Tag: Network
All the articles with the tag "Network".
From iKuai to RouterOS, and Back to Surge VM Gateway
Made with AII moved my home router off iKuai and onto RouterOS CHR running inside PVE — partly because iKuai 4.0's UI is a rough UniFi knock-off, and more worryingly because packet captures have shown it quietly phoning home in the background; and partly because I wanted the router itself to be just another VM. This post covers the RouterOS setup (dual-WAN PPPoE with PCC, a caching DNS resolver, free IP Cloud DDNS, port forwarding with hairpin and NAT loopback), the trick that finally solved a long-standing annoyance — one DDNS name that reaches the public IP from outside but gets looped back to the right internal host by port when I'm home, since a single domain sitting in front of many different internal IPs can't be split by DNS alone — and the conclusion I kept coming back to: the real domestic/overseas traffic splitting belongs on the Surge VM Gateway, not the router. The router does the plumbing; Surge does the brains. Plus a small door-buzzer automation running on the same PVE box.
The Right Way to Use WebArena Indigo
Made with AIWebArena Indigo is a cheap, good-value Japanese VPS that makes a great landing node. But if you front it with a relay and push traffic over a GRE tunnel like I did, GRE over IPv4 gets rate-limited the moment you run a speed test — the connection collapses right after the first burst. This post walks through what I tried (realm public forwarding, IPv4 GRE, IPv6 GRE) and how I ruled out snell, MTU, DNS and the qdisc one by one, landing on the conclusion that only GRE over IPv6 (ip6gre) reliably escapes the rate limiting. Plus a note on picking between the 500M/4-core and 1000M/6-core shared plans.
It took me several hours to switch to a 2.5G modem
A troubleshooting guide for replacing a China Unicom modem with a 2.5G ZXHN F7015TV3 unit, detailing DNS hijacking issues caused by incomplete ITMS registration and the solution to force registration status via Telnet commands.