10 ms·
Running an Open Source Home Area Network
- pvinis 4y agooff-topic, but are we ever going to get to a place where urls like that one appear not as xn—* but as the actual unicode?
- deleted 4y ago[deleted]
- mulmen 4y agoIf course we will. Why would that be in doubt? When I open the link in iOS Safari I see the unicode characters.
- walrus01 4y agofirefox on macos shows the unicode in the address bar properly. I do kind of like that HN retains the xn-whatever as it's actually formatted in an authoritative DNS zonefile, because this is hacker news. As I do not read the language in question the unicode original and the xn-whatever are equally incomprehensible to me.
- SquareWheel 4y agoIt will show in browsers correctly now, except in cases where there's mixed character sets. This is to avoid phishing attacks abusing unicode with look-alike characters.
- layer8 4y agoThat should be the default: https://datatracker.ietf.org/doc/html/rfc5894#section-4.2 https://datatracker.ietf.org/doc/html/rfc5894#section-4.2
- josephcsible 4y agoI'd prefer that we didn't make phishing even easier.
- bla3 4y agoFishing with punycode is a mostly solved problem: Show the Unicode characters only if there are no homoglyphs in it. That's why browsers can show them. See "client side mitigations" on https://en.m.wikipedia.org/wiki/IDN_homograph_attack https://en.m.wikipedia.org/wiki/IDN_homograph_attack
- dolmen 4y agoTell me more about how homoglyphs are a solved problem. What software libraries (or algorithm) exist to tell that 2 UTF-8 strings don't have homoglyphs?
- nerdponx 4y agoThe Unicode Consortium itself maintains a list of "confusables" https://util.unicode.org/UnicodeJsps/confusables.jsp https://util.unicode.org/UnicodeJsps/confusables.jsp
- walrus01 4y agoon the topic of the original post I would encourage people who really want an open source home area network router to run something like pfsense on a very small x86-64 system with four gigabit ethernet ports, rather than the linksys in the example.
- BLKNSLVR 4y agocough OPNSense[0] cough [0]:https://opnsense.org/ https://opnsense.org/
- evulhotdog 4y agoOr better yet, OPNsense, as the NetGate team has time and time again shown that they are incredibly petty, and do not want to support the community in the most basic of ways.
- slickdork 4y ago+1 on OPNsense. I switched from pfsense to opnsense a few months ago without issues.
- soupbowl 4y ago+1, I switched to OPNsense about 11 months ago and could not be happier. Once the dust settled I also changed some of my small buiness customers over and it was a smooth experience.
- zeroflow 4y agoThe only thing holding me back from switching to OPNsense is the lack of pfblockerNG. To the best of my knowledge, there is no competing package available at the time.
- Shank 4y ago> x86-64 system with four gigabit ethernet ports Do you have any suggestions / personal experience with systems like this? I'm really concerned about getting something that isn't powerful enough to process stuff at gigabit+ rates, and most of the "routers" I've seen get pricey to do that.
- spacemanmatt 4y ago1. that is awesome 2. i'm exhausted just reading about all those builds
- entropie 4y agoThis is fascinating. Very well documented and informative. Nerds heaven. I have seen similar sites (like https://vuxu.org/vuxi/boxes https://vuxu.org/vuxi/boxes by Leah Neukirchen) years ago, but none was that well documented and verbose. Great stuff.
- sgtnoodle 4y agoI run wireguard on an even lower end Linksys router, and it seems to work just fine. I suppose my internet connection isn't the fastest, though. It's interesting to see someone using a single board computer as their main computer, and preferring a Linux distro that compiles everything from source. Why bother with docker for a home server other than for the fun of it? I've been embracing systemd recently, and using it to manage processes in an embedded system. Once you wrap your head around how services work, it seems pretty convenient compared to init scripts. Notably, systemd works with legacy init scripts, so you could still go that route if you wanted to. Maybe throwing docker into the mix makes it clunkier, though?
- colordrops 4y agoNixOS uses systemd to manage containers. Works great and is hassle free IMO.
- na85 4y agoNixOS seems to make needless complexity a point of pride.
- amarshall 4y agoNixOS makes purity and declarative configuration a point of pride. With that comes greater complexity.
- whateveracct 4y agoNone of the complexity is needless - it all follows from its core principles. Maybe you disagree with those principles. Maybe you disagree with software having hard principles. That's fine. NixOS isn't for you. It's wonderful for me though!
- bayindirh 4y agoThe problems solved by NixOS are mostly solved already. NixOS solves them differently, and that's OK, but it's not solving them for the first time.
- equityloan 4y agoWhat are some advantages of Gentoo Linux? I've never tried it or heard much about it. (I'm familiar with many others though: Ubuntu, Debian, CentOS, Fedora, Arch, NixOS, etc.)
- hackernudes 4y agoBuilds everything from source and most packages have flags ("USE flags") that control in which way the source packages are built (e.g. remove unneeded package dependencies). The other potential benefit is to compile with better optimization than generic packages.
- ies7 4y agoAlso rolling release/upgrade instead of the usual scheduled release.
- sgtnoodle 4y agoMainly that you can tweak the compiler options to your liking, and have the full userspace built with it. For example, you can target your exact CPU with all its particular extensions. There are also hundreds of compile time feature flags, so you can omit functionality you don't need.
