Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

RPiServers 2.0 -- $3.14 ALWAYS!

12345679»

Comments

  • @JoshR said:

    @forest said:
    @JoshR Just signed up! Had to lie a bit on the form because it wouldn't let me past "I have read and agreed to the terms of service" without checking the mark, but the link to the ToS is 404.

    ah. I put .html.
    https://mysticdev.io/tos.php
    Your the first person to actually point it out. :lol:

    Here is our AUP as well.
    Regarding tor is 3.1.3
    https://mysticdev.io/aup.php

    I should probably put in there about port 22 as optional but recommended.

    Oh I didn't know you allow exits! That's great!

    Do you run your own local resolver on that network that I could use? If not, how cheap is a second IPv4? Literally its only use will be for Unbound to make DNS requests.

  • Good service, but it's very hard to find in stock.

  • JoshRJoshR Member, Patron Provider

    @forest said:

    @JoshR said:

    @forest said:
    @JoshR Just signed up! Had to lie a bit on the form because it wouldn't let me past "I have read and agreed to the terms of service" without checking the mark, but the link to the ToS is 404.

    ah. I put .html.
    https://mysticdev.io/tos.php
    Your the first person to actually point it out. :lol:

    Here is our AUP as well.
    Regarding tor is 3.1.3
    https://mysticdev.io/aup.php

    I should probably put in there about port 22 as optional but recommended.

    Oh I didn't know you allow exits! That's great!

    Do you run your own local resolver on that network that I could use? If not, how cheap is a second IPv4? Literally its only use will be for Unbound to make DNS requests.

    Additional IPs are $2/IP.
    If interested please put in a ticket.

    @jonatha I might have one come up but I know there will be a couple available next month as well.

  • JoshRJoshR Member, Patron Provider

    @jonatha if you want one. Better hurry and get it! Its Available now!

    Thanked by 1jonatha
  • Snagged one, paid for a year.

    Thanked by 1JoshR
  • @JoshR said:
    @jonatha if you want one. Better hurry and get it! Its Available now!

    when will pi4 be restock?

  • JoshRJoshR Member, Patron Provider

    @nochoice said:

    @JoshR said:
    @jonatha if you want one. Better hurry and get it! Its Available now!

    when will pi4 be restock?

    Depends on if/when people will cancel their RPi 4.

  • @JoshR said: I do allow transfers. Please make an account @itzsenu and @NotFoundException please put in a ticket with the other persons email or name so I know who to transfer it to.

    ok ok, i’ll create an account.

    Thanked by 1JoshR
  • SaragoldfarbSaragoldfarb Veteran, Megathread Squad

    Been enjoying my pi. Life been a bit crazy lately so missed when it was available again or I'd gotten another one.

    Not even doing much with it but it's reliable and at this price point its quickly become part of my fav servers list I won't let go of easily.

    Thank you @JoshR for providing a 'niche' product. It's well appreciated.

  • JoshRJoshR Member, Patron Provider

    Thank you for the kind words @Saragoldfarb.
    There will be a couple come back for October.

  • SaragoldfarbSaragoldfarb Veteran, Megathread Squad

    @JoshR said:
    Thank you for the kind words @Saragoldfarb.
    There will be a couple come back for October.

    More than welcome. Hosts like you are well underappreciated imho. Anyone offering rpi servers has a true 'lowend spirit' ;)

    I hope you make some bucks out of it but it feels like its a community service you're providing. Gotta have balls and dedication to pull that off. I salute you!

    I probably haven't last time but next time I'll vote for you for top provider when the poll hits the forum. May I forget, feel free to remind me :)

  • @JoshR said:
    There will be a couple come back for October.

    Took the time to be registered there in advance for this event. Maybe this time I can snatch one (and then we can talk about plugging a huge 1T diks into it :D)

    Cheers

    Thanked by 1JoshR
  • OOS :neutral:

  • JoshRJoshR Member, Patron Provider

    One thing I've noticed on the YABS from @forest (example https://lowendtalk.com/discussion/comment/4867987/#Comment_4867987)
    There isn't a iperf test in say Dallas or even here in Houston.

    Hopefully that "Data Ideas" I can get fixed here soon that is shown in the YABS.

    Thanked by 2Xrmaddness forest
  • JoshRJoshR Member, Patron Provider

    Who's ready for some more RPi's?!
    I got 3 almost ready!

  • wii747wii747 Member

    Thanked by 1JoshR
  • JoshRJoshR Member, Patron Provider
    edited October 8

    That sure is a pretty PI you got there!

    Dropping more RPi's at 8pm Texas Time!

    Thanked by 2mrerenk wii747
  • gsea4gsea4 Member

    @JoshR said:

    That sure is a pretty PI you got there!

    Dropping more RPi's at 8pm Texas Time!

    Sir, it’s 8:02 already

  • forestforest Member
    edited October 9

    This isn't a complaint at all, just a notice to anyone who isn't used to a Pi as a dedi: There's no RTC. Make sure you have fake-hwclock installed and be careful that certificate errors won't break NTP in any way! And remember, there's no IPMI.

    I've used Pis before, but only as simple embedded sensors, never as a server. This is the first time I've used one remotely as an actual dedi. I created a TLS certificate on another server and used that for DNS-over-TLS, with the Pi connecting to it and resolving requests through it. I also used Chrony for NTS (secure, authenticated NTP).

    The Pi rebooted, and all of a sudden, DNS requests were broken. A pair of traceroutes on the DoT server and the Pi showed could reach each other, so it wasn't a routing issue. Netcat showed port 853 was responding, so the firewall was not blocking it. OpenSSL's s_client command showed it was able to connect. After a little head-scratching, I checked the TLS handshake more carefully and saw the error: "Certificate not yet valid". Turns out the Pi thought it was living in the past and that I hadn't even created the certificate yet. Without a valid certificate, it couldn't connect to my DoT server to resolve DNS requests.

    So why didn't it correct the time over the network? Well, it needed DNS in order to resolve the NTS (authenticated NTP) servers, since I had configured Chrony as my NTP/NTS client. Without DNS, it couldn't get the proper time. Without proper time, it couldn't validate the DoT certificate needed for DNS. NTS and DNS deadlocked each other. The root cause:

    root@forest-mysticdev-1-us:~# head -c-0 /etc/{systemd/resolved,chrony/chrony}.conf
    ==> /etc/systemd/resolved.conf <==
    [Resolve]
    DNS=23.137.105.248#forest-advin-dns.internal 2602:fb54:1400::1d#forest-advin-dns.internal
    Domains=~.
    DNSSEC=yes
    DNSOverTLS=yes
    
    ==> /etc/chrony/chrony.conf <==
    server any.time.nl iburst nts
    server time.cloudflare.com iburst nts
    leapseclist /usr/share/zoneinfo/leap-seconds.list
    driftfile /var/lib/chrony/chrony.drift
    maxupdateskew 100.0
    makestep 1 3
    rtcsync
    

    @JoshR If your gateway runs Linux, would it be possible for you to set up an NTP server on it, itself being an authenticated NTS client? If you also set up a recursive DNS resolver, you could remove a fair bit of memory pressure from the low-memory Pis and improve the security of any Tor exits. I'd be happy to give secure and simple configs for setting that up. :)

    Thanked by 1tenji
  • JoshRJoshR Member, Patron Provider

    @forest something also can check as the default Rapbian OS comes with sudo raspi-config and lets you adjust the timezone. Not sure though as if that would fix your situation.

    Now, the RPi 5 does have the option to get a battery attached to it for RTC. (Note: I don't have batteries attached to the RPi 5's that I offer.

Sign In or Register to comment.