All right, and welcome to a Q&A live stream talking about Home Lab and everything else. And I'm joined by Steve. How you doing, Steve? I'm all right. How about you? I think it's early and Steve's not as enthusiastic in the morning. No. But if anyone's wondering where Tom goes when he gets stuck on Unify, it's usually not the forums. I just asked Steve because he's probably done more Unify than me. Yeah, Steve's probably my go-to person for a lot of the Unify stuff. He's an engineer at large systems. It's all those things. I do a lot of the reviews, but Steve does more implementations than I do. We work with a lot of customers doing weird stuff. Oh, and yeah, Steve consults with all the customers doing weird stuff. I want the weird. So we get a lot of people who ask about Unify Layer 3. Just don't. Don't? Don't. That's the answer we all give is don't. Their implementation works, but it's weird. It kind of eliminates the purpose of VLANs because it will route between them all. And at that point, why didn't you just put it on the same network? Pretty much that. The other problem is people who always want to route their storage. I'm like, stop doing that. Yeah. And by the way, this isn't just a Unify problem. This is a bigger topic. Just because a switch supports, let's say, 10 gigs does not mean it can route 10 gigs Layer 3. Just because it supports it, that's a myth. That's a problem. People kind of, I don't know. They conflate that a lot. There's all those other variables, too. Look, when we had the 25 gig Synology, and yeah, 14 gig is the best it could do. There's some chip limitation. Yep. Oh yeah, that's another one, too, is Iperf versus Real World Limits because people always assume, hey, I got 10 gig, but I'm not getting full 10 gig. I'm like, you have spinning rust. How fast do you think your NAS should really transfer? Yes, you physically have a 10 gig connection, but you don't have the ability to sustain 10 gigs. I use the concept we did of putting a Steam library on a NAS because most people would run all their games off of a single storage drive and a single spinning drive is only roughly a gig a bit no matter what you do. Yep, and automatically tying drives together doesn't give you immediate more speed. No. The first topic I want to actually cover though, if we get some of the unified stuff, is going to be the PF Sense Plus 231 RC is available. I might load this at the office, depending on how daring I'm feeling, and I want to deal with any issues that may come up, but I'll admit, I've been running it at home. Actually, when I first get Beta, and now they're in the release candidate one, which means it's going to be out here soon, I've been running it at home and it's, everything works. Like I haven't had any problems with it, VPN works so far. I think there's one bug that they're working on for, I think it's the Python version of PF BlockerNG, like if you're using that, and there's some bug, you go in the forums, it's in there, and there's another bug that I don't know that it's completely reproducible on everyone's setup, but some people had said, if you're running Seracata in WireGuard, there seems to be some bugs where Seracata not wanting to start if the WireGuard tunnel is enabled. I think, I think that's right. I haven't run into this because I'm not running, I'm actually running Snort on this, so I've debated because of that, that one issue makes me wonder if we should load it at the office or not because we are using Seracata at the office. Maybe it's for it to come out of RC. Yeah. I want to test it, but also I want to wait for it to be out of RC. So I tested it at home. I figured at home it's less disruptive, so. Because it's been, did it just come, did they just release an RC? Because I saw something else about it a little while ago too. Yeah. I did a video on it because I've been running it now for a few weeks. They kind of had like an RC. I thought it was RC before because it said RC. That's why not. Yeah. And now they are calling it RC. I think it's because it said RC, but they didn't have a blog post about it, and then they had another update to it, and now they're calling it RC. So I'm a little confused on that part because I loaded it because it said RC. And I'm like, oh, I'll try a release candidate, but nonetheless. Any tips on cost-effect of rack cooling for a homelab network? I was really, me and Steve were laughing because we went to a client, and they did this because they had a loop in their network, which also makes me laugh as the, the why is they had a loop and it was causing network disruptions and also causing switches to get hot. So they just took a box fan and mounted it on the very top of the rack blowing down to cool things off, which didn't solve the other problem of having a loop in the network, but at least the switches were cooler. I don't, besides that, I don't know. What do you think, Steve, for a cost-effective tip for doing it? It depends on the size of the rack. You could get some quiet 120 millimeter fans and wire them in. I mean, really it's, there's too many questions. Is the rack enclosed? Is it open? Is it in a closet? We had one guy, his was in a closet. So his answer was to cut two holes in the wall, one on each side of the drywall above the door to the closet, and then just put a couple of little vents on him to create something so airflow can move in and out the closet a little bit. Yeah. Jeff from Craft Computing, he's got obviously a more expensive solution where he actually has a special cooling unit in a rack to help move air. He's got a whole video he did on that, but I mean, you said cost-effective. So, I mean, Jeff's is not outlandishly expensive, but they do make special rack cooling stuff. So cost-effective is a real relative term. This question is an easy answer. I have a video on how to do this already. It's setting up your own WireGuard server, and I cover how to set up with PF Sense. So that's tying a bunch to there. You know, I think I run it in digital ocean, but I got to step-by-step walk through and I fixed the typos. Someone found a typo in there because they were copying paste commands and said, hey, you called it like YouTube demo in one, but then you called it WG YouTube demo. So I think all the typos are fixed in that video, which I mean, all it is is what I called the tunnel I was inconsistent with throughout the thing. It's consistent in a