https://www.tiernanotoole.ie/categories/internet.htmlHugoen-ie2026 Tiernan OTooleFri, 10 Jul 2026 23:30:52 +0100https://www.tiernanotoole.ie/2024/12/12/how-to-use-cloudflare-warp-with-a-udm-pro.htmlThu, 12 Dec 2024 21:25:23 +0000https://www.tiernanotoole.ie/2024/12/12/how-to-use-cloudflare-warp-with-a-udm-pro.htmlIf you’re considering using Cloudflare Wrap for specific machines on your network, you can easily install the Warp client directly on them. It supports various operating systems, including Windows, Linux, Mac, iOS, and Android. However, if you need to use it on devices that aren’t compatible with the client installation, for example, NAS Devices or Smart TVs, this tutorial may be helpful. First, please note that this is not an officially supported option. Cloudflare might modify their configurations at some point, potentially causing this feature to break. You have been informed about this possibility.https://www.tiernanotoole.ie/2024/04/29/some-network-upgrades-going-on.htmlMon, 29 Apr 2024 20:40:21 +0000https://www.tiernanotoole.ie/2024/04/29/some-network-upgrades-going-on.htmlhttps://www.tiernanotoole.ie/2023/02/09/day-38-and-39-of-100daysofhomelab.htmlThu, 09 Feb 2023 22:31:52 +0000https://www.tiernanotoole.ie/2023/02/09/day-38-and-39-of-100daysofhomelab.htmlthis post is for day 38 and 39 of #100daysofhomelab. and i have finally moved over to my #RB5009. and, well, it has not gone so well. It has rebooted a few times due to memory issues (too many BGP tables being held, so I shut a few down to start with. some cleanup needed there), then the internet connections are a little unstable, and, well, in the last 48 hours, I have spent more time on LTE than on proper internet. It does seem to be working (ish.) now, but not as fast as it was. I am just using the #Zerotier link, so the #Wireguard links are currently off. Anyway, below are some links. I hope to make things work better tomorrow. And i also hope to have a better write up soon too…https://www.tiernanotoole.ie/2023/02/04/day-31-of-100daysofhomelab.htmlFri, 03 Feb 2023 23:55:03 +0000https://www.tiernanotoole.ie/2023/02/04/day-31-of-100daysofhomelab.htmlDay 31 of #100daysofhomelab and I am going through the config from my CHR to bring over to my RB5009, and, well, I have no idea what I was doing when I built the original config… Now to try and figure out what the config did, since I want to document it here so I know what I was thinking, but to also possibly help someone else… Mind you, at this stage, it won’t be much help… I also need to figure out how to add my Zerotier Bridge into the mix.https://www.tiernanotoole.ie/2022/06/18/dnscontrol-and-github-actions.htmlSat, 18 Jun 2022 18:32:24 +0000https://www.tiernanotoole.ie/2022/06/18/dnscontrol-and-github-actions.htmlI am participating in the #100daysofhomelab challenge and have been posting a lot on Twitter as @tiernano, but some posts and tasks I am doing will require longer-form write-ups. So, some updates will include either Videos (which will be published on my Youtube Channel) or blog posts, which will go here. This is the first of the blob posts.https://www.tiernanotoole.ie/2022/04/25/unifi-network-update-7-1-61.htmlMon, 25 Apr 2022 21:58:58 +0000https://www.tiernanotoole.ie/2022/04/25/unifi-network-update-7-1-61.htmlA few weeks back, Ubiquiti released a pre-release update for the Unifi Network Controller, version 7.1.61. It got installed on my UDM and I noticed a few interesting bits that you might find handy… First, you will need to be signed up for Unifi Early Access before you can download or even read the release notes, but this is just a quick update based on my findings so far.https://www.tiernanotoole.ie/2022/03/16/raspberry-pi-in-a-car-part-2.htmlWed, 16 Mar 2022 19:37:36 +0000https://www.tiernanotoole.ie/2022/03/16/raspberry-pi-in-a-car-part-2.htmlFor the last few weeks, I have been running a Raspberry Pi in my car, along with a small UPS and a Wifi Access point, allowing me to download videos from my dash cam and back them up to my NAS in the house. But I have had some