My friends and I had something along those lines around the early 2000s built with Linux firewalls and freeswan IPSEC tunnels. I sure do miss the old vibe and chaos of the early internet.

Bit by bit the tunneled WAN thing sort of became irrelevant as we built more stuff as internet facing services, to the extent that the fun parts were more likely to be installed in a datacenter somewhere than sitting on the LAN at our houses.

It’s an engineering sample that was produced before the final product was available. They use the really early ones to figure out if what they got back from the fab actually runs and how fast it will go safely. Later ones end up at motherboard partners so they can test their new board designs.

It is pretty common for them to leak out onto the second hand market after the final release. I’ve never heard of one that had any real problems, but in theory you might be buying something that has some issue that they hadn’t discovered at that point.

I replaced mythtv with tvheadend on the backend and kodi on the frontend like 5 or 6 years ago.

The setup and configuration at the time on mythtv was slanted towards old ( obsolete ) analog tuners and static setup and tvheadend was like a breath of fresh air in comparison where you could point it at a DVB mux or two and it would mostly do what you want without having to fight it.

I’m not sure how much longer I’ll want something that can tune DVB-S2 and DVB-T though. Jellyfin and friends handle everything other than legacy TV better than kodi these days.

The most impressed I’ve been with hardware encoding and decoding is with the built in graphics on my little NUC.

I’m using a NUC10i5FNH which was only barely able to transcode one vaguely decent bitrate stream in software. It looked like passing the hardware transcoding through to a VM was too messy for me so I decided to reinstall linux straight on the hardware.

The hardware encoding and decoding performance was absolutely amazing. I must have opened up about 20 jellyfin windows that were transcoding before I gave up trying and called it good enough. I only really need about 4 maximum.

The graphics on the 10th generation NUC’s is the same sort of thing that is on the 9th gen and 10th gen desktop cpu’s, so if you have and intel cpu with onboard graphics give it a try.

It’s way less trouble than the last time I built a similar setup with NVidia. I haven’t tried a Radeon card yet, but the jellyfin docs are a bit more negative about AMD.

Haha, 144p @ 60hz is fricking hilarious.

Reminds me of seeing completely rubbish resolution real player videos embedded in websites back in the late 90s and me thinking, “Well that isn’t ever going to take off”.

I swear allegiance to the only one true storage vendor, Micropolis. The Micropolis 1323A being the embodiment of perfection in storage basked in the glow of the only holy storage interconnect, MFM.

I wait patiently for the return of Micropolis so that I may serve as their humble servant.

Your bridge isn’t bridging properly. If Router B is sending a destination unreachable then the packets are being handled on it further up the stack at layer 3 by some sort of routing component rather than by a layer 2 bridging one.

Often on Linux group membership changes only take effect on login. So you could try logging out of your session and logging back in after your group changes to test that theory out.

A 2 gigabit event isn’t big enough to be considered a real attack, a service like cloudflare can sink a 2 terrabit attack every day of the week.

Building a DDoS protection service ( that isn’t just black holing traffic ) starts with having enough bandwidth to throw away the attack volume plus keep your desired traffic working and have a bit of overhead to work your mitigation strategies.

What this means is to DIY a useful service you start by buying a couple of terrabits of bandwith in ‘small’ chunks of a hundred gigabits or so in most peering locations around the globe and then you build a proxy layer like cloudflare on top of it with a team of smart dudes to automate outsmarting the bad guys.

I don’t like cloudflare either, but the barriers to entry in this industry are epic.