Search results
-
G
pfSense (or other dedicated router) questions
That is really cool! Thank you. BTW, I just completely broke my LAN today while moving some interfaces around. It literally took me an hour to realize that when I re-created an interface in pfSense, that I forgot to change the netmask from the default /32 to /24. I was going absolutely nuts... -
G
pfSense (or other dedicated router) questions
Originally, I did want to solve a problem. Go back and read the very first post in this thread. Actually, I _STILL_ want to solve that problem. So far, the closest I've come is ntopng, but that has shortcomings. So, it's still unsolved in regards to pfSense (and based on checking dozens of... -
G
pfSense (or other dedicated router) questions
I'm not claiming mere curiosity. My home is my professional testbed and where I learn things. On the other hand, I wouldn't go so far as using the term evangelism. Unless someone asks for my advice (or I'm somehow responsible for the network), I don't push IPv6 on others. In the example I... -
G
pfSense (or other dedicated router) questions
"Most" would be quite happy, and completely oblivious to IPv6 even existing. A company I work with is like that, and they refuse to enable IPv6 (even using only ULA's.) Their perspective is that if it isn't broke, don't fix it. (I keep trying to tell them that just because it isn't broken for... -
G
pfSense (or other dedicated router) questions
In my own LAN? I'm an engineer. My "home" network is a test bed for pushing my own knowledge and limitations. Tomorrow is IPv6, so I need to be ready for it today. How can I write s/w and f/w that properly handles IPv6 if I can't even set up a LAN that uses it? It's the same reason that I... -
G
pfSense (or other dedicated router) questions
For me and you? Not much of anything whatsoever. For "The Internet" at large, however, it brings about the ability to continue to exist. Right now, today, there are no more IPv4 addresses available for assignment in the global internet. That means that if you form a new company and want a... -
G
Edge Router X
aye, but if you're mixing filtering and bridging, then you have "a good reason" to bridge on the router (as few switches can do filtering.) If you aren't doing filtering on the router bridge, then it's only passing the stack once (which it would have done anyway at L3.) I've never done it... -
G
pfSense (or other dedicated router) questions
ugh. I wasn't aware of any android devices doing that! (I know they constantly change their hostname... but I've never seen the MAC address changing.) If that's happening, then there really isn't any reliable way to specify a single device. :( This isn't about my son anymore. I'm trying to... -
G
pfSense 2.3.2 - vnstat package - traffic totals...
I think the patch mentioned above gives the best of both worlds. You can (ab)use the ram disk all you want, but it also makes things persistent for normal reboots. -
G
pfSense 2.3.2 - vnstat package - traffic totals...
It appears this was already done and it sitting in the pfsense "pending review" pipeline: https://github.com/pfsense/pfsense/pull/2902 -
G
pfSense (or other dedicated router) questions
...another case where L2 might be the answer to a L3 problem: Several different monitoring tools understand L3 IPv4 very well. Want to know the bandwidth for John Doe's computer? Just ask the monitoring tool to query that IPv4 address, and you get instant results. When that tool adds IPv6... -
G
Edge Router X
Why? I frequently see people saying that bridging is a bad thing, but I've never seen anyone explain WHY it's a Bad Thing... -
G
pfSense (or other dedicated router) questions
Oh, they have hostnames... but that doesn't do much good. Addresses generated by privacy extensions aren't registered in DNS. The only addresses registered in DNS are static, ones created by DHCP/DHCPv6, and primary (not privacy extension) IPv6 addresses on Windows machines in AD environments... -
G
pfSense (or other dedicated router) questions
Wow.. this thread certainly got long. ;) Pardon me while I take this into a more philosophical direction (and even ramble)... Thinking about this more and more, I think one of the problems I'm having is that people use the generic terms "L2" and "L3", but those terms are meaningless in a... -
G
pfSense 2.3.2 - vnstat package - traffic totals...
Oh, sorry... what I really meant to reply with was: I had played with this some a few days ago, but I noticed that it wasn't incredibly accurate. I don't know if it's because they use a sampling method (and so miss spike between samples) or what. (It might just be that I didn't give it enough... -
G
pfSense 2.3.2 - vnstat package - traffic totals...
This (RAM disk thing) has become really annoying for me. It's SUPPOSED to retain RRD data. At least, that's what it says right there in the description of the checkbox: "RRD and DHCP Leases will be retained." I did the whole "ram disk for /var and /tmp" to try and lower writes on the SSD... -
G
Route Based Dual WAN Router
I think that TODAY, people need to consider tomorrow. That means planning on deploying IPv6. That requirement would eliminate most contenders in the x86 space. pfSense has good ipv6 support, I don't know about RouterOS... Sophos has barely any support in their "XG firewall" product, and... -
G
pfSense (or other dedicated router) questions
So, you're running unifi AP's as well? Does the ubuntu pi distro support arm64? I'm curious if performance would be any better with all those extra registers available. (Sure, memory usage would go up of course.) -
G
Wired Router w QOS
Some dark places are very nice... Seriously, after the extensive research I've done on this, my very first question would be: What kind of ipv6 support do you want? Some of the options have NO ipv6 support, some have extremely limited support. In fact, the ONLY solution I've found so far... -
G
Question about dedicated routers/pfsense boxes and their uses cases
I dropped using an Asus router (w/ Merlin) due to limitations of routing speed. Those limitations were helped by "hardware acceleration," but there's always a tradeoff with those tricks. For example, the acceleration has no impact for IPv6 traffic. It's also of limited value with QOS enabled...