teething issues, and I am currently thinking my way through some fixes… While trying to figure out how to fix part 1, I came up with an idea: I have an older Mikrotik RB951G that can be powered via a 12v adapter for the car. I am going to use that, along with a Huawei 4G dongle to act as an internet connection. The onboard Wifi will be in client mode, so when it’s near the house, it will connect to the main network and send traffic through that to the internet (or internal NAS) and when away, use the LTE modem. Then, using the Wifi dongle on the Raspberry Pi, use that as a Wifi AP.https://www.tiernanotoole.ie/2022/02/25/running-a-raspberry-pi-in-a-car-and-backing-up-dashcam-footage.htmlThu, 24 Feb 2022 23:45:39 +0000https://www.tiernanotoole.ie/2022/02/25/running-a-raspberry-pi-in-a-car-and-backing-up-dashcam-footage.htmlA few months back (well, November 2020) I wrote about connecting to my car with Zerotier. In this post, I mentioned using a TP-Link router running OpenWRT and a Huawei LTE dongle to connect to the internet, which allowed me to then connect to my Blackvue Dashcam and watch remotely. But it had some issues I wanted to fix:https://www.tiernanotoole.ie/2021/11/07/ubiquiti-udm-pro-fail-over-to-speedify.htmlSun, 07 Nov 2021 21:46:59 +0000https://www.tiernanotoole.ie/2021/11/07/ubiquiti-udm-pro-fail-over-to-speedify.htmlSo, this has been a blog post in the making for a while now but never got around to fully writing it up, so here goes nothing… I run a UDM Pro in the house. It has 2 WAN Links: 1 1Gb link and 1 10Gb Link. I also run AS204994, my own ASN with its own Transit and Peering connections, mostly in Europe. There is a VM in the house which acts as a connection to AS204994, which gives me a full connection to the Internet through my own ASN. More details on my AS204994 blog are here.https://www.tiernanotoole.ie/2020/11/09/connecting-to-my-car-over-zerotier.htmlMon, 09 Nov 2020 19:00:00 +0000https://www.tiernanotoole.ie/2020/11/09/connecting-to-my-car-over-zerotier.htmlI use ZeroTier on my network for a good few things, including internal network peering between BGP VMs, management of machines, and now, connecting to my car over LTE. This is one of those posts that sounds silly, but is very handy! First, the parts list: Car. 3G/4G/5G modem of some sort. I am using a Huawei Wingle. Can be used without the Router below, but I wanted Zerotier, so I have it in modem only mode. A router that supports Zerotier. I am using a modified TP-Link TL-WR703N upgraded to 16MB ROM and 64MB RAM. This is required for newer OpenWRT builds a dashcam that connects over Wifi. I am using a BlackVue DR750S-2CH Latest ROOter software from Of Modems and Men Patients. After installing the the latest copy of ROOter on the TPLink (or router of your choice) and getting the modem configured correctly (this took a while) you need to install the Zerotier software though the dashboard. Once installed, I joined my Zerotier network using the CLI (SSH into the router) and the approved it though the my.zerotier.com dashboard. Once its approved and connected, you can now go to the Zerotier IP and get to the router directly. From here, you can either setup a route in Zerotier to point at the internal network behind the router, or, in my case, setup a SSH tunnel to the dashcam. I found the IP given to the dashcam and used SSH forwarding to get to it. Finally, i used the URLs from Digital-Nebula’s hackview repo to get to the different URLs. I use this to download stuff like GPS logs, emergency videos, etc. I have to clean up some scripts at some stage for this, and plan to upload them at some stage.https://www.tiernanotoole.ie/2018/04/01/as204994-own-ip-space-and-anycast.htmlSun, 01 Apr 2018 22:55:06 +0000https://www.tiernanotoole.ie/2018/04/01/as204994-own-ip-space-and-anycast.htmlSo, if you are reading this page, it is being delivered with the magic of Anycast. Well, technically, it was before, since i used Cloudflare, and it still is because of Cloudflare, but also because of my own ASN (As204994), some servers in different