• 0 Posts
  • 22 Comments
Joined 3 years ago
cake
Cake day: June 10th, 2023

help-circle

  • Tailscale/headscale/wire guard is different from a normal vpn setup.

    VPN: you tunnel into a remote network and all your connections flow through as if you’re on that remote network.

    Tailscale: your devices each run the daemon and basically create a separate, encrypted, dedicated overlay network between them no matter where they are or what network they are on. You can make an exit node where network traffic can exit the overlay network to the local network for a specific cidr, but without that, you’re only devices on the network are the devices connected to the overlay. I can setup a set of severs to be on the Tailscale overlay and only on that network, and it will only serve data with the devices also on the overlay network, and they can be distributed anywhere without any crazy router configuration or port forwarding or NAT or whatever.



  • You’ll want to look into “keepalived” to setup a shared IP across all worker nodes in the cluster and either directly forward, or setup haproxy on each to do the forwarding from that keepalived IP to the ingresses.

    I’m running 6 kube nodes (running Talos) running in a 3node proxmox cluster. Both haproxy and keepalived run on the 3 nodes to manage the IP and route traffic to the appropriate backend. Haproxy just allows me to migrate nodes and still have traffic hit an ingress kube node.

    Keepalived manages which node is the active node and therefore listens to the IP based on backend communication and a simple local script to catch when nodes can’t serve traffic.





  • thejml@lemm.eetoMemes@lemmy.ml•Jerkoff
    link
    fedilink
    English
    arrow-up
    12
    arrow-down
    6
    ·
    2 years ago

    Thing is, they don’t have the same opportunities. The one reason why trump has been able to push things through in this shitty manner, is because the Republicans have stacked the Supreme Court (because the holes from people dying got filled while Republicans were in power) and they have majority control of Congress.


  • thejml@lemm.eetoMemes@lemmy.ml•Jerkoff
    link
    fedilink
    English
    arrow-up
    16
    arrow-down
    5
    ·
    2 years ago

    Much of what Trump has “undone” wasn’t undone legally. Many of the things he did requires congress to rollback and other things are caught up in courts. But in the mean time they happened so it will be potentially unable to be put back even if it is ordered so.


  • thejml@lemm.eetoMemes@lemmy.ml•China's workout routine
    link
    fedilink
    English
    arrow-up
    27
    ·
    2 years ago

    Cool thing is that Poverty isn’t just money:

    Fundamentally, poverty is a denial of choices and opportunities, a violation of human dignity. It means lack of basic capacity to participate effectively in society. It means not having enough to feed and clothe a family, not having a school or clinic to go to, not having the land on which to grow one’s food or a job to earn one’s living, not having access to credit. It means insecurity, powerlessness and exclusion of individuals, households and communities. It means susceptibility to violence, and it often implies living in marginal or fragile environments, without access to clean water or sanitation.

    There are plenty of other definitions, but they all revolve around these things: food, clothing, shelter, clean water and air, etc. All basic human needs.



  • Current homelab+desktop+laptop host count here is 22. All anime characters or references. It’s a fairly large pool to pull from, so it’s worked for me for 20+ years now. Mobile devices (phones, tablets, etc) and game consoles aren’t really as clever though.

    All of them are in a piHole DNS though so no host files keeps it easy to track. Services have names that mostly are just what they are though and cnames to the matching host that hosts them (or load balancer, whatever)





  • Nice, we’ll all look out for an update in a year!

    I try to mix brands and lots (buy a few from one retailer and some from another). I used to work for a storage/NAS company and we had many incidents when we’d fill a 12 or 24 drive raid with drives right from the same order and had multiple drives die within hours of each other. Which isn’t usually enough for replacement/resilvering.


  • Mine are 3x 27k and 1x 47k. I just started replacing them… not because they’re old or have any issues, just because they’re becoming too small. Going from 4 to 8 tb disks and transferring the old ones to an external raid enclosure for backups.

    Actually brings up a question I had… what do people think about refurbished drives for a NAS?


  • Finish my migration to my local Kubernetes cluster. Tired of running a mix of vms, docker, and bare metal. I got it setup and a few things, just have to power through.

    I also need to bump the drive size in my NAS as I’m running low and want to leverage it more, not less. (Pods use PVs hosted on the NAS over NFS or iSCSI).

    And get my offsite backups going again, I had to move this last year and it put a real damper on my goals for last year so there’s a lot of “got the stuff just have to make it work”.

    Edit: the UDM Pro is pretty nice. That, a rack and a 2.5G enterprise switch were last year’s acquisitions.