• 1 Post
  • 14 Comments
Joined 2 years ago
cake
Cake day: July 7th, 2023

help-circle






  • If your requirement is a GUI, you’re not going to find anything. HA Proxy is also the most performant out of anything out there last I looked, and it’s got one of the simplest configuration setups.

    • Traefik: kinda slow, mostly meant for large numbers of microservices, pretty verbose configuration
    • Envoy: middle of the road, also most meant for cloud services, but should work with anything
    • nginx: does have a popular 3rd party GUI, seems to be confusing for most that don’t work with it a lot
    • caddy: fewer LB specific options if you’re just talking about service routing and response time, pretty easy to confirm for most, and some sort of decent 3rd party UIs, but they won’t have all the options available.

  • First, I think you’re attacking this from the wrong angle. You’re focused on ECC memory for some reason, but that’s not going to prevent bitrot, just potentially reduce errors in transfer, or catch issues. Your filesystem of choice has more to do with degradation in storage.

    Second, you haven’t mentioned any of the boards and their storage capabilities. Do they support the correct number of drives you want to use? Do they support hot-swap, and is that even something you care about?

    Last, you want more services, and but are worried about power consumption…that’s not how that works. More services means more CPU and MEM util, which means more power usage. You can either constrain your TDP at that point by using an UNDERpowered CPU and have that tradeoff, or provide a more capable CPU and take an increased TDP. There is no third option, that’s just how it works. Pick the more capable CPU and take the power hit (really, it’s going to be minor compared to a large server), and just run the things you need to run instead of coming back in a year and wanting to flip it again.




  • Your default routes are being set incorrectly. If you’re using it as an exit node, then you need to make sure it’s only being used as such for other clients on the Tailnet. You also need to make sure you’re splitting your routes correctly so that the default route on your router isn’t set for something on the Tailnet.

    Generally speaking, if you’re not familiar with networking and routing, you don’t need to change the subnet settings if using a Tailscale client on your router. You also shouldn’t be advertising routes from it for your own network, or else you could end up getting issues like you’re seeing because your routing tables will be broken while Tailscale is active.

    One more thing: Tailscale on your router doesn’t make it a server, it’s still a Tailscale client. You still need to setup your routing in the Tailscale server to make sure it’s not duplicating routes like this.