Stephen304

joined 3 years ago
[–] [email protected] 3 points 2 years ago* (last edited 2 years ago) (2 children)

I mean you're literally the one who asked ¯⁠\⁠_⁠(⁠ツ⁠)⁠_⁠/⁠¯ who am I to deny you the enlightenment. But I assume you're just trolling or have the maturity of a teenager because clearly you're wrong.

Opnsense / pfsense is practically a business router like what you might find at a university or hospital. In no universe is it comparable to a consumer router, let alone one from Asus.

[–] [email protected] 1 points 2 years ago (1 children)

I have no idea. I'm using the fpm docker image with a redis container and it's still slow as shit. I haven't looked at APCu though so that might help.

[–] [email protected] 2 points 2 years ago (4 children)

No you can't. You're being silly. They don't even support lacp with more than 2 members out of the box. No gateway groups, no unbound with adjustable cache ttl and cache revalidation. I would know I switched away from Asus specifically because of it's shortcomings, many of which cannot even be fixed by ddwrt such as low system memory for state table, which btw can easily be filled up by torrenting. My opnsense box has a huge state table because I just dropped in 8GB of ram.

You only need to look at the Asus router admin interface to see how many more pages of configuration options opnsense has.

[–] [email protected] 2 points 2 years ago

It would be the case if they implemented authenticated fetch, which is a fediverse protocol that mastodon and some others support, but it's not widely enabled because anything that doesn't support it would get blocked. It basically allows servers to reject fetches from defederated servers, and since lemmy doesn't support it, defederation is somewhat one way since the defederated server can still anonymously fetch new content despite being defederated.

[–] [email protected] 5 points 2 years ago

I think it's ok. The problem is my wallpaper is a cat so everything material you is like light coffee colored which I don't really like. But I'm too lazy to find a better color that doesn't look worse.

[–] [email protected] 3 points 2 years ago* (last edited 2 years ago) (3 children)

I think it's through the nextcloud social app, I haven't installed it though because my nextcloud is slow enough without it

Edit: just checked and it has mostly negative reviews and it's listed as beta

[–] [email protected] 2 points 2 years ago (6 children)

I'm not sure if you understood my comment fully since none of the benefits I gave have to do with number of devices. Again, the main reasons I listed are that dedicated router boxes on x86 hardware is much more flexible configuration-wise and has many more software packages and addons that can be easily installed compared to consumer routers. You can have plugins like nginx, radius, wireguard, snort (as well as full power to run ids/ips at full speed), etc. For configuration, you have more control over multicast, ways to customize local dns resolution, the full range of local hostname resolution settings, DNS failover, multi wan with the full ability to tune failover metrics, advanced routing rules using hostname aliases that periodically auto-update, advanced dhcp flags and dhcp6/SLAAC settings, virtual IPs (a huge help when doing 0-downtime migrations between hardware or subnets), network bridges, GRE and LAGG, v6 router advertisements, and so so much more.

If I had a consumer combo router there's a good chance I would not have vlans, all my roommates would see each other's smart devices and it would be pretty annoying. I wouldn't be able to selectively route only traffic to google servers from only my laptop, phone, and chromecast through the same Germany VPN so that all the non-google traffic would be unVPNed, and I wouldn't be able to set multiple multi-wan failover modes (let alone gateway groups to group failover WANs) so that for example one vlan fails over from the fiber connection to the copper connection while our neighbors connection fails over from the copper connection to the cable internet connection. I would have no ingress load balancer on my router handling incoming traffic to my homelab, and I would have to use extra media converters to get my SFP+ fiber connection to connect to a consumer router's 2.5G port (did we even have consumer routers with mgig 4 years ago? That's around when I got my fiber).

None of this has to do with number of devices, but total capacity is a bonus of having nicer hardware than consumer crap. This wouldn't be a benefit to most people, which is why my main points are about configurability and flexibility with third party packages, but it is a benefit to me since I have 4 gig of total wan and a 10G link to my core switch. If any 2 of the 10 people in this apartment decide to download from steam at the same time, they will both get a full gig download with plenty of bandwidth left over for the other 7 people to be streaming or doing whatever. Again nothing to do with number of devices, more to do with how many simultaneous high-bandwidth uses you expect to coincide. Of course I could just have everyone share a single gig connection (or 1.2 gig which is currently the maximum residential plan you can get here), but then I would need to deal with traffic shaping / queues, another thing that opnsense coincidentally excels at, having way more traffic shaping options. You can even do traffic shaping on a per-destination basis - for example you could use an auto updating ASN alias to categorize traffic to steam or netflix, then dynamically apply different traffic shaping rules based on which user is accessing those services.

TL;DR, consumer routers cannot come close to achieving a fraction of the configuration options that open router platforms have. While you might see benefits in capacity if you invest in a good uplink and high end APs (I have uap u6 pro which is "good for 350 devices", though really I bought for the higher single device performance and higher modulation rates and better mimo configuration), even people with slow internet and very few devices can benefit from the immense amount of configurability that these OSes provide - you're practically one step away from running a bare OS with open source packages installed and editing a slew of config files where you can use every obscure configuration option that any of these FOSS contributors ever put into these daemons. In fact many of the opnsense configuration pages have an advanced text box at the bottom where you can put in extra config directives in case the UI doesn't include a knob for something you need.

It's great, 10/10 recommend opnsense or pfsense

[–] [email protected] 3 points 2 years ago

For a moment I thought that was jb weld

[–] [email protected] 6 points 2 years ago

I recently got an instant pot and gave my rice cooker back to my parents, the tough part was figuring out how to make it not stick of you don't have a nonstick liner. Letting it naturally release pressure with the keep warm off seems to do the trick for mine, I'm guessing quick release releases too much moisture, and the keep warm doesn't help either. With that I get good rice every time with no sticking.

[–] [email protected] 20 points 2 years ago

If I understand correctly, every sync feature that requires the subscription (and cannot be purchased by a one time fee) requires the sync dev to run a constantly online server. Translation makes calls to translation services that cost money, push notifications require a push server since Lemmy servers don't include support for it, etc. Removing ads doesn't cost sync ongoing cash which is why you can get it for a one time fee.

Seems reasonable to me.

[–] [email protected] 2 points 2 years ago (8 children)

Because then you get the best of both worlds, powerful routing hardware that can easily route and firewall at multi gig speeds, extreme flexibility in software packages to run on your open router platform, and a prosumer AP with best in class wifi performance, antenna configuration, mimo, solid chipset and driver, etc.

Doing everything on a prosumer router running mips or arm with limited package selection at best and a locked down router is at worst is subpar just as trying to get good modulation rates with a client oriented wifi card running in AP mode with subpar antenna configuration.

If you want the best wifi and the best routing/firewall/IDs with the widest package selection (and ability to just run any x86 application) then a separate router box running an x86 based os like opnsense,pfsense,whatever paired with a high end AP (business AP is a good choice) will always be the way to go unless you value compact, low power, or simplicity over achieving the best performance.

[–] [email protected] 4 points 2 years ago

I love FOSS but I got pretty used to the official reddit app, and Sync is the only app that feels like if the reddit app wasn't buggy and laggy. The paid aspect doesn't bother me because I would have donated to whatever app I use anyway, at $5/mo the $20 one time ad removal option makes sense if I use it for more than 4 months so it's worth it to me.

view more: ‹ prev next ›