>No RAID
I wouldn't. And if they're consumer grade SSDs, they'll be gone physically worn in only 12-15 months, becoming unbearably slow, TRIM or not.

>>101213652
>And if they're consumer grade SSDs, they'll be gone physically worn in only 12-15 months
meaning? I've used them in my PCs for years, why would them being in a NAS make them go bad?

>>101213652
>samsung
>physically worn in only 12-15 months
nah

File: GPB8X1zbIAA7nJz.jpg (568 KB, 1404x1404)

568 KB JPG

Everything in this hobby is a pain in the ass.
>got an itx mobo because I wanted a small, quiet, power-efficient NAS
>it even supports bifurcation for the pcie slot; however if I want to utilise the slot I need a pcie riser, which means I need a rackmount case because no one seemingly makes a riser that wont orient pcie cards parallel to the mobo (ie. they run perpendicular into the side of a normal tower case), which means I can't have a small quiet NAS
While I'm having a whinge, what the fuck is with all the counterfeit HBA cards? I knew it was a thing for SAS expanders but apparently I can't even buy a simple SFP+ NIC card without having to study the fucking silk-screening and yottamarks. Or if they haven't omitted the fact it's a Dell/Lenovo/HPE rebrand and I'm not getting what seems to be an Intel OEM card where the drivers will actually work, vs buying a brick because the firmware updating process on the former is vendor-locked (just like HDDs).

I have a truenas server running the canned Nextcloud container but it's really brittle and I'd like to move the app to another container host and get the data out of the bizarre directory truenas keeps it in
have any of you done this before?

File: you.jpg (45 KB, 500x680)

45 KB JPG

>>101215559
>buy motherboard without enough slots
>doesn't have enough slots

also buy mellanox NICs

>>101211178
ye, a bunch of shit broke and i spent all weekend fixing

>>101213619
My 4 core i5 is from 2014 it's a 4690k running proxmox.
The proper thing to do for proxmox would be mirrored ssds for hosting your hypervisor and vm/container os, separate disk array for storing data, and enough ram to cover your services plus zfs arc cache if you use zfs.
32gb ram, 1tb mirrored ssds for os, raidz1 hdds with your choice of size will go further than you think. Checkout proxmox-helper-scripts if you want easy deployment of services like torrent/arrs.

>>101218262
>proxmox-helper-scripts
nice

File: bfb71d4d544e09133ae8ab861(...).jpg (77 KB, 736x791)

77 KB JPG

>why yes I use portainer, how could you tell?

File: file.png (1.39 MB, 960x1280)

1.39 MB PNG

>he doesn't have saints interceding on behalf of his data
NGMI, not even ECC will protect you from the power of the devil

>>101219640
what's the saint of data?

>>101219649
Saint Paisios the Athonite (who's icon that is) has become something of a patron saint of contemporary society, especially of its technology

>>101201656
how much ram do you recon i need to run the following in separated virtual machines?
- 1 firewall
- 1 media server (Kodi + mStream)
- 2 linux servers for work, run docker, with remote x-server
- 1 storage + backup server
- 1 more random shit for playing around

i think 16 or 32GB should be enough, as i'm not going to be compiling huge C++ projects or processing video or anything like that, and the media server shouldn't get more than 1-2 connections max

>>101219640
Are those HDD's upside down? Surely that will invite the demons...

>>101219737
Minimum 16GB
You'll want:
>1 for firewall (even 512MB)
>4 for media
>2 or 4 for dockers
>2 for storage/backup

Of course you might want to scale those dockers according to the load. I'd personally go for 32 to be safe

>>101211178
>The following packages will be upgraded: cups-client cups-common
yay

should I use deluge? transmission? qbittorrent? im overwhelmed and need a magic quadrant

>>101221881
best upload speeds with a few torrents? deluge
hundreds of active torrents? transmission
thousands of active torrents? rtorrent
retard? qbittorrent

Podman or Docker?

kubernetes

>>101215559
Time to get lost in the magical world of chinkshit parts. Guarantee they have some weird ass riser for whatever it is you're bitching about. If not them, then the mining community does.
Or you get a card using oculink or the other pcie sff connectors and put the ends wherever.

Otherwise you get someone to design your riser card in the form factor that nobody uses due to atx standards. What sort of case are you even using that you think you can put cards wherever but didn't bother getting a matx instead?

>>101218262
>32gb ram
This is so little to do anything useful.
>Checkout proxmox-helper-scripts
Don't do this, it makes mustard gas.

>>101221881
What does this have to do with servers (besides magic quadrants)?
>>>/g/sqt

>>101223423
>This is so little to do anything useful.
kys enterpriseschizo

>>101223428
because it will be running headless on a server. pretty retarded question for someone linking to sqt

32 GB:
>50% (~16 GB) reserved for high availability for evicted workloads from your second server
>10% (~3.2 GB) reserved for ZFS ARC
>20% (~6.4 GB) reserved for the hypervisor host
32 GB - 25.6 GB = 6.4 GB.
Wow you can run 2-6 Ubuntu VMs or 1-8 Windows Server 2022 VMs. You can't fit even one 1k users GitLab reference architecture instance, and that's if you're not even running vSAN or VCSA. And that's assuming a KVM hypervisor!

https://ubuntu.com/server/docs/system-requirements
https://learn.microsoft.com/en-us/windows-server/get-started/hardware-requirements?tabs=ram
https://learn.microsoft.com/en-us/windows-server/administration/performance-tuning/role/active-directory-server/capacity-planning-for-active-directory-domain-services#ram
https://docs.gitlab.com/ee/administration/reference_architectures/1k_users.html

VCSA requires 14 GB minimum RAM for write API (for Terraform). Minimum!
https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-vcenter-upgrade/GUID-752FCA83-1A9B-499E-9C65-D5625351C0B5.html

I won't go into vSAN RAM requirements.

And then the StarWind VSAN Free CVM (KVM), minimum 8 GB RAM, default 16 GB RAM, to have software RAID storage on ESXi.

In total, on ESXi, hypervisor (? GB) + 14 GB (VCSA) + 8-16 GB (VSAN Free) = ~22-31 GB RAM used before deploying any VMs to get started.

64 GB RAM is the bare minimum for virtualization, recommended at least 128 GB RAM considering the above, before getting into the big boy things like vSAN ESA (512 GB RAM, or 256 GB RAM with the revised vSAN-Max-XS).

>>101223566
>All that writing just to be ignored as always

>>101223566
This is one of the most retarded walls of text I've read in a while.

Who makes good AP's but not ridiculously expensive ones? I'm buying a netgate 2100 and for the moment the AP will have to just sit ontop of the router as it can't be installed. Eventually I'd like to have it ceiling mounted though. Very typical home use with at most 3 people on at once and even then not streaming heavily. Everything else will be hardwired like the TV and IP cams etc.

File: gartner-wired-wireless-lan-mq.png (88 KB, 1280x1428)

88 KB PNG

>>101223693
https://www.gartner.com/doc/reprints?id=1-2GUUIAOL&ct=240307&st=sb

Anything but Ubiquiti.

>>101223693
I can suggest TP-Link ones, they have a line of AP-only devices which also support PoE, these ones are preferred since they come without the routing shit that can be offloaded to a better router. There are also the standard shit ones with routing but they can be configured into AP-only as well (I have these), they do the job. These are cheap, at least where I live.

That said, I live in a shit world country so I don't get a lot of different networking devices except the chink/cheap ones.
Hope it is useful to you.

>>101201656
Okay fellas. I've had my media server up and running and it's going great. Movies, tv shows, music, even some ebooks. Problem is now I'm starting to max out my space. Is there a handy docker container I can add to my stack to visually see which files are taking up the most space and delete them if I'm done with them?

>>101224524
Can't you do that very easily manually? Watch a 4k whatever and delete it after?

>>101224945
I have a handful of people that can add content and I just want to keep tabs on file size every so often. Something like windirstat would be nice. I found qdirstat but wasn't sure if there was a more popular option.

I love you, home server general anons.

>>101223566
>You can't fit even one 1k users GitLab
i don't even know 20 niggers, much less 1k

>>101225722
That doesn't change things much. 7.2 GB or 8 GB required RAM (minimum) is still more than 6.4 GB RAM available, while 16 GB is recommended.
https://docs.gitlab.com/ee/install/requirements.html#memory
https://docs.gitlab.com/ee/tutorials/install_gitlab_single_node/#before-you-begin

>>101225772
>8GB of RAM to commit to a git repo twice per day, and serve a website with less than 10 hits per hour
i'd rather not install trash

What's the best way to handle docker containers in proxmox? Throw everything into a single debian vm?

File: gartnermqfigure1.png (95 KB, 3497x3744)

95 KB PNG

>>101225978
GitLab is so much more than a Git server. The memory requirements are reasonable by today's standards (my thoughts have changed over the decade).
>trash
lol

>>101226001
Kubernetes. If you're not using Kubernetes, then one container per VM to ease backup and restore.

>>101226085
>Kubernetes
...or OpenShift.

>>101224524
>needing a docker container just to check disk usage
do containercels really? Just run `ncdu`, it's like windirstat, but TUI (no dependency on GUI, you can use it on headless servers etc.).

vikunja fucking sucks
i think the only way forward is to write my own todo app

File: ring-planner-binder-1024x681.jpg (140 KB, 1024x681)

140 KB JPG

>>101227075
the ultimate todo app

>>101225151 (me)
I don't need replies, but I hope I encourage you all. You are the ones who introduced me to OPNsense and it has made my home network safer. I will keep posting that I love you all as long as the following conditions are met:
1) I keep browsing /g/
2) the /hsg/ thread is new and I haven't posted in it yet
3) OPNsense keeps working
My gratitude cannot be understated. Thank you /hsg/ anons. My respect is yours.

File: xcp-ng.png (69 KB, 760x638)

69 KB PNG

would you use XCP-ng to orchestrate your virtual machines? does it have any issues?

>>101227370
what does OPNsense do compared with pfSense? just a fork but both are similar?

>>101227432
I cannot say on the technical side of things, but my understanding is that Pfsense has taken a more predatory route towards people trying to use it.

>>101227418
as far as i know, Xen is better than KVM at everything except it can be annoying to setup USB devices, but if you don't use those there's no downsides

>>101227432
pfSense has more support available than OPNsense.
OPNsense uses end-of-life ISC DHCP server. It's also bleeding edge, no LTS release. No benefit over pfSense.

Sup hsg
Is the method in this video safe for remote tunneling? I ask because port forwarding is usually a big nono and you have to do it here
I dont want to pay for something like cloudflare
https://m.youtube.com/watch?v=hQMMA1AW-7w

File: Q-regreSSHion-1200x628-1-(...).jpg (52 KB, 1070x560)

52 KB JPG

Patch your SSH servers. Remote Unauthenticated Code Execution (RCE) vulnerability in OpenSSH’s server (sshd) in glibc-based Linux systems (CVE-2024-6387).
>>101226818

>>101227151
it doesnt send me notifications when some is due

>>101207807
me in the middle

>>101211178
don't upgrade unless you directly benefit from new features, others you just risk breakage for no reason

>>101201656
is it normal for DNS propogation to take like 20 hours? Namecheap.

>>101223566
tl;dr

File: 1708652343682964.jpg (95 KB, 884x803)

95 KB JPG

>>101224524
https://github.com/BytesCo/docker-ncdu

>>101228189
>32 GB RAM is too little
>128 GB RAM is good

>>101228157
Last time i used namecheap years ago yea, they were pretty shit

File: 1646148387880.jpg (207 KB, 3341x842)

207 KB JPG

Putting a second fw on my network.
I am a step closer to the meme

File: Screenshot 2024-07-01 at (...).png (336 KB, 1895x2949)

336 KB PNG

>>101228157
Yes.

>>101228348
Gandi has silently closed their live chat support several months ago according to Twitter user complaints, several users are unable to get any support from Gandi via tickets or chat.
Day 13 and no response to my open ticket yet, I have not been able to change my glue records for several weeks (which worked ~3 weeks ago) but nobody at the domain registrar (Gandi) has acknowledged the issue.
If you thought Namecheap is bad, lol.

>>101228477
>DNS propagation: 13 days and counting...

