I would

And his crappy internet connection! Sibling rivalry.

@@SteveOwensRoswell I wish I could take part in that kind of rivalry. My siblings have nothing, know nothing, and are just about good for nothing lol

@@mrmotofy Very few of us have siblings that share a passion for home computers and home networking. Just give them a basic router and a Chromebook and they are good to go.

@@SteveOwensRoswell I can relate, my sisters use like $100 chrome books daily and when they have a problem they call me to come over and fix it, their husbands aren’t very tech oriented

No worries! You're getting smarter every day!

Haha

Welcome aboard!

He is! Because TheGeekPub is Mike Murray and The 8 Bit Guy is David Murray!

I’m down in Fort Worth lol

I actually have one about half made. I just need to finish it.

whats so special about plex

@@riotmakerzify That in China, it is blocked

Yes always want to use those.

Glad you're here!

If they are blanket throttling you have a lot more problems then what we're talking about here.

@@TheGeekPub its more QOS/COS than anything. ISPs are not doing deep packet or anything like that, its too slow. But right at the edge (PE,BNG/BRAS) certain typed traffic is shifted to a lower COS resulting in TCP retrys and general latency across a IPSEC tunnel. This is an effort to stop the BYOBB I.T. crowd getting the idea of "why pay thousands for enterprise grade when a consumer service works just fine, and i am going to throw it all on a vpn anyways". A good test of this is by IPref testing over that tunnel verses regular inet. Would be pretty simple for you to explore further if interested. Especially with those VMs on your remote NAS. Great videos BTW!

do tell!

@@TheGeekPub I've got 20 UniFi AP's and 17 UniFi switches all running with a UDM Pro at the core. (It's a large house haha) I've got an 8 bay Synology NAS with 56 TB of storage (64 TB RAW, but 1 for redundancy) and a Dell T620 Server running ESXi (x2 Xeon 2680 v2 CPU's and 128GB of RAM), I've got pfSense running on my edge as well for gateway monitoring and WAN failover as well. Waiting for a new Gen 2 version of the XG switches to come out (so I can have it with an LCM to match my 48 Pro POE and UDM Pro as well) and also waiting on a mini XG switch without POE as well. Got 14 UniFi cameras (going to add more, we just need to wait for the doorbell and outdoor wireless cameras as well) around the property as well with a UNVR4 that hosts Protect. Wish Frontier actually was able to do full gigabit at real world speeds and at least to their own speedtest server, best I get is 911/740 to their own server, but not any higher than that even with a FOG420 ONT sadly. We have got 3 HD Home Run Primes as well that record to our Channels DVR server and allows us to distribute it throughout the home to all 20 of our Apple TV's (Mixture of 1080p and 4k versions) Overall though, it's a BEAST of a home network.

That's awesome! Maybe we'll run into each other some day.

And, you seem to right down the road from me in Keller. Does your street start with MtG?

I live down in Benbrook so yeah it’s crazy

Cool! Let me know how it works if you do it!

I went OpnSense and WireGuard for my Point-to-Point VPN, it was a lot easier to install and configure compared to OpenVPN and I'm getting better throughput in data (something like 10-20% on the old HP slim devices I use). It also has the advantage it reduces the demand it has on the host device. The main caveat to remember WireGuard works differently from OpnVPN more akin to a SSH server than a VPN. This guide proved useful for me: blog.linuxserver.io/2019/11/16/setting-up-wireguard-on-opnsense-android/

I'm using SoftEther, and I was also considering switching to Wireguard, although I haven't done it yet.

Dang! Stay safe out there!

@@TheGeekPub You too!

Yes. They can.

Why they wouldn't This way 8bitguy just extends his L2 lan network to their parents. This is just like getting next cable to your garage or new room, only with fiber converters in between. You could achieve the same with SFP module and switches with SFP ports at both houses.

Those are small PC running pfsense, try searching for protectli of pfsense on amazon.

Separate networks maybe?

Computers know where to get to the internet via their default gateway addresses. Normally, this is set via DHCP. As long as the gateway is not on the other network, it won't go through the tunnel to get there. Just be sure everyone has unique networks; ie your house is 10.11.0.0 and the other house is 10.22.0.0 or whatever. When you type in a network address of house B at house A, it will go to your default gateway, see that the other network is located via the tunnel and it will send the data that way. If you type in an internet address, when it gets to your devices' default gateway, it will look at networks it knows, sees it doesn't know it and send it to it's default gateway, which would be the internet in this case.

Gary thanks, thats a clear explination

Yes and no. You could NAT everything on the VPN interfaces. But yes. It's much better to have a different IP scheme at each house (we do).

