bufandatl

joined 11 months ago
[–] bufandatl@alien.top 1 points 10 months ago

You basically need a router between the networks. I would recommend pfsense or opnsense or if you like cli vyOS. I run a pfsense that has my ISP router on the WAN port and a network interface for all VLANs and then I configured the firewall to allow specific traffic to specific devices in specific VLANs. For example my PC can reach the smart home controller website but no other device. And the samrthome devices only can reach the DNS in the ISP network (my kinda DMZ) and the router to reach the internet. And for every VLAN there are own rules where goes what communication.

You also can setup that on the managed switch which you would need for setting up VLANs.

[–] bufandatl@alien.top 1 points 10 months ago

2 days for most hosts as they had a kernel update. Other hosts about 30 days (no updates pending). And the winner is my core switch with 750 days up time.

[–] bufandatl@alien.top 1 points 10 months ago

Yea don’t use enterprise stuff and build servers yourself with lowpower hardware. Less power less heat also can be cooled easier with Noctua Low RPM low noise fans.

[–] bufandatl@alien.top 1 points 10 months ago

Moving your gaming PC as client makes no sense no. But gaming servers like a Minecraft or whatever severer can make sense.

I can recommend XCP-NG as Hypervisor. I have over 25 VMs running my whole home from DHCP/DNS over media servers to game servers for CS2 and DayZ. And it’s stable and performant.

[–] bufandatl@alien.top 1 points 10 months ago

Don’t use NTFS either Linux as 24/7 file system. Use Linux natives like ext4, xfs or zfs. And share the drive via samba. If it’s a drive that needs to travel between systems use EXFat.

[–] bufandatl@alien.top 1 points 10 months ago

Free electricity for everyone.

[–] bufandatl@alien.top 1 points 10 months ago

Use ELK. It’s basically the same but open source and unlimited for free. Also splunk sucks. Have to use it at work and it really isn’t great. (My personal opinion)

[–] bufandatl@alien.top 1 points 10 months ago

That‘s normal. There are countless bot nets that scan every public available IP to hijack. Using fail2ban is already a good approach. I personally switched to crowdsec a while ago as it comes with a crowdsourced blacklist which will silence a lot of the common noise and only occasionally I get an Alarm about an IP address not already on the default list.

[–] bufandatl@alien.top 1 points 10 months ago

I got one HGST with now almost 11 years. And some WD Reds with 9 to 10 years. They run now in a Helios 64 which I use to store DVD and BluRay backups before they get tagged correctly and moved to my Plex storage pool.

[–] bufandatl@alien.top 1 points 10 months ago

Windows bad. Linux good. BSD better.

For real though. Windows cost money, it uses a lot of resources. And Desktop Version is missing vital parts you might want to use on a windows server like Domain Controller, DHCP, Server, Web Server, Hyper-V. Etc.

Those reasons also have most running Limix or even BSD because they are pretty lightweight especially when used headless. Also as open source they are mostly free of cost. And when you virtualize on a free and open source Hypervisor like XCP-ng or Proxmox you can run way more smaller VMs than Windows VMs as they need more resources.

[–] bufandatl@alien.top 1 points 10 months ago

The Bill at the end of the year.

[–] bufandatl@alien.top 1 points 10 months ago

I am using terraform to create my VMs and destroy them. Using Ansible with the xenorchestra inventory plugin and have it configure the servers I created.

view more: next ›