Ami Sapphire's Notices
  • Login

  • Public

    • Public
    • Groups
    • Popular
    • People

Notices by Clarissa Walker (amisapphire@cwcyrix.nsupdate.info), page 8

  1. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Saturday, 14-Jan-2023 23:31:17 EST Clarissa Walker Clarissa Walker
    OPNsense 23.1 is approaching fast.

    I am going to migrate the firewall that is handling all connections, especially this very server, from old-ish reliable 21.1.9 to the latest future 23.1 in February.

    This requires manual setup and not an upgrade, so some downtime is expected. No ETA on when this will be done just yet.
    In conversation Saturday, 14-Jan-2023 23:31:17 EST from web permalink
  2. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Thursday, 12-Jan-2023 02:34:09 EST Clarissa Walker Clarissa Walker
    in reply to
    • Clarissa Walker
    Okay, the system lives once again. Yeah, I freaked out because there is years of stuff not on the main server yet from that Windows install. Thinking the cumulative Windows update was actually installing despite the WinApp saying Downloading 100% after other updates that require reboot have installed (and you could restart the system in the process). Pressing Restart the System does interrupt this install process after confirmation...
    In conversation Thursday, 12-Jan-2023 02:34:09 EST from web permalink
  3. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Thursday, 12-Jan-2023 01:20:11 EST Clarissa Walker Clarissa Walker
    in reply to
    • Clarissa Walker
    Restoring the Windows 10 partition was a success. No more odd system hangups and stuff seems to download from Windows Update normally. Now to see what happens after this. So odd. If this happens again (somehow), may as well use a Linux distro on it; I still have all the data for the Windows install.
    In conversation Thursday, 12-Jan-2023 01:20:11 EST from web permalink
  4. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Thursday, 12-Jan-2023 00:01:07 EST Clarissa Walker Clarissa Walker
    Not the greatest week, lol.

    Bought a Linksys E8450 recently and ran into a showstopping bug regarding wireless clients and communication on later OpenWrt 22.03 releases and even very recent snapshot versions. Flashed 22.03.0-rc1 and wireless communication and clients now work normally without the static ARP workaround. This took a week to troubleshoot, too.

    After all that, the Intel NUC's SSD's Windows partition really became corrupted. Luckily, I mirrored the entire disk a month prior. Actually, that backup is the most recent because it hadn't been used since last month; I was testing Kubuntu 22.10 in live mode on the NUC, then eventually went back to Windows 10. Ran a Windows update, then it wouldn't boot after a restart. 😮 Now, I'm restoring just the Windows partition to see what would happen.
    In conversation Thursday, 12-Jan-2023 00:01:07 EST from web permalink
  5. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Wednesday, 28-Dec-2022 01:58:30 EST Clarissa Walker Clarissa Walker
    Testing a fork of this setup from someone who runs an instance in Japan. Has some subtle changes and fixes there; so... http://cwcyrix.nsupdate.info/gnu-social/public/url/19
    In conversation Wednesday, 28-Dec-2022 01:58:30 EST from web permalink

    Attachments


  6. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Thursday, 22-Dec-2022 01:35:40 EST Clarissa Walker Clarissa Walker
    Okay a bit on CTF, or Cut-Through Forwarding, also known as Cut-Through Switching:

    This feature was originally intended for advanced managed switches, not SOHO routers that rely on LAN to WAN traffic, and vice-versa. This is why packets meant for certain traffic break (e.g. VOIP/video streams, port forwarding, QOS, VPN).

    This is fine for LAN to LAN traffic and SOHO routers that are just APs (Access Points). My testing yielded better results with it enabled, but since CTF really utilizes the kernel, it eats more CPU power and cycles than with it disabled. This also affects WLAN performance a bit, made worse if the general WLAN area is congested.

