• 2 Posts
  • 713 Comments
Joined 2 年前
cake
Cake day: 2024年2月1日

help-circle







  • Yeah, one of the issues I was having with running VPN on router is that you need a somewhat beefy router if you want to use your full bandwidth—my router maxes out at about 90Mbps with WireGuard, even though it can NAT around 1Gbps (which is our service).

    I implemented two workarounds, one was to use my access point as a VPN router since it had a beefier CPU, and the other was to just use an ARM SBC with Linux to handle that task. (I ended up with the latter, as the former ended up maxing out at around 400Mbps, and introduced some additional headaches.)


  • I also have an SSID that doesn’t get VPN’d, though my DNS is always VPN’d.

    As for accessing JellyFin, etc., I think we have somewhat different setups. My self hosted services are by default accessible without a VPN (SSID is on a VLAN with e.g. 192.168.0.0/24, servers are on 192.168.1.0/24, router routes between them). For the blanket VPN’d SSID I have a routing rule that routes over the main, not VPN, table, so local services can be accessed.

    So: local traffic has a rule to route without VPN, reddit routes with a specific VPN, and general traffic routes with a different VPN.

    There are lots of VLANs involved in my setup, and I’m sure it’s overly complicated and has gaping security issues, but it’s just a home network and it’s kinda fun :(



  • I have this set up on my router. My wifi is blanket tunneled through a VPN. For annoying sites that restrict access like reddit, my router routes through a specific VPN server that doesn’t (yet) get blocked (I don’t post/comment/browse, but occasionally find a post that answers a question). That way it works on my whole home network, regardless of device.

    Same could be done for YouTube presumably, but maybe a little more complicated (reddit seems to work with a single /32 address).

    Plus, it’s fun to set up—MikroTik router, Mullvad, and an ARM SBC doing the VPN duties for me, but myriad ways to get it working for other configurations.






  • nc is useful. For example: if you have a disk image downloaded on computer A but want to write it to an SD card on computer B, you can run something like

    user@B: nc -l 1234 | pv > /dev/$sdcard

    And

    user@A: nc B.local 1234 < /path/to/image.img

    (I may have syntax messed up–also don’t transfer sensitive information this way!)

    Similarly, no need to store a compressed file if you’re going to uncompress it as soon as you download it—just pipe wget or curl to tar or xz or whatever.

    I once burnt a CD of a Linux ISO by wgeting directly to cdrecord. It was actually kinda useful because it was on a laptop that was running out of HD space. Luckily the University Internet was fast and the CD was successfully burnt :)


  • A dishwasher is a total quality of life thing for us.

    It sucks that some places don’t offer them. They’re not even very expensive, it’s just the kitchen real estate/installation that sucks.

    A place I loved in after college had a full size unit on wheels that you hooked up to sink to use—worked fine, just took up space. They also make countertop units, but I have no idea how well those work.