locations, and some magic, which i will explain a bit of in this post. This all started late last year when i got my hands on an ASN and a /48 block of IPv6 addresses. I had been reading stuff about BGP, routing, etc, and decided to go all in. it was quite cheap with the help of HostUS. All in, it was about $50 for the year. As part of the process, i needed 2 upstream providers to say they would accept my announcement. They were Hurricane Electric though their Tunnel Broker service, and Vultr using a few of their VPSs.https://www.tiernanotoole.ie/2017/03/09/business-class-broadband-finally-here.htmlThu, 09 Mar 2017 00:00:00 +0000https://www.tiernanotoole.ie/2017/03/09/business-class-broadband-finally-here.htmlSo, after many (MANY) years messing with dual cable modems, struggling to get them working together, to get websites to even allow me in, having to use hacks and kluges to get it to work at all… I have given up. It has been a struggle getting two modems working properly. Load blanching kind of works… but it’s messy at best. Some sites kick you out every now and again because your IP changes. Some sites wont let you login at all… Mind you, some sites work grand and don’t ask questions…https://www.tiernanotoole.ie/2016/06/08/double-speed-internet-part-8-routing-around.htmlWed, 08 Jun 2016 00:00:00 +0000https://www.tiernanotoole.ie/2016/06/08/double-speed-internet-part-8-routing-around.html[NOTE] This part 8 in a series of posts. The rest can be found here. At the end of my last post I asked the question about routing traffic to different servers based on thier distances, etc… Well, after a bit of messing, i can say it kind of works! here is a quick over view: server in the house has now got multiple OpenVPN connections (2 to Hetzner, 1 to OVH (with a plan to double), 1 to Digital Ocean (again, to be doubled) and i am planning 2 to Azure as well). Quagga/Zebra has static routes (currently static, planing on dynamic soon… more eventually) to different servers depending on where they are. for example, all traffic to the hetzner network (including their Storage Boxes) go though the hetzner link. Hubic traffic goes though OVH, Azure (currently) and AWS traffic, aswell as some CDNs go direct over either WAN1 or WAN2 in the house, and some other stuff (CrashPlan currently) goes though Digital Ocean. Everything that has no static route goes though Hetzner… Ideally, the static side of things should be removed, and a more dynamic setup done. How that works, i have no idea… Spotify have 2 posts about their SDN Internet Router (part 1 and part 2) which is an interesting idea… More digging and research is required. So, there you have it. Everything currently seems to be working, mostly, and tweaks can be made easily… I have a couple posts i have in my head, including something to do with automating bringing up new machines (probably with Ansible or something like it), more monitoring, and some other stuff too… Any questions, leave a comment, and i will get back.https://www.tiernanotoole.ie/2016/05/31/double-speed-internet-part-7-ecmp-kind-of.htmlTue, 31 May 2016 00:00:00 +0000https://www.tiernanotoole.ie/2016/05/31/double-speed-internet-part-7-ecmp-kind-of.html[NOTE] This part 7 in a series of posts. The rest can be found here. In the last post I mentioned I am now using Hetzner for hosting a dedicated box. Thats still live, and going well. I have a /29 IP range (6 usable) and also 2 other IPs. So far, so good… But because i was using a Socks Server, I was not fully able to use the /29 ips… I use something like as follows:https://www.tiernanotoole.ie/2016/05/17/double-speed-internet-part-6-hetzner-edition.htmlTue, 17 May 2016 00:00:00 +0000https://www.tiernanotoole.ie/2016/05/17/double-speed-internet-part-6-hetzner-edition.html[NOTE] This part 6 in a series of posts. The rest can be found here. Its been a while, since I posted, and there are some, well, pretty major changes since the last time… Lets start are the beginning. Last time I was using Digital Ocean for my hosting provider. I was using their $20 a