kmwoley

Members
  • Posts

    44
  • Joined

  • Last visited

Everything posted by kmwoley

  1. I don’t know. I’ve always used the one from kylemanna as it has a pretty big user base elsewhere. And I was already familiar with the bare OpenVPN over OpenVPN-AS If someone has the lsio one installed and configured under bridge networking, it’d be an easy test to switch the network type to host and see what happens.
  2. Hey folks, I'm beating my head against a wall here and could use some help reasoning through a networking problem. I've got an OpenVPN container (kylemanna/openvpn) that works just fine when it's in bridge networking mode (clients can reach internet, local network). However, when I put it into host networking the clients connected via OpenVPN cannot reach the internet or devices on the local network. I've narrowed it down to what I think is a masquerading problem. When OpenVPN is in bridge networking mode, tcpdump shows traffic originating from OpenVPN clients leaving the ethernet adapter on the server have been masqueraded correctly to the server's IP (10.4.10.8). In this example, I'm successfully connecting to a endpoint at 10.4.40.20 from a OpenVPN client: # tcpdump -i eth0 dst 10.4.40.20 09:21:37.044954 IP 10.4.10.8.64693 > 10.4.40.20.http: Flags [SEW], seq 1466305596, win 65535, options [mss 1361,nop,wscale 6,nop,nop,TS val 827422948 ecr 0,sackOK,eol], length 0 09:21:37.104329 IP 10.4.10.8.64693 > 10.4.40.20.http: Flags [.], ack 750528488, win 2065, options [nop,nop,TS val 827423017 ecr 232700051], length 0 09:21:37.247838 IP 10.4.10.8.64693 > 10.4.40.20.http: Flags [P.], seq 0:361, ack 1, win 2065, options [nop,nop,TS val 827423152 ecr 232700051], length 361: HTTP: POST /onvif/device_service HTTP/1.0 When OpenVPN is in host networking mode, tcpdump shows that same traffic which is coming from OpenVPN client as having the IP address assigned by OpenVPN (192.168.255.200): # tcpdump -i eth0 dst 10.4.40.20 23:50:27.172338 IP 192.168.255.200.64379 > 10.4.40.20.http: Flags [S], seq 119222741, win 65535, options [mss 1361,nop,wscale 6,nop,nop,TS val 814857219 ecr 0,sackOK,eol], length 0 For some reason which is unknown to me, that traffic isn't getting masqueraded correctly. So, 192.168.255.0/24 OpenVPN client IPs are leaking out to my local network which clearly has no idea how to route them back. Here's the relevant iptables from the server: # iptables -t nat -v -L POSTROUTING -n --line-number num pkts bytes target prot opt in out source destination 1 102 6434 MASQUERADE all -- * !docker0 172.17.0.0/16 0.0.0.0/0 2 0 0 MASQUERADE all -- * eth0 192.168.255.0/24 0.0.0.0/0 3 0 0 MASQUERADE all -- * tun0 192.168.255.0/24 0.0.0.0/0 Line 2 is part of the default OpenVPN configuration. Line 3 I added in attempt to see if it'd help (it didn't make any difference). I've checked that, when OpenVPN is in the host networking config, the OpenVPN container itself has the expected access to the internet and local network (i.e. attaching to the container and pinging things works as expected). I've tried a handful of things, but not being an expert in networking, I've reached my limit of knowledge. Let me know if there's other config/settings that'd be useful in debugging this. Any hints would be very appreciated. Thanks.
  3. If so, that’s easy. Kernel driver support is the biggest blocker. I am happy to test if you need it. Thanks for for looking into it!
  4. That’s my understanding, yes. I’m not at all an expert, but I recall potentially needing bluez-libs and bluez-utils (bluez.org) to make it all work.
  5. I don’t know what captures the @limetech folks attention to provide feedback on feature requests. This got posted in at the time 6.5 was getting prepped to ship, so maybe there’s time to look at it now?
  6. I have a Bluetooth dongle that I want to use in a docker container. Docker requires that the Host OS install drivers for the device before it can be passed to the container. Searching the forums it appears I am not alone in that need, particularly for the users of Home Assistant. See this post for more info:
  7. @limetechi - is there any way to install bluetooth drivers on the unRAID host? Any hope of getting them included as part of a future release.?This is blocking one of the larger scenarios I intended to use my unRAID server for (Home Assistant using a Bluetooth dongle to detect who's home/away).
  8. I've been trying to figure out the same issue. Looking around, it looks like the primary issue is that there's not a Bluetooth driver for the Bluetooth dongle. Running usb-devices shows that the Broadcom device doesn't have drivers: I've seen it suggested that btusb needs to be loaded, but there's no btusb module to load: So, until Unraid supports Bluetooth on the host, there's no way to pass the device through to a docker container like Home Assistant. At least, that's as far as I've gotten. Anyone else have any better luck I"d love to know how you got it working.
  9. Following up here... I let the Minio + Duplicati backup run to completion, and it completed in nearly the same time as the same test to the SMB destination. So, I'm just going to conclude that the KB/s reporting while it's backing up is just wrong because calculating the actual speed is closer to 7-10 MB/s on both configurations.