>>101227432
This >>101227654 also pfSense has better documentation

what are good softwares to draw diagrams of my home network?

>>101228925
draw.io and Microsoft Visio are the two big ones.

good invisible VPN to avoid indians pinging your ssh? >>101227843

WireGuard is still the name of the game? or is there something better now?

>>101228925
https://www.networknotepad.com/index.shtml

Okay fellas. I've had my crypto server up and running and it's going great. Crypto, moonshots and nfts. Problem is now I'm starting to max out my wallet. Is there a handy docker container I can add to my stack to visually see which blockchain are taking up the most capital and sell them if I'm done with them?

>>101229102
>downloading entire blockchains

running multiple zpools on usb drives on my tinymicro sue me

>>101228469
which brand

>>101229812
Well I have a PA440 I have been running
And I am studying for my JNCIE-SEC so I am breaking my SRX300 out as a transparent firewall.
It will be the test bed for some weirder configuration.

Wtf is this magic quadrant shit?

>>101227654
>pfSense has more support available
Cool so if my network goes down, I can pay them $200/hr to remotely troubleshoot it without an internet connection? What a steal!

>>101201656
>Low-power x86 systems: https://docs.google.com/spreadsheets/d/1LHvT2fRp7I6Hf18LcSzsNnjp10VI-odvwZpQZKv_NCI
any of those recommended for virtualization of 4-5 machines? or not powerful enough? i want something not too load and not.wasting too much electricity, initial cost is not much of an issue

>>101219640
>>101219649
Blessed Carlo Acutis is on track to become the patron Saint of the internet

>>101230113
most of them
i wouldnt pay that much attention to that spreadsheet though, a lot of them are measuring DC load which is after where most of the inefficiencies and idle power draw come from

>>101230113
Something like this
https://www.ebay.com/itm/225895721929
https://www.ebay.com/itm/166320836563

Am I dumb if I install immich, nextcloud and syncthing on the same server?

>>101230707
>Am I dumb
Yes

anyone having list of urls that the chinese bots try to access
need some material for honeypots

proxmox or XCP-ng?

>>101231496
I never heard of the latter, let me see
>Opt for Proxmox VE if your environment demands a blend of virtual machines and containers, with sophisticated storage and backup solutions. Choose XCP-ng if you value a straightforward, Xen-based virtualisation platform and do not require Nvidia vGPU support.
Lmao I think the answer is clear

>>101229102
Whatever faggot have your fun. At least I'm being genuine and learning. You're just a coward.

>>101231513
i'm not planning on running dockers on the orchestrator, just inside the VMs, also don't have a nvidia GPU, more interested in which one has better performance and is easier to use, has more tools

>>101231644
Proxmox is more widely used and provides the same and more features, that should be enough

Redpill me on WoL
Should i WoL or not?
Ideea of WoLing devices from my phone sounds cool

File: hinagiku.webm (410 KB, 1000x1060)

410 KB WEBM

>>101230833
Mean

>>101232844
Nonce

>>101230707
No . I only have one server that runs like 25 different things

>>101233109
I meant more because they do similar things.

>>101232827
No. IPMI.

>>101233144
You'll just need a reverse proxy or use different ports to connect to them with

anyone using unikernels here? if so what for

>>101229834
Nice

>>101233396
they're way more conceptually appealing, but the industry went for containerization instead

>>101230707
Why nextcloud tho

>>101235349
Seemed like a good idea at the time. Kinda regretting it now, I don't see much of a reason to use it over syncthing, other than thumbnails loading faster in the nextcloud app than via the DAV connection (I don't wanna sync any files to my phone, I just wanna browse them and use the ones I want, which is why this is relevant).

Need some rack recommendations. Must be at least 30U, enclosed, deep, and have an AC duct intake.

>>101226079
>The memory requirements are reasonable by today's standards
They're not.
>(my thoughts have changed over the decade)
Do you even code?

>>101226079
>gartnermqfigure1.png
>Source: trust us bro, we made a Magic Quadrant

>>101235847
let's see your quadrants

>>101202430
If you want to log in to an smb share you can't leave it as public.
Set public to no

>>101237234
Then under users you have to set the shared folder permissions.