month server (2 cores, 2GB RAM, 40GB SSD, 3TB transfer), and it was all good… But I noticed that every now and again I would need to reboot the box. I also noticed that when transferring large files or using higher bandwidth (400mb/s+) the 100% of both cores were being used. So, I wanted to move to something with more power…https://www.tiernanotoole.ie/2016/04/21/mad-max-speed-the-road-warrior-internet-connection-double-speed-internet-part-5.htmlThu, 21 Apr 2016 00:00:00 +0000https://www.tiernanotoole.ie/2016/04/21/mad-max-speed-the-road-warrior-internet-connection-double-speed-internet-part-5.html[NOTE] This part 5 in a series of posts. The rest can be found here. This post is going to be an update and theoretical post. probably very little “new” stuff going on here, mostly updates, and what I am planning on doing later on. This week, I have been OOF sick, so I have not done much work, but I have been surfing the web, watching videos, downloading stuff, etc., so I have an idea of how things are going. First, as mentioned in the previous post I have MPTCP, Squid, Socks Servers, OpenVPN and IPTables doing their magic. 2 OpenVPN tunnels between the house and Digital Ocean. All TCP Traffic (bar port 80) is sent over socks to the box in the cloud using RedSocks. All UDP traffic is sent direct over OpenVPN. Since MPTCP is in the mix, all socks traffic is actually split over the 2 connections. All port 80 traffic, and 443 (if the client is using local Squid as their proxy) is sent round-robin between the 2 upstream IPs to Squid (2 OpenVPN end points).https://www.tiernanotoole.ie/2016/04/14/2-cable-modems-double-speed-part-4.htmlThu, 14 Apr 2016 00:00:00 +0000https://www.tiernanotoole.ie/2016/04/14/2-cable-modems-double-speed-part-4.html[NOTE] This part 4 in a series of posts. The rest can be found here. So, this week I went in a completely different direction that I have been thinking recently. So, the basic theory is as follows: I am still using MPTCP kernels on both upstream and local machine now have 2 P2P UDP OpenVPN tunnels between house and cloud. Example config is here all TCP traffic (bar port 80) that hits the router in house is redirected to RedSocks RedSocks uses a socks server, Dante, as an upstream server on the cloud box since the socks traffic is over TCP (inside the UDP OpenVPN tunnel) it uses MPTCP having socks running, gives me quite the download speed, turning it off does not, hence the following tweet I am also noticing that I am starting to hit the limits of my upstream VM. If downloading or uploading at speed, the processor cores (2 in the case of the box I am currently running) are pegged at pretty much 100% full. Well, 80ish, but that because the other 20% is being used by Dante. I am noticing I can hit a full 72Mbit/s up, but the max currently downloading is about 400, maybe 450. Need a faster box now. I mentioned port 80 not being set over socks. That’s because its redirected to Squid. Squid (in house) then uses Squid (in cloud) as a parent. There are 2 round-robin parents for squid, one on each OpenVPN connection IP address. all other traffic (UDP, ICMP, etc.) are sent over the OpenVPN connection. currently only one is picked, but I have a cunning plan. The cunning plan? Well, if I am reading the internet correctly, and I would like to think I am, I think ECMP, or Equal Cost Multi-Path Routing, could help. Again, it’s a fledgling idea currently, and I am still reading the documentation, but if it works. Well. I not sure. let’s see.https://www.tiernanotoole.ie/2016/04/02/2-cable-modems-double-speed-part-3.htmlSat, 02 Apr 2016 00:00:00 +0000https://www.tiernanotoole.ie/2016/04/02/2-cable-modems-double-speed-part-3.html[NOTE] This part 3 in a series of posts. The rest can be found here. In Part 1 of this series I explained the why and what I wanted to do for this “project”. In Part 2 I did some basic testing of both MPTCP and MLVPN. I also mentioned trying MMPPP using vtund but it has been a while since I did that testing, and it had not been on bare metal. So, this post is a follow