video. It's just the write-up that accompanies the video. When you rewind the live stream and watch it to speed to catch up, and you catch up and start talking slower. It's kind of like driving. Yeah. I know I do that. I watch live streams and you catch up with people and it's like they're talking fast and then they had an aneurysm. So about that one, the worst part is to my understanding with the app, you can't even do the port forward if your device is set to static. It wants you to do the port forward to a device, but to know what the device is, it has to have given it DHCP. Oh, that's dumb. So if you said to static, you can't even. Thanks, Comcast for making our internet worse. Yeah. More difficult. I don't know what the trigger is to get the app. Because we still have lots of clients who don't have that. We only have one who does that I know of. Yeah, that's so ISP is Comcast. They've hidden the port forwarding behind an app was the question, but yeah, that's just stupid. Who is the guest? This is Steve, Network Engineer at Lawrence Systems.  Yeah. Or book some consulting time so you can pay him to have him tell you that answer of why it's a bad idea. We like getting paid for it. We'll tell you for free. We do that in all of our videos. I've said it in many of the videos. Don't use it because it's broken. Travis says, I don't think it's a problem on the business internet side. Yeah, because we're going to see you on business internet people. Yeah. Well, I don't even know. Because I know a lot of the same thing around here is the Comcast. We have the luxury of having more than just Comcast worthy anomaly. But even a lot of the home users I know with Comcast don't have to use the app. And I don't know what package you get through them that triggers. Hey, you're getting this app. Yeah.  And you used to be able to do it about a year ago through their web page. And they took that away. And the web page tells you go use the app. Yeah, that doesn't make any sense. You know, I didn't look.  Does this have the new version of what's that software, the 3.0 version yet? I have. I don't know. I haven't looked yet. Yeah. I was thinking about it. We should probably log into ours and take a look. But this is like a. Did they add anything useful? Well, you're going to eventually because right now if you have. And I actually made a video kind of dumping on ubiquity about this because they won't give timelines because shocker, they don't give timelines. Oops. So if you get the dream machine SE, it currently has wire guard available. You can, it's normal wire guard. It's not like unifies how they envision VPN, the weird way they do VPN. Like, oh, we're going to tie our VPN to our cloud that way you are UID. Yeah. Even though we clearly have open VPN. Oh, great. Cody's going to save me a click. 3.0 is not out yet. So it's Cody from ectel.com. But nonetheless, the problem is, I mean, great that they finally got around to doing VPN normal. It's been a long, quite a few years of we do it our own way that doesn't make people happy. But now they're finally. It's it creates this whole problem of trying to figure out and I don't know if I should do a video or not because I don't know when this is going to be fixed. But if you think it does wire guard because and this is where things are getting confusing. If you look and say, Hey, the Unify OS version seven point whatever has wire guard support that means mean all their devices that use that have wire guard support. And this is why it's so hard to explain to people the unified unified doesn't have wire guard for like, we might update these products, but they don't support it. If you buy this particular product, it supports it. But then the confusion comes into and I've seen this in some Reddit posts of, but, but if I read the Unify OS release notes, it says it supports it and it says the Unify OS works on the unified dream machine. And I know if you read the details, they do have it in there, but they don't have like a chart when you're buying it that you have to read each release note because they really want to oversell them. We see so many people buying UDMs because they want the switches and APs. They're like, well, I need something to control it all. Okay. You can just spin the software off or buy a cloud key. Well, they said I need a UDM. You really don't return that thing. No, no, you don't. They're trying to really push those things. They are. We tell people run a cloud key. If you have a small network, run a cloud key. If you don't want to run a cloud key, I understand it. You just want to run it for free. Spin up a Linux server. Quit doing it in Windows. I do it in Windows. It's not that big. Yeah. I'm that anomaly. If you don't need the constant stats, you can spin it up and then spin it back down. I log into mine when I need to make changes. Yeah. That's another option. If you're not collecting normal stats, you can do it. I just see people having more problems with Windows, but I think it's also because the people who don't know how to run Linux also probably barely know how to run Windows and I'm not throwing shade at them. I'm just saying because the problems they have are usually like, I can't get the firewall ports open and things like that. Turn it off. Turn the firewall off. Yeah. That's a discussion. I mean, look at all the server work we do where the firewall is just off for that reason. Yeah. This is why we just don't really recommend the whole Unify, what do you call it? I'm just not a big Dream Machine fan. They always disappoint people. I still call it the USG. One guy get mad. I'm like, well, you know, you're using the USG. It's the UDM Pro and I'm like, it's the same premise. They didn't, when they released the UDM Pro, they added a couple extra little things. I mean, that was way later, like the Multi-WAN IP and a couple of the other features, but it's really not that far off from the old USG. It is still all the same premise. Yeah. And it's figuring out which works, which doesn't work. I'm just, they're just not great when you start talking about firewalls. I'm going to do an updated firewall video, but I'm going to like have first a video about the status of Unify as of the date I do the video. There's some betas you can go play with, but how much trust does that leave in there? I don't really know. But yeah, it's just kind of one of those things. Unify Disappoint Machine is still