Saturday, August 1, 2015

Beast on a Budget Section 1: Parts & Costs

So, I spent some of today posting the initial thread and a breakdown of the list prices, the shipping costs, the handling costs and the total costs for each.


Asrock Q2900M Motherboard
105.74P + 2.46S + 36.92H = 145.12
https://item.taobao.com/item.htm?id=35032832716

8GB DDR3 PC3-10600 1333MHz
39.99P + 0S + 0H = 39.99
http://www.amazon.com/gp/product/B0075U12H8

12V 6A 72W AC Adapter Power Supply
7.22P + 0S + 0H = 7.22
http://www.amazon.com/gp/product/B000VE7GQQ

12V DC 160W Pico PSU
18.98P + 0S + 0H = 18.98
http://www.amazon.com/gp/product/B00HLCT9HK

Intel PRO/1000 VT Quad Port Ethernet Card
29.99P + 0S + 0H = 29.99
http://www.ebay.com/itm/191634249417

2 (Two) Mini PCIe to PCIe Adapter with Three Antennas
10.23P + 1.70S + 0H = 11.93
http://www.dx.com/p/mini-pci-e-to-pci-e-pci-express-adapter-with-three-antennas-39267

Bplus MP2W-RPSMA : Full & Half mPCIe / minicard to PCIe Adapter with USB2.0 interface & 3pcs RP-SMA connectors for Wi-Fi & Bluetooth
29.99P + 0S + 0H = 29.99
https://www.amazon.com/gp/product/B00LBYVZZS
*This adapter works with the Atheros QCA9880 XB140 reference board based boards-- like the Compex WLE900VX, SparkLAN WPEA-352ACN, and AIRETOS AEX-QCA9880-NX --which do master mode among other state of the art 802.11ac things. Many other adapters do not.

Compex WLE900VX 802.11ac 2.4/5GHz Mini PCIe WiFi Card
55.00P + 0S + 0H = 55.00
http://www.ebay.com/itm/171865971474

Atheros AR5BXB112 802.11n 2.4/5GHz Mini PCIe WiFi Card
17.99P + 0S + 0H = 17.99
http://www.amazon.com/gp/product/B00881PHO2

MyDigitalSSD 64GB (60GB) 50mm Bullet Proof 4 BP4 50mm mSATA Solid State Drive SSD SATA III 6G - MDMS-BP4-060
20.00P + 0S + 0H
http://www.amazon.com/MyDigitalSSD-Bullet-Proof-mSATA-Solid/dp/B00B3X72TU

Syba mSATA SSD to 2.5-Inch SATA Adapter (SY-ADA40050)
10.99P + 0S + 0H
http://www.amazon.com/Syba-mSATA-2-5-Inch-Adapter-SY-ADA40050/dp/B007PPZ2I8

Grand Total 404.41

Getting ready to build the Q2900M beast router on a budget.

So, my faithful router is aging, badly. Time to let it "go to the farm" to live out it's days in peace. I've looked at what I can get out there to replace it. There is a lot of really neat networking tech out there these days, some more friendly to turbocharged 3rd-party firmware and some not.

A lot of really expensive hardware too. The most coherent and simple to set up thing to do would be to get a bunch of things that do one thing well-- as in one machine to do the thinking, a good switch, two access points. That was a pricey option and required several things.

I am willing to forgo some coherence to have it all in one unit that that the manufacturer expected me to load with third-party software. Having it all in one unit also gives me a lot of frugal upgrade options. Additionally, it is the least expensive way to meet all the criteria I have for such a device-- which has been missing in my current setup.

Having done a lot of reading, the software is the sticky part. Some of it is really great, but until you try it first hand and it works as expected then also is nice to use.

It was neat seeing what I had documented get shared so much when I wrote about my OpenSolaris/OpenIndiana ZFS file server build several years ago and I was kind of hoping to do the same with this-- maybe trying to do a better job this time with your help. Starting with that I have almost $400 of equipment to play with in the immediate future. What would you like to see me try? Are there any tests you would like to see?

I tried to not be ounce wise and pound foolish. What would it cost for me to build a router that I love? Turns out possibly $400 if everything works out as expected.

Yesterday I booted the motherboard for the first time.

I'm still waiting on the 802.11n package and a mini-PCIe to PCIe card converter (with antennae!) from dx.com. So, no wireless, but getting my USB flash drives loaded up with the installers will take some time and then there's the sitting down and doing it... They will be here in plenty of time.

Starting the documentation now.

The following sections are what I think I should compile to document this. Stay tuned while I write them. I have my ears open if you have any input.