up, where I am using bare metal.https://www.tiernanotoole.ie/2016/03/30/mptcp-ssh-squid-openvpn-and-2-cable-modems-double-speed-not-quite-part-2.htmlWed, 30 Mar 2016 20:00:00 +0000https://www.tiernanotoole.ie/2016/03/30/mptcp-ssh-squid-openvpn-and-2-cable-modems-double-speed-not-quite-part-2.html[NOTE] This part 2 in a series of posts. The rest can be found here. In my previous post I explained what i was trying to do… This post explains what i have been working on recently, and performance results… So, first, what have i tried… There are 3 different things i have tried, and here are some of their details. Some will need to be updated (other parts of this series), and others i will try get back to eventually.https://www.tiernanotoole.ie/2016/03/22/2-cable-modems-double-internet-speed-well-not-really-part-1.htmlTue, 22 Mar 2016 18:00:00 +0000https://www.tiernanotoole.ie/2016/03/22/2-cable-modems-double-internet-speed-well-not-really-part-1.html[NOTE] This part 1 in a series of posts. The rest can be found here. First, a bit of background, and then I will explain what I am currently running in Part 2… For the last 15 or so years, I have had at least 2 internet connections in to the house… 2 of them have always been Cable Modems from NTL, which became UPC, and now is Virgin Media. When I started, i think the modems where 150/50kbit/s and 600/150kb/s, and have steadily increased in speed, currently at 360/36Mbit/s each… But they have always been somewhat separate, and single thread downloads have always been limited to 1 of the connections… I have been looking for ways around this for years…https://www.tiernanotoole.ie/2015/09/30/edge-router-sophos-utm-dmz-and-lan-networks.htmlWed, 30 Sep 2015 20:00:00 +0000https://www.tiernanotoole.ie/2015/09/30/edge-router-sophos-utm-dmz-and-lan-networks.htmlI have been using an EdgeRouer POE as my main router for most of the network (some of the network still uses PFSense as a router, but thats being removed soon) for the last few weeks, and i am quite happy with it. I also have a second router, a Sophos UTM VM between my first LAN (essentially a DMZ) and my client LAN (there will be more “LANs” over there soon). The Client LAN is NATed between the DMZ and the LAN, which means anything on the LAN i want to access from the DMZ has to be port forwarded… Ideally, not much from the LAN should be accessible though the DMZ, but in my initial setup, stuff like Plex, etc, is…https://www.tiernanotoole.ie/2015/08/05/ubiquiti-edgerouter-poe-in-the-lab.htmlWed, 05 Aug 2015 21:00:00 +0000https://www.tiernanotoole.ie/2015/08/05/ubiquiti-edgerouter-poe-in-the-lab.htmlToday, my Ubiquiti EdgeRouter POE arrived in the house. I got it hooked up to both UPC connections (as secondary connections) and all seems to be working grand. Some notes i wanted to put up here: out of the box, the install was quite simple. set my Ethernet connection to a static ip in the 192.168.1.x/24 range, using 192.168.1.1 as gateway and dns, and then point at http://192.168.1.1 for admin. login (ubit for both username and password) and heay presto. I was asked did i agree to the license, and then im in. by default, NAT is off… i turned it on, and enabled DNS and was able to surf. I also noticed the software was out of date… Oddly, there did not seem to be an option to update automatically, but you can manually download the tar and upload it, which i did. so far, so good… not sure yet if i will be using it as my main router, but it may end up being a VoIP router. Finally, speed test result below:https://www.tiernanotoole.ie/2015/02/15/mobile-phone-as-a-service.htmlSun, 15 Feb 2015 20:47:00 +0000https://www.tiernanotoole.ie/2015/02/15/mobile-phone-as-a-service.htmlAfter my post about the Raspberry Pi acting as a VoIP server, and being able to add a 3G Dongle and allowing it to act as a Mobile Phone gateway, it got me thinking… Why not have something that allows you to rent a mobile phone number in a country, send and recieve text messages, phone calls, etc, all from anywhere in the world? Thats where Mobile Phone as