my favorite way to describe it. But I want to, someone said something in here and I don't get it. Did you even watch the video, Steve, with Linus Tech Tips and the screwdriver thing? No. So Linus Tech Tips came out with an expensive screwdriver. And let me just throw this out here, folks. Is that what he came out with? Cause we have one of those. Oh, we have these. I like these. And I thought about doing a review because I looked at Linus the screwdriver and said, I mean, I forget what he charges for it. Someone throwing so Linus is priced on a screwdriver in there. And we have the bigger version of that too. We have the, we ordered it. It's in our tool roll video. And it is the bigger version of that. And it's like the 14 in one. And that's what I use. Yeah. I mean, wow. Yeah. What does it do for 70 bucks? Um, that's, I mean, I just, it comes in different colors. But what is it? How many? Oh, I forget how many tips are in it. Hold on somewhere. There we go. Look at these. Look, I don't know other than other. So I'm going to throw this out there.  Fits up to 12, 20 millimeter bits. Does it not come with them? It has them. It does come with a bit. Okay. Um, I had a screwdriver like that when I first moved to this house back in 2005. And I mean, it costs like 20 bucks. Yeah. And, uh, I hated it because have you lose the tips over time. I, and I tell you what this. I just don't throw it out here for people looking for an alternative. And I thought about me. I don't want to do videos like this, but we do use these. And I have one in my hand right here. Yeah. These things are great. I don't mind doing the video on it. Like I do. We should, we should do a video of why this is better because look, I have all the different tips right here and each one of these. It's kind of cool. Cause this comes apart. So you can flip each side around. And then each tip flips. Then each tip and the hexagon ports that they are different sizes. So they can be used to turn hex nuts. This hex nut size is different than this hex nut size.  Well, yes, we do. We got those hex nuts too. We got these right here. And, uh, uh, it does very, uh, late ratchet back. No, I don't care about ratcheting. You see this, this I can hold still and spin this. There we go. This is, this is Tom. I don't really need the ratcheting that much.  This is $15 by the way. This is, there was a, I mean, if I wanted a ratcheting screwdriver, there was a video of a guy who does restorations restored like these old 19, like 20s or 30s German one that I'm like, okay, now the ratcheting accident action on that makes sense. Cause it actually like over the top, it had a little handle to flip down. So you get the extra torque on it even. I'm like, that's brilliant. Why don't we have that again? You know what's the, let's plan on doing that is we're going to do this. We got to do a screwdriver review and tell you why you should spend cause I know Jeff Gehrling, cause I was just talking to him yesterday and Jeff Gehrling did it. I didn't watch this video yet, but I know is he's got an upcoming video. Um, or I think he probably just released a video on it. So I will, um, watch his video and then we'll do our own video on why you should be buying $15 screwdriver and why that. Yeah. I want to take a second to catch up on some questions. Yeah. What do we got here? Uh, what is this? Oh, which one? I was going to say we'll start back where, uh, just after Cody at Mac telecom, what is the Steve's opinion on Omata? Oh yeah. There we go. Let's go. You're right. Yeah. Yeah. Yeah. Um, Omata, it literally was a copy unifies homework and change it a bit. I like that each device can be configured individually without a controller. So if you really only need like one device, um, it comes in handy for that. And we actually have a client we did that at. He wanted one outdoor AP. So it made sense to just, we happened to have one here, put this one outdoor AP program it by itself and you're done. Um, outside of that, I'm not too impressed with it. The cost point isn't low enough that it's like, let me jump ship on unify for this product that I don't think is getting updates at nearly the same rate, especially like, you know, when they had, uh, they had to solve for log for Jay and stuff like that. It took them what, how many months? Oh yeah. Yeah. And the log for Jay was slowed update. I don't trust TP link and security. They TP links a good copycat company like, Hey, we're going to copy it. Make it, make the same thing cheaper. Yeah. Innovate. Nope. Our innovation is less money. You're going to be better at security. No, no. Why would we do that? I mean, we just want to sell to you for less money. And that's, and there's also not clear product life cycle on us. I really don't know how long they're going to last. Um, I don't know. Um, I know that guy. We've worked with him. Oh, so they want you to reflash that firewall. I forget what one you had. It is a net gate has documentation on it online. Um, and it does actually vary a bit. The 41 and 60, 100 are wildly different because of the architecture from like the 3100 and the 2100. Yeah. But not, they're easy enough to reflash. You just open a tech ticket with them and they'll send, if you have a neck gate device, she's only a tech ticket and they'll send you the firmware. They just need your serial number for it. And they'll send you. Like the, the model and serial, they send you the firmware and then you use the corresponding USB cable. It's going to be mini or micro depending on the unit. Yep. Um, and then you can use potty just to SSH into it and it renders it as if you had a, as a terminal as if you had a screen hooked up to it. Yep. Um, explain why the Unify NVR is powerful enough to run Unify networks alongside when the Cloud Key G2 can't run protect and network. Because the NVR, I don't know, wait, I don't understand the question. NVR doesn't run the Unify network. It just runs protect. Right. But it runs protect better because where we see a lot of people burn, we've actually, I've had to do a few of these. The flash drive repair? No. No, no, no. The, we had to do a couple of those. And actually that's really easy. It turns out you just open it up, replace the flash drive and it just goes. Yeah. There's a flash drive in them. Yeah. Yeah. So the, so a time song about there, the Unify NVR OS runs on a flash drive that it, and it's like the cheapest flash drive