great-potential

3 ms·

1.
by great-potential 5y ago
Yeah a bit overkill my threat model just encompass ISP/GAFAM not three letter agencies :D
2.
by great-potential 5y ago
Well if you can bribe some people in the middle that does not count hence the Panama based ISPs
3.
by great-potential 5y ago
So a VPN provieder has to check with the laws of all the countries in the world to be able to function ? does'nt make sense you cant create logs if you don't log anything ..
4.
by great-potential 5y ago
I deleted my proton account about a year ago when I saw that I could not login from tor anymore, kudos to tutanota for allowing to register/login without a cell phone it must be really challenging !
5.
by great-potential 5y ago
Exactly, I dont see the point bragging about this nevertheless posting about it on HN ...
6.
by great-potential 5y ago
I mean this is just basic stuff, for me it just sounds like a developer putting a site in production, no auto-scaling, patching ... might as well outsource this to a CDN since there is no database/redis/varnish ...
7.
by great-potential 5y ago
Dont mean to be the negative Joe but you dont need a webserver if you're serving a static-able website.
8.
by great-potential 5y ago
Great news! tbh I just assumed from past exprience with Intel NICs that it will negotiate to lower speed without FEC. Personnaly I'll probably go with some cheap mellanox card on ebay :)
9.
by great-potential 5y ago
In terms of CPU it is not totally overkill if you're using an IPS/IDS, bare in mind you'll also be disabling most of the network card offloading in a full fledged firewall and that will ultimately result in consuming slightly
10.
by great-potential 5y ago
Not sure why you buy at fs.com when you have online stores in CH that are selling much cheaper: https://www.microspot.ch/de/computer-gaming/pc-komponenten/s...
11.
by great-potential 5y ago
Yeah running your nas-bittorrent/firewall-router on the same OS is clearly not something I would do, especially that now you can use somrthing like proxmox for example and virtualize your pfsense/opnsense instance.
12.
by great-potential 5y ago
Yes the transceivers recommended by Init7 (bidi-LR) do not support FEC and you'll be running in degraded mode (according to the controller datasheet), and I don't think this is something that can be achieved by coding of the trans
13.
by great-potential 5y ago
Well, hate to tell you but you'll be limited 10Gb/s with these Intel cards because they require FEC.
14.
by great-potential 5y ago
I think if the OP uses this only as a router it is indeed a waste of power. What I would probably do is also use it as nas/workstation by using virtualization, SR-IOV is now pretty standard on these cards.