caliper's recent activity
-
Comment on Timeout when connecting to a local webserver through the internet, but only on WiFi in ~comp
-
Comment on Timeout when connecting to a local webserver through the internet, but only on WiFi in ~comp
caliper No kidding, the UI is a maze. It's not been a smooth transition to this setup. With this "Flow Logging" setting also: after a good hour of looking it now turns out this flow logging isn't...No kidding, the UI is a maze. It's not been a smooth transition to this setup. With this "Flow Logging" setting also: after a good hour of looking it now turns out this flow logging isn't available on the Cloud Gateway Ultra. With all the extra costs, like PoE+ injectors, I ended up getting the most basic model Cloud Gateway. I thought it was expensive enough as it is. Annoying to find out that also means some features are locked away.
Okay, no more negativity, just a little buyers remorse.... I finally threw in the towel and added a DNS Host (A) record to the policy engine pointing to the local server. This way traffic won't go out to the interwebs and we all can access our calendars again inside the house and when we are on the road. Family happy and I might be able to forget about my failure in the future.
-
Comment on Timeout when connecting to a local webserver through the internet, but only on WiFi in ~comp
caliper Dumb question, but where should this panel live? I only see network/default/insights/flows, which has blocked/threats flows. Both are empty.Have you checked the “Flows” panel on the UniFi console? Might be worthwhile to get an idea of how the router is interpreting the connections - whether they’re being blocked, what it thinks the IPs at each end are, which networks/VLANs it thinks it’s routing between.
Dumb question, but where should this panel live? I only see network/default/insights/flows, which has blocked/threats flows. Both are empty.
-
Comment on Timeout when connecting to a local webserver through the internet, but only on WiFi in ~comp
caliper Browser caching has definitely tripped me up in the past, so I can totally relate to this. I think we can rule the browser out though. The same issue is also happening with the VPN server I host...Browser caching has definitely tripped me up in the past, so I can totally relate to this. I think we can rule the browser out though. The same issue is also happening with the VPN server I host on a different machine that's sitting besides the webserver. I see traffic coming in, but no connection is established on the client side.
Testing this again now, I see the traffic coming into the VPN server takes forever when on WiFi (haven't checked with a wire). When I'm on mobile, the logging of the VPN server shows instant negotiation. I assumed the issue was something with the return traffic, but that's not the case. Something to look into later.
-
Comment on Timeout when connecting to a local webserver through the internet, but only on WiFi in ~comp
caliper There is dubble NAT, that’s right. Unfortunately it’s not possible to put the ISPs router in bridge mode. What noise are you thinking of?There is dubble NAT, that’s right. Unfortunately it’s not possible to put the ISPs router in bridge mode. What noise are you thinking of?
-
Comment on Timeout when connecting to a local webserver through the internet, but only on WiFi in ~comp
caliper Yes, no other issues. How would I verify this? Traceroute? Using the mobile network I can access my server just fine. With a hotspot I can use the same laptop to access the site.Some troubleshooting questions - are you able to reach other servers or websites on the internet? Including nonstandard ports? Ping?
Yes, no other issues.
When you're on wired networking are you sure your traffic is hairpinning out to the internet and back in to your server? Are you sure you aren't just routing internally?
How would I verify this? Traceroute?
Is anyone else able to reach your server across the internet?
Using the mobile network I can access my server just fine. With a hotspot I can use the same laptop to access the site.
-
Comment on Timeout when connecting to a local webserver through the internet, but only on WiFi in ~comp
caliper Correct, either works (added it to the initial post)Correct, either works (added it to the initial post)
-
Timeout when connecting to a local webserver through the internet, but only on WiFi
I've recently moved, so I have a new ISP and I've also switched to new network hardware. I've been pulling my hair out trying to understand why I keep getting 100% timeouts when connecting to a...
I've recently moved, so I have a new ISP and I've also switched to new network hardware. I've been pulling my hair out trying to understand why I keep getting 100% timeouts when connecting to a locally hosted website. To make it more complicated, it only happens when I’m on WiFi.
Hardware setup is:
ISP router/modem -> Ubiquity Cloud Gateway -> U7 Pro AP -> Laptop -> Webserver
The issue is opening https://foo.bar.baz:58443 when on WiFi. This domain points to my home (not really bar.baz, but you get the idea). There's is port forwarding rule to get to the local server. With tcpdump, I see the request coming in on that webserver, a SSL handshake is completed and then a bunch of TCP retransmissions.
Some observations:
- If the machine with the browser is connected to a cable and not WiFi, everything is fine, no timeouts.
- Opening https://192.168.1.123:58443 (webserver address) is fine (WiFi or wired).
- Opening https://10.0.1.123:58443 (gateway address) is fine (WiFi or wired).
I thought it would be MTU related, but haven’t had any luck with changing it to a lower size. I’m not positive I’ve done this correctly, though, so it may still be MTU related.
I know there are people here that know way more than I do about networking, so I hope somebody can point me in the right direction.
17 votes -
Comment on Looking for some cat advice in ~life.pets
caliper We use something like this. They come in small sizes, like 10 liters, which is perfect. They are also used for kayaking around here, so they are easily found.We use something like this. They come in small sizes, like 10 liters, which is perfect. They are also used for kayaking around here, so they are easily found.
