dontwakethetrees

joined 1 year ago
[–] [email protected] 5 points 7 months ago

Also as a Mac user who went from Safari, ended up using Orion up til recent Kagi drama, and found LibreWolf. It works well and I’ve found it to have better compatibility versus Orion. I’ve used that with Searxng for more private searches.

[–] [email protected] 8 points 7 months ago

People (rightfully) shitting on Elon were forcefully given blue checkmarks and now they can’t hide that mark so that it looks hypocritical.

[–] [email protected] 70 points 7 months ago

If you don’t want to trim, then don’t.

I feel more attractive and confident in my body when my body hair is well groomed. Doesn’t need to be clear cut but also I don’t want whoever’s going down on me to deal with a jungle.

[–] [email protected] 1 points 7 months ago

I mean, compared to what it should be, it is. Especially when I paid for 2.5gb infrastructure.

And it also affects how fast I can pull files from my server. Trying to get some shows downloaded to my laptop before a business trip, guess better prepare for an hour or two copy over LAN. Pulling a backup OS image for my devices? Going to wait for a while.

[–] [email protected] 4 points 7 months ago (1 children)

I think you might be right, couldn't find an identifiable label on the drive and the model reported in Debian shows up in searches as having only 2465MB/s read speeds. After real-world losses and also handling running an OS + multiple services I imagine that could me the source of my problems. Thanks!

[–] [email protected] 3 points 7 months ago

Just an N100 based (quad core 3.4ghz) mini pc with 8gb of RAM and 2.5gb ethernet.

[–] [email protected] 1 points 7 months ago

I'll check my server's CPU usage while transferring. I only used SCP for testing yesterday because the Samba share stopped working.

[–] [email protected] 2 points 7 months ago

No problem 😁

[–] [email protected] 8 points 7 months ago (5 children)

Using iperf3 results in 2.5gb of bandwidth. SSD should not be a bottleneck, the server only has NVME storage and the laptop SSD is located in the SoC. Both far exceeding the network speeds. Traceroute indicated just a single hop to the server.

[–] [email protected] 5 points 7 months ago (4 children)

Just attempted that, odd thing happened was that both evened out on the reverse test at ~800Mbp/s. So higher than the download test before and lower on the upload. Conducted iperf3 tests and that shows the 2.5gb bandwidth so I retried file sharing. Samba refused to work for whatever reason on Debian so I conducted a SCP transfer and after a few tests of a 6.3GB video file, I averaged around 500mbps (highs of around 800mbp/s and lows of around 270mbp/s).

[–] [email protected] 8 points 7 months ago (2 children)

ISP wouldn't matter regarding handling of LAN only traffic right?

[–] [email protected] 7 points 7 months ago (1 children)

I've done pings without any drops. ISP doesn't come into effect as this is only LAN traffic, laptop and server are on the same switch.

 

So I am trying to track down what is possibly slowing down my download connection from my Debian server to my devices (streaming box, laptop, other servers, etc).

First let me go over my network infrastructure: OPNsense Firewall (Intel C3558R) <-10gb SFP+ DAC-> Managed Switch <-2.5gb RJ45-> Clients, 2.5gb AX Access Point, and Debian Server (Intel N100).

Under a 5 minute stress test between my laptop (2.5gb adapter plugged into switch) and the Debian Server (2.5gb Intel I226-V NIC), I get the full bandwidth when uploading however when downloading it tops out around 300-400mbps. The download speed does not fair any better when connecting to the AX access point, with upload dropping to around 500mbps. File transfers between the server and my laptop are also approximately 300mbps. And yes, I manually disabled the wifi card when testing over ethernet. Speed tests to the outside servers reflect approximately 800/20mbps (on an 800mbps plan).

Fearing that the traffic may be running through OPNsense and that my firewall was struggling to handle the traffic, I disconnected the DAC cable and reran the test just through the switch. No change in results.

Identified speeds per device:

Server: 2500 Mb/s
Laptop: 2500Base-T
Switch: 2,500Mbps
Firewall: 10Gbase-Twinax

Operating Systems per device:

Server: Debian Bookworm
Laptop: macOS Sonoma (works well for my use case)
Switch: some sort of embedded software
Firewall: OPNsense 24.1.4-amd64

Network Interface per device:

Server: Intel I226-V
Laptop: UGreen Type C to 2.5gb Adapter
Switch: RTL8224-CG
Firewall: Intel X553

The speed test is hosted through Docker on my server.

 

I’ve been searching for a bit and figured I’d ask y’all.

27
submitted 8 months ago* (last edited 8 months ago) by [email protected] to c/[email protected]
 

Hey everyone, asking here since I've been trying (and failing) at the numerous guides online. The end goal is so that I can have proper Let's Encrypt certs for my self hosted servers to include VaultWarden (which will not work with self-signed or http) as well as have easy urls for myself and family to use.

So I am trying to setup my Porkbun domain with my Opnsense nginx plugin in order to resolve the address (such as navidrome.example.com to my local server's navidrome instance @ 192.168.1.99:4533). I attempted this guide here as well as trying to configure a separate nginx on the server itself. I haven't had much luck with these guides either.

Any address outside of router.example.com results in a connection failure. Including when I tried to route everything like navi.router.example.com. This is with and without wildcards in the A Record entries on Porkbun's DNS control panel. I've tried *.example.com, *.router.example.com, navidrome.example.com, navidrome.router.example.com.

Sorry if this seems like a simple problem or if I am missing a massive step, I am complete newbie at self-hosting/networking.

edit: Finally got it working with the simple urls resolving to the proper self-hosted services and with proper CA certs. Thank y'all for the help and advice!!

view more: next ›