and it's just hot glued in there. Um, you heat it up a little bit, pull it out, replace it with something better and turn the unit back on and it'll just go pull the, uh, Unify OS and fix it up. Yeah. The, um, we got clients who they are doing a bunch of cloud key replacements because the previous IT guy put in, and they were trying to run like these 10, 15 camera installs on a cloud key and was just burning them up. Uh, the drives get hot. They start generating so much heat that they start burning up either the cloud key or the drive because they weren't meant to handle that kind of load. In fact, we struggled with just running the single 4k camera on it. So where Unify NVR does it better than like the cloud key is that, um, it has multiple drives. So it's kind of spreading those rights out. Their bigger drives is better. The radar, it makes a big difference in that because single right performance. I think even I did my initial review of the cloud key with the protect on there. I said, put an SSD in this thing because it chugs because they use laptop hard drives, which are traditionally like eight mag cash 5400 RPM.  Yeah. So it really was riding a struggle bus trying to keep up with the rights on that. Um, I've got a whole video on this topic here, the whole UDM SC mixed with the PF sense. I did a video on it. It comes on to, do you need it? If you're happy with the UDM SC and you just do the routing, the, if you want the extra features, the easiest way I have found of doing this is instead of making it like transparent because that's always hard. Especially considering when the UDM does updates now because we have a client who did it with old USGs. USGs now don't like giving themselves addresses. They will fail. Um, the easier answer is to take your WAN port and just make a separate network just for it in the PF sense. So take one of the ports on your PF sense, bring it into the UDM pro WAN, that's its own network. And then if you wanted to, depending on if you want to use the UDM for DHCP or the PF sense, you either let the PF sense handle DHCP, turn it off on the UDM or just change the gateway. So that way UDM still handles DHCP and the gateway is the PF sense. Yep. Oh, first I'll throw this right here. Best tool to use. See how many cameras is the Unify calculator. Yes, Unify is a calculator website to tell you how many cameras to use. Do use that. Unify sensor with a Unify, with the dream router, not the, you don't have the old original. Do they still sell the OG one? I think they do, but I don't know, did it do, I don't think it did Y5-6 and don't you need Y5-6 for those sensors? Yeah, I think so. Or are they Bluetooth and the newer APs have Bluetooth in them? I can't remember. Yeah, that I don't know. We don't do many of those. Yeah. We only ever got the one dream router they sent us. Yes, yes it is. It's a hundred pound bag that I've had for a while. He's got that.  He's building an H-8 config for a client. Yeah. So, and when he's, and it doesn't go right, he hits the punch-in bag. Mostly it's because we're dealing with the clients supposed to have IP addresses and how many days are we waiting for these new IP addresses or something? Oh, we're like over a month into the project. He didn't want to start it until the new year because his exact words were, I don't want to start it to the year. I'm going on vacation. Yep. And I said, okay. And then we contact the ISP to get the IP addresses that he's supposed to already have because they just didn't document the extra IPs. No, no, no. He didn't have them. They only had, he has, so it's HA with failover. One ISP, he has five IPs. The other one, he only had one. I contacted him to get to five and they were supposed to, you know, the two business days and we're going to get back to you. And I haven't heard anything. Oh, let's see. Hold on. Building an HA system, a punching bag. Correlation is that causation? What do you think about unified access and potential integration with unified door potential integration? I don't think, does the doorbell integrate with the door access system at all? Not that I know of and I'm not sure that it, does it have the RFID sensor in it? The doorbell doesn't know. The facial recognition, the facial recognition. Would it be cool if it had facial recognition? That would, that would actually be pretty slick and we can let people in based on facial recognition. That, exactly.  We're making work for it. Making work for it. Is there a smooth way to rearrange PF sense interfaces? Just those CD reasons, but my interfaces aren't quite in the order I'd like them? Yeah. It's just a dropdown. Yeah. Let me pull that up on mine. That was actually about two, but sure. You got it. Yeah. You just, they're just dropdowns to arrange them. However it is, you want them done, or you talk about being able to drag them because of the way it orders them. I guess that it depends on the needs there. I never think much about this, but you can't read. There is actually a setting somewhere, but I don't know what affects that to arrange interfaces alphabetically. Oh, that's true. Let me see if I can remember where that setting is. Really? Okay. Yeah. We had to do it for another client. Have you tried AR features that Unify offers? I don't have an iPhone and I don't know if it supports Android yet. Cody might be able to answer that if he's still in the chat here. The Android support was coming, I remember, but it was so long ahead of her. It was supposedly coming for a while, and I had a client in Canada I worked with who has an iPhone and he'll ask me questions about the Wi-Fi man app, the mapping and this and that, and I'm like, I don't have those buttons. Yeah. Arrange my importance and it does not have a setting for that. Because it doesn't know what you think is important. If I remember correctly, the G4 Pro has a fingerprint sensor. Okay. So we have their site pulled up. I guess we can go look at this. So they built it in and just don't have it yet. Yeah. Because there's no, like none of this has it. So let's look is where's the doorbell? I guess it's going to be under their access. Yeah. It's not a door access. I know it might be under protect. It's under protect protect product. Oh, by the way, Steve, you know that one we have? Yeah. Reset. That's a known issue with those. The one I use? Yep. Whoops. Whoops. Because that means the audio is permanently disabled. Yep. Yep. It's a known issue with those. And I don't, I've been dug into it to see if there's a fix, but that's it's sitting at the shops. I wanted to tie it back to ours. We hit the reset, doesn't reset, dug into it.  