    DD-WRT is not as stable in general at present, but it is worse with CTF enabled. As with FreshTomato, it is generally more stable, even with CTF enabled.
    In conversation Thursday, 22-Dec-2022 01:35:40 EST from web permalink
  7. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Thursday, 22-Dec-2022 00:13:15 EST Clarissa Walker Clarissa Walker
    in reply to
    • Clarissa Walker
    Confiscated the R7000 again and flashed FreshTomato 2022.7, but starting anew this time. With this router, it should use the specific WLAN antenna settings with this version.

    As for the LAN-LAN performance testing , SFE won out.
    In conversation Thursday, 22-Dec-2022 00:13:15 EST from web permalink
  8. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Wednesday, 21-Dec-2022 15:58:02 EST Clarissa Walker Clarissa Walker
    in reply to
    • Clarissa Walker
    ...That was extremely hacky. This worked too well, but for some reason the wireless radio throughput is weaker on DD-WRT than on FreshTomato. Going to reflash the R7000 to latest FreshTomato 2022.7 later.
    In conversation Wednesday, 21-Dec-2022 15:58:02 EST from web permalink
  9. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Wednesday, 21-Dec-2022 13:17:23 EST Clarissa Walker Clarissa Walker
    in reply to
    • Clarissa Walker
    ctf_fa_mode is set to 0, so CTF+FA is technically not running. I'll try again next day, and set that to 2. 😈
    In conversation Wednesday, 21-Dec-2022 13:17:23 EST from web permalink
  10. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Wednesday, 21-Dec-2022 05:48:32 EST Clarissa Walker Clarissa Walker
    in reply to
    • Clarissa Walker
    R7000 is now primary, with DD-WRT as a real-world test. Remember these (frankly stupid) hacks:

    CTF - enabled
    CTF+FA - enabled (through override; may do jack)
    CPU overclock to 1200MHz

    During this test, I ran a bufferbloat test, then two speed tests immediately after. Router crashes. Well, I have to recreate this, and sure enough, it crashes again.

    I then relocated to the stable router, upgraded the firmware to version r51043, built on 2022-12-19. Recreated the test issue again, and this time, it didn't crash. Very odd. This needs more testing, and it wasn't caught during the initial runs. This lived through four connected wireless devices and a Twitch stream; and was caught when ~10 wireless devices were connected.
    In conversation Wednesday, 21-Dec-2022 05:48:32 EST from web permalink
  11. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Monday, 19-Dec-2022 20:51:15 EST Clarissa Walker Clarissa Walker
    in reply to
    • Clarissa Walker
    Found out it's not FreshTomato's fault, but apparently CTF actually has some performance improvements in LAN transfers. Temporary R6300v2 had CTF on then I turned it off... eventually it had about the same speeds as the R7000 before confiscation.

    R7000 has a near-latest DD-WRT firmware version: r51032, built on 2022-12-15. SFE and CTF were tested: SFE used up more CPU (sirq), but had transfers on ~33MB/sec on 5GHz Wi-Fi.

    Will flash FreshTomato on it again and restore the NVRAM/config and do more testing with CTF... along with WDS this time.
    In conversation Monday, 19-Dec-2022 20:51:15 EST from web permalink
  12. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Monday, 19-Dec-2022 05:04:48 EST Clarissa Walker Clarissa Walker
    Confiscated the Netgear R7000; temporarily switched it with the backup R6300v2 after finding wireless performance issues with the R7000 and FreshTomato 2022.6. Oddly enough, that same variant firmware is fine with the R6300v2.

    Newer DD-WRT versions have an even newer kernel as well since I last touched it with the R7000; may experiment with that this time.
    In conversation Monday, 19-Dec-2022 05:04:48 EST from web permalink
  13. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Wednesday, 14-Dec-2022 06:14:33 EST Clarissa Walker Clarissa Walker
    in reply to
    • Clarissa Walker
    This is a success. As a bonus, most of the libraries are up-to-date for both PHP7 and Apache HTTPd.