a Service comes in…https://www.tiernanotoole.ie/2013/01/18/raspberry-pi-as-a-mobile-wifi-hotspot-part-1.htmlFri, 18 Jan 2013 06:57:16 +0000https://www.tiernanotoole.ie/2013/01/18/raspberry-pi-as-a-mobile-wifi-hotspot-part-1.htmlI have been using an iPhone 4 as a wifi hotspot for a while now. It does not have a “phone” SIM in it, with calls and texts enabled, instead it has a 3G Data SIM from a dongle… It works OK, but there are a few issues i have with it… No easy way to see how much data is being used, unless you Jail Break, and then battery life goes away… not very hackable… other than Jail Break, and thats not hackable enough… not a lot of storage: 16Gb, and most of that is takin up by Music and Apps no background network daemons… more on that in a second… The Network Daemons i am thinking would be useful for a WiFi Hotspot would be Squid, WANProxy, SSH, PPTP or OpenVPN Client and possibly a downloader of some sort. What i am thinking is as follows:https://www.tiernanotoole.ie/2013/01/15/moving-sites-to-nearlyfreespeech.htmlTue, 15 Jan 2013 18:23:02 +0000https://www.tiernanotoole.ie/2013/01/15/moving-sites-to-nearlyfreespeech.htmlI have been running a Dedicated Server from Hetzner for a while now, but have started to look at what i am running on the site, and reailized i under utilize the machine a lot… For example, this site is generated using Jekyll, which takes up very little power, and becomes static HTML files. My other blogs (Tiernan’s Comms Closet and GeekPhotographer) are both low traffic WordPress sites, and I run a couple of other static sites also for friends… All in all, not a lot of power…https://www.tiernanotoole.ie/2012/10/26/wanproxy-and-squid-with-upstream-servers.htmlFri, 26 Oct 2012 13:14:00 +0000https://www.tiernanotoole.ie/2012/10/26/wanproxy-and-squid-with-upstream-servers.htmlIn my previous post on WANProxy, i did not really go into detail about what it actually was. The direct quote from their site is WANProxy is a free, portable TCP proxy which makes TCP connections send less data, which improves TCP performance and throughput over lossy links, slow links and long links. This is just what you need to improve performance over satellite, wireless and WAN links. This is something that has interested me for a while, so i have been looking into it, and so far so good. In my last post i mentioned i was proxying Squid traffic, in todays post, i still am, but with some tweaks.https://www.tiernanotoole.ie/2012/10/02/enabling-true-bridging-modem-on-a-cisco-ecp3925-cable-modem-upc-ireland.htmlTue, 02 Oct 2012 00:00:00 +0000https://www.tiernanotoole.ie/2012/10/02/enabling-true-bridging-modem-on-a-cisco-ecp3925-cable-modem-upc-ireland.htmlI am a UPC Ireland customer, and have 2 cable modems into the house, both Cisco EPC3925s. These are not exactly great modems for power users, but are grand for normal use. Me, however, being a poweruser wanted something a little more, how should I put it, powerful. A couple of months back, a tutorial was posted on Boards.ie which showed you How to enable “bridging” on your UPC modem. When i say “Bridging”, they used DMZ, turned off firewalls, static IPs internally, turned off WiFi and DHCP, etc. It worked, quite well actually, but was “odd”. Today, however, there is a new tutorial Enabling REAL bridging on a Cisco EPC3925. I have tried this, and so far, it works! now just to set my router to work correctly, and update my IPs if they change.https://www.tiernanotoole.ie/2012/09/11/voip-stuff.htmlTue, 11 Sep 2012 00:00:00 +0000https://www.tiernanotoole.ie/2012/09/11/voip-stuff.htmlI have been very interested in VOIP stuff for the last while now, and finally started looking at implementing it in the house. Here are some links which may be useful. I will do a full post soon. Asterisk 1.8 with chan_mobile on Centos 6: chan_mobile allows you to use a Bluetooth phone to make calls with Asterisk Use an old Mobile Phone as a GMS Gateway in asterisk: again, similar to above, but with Ubuntu. 3CX: my current choice in VOIP software. The main VOIP hardware I use is: