News for hackers. Stuff that matters.
Re:Kubernetes Home – what do you do if your ISP changes your... by TZubiri on Tuesday March 11, 2025 @01:44AM (#43329519)
Lol, kind of defeats the purpose
Re:Kubernetes Home – what do you do if your ISP changes your... by yjftsjthsd-h on Tuesday March 11, 2025 @01:49AM (#43329541)
What defeats what purpose? I don't run k8s out of some love of ... managing external IPs?
Re:Kubernetes Home – what do you do if your ISP changes your... by TZubiri on Tuesday March 11, 2025 @02:29AM (#43329728)
Tunneling through a single external node defeats the purpose of hosting k8s in home server.

Maybe the external ingress node can be a load balancer controlled by the k8 cluster. But then you still have to communicate with the home server and it has no exposed ip address

Re:Kubernetes Home – what do you do if your ISP changes your... by winterqt on Tuesday March 11, 2025 @03:32AM (#43330061)
> Tunneling through a single external node defeats the purpose of hosting k8s in home server.

How so? You can just rent a cheap server to tunnel through, while having the benefits of your home machine(s) for compute.

> Maybe the external ingress node can be a load balancer controlled by the k8 cluster. But then you still have to communicate with the home server and it has no exposed ip address

Do you mean that you wouldn’t be able to access the K8s control plane endpoint then (which you could if configured properly)? Or something else?

Re:Kubernetes Home – what do you do if your ISP changes your... by TZubiri on Tuesday March 11, 2025 @05:18AM (#43330648)
>how so?

SPOF

Re:Kubernetes Home – what do you do if your ISP changes your... by Daviey on Tuesday March 11, 2025 @07:44AM (#43331487)
And having a single IP address, with one ISP at home isn't a SPOF?
Re:Kubernetes Home – what do you do if your ISP changes your... by TZubiri on Tuesday March 11, 2025 @06:15PM (#43337670)
You are adding a(nother) SPOF.
Re:Kubernetes Home – what do you do if your ISP changes your... by Daviey on Tuesday March 11, 2025 @06:19PM (#43337707)
@TZubiri, Then if that is a risk you accept, you could have multiple VPS's and load balance back to your home network, eliminating the new SPOF.

(@'ing because we reached the maximum reply limit)

Re:Kubernetes Home – what do you do if your ISP changes your... by TZubiri on Tuesday March 11, 2025 @07:23PM (#43338194)
@Daviey

Or just get your very own static IP.

It's a ZPOF.

Routing happens automatically on nearby router routes

It's deep down a matter of taste, you have a home server in Arizona and you route users to a Hetzner server in Germany and then back?

Don't justify, just recognize it's in bad taste, seek to use ip addresses as geographical host identifiers. Do not hide origin or destination. Minimize

Re:Kubernetes Home – what do you do if your ISP changes your... by asmor on Tuesday March 11, 2025 @02:20AM (#43329690)
Are you even running a real homelab if you're not running MetalLB in BGP mode?!

Sarcasm obviously, but it's a fun exercise, especially if you get a real (v6, probably) net to announce.

Re:Kubernetes Home – what do you do if your ISP changes your... by linuxdude314 on Tuesday March 11, 2025 @11:16PM (#43339625)
Right?! Get some free IP space from he.net tunnel broker and build your own IPv6 AnyCast network using Quagga for BGP.

Kidding about building your own AnyCast network (although you really could…), but he.net tunnel broker is GOAT.

Re:Kubernetes Home – what do you do if your ISP changes your... by asmor on Wednesday March 12, 2025 @04:57AM (#43341105)
I wish Happy Eyeballs worked better or let me absolutely prefer IPv4, because every time I set up a free v6 tunnel I get banned about 2 days layer for pushing a few terrabytes over it, when all I wanted was to be able to SSH into every one of my containers on a cheap VPS separately. Or the tunnel is so slow, I'm degrading my entire internet connectivity.
Re:Kubernetes Home – what do you do if your ISP changes your... by TZubiri on Wednesday March 12, 2025 @05:09PM (#43347697)
>free v6 tunnel

There's your problem. You need some form of cost attached to some identity assets, anything under the IANA umbrella, ips/domain names. This is in order to prevent sybil attacks. This is all well studied under he hashcash bitcoin era as PoW.