    Stuff really had to be fine-tuned for PHP7 compile. PHP8 compile will be less painful from now on.
    In conversation Wednesday, 14-Dec-2022 06:14:33 EST from web permalink
  14. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Wednesday, 14-Dec-2022 05:34:40 EST Clarissa Walker Clarissa Walker
    New thread. Ran into some interesting technical issues re: compiling some packages for the server. Had to compile OpenSSL and cURL just for PHP 7 since the migration from 18.x to 22.10.

    This also means I will have to recompile HTTPd as well.
    In conversation Wednesday, 14-Dec-2022 05:34:40 EST from web permalink
  15. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Tuesday, 13-Dec-2022 17:00:32 EST Clarissa Walker Clarissa Walker
    in reply to
    • Clarissa Walker
    ...Partially fixed. I have phpsysinfo on the main server and using open_basedir breaks that (and possibly a few things). shell_exec() is disabled for now, however.
    In conversation Tuesday, 13-Dec-2022 17:00:32 EST from web permalink
  16. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Tuesday, 13-Dec-2022 16:19:33 EST Clarissa Walker Clarissa Walker
    in reply to
    • Clarissa Walker
    So, I can read the entire /etc/passwd file on my server through PHP. Obviously this will be fixed.
    In conversation Tuesday, 13-Dec-2022 16:19:33 EST from web permalink
  17. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Tuesday, 13-Dec-2022 14:45:38 EST Clarissa Walker Clarissa Walker
    in reply to
    • Clarissa Walker
    Nope, ratelimit contemplates with bw, so both are enabled, and mod_bw limits are upped. Now each client downloads at the speed of what the old mod_bw settings are, and mod_bw limits are double that.

    256KB each client -> 512KB bw limit
    384KB each client -> 768KB bw limit
    512KB each client -> 1024KB (1MB) bw limit
    In conversation Tuesday, 13-Dec-2022 14:45:38 EST from web permalink
  18. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Tuesday, 13-Dec-2022 14:29:20 EST Clarissa Walker Clarissa Walker
    in reply to
    • Clarissa Walker
    Changed bandwidth limit setup from a modified mod_bw module to the official mod_ratelimit module. Seems fine, but I need more tests to make sure.
    In conversation Tuesday, 13-Dec-2022 14:29:20 EST from web permalink
  19. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Tuesday, 13-Dec-2022 02:45:44 EST Clarissa Walker Clarissa Walker
    in reply to
    • Clarissa Walker
    Went back to PHP in CGI mode as a test for the CGI socket. Going to go back to PHP in FastCGI mode.
    In conversation Tuesday, 13-Dec-2022 02:45:44 EST from web permalink
  20. Clarissa Walker (amisapphire@cwcyrix.nsupdate.info)'s status on Monday, 12-Dec-2022 23:54:53 EST Clarissa Walker Clarissa Walker
    in reply to
    • Clarissa Walker
    More cleaning up the global httpd.conf file. Didn't know that Apache Foundation officially added the HTTPoxy mitigation to that file some time ago.

    Also cleaned up the custom httpd-php config and split those between the CGI part and FastCGI part.
    In conversation Monday, 12-Dec-2022 23:54:53 EST from web permalink
  • After
  • Before

User actions

  • Subscribe
  • List
Clarissa Walker

Clarissa Walker

Detroit, MI

http://cwcyrix.nsupdate.info

Hobbyist computer tweaker/repairperson, webmistress, procrastinator. Does things on my own time. Also known as CW Cyrix.

Tags
  • (None)

Following 0

    Followers 0

      Groups 0

        Statistics

        User ID
        1
        Member since
        21 Nov 2022
        Notices
        176
        Daily average
        0

        Feeds

        • Activity Streams
        • RSS 1.0
        • RSS 2.0
        • Atom
        • FOAF
        • Help
        • About
        • FAQ
        • Privacy
        • Source
        • Version
        • Contact

        Ami Sapphire's Notices is a social network. It runs on GNU social, version 2.0.2-beta0, available under the GNU Affero General Public License.

        Creative Commons Attribution 3.0 All Ami Sapphire's Notices content and data are available under the Creative Commons Attribution 3.0 license.