>>101230048
Nothing but the best
>>101234500
Should be fun, probably going to get some licensing for the SRX, and then maybe go hunting for a security director image.
There are a few topics I am not sure the best way to tackle outside of virtualization, but Ill cross those bridges when I come to it.

this would be pretty cool if it becomes a thing
https://www.youtube.com/watch?v=zKY1EzNqLDY

>$200 R730 w/ 2x E5-2630v4 & 64GB RAM
https://www.ebay.com/itm/305650366719

>>101237591
>1.6 Petabits
That will be $50,000 plus tip, sir

>>101237653
haha yeah probably and the writing equipment is pretty complex and expensive too but would still be cool if they could make a disc of couple tbs for simpler equipment so we can do backups to something durable and easy to store

Enterpriseschizo, help me

>>101222309
Why is qbittorrent for retards?

T. Retard (apparently)

File: 1715540802889313m.jpg (72 KB, 1024x749)

72 KB JPG

>>101223693
I can recommend TP Link wholeheartedly. I have two Eap235v3 in use for 5 years at my rental house property that is very large and concrete. It doesnt have all the meme wifi 6 beamforming mesh bullshit. Just around 20 active users streaming 24/7 to phones, laptops, macbooksz etc. Never had a single complaint or problem from tennants or myself. I used to do spot checks and it downloads around 70-80mb/s rock solid. Great coverage for the entire house and 3/4 acre property with just two AP. One in basement and other in upstairs hallway. $50 each on amazon.. smallnetbuilder does a good review of them if you think I am a shill. Omada is a decent interface for webui.

>>101238119
*Eap225v3. (Typo)

Find your favorite TikTok model there:
https://en.wikipedia.org/wiki/Tick%E2%80%93tock_model

What are the main drawbacks of using NTFS for a small NAS?
I just want to be able just in case to shove any drive from it in a Windows machine/enclosure and be ready for read&write

>>101239020
Windows doesn't have good software RAID options for NTFS.

>>101239036
No, i meant ntfs on Linux (whatever the NAS runs) and in case of something i could just take the drive and use it regularly in a Windows machine.

>>101239076
I think I've still answered to your question, and NTFS on GNU/Linux is still a horrible idea for performance. You have quite an untypical use scenario.

>>101210717
>Intel Xeon SP 1st generation (Skylake) is on the edge of being e-waste (due to hardware vulnerabilities)
How many chinese hackers you got in your LAN mate?

>>101239076
>ntfs on Linux
You could just open fdisk with a blindfold on and start mashing random keys if you want a file system corruption, no need to overcomplicate this.

wouldn't exfat be better for that?

>>101228122
you should ALWAYS update as updates provide vulnerability fixes and optimizations. your server isn't a nuclear facility that needs to remain in a perfect state.

>>101202210
how would these HDD's even be cooled? I can't imagine an exhaust fan doing anything since the backplane blocks the heat from escaping in the other rows

>>101240438
cringe updooter. if it works there is no need to update

>>101240438
>your server isn't a nuclear facility that needs to remain in a perfect state.
It is pretty close though. I'm not going to updoot unless I know that what I'm getting didn't break shit. Stability and security are more important than getting the latest version of a program where they removed features.

Whats the best way to get remote access to my home server? Wireguard script or tailscale or just get a paid vpn?

>>101241677
SSH

>>101241677
Self hosted wireguard

>>101237591
Yes let me just call up asml and order a lithography machine for writing the discs

>>101241677
tailscale is just wireguard+botnet

>>101242731
headscale allows you to selfhost your own tailscale server so your data is not being tunneled through them.
https://github.com/juanfont/headscale

wireguard requires you to port forward. tailscale/headscale works without any port forwarding.

So does OFDMA actually work now or is it still broken garbt?

>>101240263
exfat doesn't have journal so it's highly prone to corruption, plus due to its licence it can't be added to the linux kernel, only as a FUSE module, which is slower, do not use exfat for this

>>101219165
transition's coming along nicely, hon!

>>101219640
blessed carlos acutis!!!

