• 2 Posts
  • 24 Comments
Joined 1 year ago
cake
Cake day: July 20th, 2023

help-circle








  • Some tips here:

    • get a platinum rated power supply, if you can afford it go for a titanium. The efficiency in the power supply is half of the efficiency of the rig
    • reduce the number of the modules to the minimum
    • get a platinum rated power supply ;)
    • get big passive coolers, you want to idle the fans
    • reduce the number of usb and connectors to the minimum. Their converters are not the most efficient. Try not to connect enything on them.
    • NO mechanical parts (including fans or water coolers)
    • set schedulers to conservative or power efficient. You don’t want to spike the power just because a task is 2ms longer than expected.
    • pick a power efficient CPU/gpu (I think we can discard this one based in your choices)
    • use the latest amd adaptative undervoltage technology to ensure to reduce the wattage of the cores
    • try to reduce to the bareminimum the number of background tasks /services running.

    And that’s all. Sometimes there is a component of trial and error because sometimes the curve performance / power is not entirely linear and you don’t want to hit exponential-non-linear zone.

    Good luck and if you can post you build with numbers and some lessons learnt would be great

    Good luck




  • From your text I understand you are not a really tech savvy person and yiu are really struggling with all the service and configuration involved.

    If you want a simple tip, stick to tailscale, it is a vpn and will protect all your services because you will not have access from internet. It is pretty safe and the configuration is trivial.

    The obvious drawback is that you won’t have internet access without installing the vpn, which depending the use case can be a deal breaker.

    Honestly, a proper configured nginx with certificates and strong password are reasonable secure when there is not any misconfiguration. But if you are in doubt stick to tailscale.

    Good luck :)






  • Take wiht a bit (or a lot) of salt what I am gonna say. Because undoubtedly I am. Missing something here.

    But if what you a already say is true probably you are not restricting anything. The recommended way to do so is with a firewall rule (probably in your router).

    You are extending the subnet definition beyond the 16 bits. This can create problems and I doubt that your router will block anything if something crafted is received from Internet.

    But of course, being the extremely big address space your are probably safe.

    I any case, with a firewall rule in your router allowing only the proxy to go receive connections, you should be good and more standard conform


  • This is not the Nat functionality as people associated with ipv4, and certainly it is not showing the drawback of allowing the communication only when the NATed client started the communication.

    Even if they are alike they are not the same.

    I reaffirm myself here. It is possible to have full ipv6 communication and providers do not have cgnats. It is your easiest and most uncomplicated solution with almost nothing to install to make it work.

    And in addition, I have to say that I don’t see any benefit in using such functionality at home. If someone can illustrate me a use case I would be thankful