So yeah, you actually need to spend some money not in exchange of something here, but as the very thing you need, you need to distinguish yourself from those that spend 0$, not because they are cheap, but because they may do it 1000 times and ruin it your pooled reputation.

Re:Kubernetes Home – what do you do if your ISP changes your... by asmor on Friday March 14, 2025 @05:59AM (#43361043)
Unfortunately there's quite a market gap if you need bandwidth. I can't just pay HE 10 bucks a month, their service doesn't work that way. Hetzner would work, but their IP space is very often randomly blocked from lots of things.
Re:Kubernetes Home – what do you do if your ISP changes your... by CoolCold on Friday March 14, 2025 @03:58AM (#43360479)
> because every time I set up a free v6 tunnel I get banned about 2 days layer for pushing a few terrabytes over it, when all I wanted was to be able to SSH into every one of my containers

can you describe a bit more? I cannot connect the dots here on how terabytes are tied to free v6 tunnel - likely I'm missing some details. Thank you in advance.

Re:Kubernetes Home – what do you do if your ISP changes your... by asmor on Friday March 14, 2025 @05:56AM (#43361029)
If someone else provides IPv6 connectivity to you, you use their bandwidth. Some apps like Steam see IPv6 connectivity and use it regardless of what you'd prefer it to use, hinting mechanisms and all. So while I just wanted to use the tunnel for things that IPv4 does not provide, I always end up tunneling half my traffic over it, which free services don't like.
Re:Kubernetes Home – what do you do if your ISP changes your... by vegarde on Monday March 17, 2025 @05:07AM (#43386482)
It's on my bucket list.

My Unifi Cloud Gateway Max doesn't (yet) support BGP, but other Unifi devices do, so I do hope that it'll come to my device to. If not, I'll have to think of other ways to test it. But in the meantime, there's plenty of other stuffs to learn.

I have a real, ISP-routed IPv6 net to play with.

Re:Kubernetes Home – what do you do if your ISP changes your... by Aachen on Tuesday March 11, 2025 @11:25AM (#43333401)
I do this for email after I got a new IP address from the shit KPN pool instead of the clean XS4ALL pool. Outgoing email proxies through an IP address at Hetzner. It's not pointless because

- I get specs from an old laptop (that I had laying around anyway) that would probably cost like 50€/month to rent elsewhere. Power costs are much lower (iirc some 2€/month) and it just uses the internet subscription I already had anyway

- When I do hardware upgrades, I buy to own. No profit margin, dedicated hardware, exactly the parts I want

- All data is stored at home so I'm in control of access controls

- Gigabit transfer speeds at home, which is most of the time that I want to do bulk transfers

I see various advantages that still exist when you need to tunnel for IP-layer issues

Edit: got curious. At Hetzner, a shared cpu with 16GB RAM is 30€/month, but storage is way too little so an additional 53€/month just for a 1TB drive needs to be added (at that price, you could buy one of these drives new, every month again and again and still have enough money over to pay for the operating electricity; you'd have a fleet of 60 drives at the expected lifetime of 5 years, or even at triple redundancy you get 20TB for that price). I'll admit the uplink would be significantly better for this system, but then my downlink isn't faster than my uplink so at home I wouldn't even notice. Not sure how much of a difference a dedicated CPU would make

At AWS, I have to guess things like iops (I put in 0 to have a best-case comparison), bandwidth (I guessed 1TB outbound, probably some months is five times more, some months half). It says the cheapest EC2 instance with these specs, shared/virtual again mind you so no performance guarantees, is t4g.xlarge. With storage and traffic, this costs 301$/month which I guess is nearly the same in euros after conversion fees. If I generously pay 3 years up front, it's only 190$ monthly + 2'156$ up front, so across 3 years that's 250$/month (and I'm out of over 2 grand which has an expected average return of 270€ at the typical 4% in an all-world ETF — I could nearly fund the electricity costs of the old laptop just from the money I lose in interest while paying for AWS! Probably 100% if I bought a battery and solar panel to the value of 2150€)

I actually have more than 1TB storage but don't currently use all of it, so figured this is a fair comparison

The proxy I currently have at Hetzner costs me 4€/month, so I save many multiples of my current total cost (including the at-home costs) by self hosting.

Re:Kubernetes Home – what do you do if your ISP changes your... by dddw on Tuesday March 11, 2025 @03:58PM (#43336420)
For cheap storage at hetzner you could add a storagebox (not fast, but fine), or now even objecstorage.