I don't know. I'm unclear on that one, but we've already had it tied to is in that cabinet. And I actually found the box that's for it here. I didn't know I had them. Okay. I see camera, but I don't see, you might have to go to like the full. But I don't see anything. Someone said there's a door. Yeah. But they said it was announced during the beta. So it may not be on the main page. I don't know if they would check the data sheet. Yeah. If there's any info on it, I don't see any data sheet. I don't see where you would put your finger. I guess you could make that sensor there one. They put them under the glass on phones. Why can't they put it right under the button? That is true. Where's data sheet? Up, up, up, up, up, up. Up. No more. No more. No more. Data sheet. Summary data sheet installation guide right below the. Oh, derp. Okay. Built in IR, IR cut filter. Arm cortex. What's those yeses? Microphone speaker. Software compatibility. I don't see anything here about it. Yeah. I don't know if maybe they cut it due to supply chain. Yeah. Because the original Wi-Fi sixes were RGB enabled. Oh yeah. That's right. And I have one of them in a script that makes it change colors. Well, I know mine, don't you? Yes. Yeah. Because mine's in a spot in my basement where you can't see it. So it seems like I want yours because it changes colors. I'm like, well, I don't see mine. So I don't care. Just bring me another one. It works with Android now, but it doesn't have LiDAR. Okay. So we can check that now. Suggestions for a cloud backup or personal family use single computer back plays or something else? If you have the money and you're doing a few computers, the Synology with a C2 cloud backup. Yeah. The best, but individual computer. I don't keep up much with consumer software. If you're looking for just files. So it depends if you want system image or files. If you want system image, I still or if you want files, I still lean towards iDrive because it's the best cost and it works. And because you're buying storage, not like per computer, I think they actually change it. It might actually be like per computer now that they start hitting you for a few licenses, but they give you like five computers or something. Yeah. Grab a few. If you want full system image, look at getting a Synology, setting up active backup on that. And then if you want it in the cloud, you just tie it to Synology C2, which is I think a dollar more a terabyte than like back plays. Yeah. So it has to, I see you have interface this so using a management interface for your network devices. No, I did a video on it and I was showing how easy it is to switch things to a management interface. But it's not the most useful thing. Just leave, just make your life easy and leave your main native, the management and then put everything else in. Yeah. That's a better way to do it. And there's all kinds of dumb arguments people seem to have for the biggest reason is just it's convenient when you adopt new devices they're going to default to native VLAN. And as long as you're putting everything else in its own VLAN you're good. And then there's going to be someone in the comments here is going to go, you know, hold on, let me get my caps lock ready. But Tom, if you do that then all the ports are to native VLAN someone could just plug in and completely pwn my network which isn't true at all in terms of if I put you on my management VLAN you don't get to own it. And by the way because native network if you have a port set to all also will include the traffic for management VLAN so where's your God now of networking like just I don't I went through the attack scenarios I have a whole video on about unified management VLANs but I also went through the attack scenarios and how like if you watch David Bumble's video on how to do VLAN hopping on trusted networks on Cisco and the prerequisites for that those are issues with the way Cisco does it and by the way not I mean the VLANs are supported and you can cross networks between Cisco and unified perfectly fine but VLAN hopping and being able to do the things that David Bumble demo there are specific to Cisco and not to all networking gear and also not how unified handles networking so it's a question that comes up a lot that's why I made a video on that topic just like how do you switch it so here's how you do it the first part of the video you didn't really build a highly secure network by doing it so to speak because the management by the way the management interfaces on these are locked down by default because they tie to the controller the controller is your threat surface with Unify lock the controller down quit publicly exposing your controllers people there's there's where like and this is how often do we see people who I got everything on management those in some cloud server why why do you have already P open it's always the silly stuff yeah and the biggest thing the reason I kind of push people away from it to the same thing put it on your native network what if you have to reset it what if for some reason that switch stops talking to the controller how do you move it it's got a management VLAN or if you if your firewall cool you're kind of stuck you're either resetting and you're generating a lot more work to um if you ever want to make changes and run into an issue yeah um that's just it's it's silliness oh something that just popped in my head and I want to share it with the class here real quick so some of you may have read and I got some chuckles with some of my tech friends on this because they were not by reading court documents sometimes especially so the if people remember the Mr Nicholas Sharp if that name doesn't ring a bell he was the inside threat actor who thought it'd be a good idea to extort his employer an employer you heard of ubiquity so he pretended to be someone who infiltrated their network so then he set up a VPN and then I said $2 million and I'll tell you how I got into the network I know and then he leaked to the news that you know if I had bad security blah blah blah well anyway he's like guilty and which by the way people gave me crap for reading the indictment saying Tom is guilty and you'll prove