>>101201656
what's some cool shit i can do on a college student budget? right now i have a small nas set up for hifi audio + movies and i want to go deeper into the whole home networking thing but i'm short on cash and a little tight on space.

File: Screenshot_20240702_08545(...).png (260 KB, 1079x1362)

260 KB PNG

What's the realistic performace of picrel, and are there better options for getting 25gbe to a mini itx build?

>>101243655
If you have to ask then none. But I was in your position at one point in my past so, given you already have a nas:
>virtualize your nas
>install a virtualized router
>drop your existing router for the virtual one
>do shit with your virtual router
>make a honeypot with another vm
>make a minecraft server with another vm
idk man the possibilities are endless

>>101243723
why dont you try buying an actual server with pcie lanes and slots. there's no way you have fast enough storage in that itx box to make use of the full 25g anyway. did you think this through?

>tfw went into the home networking rabbithole
>the more I read the less I understand
>users and 'jails' for every single protocol
Im not even sure if my homeserver is exposed to the internet or not

>>101245625
nothing is exposed by default you have to deliberately do it via port forwarding from your router. if you cant access it from your phone's mobile network then its not exposed.

>>101245625
to add;
users are important because you never want to allow root to do everything. if an attacker gains access they literally have full control. if the service is never exposed eternally then it doesn't matter.

jails/containers just prevent the service from touching anything on your system, so if an attacker gains access and installs ransomware it would only effect the jail.

What's /hsg/'s recommendation for monitoring my servers. Mostly interested in hardware failures and the such.

So I'm considering fucking off my TrueNAS and replacing it with Linux + OpenZFS and migrating all the jails too. Question is, should I create it as just another VM in my current ESXi setup and gradually migrate, or is there any reason why I might want to fuck that off too and just install Linux on bare metal?

>>101246886
>virtualized NAS
i do this but i'm aware the recommended way of handling it is by passing through the sata/sas controller to the vm so maybe you want to dig deeper there, not versed in esxi so i can't tell if it'll let you pci passthrough like linux does, most likely it does though

>>101246991
I already do this; this has nothing to do with my question.

>>101247007
>this has nothing to do with my question.
it's my fucking answer and i say whatever i want

>>101247016
OK sir

>>101246863
Zabbix
The MIBs are pretty plug and play, which I like.

>>101247032
Cool, thanks anon

>>101242750
>headscale works without port forwarding
I'm sure the server doesn't

File: d2d787c5cdd62eb52003ba417(...).jpg (32 KB, 564x559)

32 KB JPG

>the only way to have file integrity checks in NFS is by using Kerberos
from the sick and demented minds of IETF...
I'm not even asking for super robust anti-tamper file integrity, just a basic built-in checksumming would be enough... I thought it was a common knowledge that application layer protocol can't rely on transport layer for integrity, that it should do it's own checks.
Now my schizo mind can't rest because a bit flip on the network interface or a switch could corrupt my data...

File: Screenshot_20240702-22484(...).png (185 KB, 1080x1678)

185 KB PNG

no backup on prod

>>101247885
Aw sweet, a 5th copy of this image for redundancy

File: 69bb78bd6956ea6dd0c929bc0(...).jpg (47 KB, 531x329)

47 KB JPG

>>101247789
turns out there was a draft concerning this exact issue (https://datatracker.ietf.org/doc/html/draft-aggarwal-nfsv4-cksum-01), sadly looks like it was abandoned.
And if you think you could setup Kerberos just to have file integrity, tough luck, last time i tried it was broken on TrueNAS and nobody was bothered to fix it, guess nobody really uses it anyway.

File: openssh.jpg (90 KB, 1052x631)

90 KB JPG

bros did you update OpenSSH ?

File: 1703008561_CluelessEmoteH(...).png (869 KB, 2400x3200)

869 KB PNG

>overspend on home server setup for family
>only one person uses one service
>Never more than 6% CPU usage
>it's now a glorified NFS and SMB device that could've been made with a $30 Orangepi zero
/hsg/ what can I do with the leftover cpu power? What's fun?

>>101247885
>coomer site
that forum is run by retards

>>101248051
setup VPN so you can secure access all your data.