-
Comment on Dear Nintendo, please bring back the Wii Remote in ~games
caliper Just get a second hand Wii and soft mod it. Nintendo is going to be milking this rerelease cow like it’s nobody’s business.Just get a second hand Wii and soft mod it. Nintendo is going to be milking this rerelease cow like it’s nobody’s business.
-
Comment on Is OpenWRT worthwhile at home? in ~comp
caliper That’s good to hear! I’m moving house today, so I might just pry open that box full of network toys if I still have some oomph left tonight.That’s good to hear! I’m moving house today, so I might just pry open that box full of network toys if I still have some oomph left tonight.
-
Comment on Is OpenWRT worthwhile at home? in ~comp
caliper Hehe, you lied 🤥 But that’s good news, thanks for helping me on my way!Hehe, you lied 🤥 But that’s good news, thanks for helping me on my way!
-
Comment on Is OpenWRT worthwhile at home? in ~comp
caliper With the APs I already have, the house is already covered. Ideally a router would be as bare bones as possible. The Cloud Gateway Ultra instead of the Dream Router would do this, no?With the APs I already have, the house is already covered. Ideally a router would be as bare bones as possible. The Cloud Gateway Ultra instead of the Dream Router would do this, no?
-
Comment on Is OpenWRT worthwhile at home? in ~comp
caliper So Unifi Controller on a local machine to manage the APs, but does that router really need to be from Ubiquiti? I was planning to use the router from the ISP to do DNS, DHCP, etc.So Unifi Controller on a local machine to manage the APs, but does that router really need to be from Ubiquiti? I was planning to use the router from the ISP to do DNS, DHCP, etc.
-
Comment on Is OpenWRT worthwhile at home? in ~comp
caliper I just bought 2 APs without realizing I would still need a router of some sort. Then to also find out it needs to be a Ubiquiti one to be able to use all the Unifi features. It seems this should...I just bought 2 APs without realizing I would still need a router of some sort. Then to also find out it needs to be a Ubiquiti one to be able to use all the Unifi features. It seems this should also be possible with an Linux server on the network, instead of using a Cloud Gateway. Have any experience with that?
-
Comment on Is OpenWRT worthwhile at home? in ~comp
caliper The Ubiquiti stuff seems nice and I have finally committed to replacing my APs with their stuff. I haven’t been able to set it up yet, but have good hopes that it will be miles better than the...The Ubiquiti stuff seems nice and I have finally committed to replacing my APs with their stuff. I haven’t been able to set it up yet, but have good hopes that it will be miles better than the Apple stuff I have currently.
I used OpenWRT, I’m guessing, between 2005 and 2007. It was a lot of fun soldering a new serial port to a device to be able to access the console. What it got me back then was a cheap, open, embedded Linux server that could also be a NAS. Now, with all the beefy embedded hardware like the Raspberry, I don’t really need OpenWRT anymore. The router can just be a router.
-
Comment on Weekly thread for casual chat and photos of pets in ~life.pets
caliper Rats are amazing. My pet rat would open part of his cage at night and roam my bedroom while I was asleep. He would chew some cables here, buttons on a remote there, and then climb into his cage...Rats are amazing. My pet rat would open part of his cage at night and roam my bedroom while I was asleep. He would chew some cables here, buttons on a remote there, and then climb into his cage again. He’d close the section and in the morning I would pull my hair out trying to figure out when he would’ve chewed up stuff the day before. It took me quite a while to figure out how that smart asshole got out of there.
That PVC tubing looks like the perfect tunnel system. It will be slippery for large sections of incline. One way to counteract that is to drill many holes into it, creating some claw grips. Although that will also create places where they’ll easily start to chew the plastic. Thinking about it more, that would be my main concern with PVC, that they’ll find a way to ingest a lot of plastic.
-
Comment on Give us your hot takes on the latest Nintendo Direct in ~games
-
Comment on Super Mario Galaxy 1 and 2 getting rerelease on Nintendo Switch, bundle for $70 or standalone for $40 each in ~games
caliper Good thing the Wii does 480p, so that shouldn’t be a problem then.Good thing the Wii does 480p, so that shouldn’t be a problem then.
-
Comment on Super Mario Galaxy 1 and 2 getting rerelease on Nintendo Switch, bundle for $70 or standalone for $40 each in ~games
caliper It certainly won’t do 4K. Does your TV have component or composite inputs? Otherwise there are plenty of HDMI converter options, and even a hard mod to add HDMI to the Wii itself. Other option...It certainly won’t do 4K. Does your TV have component or composite inputs? Otherwise there are plenty of HDMI converter options, and even a hard mod to add HDMI to the Wii itself. Other option would be to pick up a second hand 1080p TV, which are dime a dozen and practically free.
Thanks, I think this quote from the help page has broken my will to really figure it out. But without kidding, thanks so much for diving deeper than I did! This might just be the real reason why it's not working.
I've given up and have just added a DNS record to the gateway that points to the local server. This way it works inside the network and outside too. It's not pretty, but it works.