an innocent you have to make sure you use the ledge that's Tom's opinion maybe that makes Tom unqualified because his voice is opinion that's all that Tom has done is to get all that from the jury yeah but it's funny because the part where you learn things is now his trial was actually set for later this month and because he was fighting us he had pled not guilty he decided the trial wasn't worth it and the other thing that Tom laughed is let me find it real quick I thought it yeah right there Atlassian his new employment Atlassian so he wasn't allowed to use the computer so he had to ask the court permission to get a job in the tech industry and he ended up getting a job in Atlassian and it's like this is so stupid because he said he doesn't need to be supervised because he will be supervised by Atlassian do the work I mean granted maybe they can let him do some specific work but really they let him on the network at all but unless Nick Sharp pled guilty I don't know if I needed to do a video I mean I did a video about the whole incident because I got things wrong well so speak I was with many people who were involved in the incident and I had to do the work so he got a job and I had to put it inside the threat that's a different thing because it sounded like they did security poorly you find out no this guy worked for U-Biquity so he was a like I don't know if you want to hire someone who's like, Hey, didn't you just defraud your last employer for two million dollars? And aren't you still on trial for that coming up? Nonetheless Someone opened a ticket in Atlassian. Yeah, someone opened the GRO tickets and go ahead and check that guy out And someone just closed the ticket. Oh Here's run a server VM on an SSD or HDD. I mean, how fast are you doing? Yeah That's it. It's not like a me question. It's a you question It's a philosophical question. It's a philosophical question We have a lot of ours on spinning rust because they're big for example gray log is big If you have the budget gray log is faster on SSDs Do you have the budget to put your logging server on a full flash array? That's the question I mean, if you're if budget's not a concern always go SSD. So Ah Fun times now, let's talk about Wi-Fi because this is the other thing we were talking about is The whole purpose of this the whole purpose of this well People like asking questions. I like answer questions. These ones right here though Are the they say they're the best sellers, but I mean, are they the best one Steve? What one? The unify access you six like do you want to do a share screen of your own and That way you can just jump to which ones, you know, yeah. Yeah, I mean Pull it back up Then share screen Yes, don't show me. I know how sharing screens works. Don't Thank you All right, so this is the obviously the unified store page. Yeah, you can see it's white and Blows my face out with the light So Bestseller I actually believe it is a bestseller, but I wouldn't buy it Yeah, the lie the u6 light Almost every time we have an issue Weird issues, you know, like my garage door won't connect. Yeah, I such and such won't work this, you know Drops from time to time. It's always the u6 light and the nano the nano HD And I don't know if they still have the AC lights. Yeah, the AC light Those are goofy. They are I think it's even if I had to chalk it up It's because they're using probably different chips in them that just have these weird issues that just you're gonna encounter Oh, yeah, this device doesn't work or it doesn't Brett our sales guy. He had a u6 light garage door didn't work. Just wouldn't connect to it He replaced it with an hour garage door works now. Yep And we here's a weird problem We had and I went through the commands and everything like I have full logging under unify at her office And this happened at her office. We had a nano We had a Wi-Fi camera not a unified one just a normal Wi-Fi camera the Wi-Fi camera every Roughly 24 to 48 hours would somewhere in that time period disconnect and would not re-authenticate unless you rebooted the camera That was seems to be the only way to get it to work and you're you're right away go It's the camera Only thing we did was turn off the get rid of the nano and it worked all the time and I said, okay This is weird go back to the nano same problem again Create a dedicated SIS ID for testing and what you do is you get a WPA or about failed to authenticate But we don't know why yeah Because it authenticates on our other Unifies as long as we didn't have a nano that it was attaching to and if you told the nano to block it So it would go to another one it would work even with the nano on the network as long as it wasn't connecting to the nano So we definitely had some weird issues with those. I don't know. This is kind of a I don't know why they're quirky because it doesn't make a lot of sense because you think the same manufacturer And they wouldn't have a quirky problem with it um actually no So I actually had though the strangest problem when I had it's actually the switch behind me there that little trend net It's a little 16 port non PoE and I was using for years an ACLR a job came up that They were out of stock for the aclr. So I'm like it take mine. I'll borrow something else and order another one and When I got the new aclr. I ended up returning it because after like 48 to 72 hours roughly it would go offline and it would lock the port up on that switch Now I had an aclr before that worked for years. No problem. I thought okay. I got a bad one. I returned it I bought another one exact same problem Hmm, and I think it's they made some change in Whoever manufactured the ethernet port or the chipset for it that it just caused this weird issue Yeah, now reliability from a doesn't die standpoint I mean we have that one client I know they haven't replaced at least a few of them because whenever we went there in Detroit and the lights were burned out in that One apartment building There those are from 2013 a customer doesn't want to spend on money. So they're still there, but they still work Yeah, so reliability is actually solid other than I guess you could say it sucks that the LED lights burned out But the Wi-Fi works fine. We only replaced and went to that nano because our old APLR died Yeah, and we had it. I mean we had it before we moved to that office It was on the wall at the old office. Yeah, it was past end-of-life