• 0 Posts
  • 22 Comments
Joined 1 year ago
cake
Cake day: June 15th, 2023

help-circle

  • Moonlight/Sunlight are both really great options. The only problem I’ve encountered with either is that the mouse cursor is encoded into the video stream itself. It adds a little bit of lag when moving the mouse and makes it feel not quite right. Steam doesn’t encode to the stream, so it feels much more responsive. Parsec doesn’t either, but it does not support hardware decoding in Linux so you’re going to be stuck with an added ~10ms decode time.



  • Windows being easy to pirate wasnt the reason for it’s popularity. It had market share because they allowed for it to be preinstalled on machines for virtually nothing. They allowed it to be preinstalled on machines for virtually nothing because the OS wasn’t the flagship product.

    MS Office has always been the major flagship product for the company. This was true in 1994 and still is today. Office is so important to their revenue streams that it’s fairly common knowledge and has been mentioned by former employees that OS development would focus on compatibility with Office programs, not the other way around.

    Specifically if you look at the years around Office XP and 2003, that suite is used very much as a CVS. They deprecate their operating systems using Office.






  • SFP is pretty straightforward. Most of the SFP modules you can buy you just connect and they work. For something like that, you would be doing fiber to ethernet hand off at a switch. Then you have pretty much everything run to the switch including router and just VLAN isolate. It’s not super complicated, but if you never messed with VLANs it might be better to go with something pre-packaged unless you’re up for learning.

    You could also do a DIY router and run a multi-gig SFP+ network card over PCIe. You still have to purchase a separate SFP module for that, but that is another option.


  • I set up a backup cell connection to my cable internet connection. Sketchy Chinese 4G LTE modem. My router was a DIY job I set up off of Ubuntu Server. Everything ran to a Cisco switch and then was VLAN isolated. For the two WAN connections, I ran scripts from the router that periodically tried to reach out to several DNS providers and then average response rates to determine if the main connection was up. If not then it would modify default routes and push everything to the cell.

    The cell connection had pretty low data cap, so it was just for backup and wasn’t a home style plan. I used the old TTL modification trick to get it to pass data like a phone. When I moved the backup to 5G, TTL modification stopped working and I had to resort to creating tunnel interfaces to an actual phone. Since that tunnel is limited in bandwidth to the lowest value, my speeds were really cut in half.


  • Morgikan@lemm.eetoSelfhosted@lemmy.worldAny feedback from port knockers ?
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    1
    ·
    edit-2
    1 year ago

    A VPN would give you access to a network, but not necessarily the devices on that network. It adds another layer of security as the user not only has to have SSH credentials/keys, but they also have to have the same for the VPN. SSH and VPNs would really be used in conjunction with each other.

    It’s onion security.



  • Typically schools and universities have acceptable use policies for student VPNs. It is not very difficult to detect VPN setup on a network and universities almost always have at least some form of network monitoring happening.

    That said, VPNs are often times blocked and so is SFTP. Most universities I’ve done work with have a requirement that the traffic will be blocked unless you can make a case to IT as to why you need that access.

    There are few legitimate use cases for student VPNs and IT staff are usually not idiots and understand what you are up to.



  • Morgikan@lemm.eetoSelfhosted@lemmy.worldDNS hijacking
    link
    fedilink
    English
    arrow-up
    4
    ·
    1 year ago

    Just throwing out a couple of other solutions I didn’t see mentioned for DoH/DoT:

    1. CoreDNS
    2. Blocky

    Both of those support encryption and allow for DNSBL. If you are wanting to hand out DNS entries over DHCP it may a problem with your ISPs router there. Either replace it, sit one you do control between it and your network, or run DHCP snooping from a switch to restrict it’s DHCP.





  • Morgikan@lemm.eetoVPN@lemmy.worldVPN and port forwarding
    link
    fedilink
    English
    arrow-up
    3
    ·
    1 year ago

    Port forwarding VPNs forward from the far end at the specific datacenter(s). Its still trafficked through the encapsulated tunnel so no an ISP provider not supporting it wouldn’t come into play or matter.

    AirVPN works well and allows for profiles to be created for individual machines so they use different servers or have different protocol setups. More importantly, they allow for multiple ports to be forwarded which is needed if you are using the forwards for multiple applications.

    If the use case is Jellyfin, you might also look into something like ZeroTier or Tailscale. Those use an SDWAN setup so your remote devices are still able to talk to the media server (assuming it is installed there as well) without any forwarding. Otherwise, you will need to make sure to use the IP of the VPN datacenter instead of your ISP as the ISP/router shouldn’t be set to forward anything. Dynamic DNS is useful for that too. Setup a dyndns cronjob on the media server to update the record with the IP of the VPN and don’t worry about it.


  • One option if you still want to use both, is a Linux laptop. You could use that as your daily driver and then use Moonlight/Sunshine to stream from your gaming rig to laptop. Use a loopback HDMI plug on the rig and you largely have what amounts to a gaming server on your network.

    Average added latency on my setup is 4ms so this works very well. I stream games at 120FPS at 1080p. Then when I’m done playing, I close the window. No dual booting annoyance and fully functional Windows 10.