- Gordonjcp 4y agoThe advantage of Gentoo Linux is you get to see lots of compiler output scrolling past instead of being able to do real work on it, so you look like a l33t h4xx0r. The disadvantage is that everything is built from source, so it takes forever to install anything and it's very fragile, and it's a rolling release distro so you're installing stuff every single day and it's very fragile.
- dirkc 4y agoI've used it for a long time before switching to Arch and then Ubuntu. When using Gentoo I used to know more about the different subsystems running - it was a function of seeing what needs to recompile when you update and also having to sort out issues when certain hardware stopped working. I stopped using Gentoo and Arch because it was just easier to be on the same OS as other devs and it didn't feel like I lost much switching to Ubuntu. Every now and again I'm tempted to go back to Arch, but honestly, there are other things I'd like to play with rather than my OS
- na85 4y ago>Even though the Linksys WRT3200ACM was released back in 2016, it’s still a solid and well-supported option for OpenWrt – unless WiFi is your primary requirement. >Since the Panda PAU09 N600 works out of the box, the only thing needed to enable the WiFi access point is a working hostapd configuration: [75+ lines of config for something that "works out of the box"] >One pitfall here is that Docker likes to mess around with iptables, leading to WiFi clients being unable to communicate with the internal network. In order to fix this, another drop-in configuration is needed: >Update: Because I simply couldn’t get it working with this rule, that was suggested in the Docker docs in first place, I eventually gave up and used a jackhammer to fix it: [...] I see wifi is still a shitshow in the libre world. Running entirely free software is a laudable goal but the above sums up why it's never going to be mainstream. All that fuckery for previous generation .11ac? No thanks, I have a zillion other more important things to do with my time.
- LukeShu 4y agoLibre WiFi is a shitshow, but half the things you cited aren't about WiFi. The "Docker/WiFi" problem that two of your quotes are about isn't about WiFi, it's about "Docker insists on messing with the firewall, and that's a problem because I'm trying to use the box as a router." Docker messing with the firewall would be a problem on any router, wired or wireless; and it's just coincidental that OP's setup happens to be wireless.
- adament 4y agoNone of the configuration was about the wifi interface not working out of the box, but about setting up an access point and a network bridge. If OP had just wanted to use the interface as a normal wifi client I suspect installing NetworkManager was all he had to do(installed and started by default on most user-friendly distros) and the experience would have been equivalent to Windows, Android or iOS. At least that has been my experience the last 5-10 years.
- thedougd 4y agoAnd this is why I went separate AP from router. You can easily get a commercial grade Wifi AP that doesn't do anything else other than WiFi. They're stable and include the latest standards. Meanwhile, I run my own Linux router on a Raspberry Pi. It covers all the wacky edge case needs I have such as Wireguard, VRFs, VLAN, etc.
- deleted 4y ago[deleted]
- lelag 4y agoScroll down if you wonder where the content is... I was confused and starting navigating away from the page as the start of the article was below my viewport on my macbook with default resolution.
- dolmen 4y agoWhat about Turris products as router? https://www.turris.com/en/ https://www.turris.com/en/ (this is not supposed to be an advertisement, just a question as those are on my radar if I ever buy a router to plug on my ISP cable modem)
- alias_neo 4y agoI used to use the crappy mainstream stuff like the Linksys, in fact I have probably over £1k of WiFi routers in my router graveyard at home. I switched to a Ubiquiti Edge Router and went the "discrete devices" route, one device for one purpose. The edge router lasted 5 years or so before some power component blew, and with the sorry state of updates from Ubiquiti these days, I decided to move on. When I was looking around Turris came up a lot but it goes against my "discrete devices" approach so I bought a Protectli i5 box and run pfSense. Ideally I'd like to get to the point where my Ubiquiti Unifi APs can be replaced with generic but capable hardware running Linux or BSD too for WiFi 6 speeds (not sure that's currently possible/available) and Switches are likely a way off.
- sgarland 4y agoThis entire website reads like the biggest caricature of a nerd that I have ever seen. Every opinion is that of gatekeeping and purity über alles. Signal's creator has reasonable concerns about Web3 and NFTs? Better drop it, since "[Moxie has] very disturbing opinions on decentralization, [and] cryptocurrency..." 6+ paragraphs written about the print quality on various deskmats. Tables of every material possession they own, seemingly lacking only the UPC.
- netr0ute 4y ago> reads like the biggest caricature of a nerd that I have ever seen. The site never claimed to be otherwise, so there's that.
- deleted 4y ago[deleted]
- hammyhavoc 4y agoSome of the content is interesting on the rest of the site, but this post definitely screamed "out of touch", perhaps surprisingly so if you've followed the content for a while. Being on the ball with tech is an ever-moving target, and this feels very 2015.
- the-anarchist 4y agoThis comment made me click the shady af looking link. If a person that (judging from their keybase avatar and their website's "about" page) appears to be a total caricature of a nerd accuses another nerd person of being "the biggest caricature of a nerd" it must be good. Sadly I was disappointed. It's just another of these "digital gardens" or whatever the term for the type of sites is, that one can find across various platforms like neocities these days. Not sure what the described homelab has to do with crypto or decentralization, though.
- sgarland 4y agoThe homelab has nothing to do with those things, it's the other pages on the site, wherein the author discusses things like why they've eschewed Signal for XMPP due to Signal's author's feelings on crypto.