support Like we had one of our APLRs we had for so many years like it's past its end-of-supported date It was like an eight or nine year old AP reliability is good on them But quirkiness it seems like the lights and the nanos are just kind of goofy. Yeah They just have weird little issues now if I had to pick one that I'm gonna use within But really anything on I Would go You obviously want anything Wi-Fi 6 no point and screwing around with AC anymore It's not end-of-life, but it's kind of why would you want the older product when the new one's not much more? Yep I would go with the u6 L ours or the u6 pros. I Don't think there's much of a difference between them other than the LR I y'all has a ridiculous range even by comparison of some of the old ones. Yes. Um, I am blow I gotta do maybe an updated video and I've been using it for so long It's wild how we should hide and just see how far we can I have it in my house And I have a big yard I can go in my backyard and sit all the way out of my gazebo by my fire pit and still have internet Mm-hmm. I actually did a live stream out my backyard like that and it's crazy because I mean I am you know good 30 40 feet or however, I don't know we only measure things in freedom units here I'm good 30 40 feet away from my house and I still have Wi-Fi 10 meters. Yeah So I'm impressed with how good the LR works I have one in my house that covers the major Basements now granted it's up in the rafters. I have it in the rafters of my basement and it covers all over my house So yeah, I need to do a video on that topic.  Yeah, the only reason I have the inwall is because one it Puts a few extra ports in there for my wife and her work stuff So she's got a couple things to plug into the other reason is the Furthest forward my wife's office is adjacent to the garage and the only thing that's weird And this is a Tesla problem more than a unified problem my Tesla had trouble connecting in the garage sometimes Or in my driveway, I don't know why because my phone works fine in the driveway I can my Wi-Fi and a phone no problem Tesla's like me It's too far away, but so I popped that in at office and my Tesla because whenever do updates It would give me a weak Wi-Fi signal, which is stupid Yeah, now the And even Cody's like yeah go with the 6 LR 6 pro Those are the go-tos if you can't get them even though I think the stock is kind of stabilized Um, if you can't get them then go with the ACL or AC pro now the u6 enterprise that That's a niche item you use that when you have more clients because it has a 2.5 gig ethernet interface so you want to pair it with switches or devices that have 2.5 gig Ethernet adapters for example, we got a I have a client in Canada. I work with who uses the XG access points because they're because these have 10 gig up links and He has some 10 gig switches just for them. They make an XG switch with like five ports and He has an event center where like they host weddings and they might have you know 300 people in there at some point your limit is that one gig up link? We can say all day Wi-Fi 6 will do up to you know two gigs over Wi-Fi Yeah, but if you only have a one gig up link, it doesn't matter Yeah, that's you got to have enough bandwidth for it. That's it That's that splitting hairs of support versus real support. Mm-hmm And you know what's the point of you can't and that's always I had explained that to a lot to people who when They're doing that work design you don't have a Design problem you have a math problem. Yeah, you want to provide a hundred users hundred mag That's 10 gig you need to now have everything designed around 10 gig Yep, that's the big challenge and put someone else and I'm trying to find a good picture of it I know I took a picture of it in my rafters. I'm just looking for that. I thought it was face up It is and it's a me a may or should go stamp a picture of it and I can throw it in your sideways hanging from a little I can actually It's not as big a deal as people think about how you mount it It's real it does matter a bit, but it is not like a deal breaker on how you mount it now I will say um, I would have to check I don't think I've tested The I don't think I've tested it in my garage, but I have it Tom has an attached garage I have a detached garage and the back of my house So my garage would actually be back that way in the last room That is on the house. It's also on a slab. Oh Tom found his picture Yeah, I found the no, that was the old Omana. Yeah, I should I just so mono on but So even though it's a mana I took a picture. This is just happening where it is It's a standard stick construction house like it's not it is brick. So it is going through brick and drywall But it's nothing gypsum board if you're I think do they call it drywall outside the u.s Isn't it called something else drywall, but nonetheless, this is the sheet rock Mata is there in this photo, but the unify and it's facing up This is like above kind of above my head and it covers my whole house Really really well with the unify LR. I guess I know that's the omata one That's why I do my testing the amount of one did not have the reach And I think I covered that in a video. It didn't have the reach of the LR I and I have I'm gonna test the Cisco I gotta put the Cisco one there because I like to put them exactly in the same position And test each Wi-Fi to see if I get the same range out of it, but yeah the um Nonetheless it it that's how I got it. That's where I got it located So that's for the people I'm wondering where it's at. Did you scream break? No, I minimized it just because again, I I don't do a lot of these. I got to adjust the the camera thing I saw plasterboard. I did that is I like it, but it's a weird name I guess because you do add a little bit of plaster but not mine but but In plaster houses is different here because our old houses were all done with plaster But yeah, flatboard and plaster they would take wooden strips firm across the wall and then just layer plaster on them Yep, my friend lived in one and just God forbid you had to do any work in that My house has brick internal walls downstairs and plasterboard upstairs to touch garage or sadly only a single otherwise. Yeah and by the way, um Like what jay from learning xv. He's got an older house. It does not go from his basement upstairs Oh, yeah, his his is definitely he had to put more upstairs and then all