aesir

joined 1 year ago
sorted by: new top controversial old
What's your thoughts on the new netbird UI? in c/[email protected]
[–] [email protected] 1 points 8 months ago

I like it, it was released a couple of days ago so something might require a bit more polishing but overall it looks better to me.

Best VPS for gramps in c/[email protected]
[–] [email protected] 2 points 10 months ago

I have heard of several cloud screw-ups as well, leading to charges of several thousands.

On one side this can happen if you experiment something outside of the free machine(s), on the other side you have all the reporting and notification tools to avoid surprises.

Nonetheless, I still see your point, reason why I prefer to use an almost dry revolut prepaid for all the cloud accounts instead of my main credit card.

Best VPS for gramps in c/[email protected]
[–] [email protected] 1 points 10 months ago (2 children)

As you wish, indeed the only free offer without credit cards is the one of azure for students. In any case you are not anonymous.

Best VPS for gramps in c/[email protected]
[–] [email protected] 7 points 10 months ago (5 children)

Considering the small audience and purpose, I would not have any problem using the always free offerings of either Oracle or Google (the latter especially if located in the US).

Oracle keeps changing the idle requirements for compute instances in c/[email protected]
[–] [email protected] 8 points 1 year ago (1 children)

I don't know, wouldn't the Hypervisor be able to track resources usage by itself without anything else?

Use an old android phone to selfhost ? in c/[email protected]
[–] [email protected] 6 points 1 year ago (2 children)

If postmarket os works on that device maybe you can go full Linux (alpine), there will be no systemd which might be a problem and I am not even sure about docker compatibility. You can look it up though.

How do you use Tailscale? in c/[email protected]
[–] [email protected] 1 points 1 year ago* (last edited 1 year ago) (1 children)

Relays have become a pro feature in the last release. I tested them on netmaker.io SaaS version and they work but it defeats the purpose of selfhosting my VPN manager. You also need to have a good relay, for instance among GCP, Azure, Oracle and Vultr only the latter works because their VPS are not behind a NAT.

Netbird first of all is extremely resource hungry. In some occurrences completely hanged a 1 GB RAM VPS when I was testing. Even without trashing I had issues connecting many of my peers. It has to be said that it was surely my fault in some ways as netbird.io SaaS worked fine.

How do you use Tailscale? in c/[email protected]
[–] [email protected] 1 points 1 year ago (3 children)

Tailscale just works, I recently tried netbird and netmaker. I did not manage much with the first but netmaker instead seemed even easier to manage than tailscale, being faster at the same time. Unfortunately it failed with peers behin my corporate NATwhich tailscale can bypass with its own relays. But for others it can work very well.

Another good reason not to open port 22 in c/[email protected]
[–] [email protected] 1 points 1 year ago* (last edited 1 year ago) (1 children)

ssh -p 12345 would leave your boxes accessible from anywhere too. Other blocks of IPs receive 10 times or more requests, as scanners can focus on blocks of ips from major providers.

17
Another good reason not to open port 22 (lemmy.world)
 

In the past two weeks I set up a new VPS, and I run a small experiment. I share the results for those who are curious.

Consider that this is a backup server only, meaning that there is no outgoing traffic unless a backup is actually to be recovered, or as we will see, because of sshd.

I initially left the standard "port 22 open to the world" for 4-5 days, I then moved sshd to a different port (still open to the whole world), and finally I closed everything and turned on tailscale. You find a visualization of the resulting egress traffic in the image. Different colors are different areas of the world. Ignore the orange spikes which were my own ssh connections to set up stuff.

Main points:

  • there were about 10 Mb of egress per day due just to sshd answering to scanners. Not to mention the cluttering of access logs.

  • moving to a non standard port is reasonably sufficient to avoid traffic and log cluttering even without IP restrictions

  • Tailscale causes a bit of traffic, negligible of course, but continuous.