5 Sections

  • -Parts (Where sourced from, part, shipping/handling, & total cost when I can make a line item break down).
  • -OpenWRT - Setup Notes & Bash Script (Not even sure if OpenWRT has bash, read ash through busybox-- I'll find out as I go.)
  • -pfSense - Setup Notes & Bash Script
  • -IPFire - Setup Notes & Bash Script
  • -My conclusion and thoughts, metrics and comparisons; the opinion part based on the metrics and a few days of use.

The build is in the context of the following reqs:

  • Use of Multi-Core 64-bit Processing. (Fanless Intel Quad Core J2900)
  • Use of DDR-3... or better. (8GB)
  • Use of Gigabit LAN Ports. (5, one onboard, four via Intel PRO/1000 VT)
  • Use of 802.11b/g/n/ac. (one 3x3 MIMO 802.11ac with AP Mode, one 3x3 MIMO 802.11n with AP Mode)
  • Use of USB for printing. (USB 3.0 -- and a paralell port...)
  • Use of mass storage possibly by PCI-E, SATA, MSATA, and/or SD-Card(micro || full-size). (two SATA2 ports)
  • Use of USB for mass storage. (two at the back plate, three via motherboard headers)
  • Low voltage and low power consumption. (72 W)

To the following ends:

I stream a lot of video via my Roku, the kids watch a lot of Netflix in the morning, I have a half dozen hardwired machines in my office that make fair use of gigabit speed file transfers, the router & two other machines use DDNS, SSH via NAT happens, a couple IP cameras store images & send MJPEG streams, an old HP LaserJet USB->Paralell network prints, and more and more wireless devices as time creeps on over g & n wireless adapters.


I am ~70% happy with my current setup. Preferably, I'd like to run a little web-server & file server right from my firewall/router as well as have more SSIDs. This is the missing 30%. I'm already serving a site from a separate machine-- but seriously, the traffic is so low that I feel guilty for burning the watts. And I also wouldn't even consider giving up my dedicated file server, but somewhere to quickly stash files I don't have too much care for would be nice.

I have my Roku on the same wireless as my own personal botnet I play with, I'd like separate APs so that my internal traffic doesn't affect my kid watching Netflix in the morning when I do need the TV to be a babysitter (I know, I know, just turn off the machines talking to each other... but, I don't).

I'll keep my eye on the reddit posts, hope to hear some words of wisdom or things I should do some heavy reading about that will make my task easier. Thanks.

Wednesday, July 29, 2015

My Favorite 3rd Level Subdomains


alpha
app
admin
api
beta
blog
dev
feed
files
forum
ftp
help
image
imap
img
info
lists
live
mail
media
mobile
mysql
news
photos
pic
pop
search
secure
smtp
status
store
support
videos
vpn
webmail
wiki
www

Friday, April 24, 2015

Not committing merge; use 'git commit' to complete the merge.

So, say you are leaving your current development branch in git to a standard base branch of your repository-- you checkout the branch in your local environment then you pull from the remote and lo and behold there is a merge conflict.

Not committing merge; use 'git commit' to complete the merge.

What I usually want to do is to:
git checkout remote/branch local/path/to/file

Here's to no more 'github shenanigans commit messages...'

Wednesday, April 22, 2015

How to make a SHA-2 2048 bit CSR for a SSL Certificate with OpenSSL

Long time, no write...

SHA-2 2048 OpenSSL command to generate a Certificate Signing Request(CSR) and Private Key (PK) -- which you need to get a SSL Certificate.

{REPLACE THESE VALUES}

openssl req -new -newkey rsa:2048 -sha256 -nodes -out {DOMAIN.TLD}.rsa.csr -keyout {DOMAIN.TLD}.rsa.pkey -subj "/C={US}/ST={STATE||PROVENCE}/L={CITY}/O={COMPANY-NAME}/CN={DOMAIN.TLD}


The code you run will likely not have any curly braces, {}. For instance, for my fictional company Example Inc. would make a certificate signing request as such:

openssl req -new -newkey rsa:2048 -sha256 -nodes -out example.com.rsa.csr -keyout example.com.rsa.pkey -subj "/C=US/ST=OHIO/L=EASTLAKE/O=EXAMPLE/OU=IT/CN=EXAMPLE.COM"

The Country is US, the STate is OHIO, and the City (L) is Eastlake.
The Organization is Example, the Organizational Unit is IT, and the Common Name is EXAMPLE.COM. If you were wondering what the pieces parts in the subject argument meant.

Followers