Conversation

Notices

1. Embed this notice
   Rich Felker (dalias@hachyderm.io)'s status on Tuesday, 10-Mar-2026 02:49:40 JST Rich Felker

   Whew, finally got thru almost all of my network setup technical debt and got everything on the new fiber. This involved:

   - Making USB-C to 12V barrel cable so the new equipment is on the DC UPS.
   - Removing gratuitous segmentation that had painful tradeoffs and made IPv6 hard.
   - Removing a layer of NAT and routing thru public-IP VPS for outgoing IPv4 traffic.
   - Turning off address assignment on ISP-provided router and having another box do that until I get an OpenWRT replacement that can do it all right.

   Now everything is fast, all devices have IPv6, and all devices can access (2D and 3D) printers. 🎉

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Tuesday, 10-Mar-2026 04:07:56 JST Rich Felker

     in reply to

     • Erik Ableson

     @erik Tunneling. I have a /64 from the same VPS I have my public v4 address from, and it's routed over wireguard. I might try switching it to HE's tunnelbroker which would probably have higher performance and just use my /64 for static assigned server addresses. But having it all on a single /64 is nice because v6 clients connect to v6 servers over LAN.

   • Embed this notice
     Erik Ableson (erik@mastodon.infrageeks.social)'s status on Tuesday, 10-Mar-2026 04:07:58 JST Erik Ableson

     in reply to

     @dalias Nice! IPv6 native from the ISP or tunneling?

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Tuesday, 10-Mar-2026 04:09:46 JST Rich Felker

     in reply to

     Ooops, one snag: Unbound didn't have an ACL to allow new LAN addresses. I didn't notice until I tried using a device that was actually honoring DHCP nameservers rather than having its own fixed configuration. 🤪

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Tuesday, 10-Mar-2026 12:43:23 JST Rich Felker

     in reply to

     Ok, got a non-ISP router, GL-iNet GL-B3000, now flashed to current upstream OpenWRT. I really like the device. It has recovery bootloader with http interface to reflash firmware, even after messing it up, and installing was painless that way. Signal strength looks to be better than the ISP's. Only getting 93 Mbit thru it right now, but I just realized that's because I have it connected thru an old 100 Mbit switch for setup until I actually deploy it.

   • Embed this notice
     cliffle@hachyderm.io's status on Tuesday, 10-Mar-2026 14:50:20 JST cliffle

     in reply to

     @dalias I like the GL-iNet devices like that, particularly since they can run upstream if you're careful. 👍