• 1 Post
  • 132 Comments
Joined 2 years ago
cake
Cake day: June 10th, 2023

help-circle

  • Tailscale/headscale/wire guard is different from a normal vpn setup.

    VPN: you tunnel into a remote network and all your connections flow through as if you’re on that remote network.

    Tailscale: your devices each run the daemon and basically create a separate, encrypted, dedicated overlay network between them no matter where they are or what network they are on. You can make an exit node where network traffic can exit the overlay network to the local network for a specific cidr, but without that, you’re only devices on the network are the devices connected to the overlay. I can setup a set of severs to be on the Tailscale overlay and only on that network, and it will only serve data with the devices also on the overlay network, and they can be distributed anywhere without any crazy router configuration or port forwarding or NAT or whatever.



  • You’ll want to look into “keepalived” to setup a shared IP across all worker nodes in the cluster and either directly forward, or setup haproxy on each to do the forwarding from that keepalived IP to the ingresses.

    I’m running 6 kube nodes (running Talos) running in a 3node proxmox cluster. Both haproxy and keepalived run on the 3 nodes to manage the IP and route traffic to the appropriate backend. Haproxy just allows me to migrate nodes and still have traffic hit an ingress kube node.

    Keepalived manages which node is the active node and therefore listens to the IP based on backend communication and a simple local script to catch when nodes can’t serve traffic.






  • It’s always a value proposition. If I feel like a game is a better value/ROI that whatever else I was going to spend my money on, I’ll still get the game.

    Sure, I’ll have more limited number of purchases due to having a cap on discretionary spending, but if it costs more for all options, it’s different math that games being more than, say, a night out or a movie or whatever. I can easily say, I’d rather spend $45 for a few beers and dinner with friends than an $80 game, but if I get 100+ hrs of enjoyment out of a game and that dinner goes up to $80 as well, the game makes more sense. Or maybe having them over for some couch coop and we just get a sixer from the store instead.

    Everyone will make this decision differently and that’s okay.









  • Current homelab+desktop+laptop host count here is 22. All anime characters or references. It’s a fairly large pool to pull from, so it’s worked for me for 20+ years now. Mobile devices (phones, tablets, etc) and game consoles aren’t really as clever though.

    All of them are in a piHole DNS though so no host files keeps it easy to track. Services have names that mostly are just what they are though and cnames to the matching host that hosts them (or load balancer, whatever)