Each site has at least one /24. Maybe more depending on what we want.

Yep he stated that in the video

I started using computers in school at about 10 years old.

Yep. If it goes down you can't get to it.

Synology has a built in Syslog server.

I like to use Elasticsearch + Logstash + Kibana, it takes some customization but it's incredibly powerful.

I tinkered with that a while back. But just had too many issues getting it to run reliably. I just never got back to finishing it because other stuff came up.

about 250Mbs...

It's rated to 62 miles.

That darn curved earth always making life difficult

Links in the description.

Because I don't have static IP addressing and hosting is against my contract. And even with well built servers I don't have generators, power redundancy, redundant internet, etc. that I get from AWS. The small cost of AWS is worth it for the reliability.

@@TheGeekPub After a long debate with myself, I went the homelab route. I want to host a database server. Setting up Hardware is Hardwork indeed, but I am hoping it gives me more freedom and performance for future projects. I thought AWS will be slow and expensive for my usecase.

I don't know. You tell me? Why would I want to? What benefit am I going to get that outweighs the trouble? It's like me asking you "Why don't you like cherry cheesecake?" "Why don't you start eating it!? I mean its what I like?" knowing that I live in a town that sells blueberry cheesecake and it costs a lot less than your cheesecake.

Yep.

Given this is just s2s vpn, using trusted kit, what's the advantage?

@@MrCalldean overheads. Wireguard is considerably lighter and as a consequence higher speeds can be attained. That said, my setup also uses openvpn mainly because I just spent all my time and effort learning about that, not wireguard.

Nope.

1) It's not built in to pfSense yet and the 3rd party patches are very unstable. 2) For my use OpenVPN performs just fine so no reason to jump through hoops.

Wireguard is fantastic for point-to-point tunnels if you have device to run it on. I have similar design of networks, with the difference that for space reasons my whole homelab/DC sits in parents house. I keep only one, less powerfull server locally (with Proxmox) and keep all the other suff racked ~150km away. I run Juniper hardware firewalls on my both ends and keep separate machines for WG endpoints. Throughput is much better than OpenVPN, configuration is simpler. But for VPNing myself into network I run OpenVPN. One of reasons is simple - I have HTTP proxies in work and you can pass it through SOCKS proxy on TCP. As a protip, old thin clients (I use '12 Wyse Dx0 series devices or both ends) are enough to throw at them 100Mbit streams over VPN in both directions, and have them serving as internal DNS servers at the same time. And take somewhere under 10 watts running, so barely noticeable despite being additional hardware.

So put a Kill A Watt meter on it and test the power draw. I did that to my cousin cuz he was leaving his gaming server on 24\7. Hey lets see how much your computer uses I wanna see if it's more or less than mine. Whoa that uses 250w all the time, more when gaming. Now he shuts it off lol

Yes.

You don't. It automatically looks for a local route. As long as the firewall port is open it will take the VPN.

TheGeekPub great, I wish I could verify that somehow. Using emby I can specify my internal ip, but not with Plex..

You can. If you go to the Plex dashboard it will show you the IP of the remote client. If you see their public IP and not an internal IP, it's not working.

TheGeekPub Thank you! It is indeed working!

Why LibreNMS and not Observium?

TheGeekPub uhh, good one. That will be community support and not least the update frequency. I have almost the same setup as you with my parents-in-law as the only satellite branch. I will do a logical diagram of this soon: www.reddit.com/r/homelab/comments/g7ho5s/yet_another_homelab/

The Geek Pub is the elder brother of The 8-Bit Guy...

I was always under the impression that you guys in Europe got super fast and cheap Internet compared to the US. At least that's what I have heard from a lot of YT comments. I live in a city of 66k people in NorCal and only a few 'new' neighborhoods get fiber to the home. The rest of us are stuck with a DSL variant or cable Internet.

@@JJFlores197 Thing is, we do get really fast Internet and more often, even with Fiber and 1000Mbit down. Problem is just, you don´t get more then 100Mbit upload here, except If you want to pay upwards of 500€ a month. So that´s the issue. But it´s true, even here we often have DSL connections and stuff. It´s a really slow change here

You can setup a vpn on a Raspberry Pi and connect to it from any device outside the home. But you may need access to the router to setup.

LOL.

yes

This is frontier fiber... the old Verizon FiOS. Not their DSL service.

@@TheGeekPub I see. It just seems odd to me that they even have fiberoptic internet given what we know frontier as up here in West Virginia

It's all about the dollar bills, they want to keep them in their pockets