>>101248051
>hoarding shit
>building/compiling shit for funs
>minecraft server for playin with your buddies
>ai bots or porn
the list goes on and on

File: 20240615_104418.jpg (54 KB, 961x578)

54 KB JPG

What's the most retard proof way to set up Single Sign On and is it even worth it when there's like 6 people that'll use it? I hit a wall with authentik not working.

>>101248325
god i hate reddit so fucking much

Why use VMs? Why not just run Kubernetes on bare metal?

>>101248726
you need to read more kid

>>101240457
How much heat do you think HDDs generate? What do you think is the operational temperature for HDDs?
Hint: you're more likely to run HDDs under their operational temperature than cause them to overheat

>>101248750
Nah, I think I'll just run Kubernetes on bare metal. lol

>>101248751
In my SuperMicro chassis, the HDD temps would average at 55~64C if I didn't put 120mm fans in front of the case, and this is considering there's only 1 backplane in the case.

File: overview.jpg (120 KB, 1552x873)

120 KB JPG

>Any good alternatives for this shit? I really like the HDMI pass through functionality but it seems like too expensive.

File: network.png (283 KB, 1800x1300)

283 KB PNG

thinking of doing pic related
>remove bedroom ap/switch which duplicates the ssid of my main router, but it isnt a mesh network
>add actual mesh devices for full coverage of my house (about $170) https://www.amazon.com/dp/B09PRB1MZM
>add switch with 10gbit ports so I can get rid of the dac (about $150) https://www.amazon.com/dp/B0723DT6MN/
thoughts?

>>101243723
The server could do 25 gig. But if there's no way to get it to my main pc there's not much of a point.

Why in the fuck does a secure wire cause a loop in my network.
These firewall knobs are quite funky

>>101248051
is it accessible from outside?

>>101243723
a 25gbe connectx-4 pcie card is like $50

File: izutsumi_and_inutade_dung(...).png (76 KB, 273x273)

76 KB PNG

>>101250146
Yes, I know. I'm debating doing 25gbe for my server and network, but I'm looking for a way to get 25gbe on my main pc when I upgrade later this year. Which I want to make a sff, so no room for pcie cards other than the gpu.

>>101227843
>>101247938
>mfw using dropbear instead
>system isn't even compatible with glibc

>>101242750
Wasn't the point of tailscale to have an easy/glowing 3rd party to be the liason between a 'home' network and traveling devices?

>>101250235
You can still make a small/compact computer with a matx board, you just won't have access to meme sandwich cases.
But you're probably going to be forced to get a deep itx board with dual 10gb and aggregate the connection. Or you get a board with oculink, which doesn't exist in consumer boards still.

File: 6e7987f95687878e1b6a9d350(...).jpg (709 KB, 1012x1536)

709 KB JPG

btrfs or xfs for the nvme containing my root

Anyone using Apache Guacamole?
https://guacamole.apache.org/
The idea of accessing a remote desktop via a browser sounds nice but I am surprised by how good NoMachine is.

>>101249400
bump

File: 20240630_063010.jpg (373 KB, 1838x2600)

373 KB JPG

>>101251064
ntfs

File: 4d179ffed8642554656e9cd8f(...).jpg (98 KB, 1073x819)

98 KB JPG

>>101247925
while trying to setup NFS with Kerberos on my Gentoo boxes i locked up my PC during boot. `retry=0` normally works well with `sec=sys` and exits immediately if it can't connect to server, but with `sec=krb5` it just locks up, had to boot to my rescue USB...
On another note, apparently there's RPC-With-TLS added to Linux 6.4, encryption is a bit overkill for me, but at least that includes data integrity, should be easier to setup NFS this way. If i can't make Kerberos work, i'll proceed with TLS.

File: torrent_vm.png (21 KB, 575x575)

21 KB PNG

Due to security concerns I was considering running my torrent client in a VM on my workstation, bridge the virtual NIC to my physical NIC and encrypt all the traffic with a SSLVPN running inside the VM. Is this retarded?

>>101254596
seems like a normal setup except you are running the client in a VM instead of running it in your computer, if you plan to put more things through the VPN, you could run a separated VPN gateway-VM and just give access to the torrent-VM to that gateway, not to the normal bridge