  10. I am doing some testing of Duplicati to see how I like it. I've run two tests to see how Minio performs vs. SMB. Something has to be seriously wrong with my config/setup because Minio is capping out at only 2 KB/s ! On the same system, I did the same backup but instead targeting a SMB folder - it went reasonably fast (7-10MB/s). Both tests were run in identical environments (over wifi, same location, same backup set, same filters in Duplicati, etc.) - the only thing different was the backup target. Any thoughts on starting to investigate where the problem is?
  11. @jrd680 - it definitely is quiet enough. My wife and I are both happier with the added silence. When "idle" (i.e. primarily recording ip-cam footage) the drives have enough passive cooling to keep all the case fans off. They generally don't run more than 1000 RPM when disks are under full load - in that case, you can hear them but it's not enough that you'd notice across the room. With respect to the drives - there's another drive under the WD Purple. And if you look at the power supply, you'll see one SSD attached to the back of it with 3M Command strips, and the other on the floor of the case in a proper mounting point.
  12. This is my modest lil build - designed to be unobtrusive where it sits there, silently, running our house. CASE: SilverStone ML03B CPU: i5-2500K GMA HD 3000 MOBO: ASUS Maximus IV GENE-Z/GEN3 CPU COOLER: Scythe SCBSK-2100 120mm Sleeve BIG Shuriken 2 Rev. B RAM: Corsair 16 GB Vengeance Low Profile 1600mhz PC3-12800 DDR3 PSU: Antec EA-450 PLATINUM CACHE: 120GB Samsung 830 + 250GB Samsung Evo 850 PARITY: 4TB HGST 7200 RPM 128MB Cache DATA: 4TB Seagate Ironwolf SECURITY CAM: 4TB WD Purple (not in the array) CASE FANS: Noctua NF-R8 PWM (x2) + Cooler Master Sleeve Bearing 80mm (Super Narrow!)' Mostly older hardware + new drives. The fun part of this was figuring how to fit 5 drives into this tiny box + adding the additional cooling needed. I have no shame in having used 3M command strips to mount the second SSD to the back wall of the PSU. Or taking my Dremel to key parts of one of the drive caddies to provide more airflow via a small 80MM fan I crammed into the side of the case where it wasn't exactly designed to fit. The best part is that it's so, so quiet with the hard drive temps controlling the case fans to keep everything happy. Right now it's running a couple of Docker containers (OpenVPN, Logitech Media Server, CrashPlan) and a Windows VM to run our security software.
  13. Hey all, I wanted to thank this community for all of it's help by documenting so much so well about how to get going on unRAID. After 10+ years using consumer Windows to run my various iterations of a 'home server', I finally decided to make a change - after looking at all the options, unRAID became the clear pick for me. I blogged pretty much every detail of how I converted my machine - in particular those I had to hunt for instructions. Hopefully someone else will find this useful should they be looking to make a similar change. From Windows to unRAID: choosing my next home-server OS How-to: Migrate from Windows RAID to unRAID Securing a new unRAID installation Convert a Windows Installation into a unRAID (KVM) Virtual Machine Reduce (Shrink) raw image (.img) size of a Windows Virtual Machine Controlling Case Fans Based on Hard Drive Temperature My build is very modest - I've got a 5 year old ASUS Maximus IV Gene-Z/GEN3 motherboard with an Intel Core i5-2500k processor and 16GB of RAM. Running 120GB x2 cache disks with 4TB parity + 4TB data, with an additional 4TB disk that's outside of the array for IP camera recordings. All of that, crammed into a pizza box of a case. So far, I'm running OpenVPN, CrashPlan, and Logitech Media Server via Docker, and a Windows VM for my security cam software. All told, it probably took me a month of weekends to convert from Windows -> unRAID. And most of that time was spent on various badblocks + long smartctrl tests to burn in each of the 3 new HDDs I put into my aging server as part of the upgrade. It's good to be back running Linux in my home. Thanks for all of your help - this forum (and all the contributions from the various Docker + plugin authors) has been so great. -kmwoley
  14. Hey folks - I know this is a long-dead thread, but I found it very useful in getting my unRAID server setup. Because I had to piece together instructions from all over the place, I wrote up the full instructions in a blog post here: http://kmwoley.com/blog/controlling-case-fans-based-on-hard-drive-temperature/ Since I made modifications to the script to reduce the logging output and set a fan starting speed (different from the fan low speed), I posted it up on GitHub here for others to see & contribute to. Given the age of this thread, I suspect most folks are using a plugin to control their fans - I found that the Dynamix fan control plugin didn't work for me, so I went this route instead. Thanks for all of your help! -kmwoley