of his connectivity problems That's how we solved them was just more of them more Wi-Fi is the answer like more access points is the way you solve most of these connectivity problems Yeah, and like nix said, I guess they over there they coat the whole board. That's why they call it plasterboard. Oh Yeah, we just coat the Um joints and then you prime it and paint it Yep, I know I just did this. I did have to skim coat some cement board around my fireplace stuff Um, but anyway back to wi-fi I'll talk as much as I love talking about construction Um Avoid these the the unified building the building. I'm not a fan of them. They are overpriced They're one they're overpriced. So I'll actually pop these up in another tab and then I'm gonna pull Um I think it's over here Oh, yeah Yeah, that's the wi-fi and and add some aluminum siding. Um We had um We had that one house on the island. I don't think I don't if you um, I know I'm gonna put the wi-fi I don't think you there the Walls though. I call it california looking house Um, the house was horseshoe shaped. Oh the stucco, but on the outside walls They used a wire mesh that they put the stucco on you have to to get it to bind to the house. Otherwise it falls off Yeah, so that wire mesh is literally a fair day cage. So actually so it's uh, where you have to be careful That's not just used in stucco. It's also used in Um fake brick facing we had it on our old house in Lincoln Park Where we had like those various different size bricks, but they're only about that thick But it is they are cemented to a wire mesh behind them This is a complicated topic and the answer is not exactly going old school 2.4 The range is longer, but all the users limited to the fastest wi-fi device speed What happens is when you have a slower device with faster devices Um, it slows down for that device It doesn't push everybody to the lower connection But it slows down when it talks that device Because it's time division multiplexing how that works when like I say have 30 devices And 29 of them are connected at fast and one of them is connected as slower like it's downgraded at the 2.4 There's a pause that can be longer When it does the time division This is something wi-fi 6 is supposed to fix where it doesn't It doesn't drag anything down There's some pauses when it gives channel bandwidth to that particular one But it's not like oh this just killed the wi-fi speed because I got one slow connected device It doesn't work like that That's the myth more about the range though So the 2.4 does have better wall penetration Where it gets tricky Unify has a setting for it, but it's also kind of up to the device Unify has the setting saying hey take the newer devices if they support wi-fi 5 put them on that But your device this was a problem. I was trying to stream a game To my phone using the steam link app I was upstairs like right above my a like not quite right above but above and a little bit away from my ap The phone kept seeing the 2.4 as being stronger and would want to jump over to that So I had to create a 5 gig network just for Staying on the 5 gig. Yep And then sometimes all those one-off solutions you have to do um You can assign groups and then have a ap broadcast a single SSID that's just for the devices in that area There's there's one off things you can do with that, but yeah, yeah So yeah, we we recommend though avoiding these these are the unify building to building bridge. These are super weird So the only benefit they offer over these is that they tie to your unify controller Which is kind of neat you get them in that single pane of glass But they come pre-paired You to my knowledge cannot unpair them or mix and match them And you can only adopt them once they're perfectly pointed So you're kind of guessing to point them before you can even get them working Versus these are done using their airmax os you log in set them up themselves But then you also have a dashboard to log in to each end and kind of see the signal strength So I can have somebody sitting at the remote end even or making adjustments while i'm actually on my laptop And Seeing look I have the signal strength here turn it slight right up went down turn it slight left it went up And i'm gonna tell everyone here right now the easiest way to point them Put your put your phone on the front of them. So if this is the front of the ap Line your phone up to the center take a picture Yep, get the get your remote one in the center of the picture yep Yeah, I told that to someone and their mind was blown because they're like We had to spend an hour and a half pointing them. I go you put your phone on the front take a picture And they're like what yeah line your camera up to the front take a picture and then You know zoom in on your phone and you'll figure out. Oh, it's got to come up this way and they're like I never thought of that. I go it it makes it a lot easier when you're out there by yourself trying to do two of these yep A building to building site to site vpn or dark fiber of budget Vpn vpn. I mean I rarely is dark fire. I mean mpls went away the the cost comparisons are like Dramatically different. So uh, yeah, is dark fiber cool. Sure. Is your budget that cool? I haven't used one of these uh, six six. Oh, okay. I haven't used one of these. Uh, you six extenders brett has one though and says it worked really well He was actually he was pretty happy with it Thoughts on microsoft breaking ms chap v2. I don't know why they break things. They're sticking ads in there I mean, I'm hardly worried about them breaking if you didn't see, um, Microsoft's now Someone had I tweeted this yesterday. Apparently they've got a new thing and the new Builds of I think it's windows 10 and 11 where it forces you into a subscription for office 365 Unless you unplug the internet from it to to get out of it. It wants to force you into a free trial like Microsoft just makes it garbage operating systems. I don't know. I don't I haven't really run into the ms chap problem with it but We don't have that many people using the uh When the pn for ms chap it the only people who really use it are people doing l2t pt udms That's the most we encounter it Well, it's the I think he's not the 802 and x for doing it for um, oh the wi-fi authentication 802 and x1 But the same thing the number of people to ask for it and the headache it is I I don't see it as just you don't mean corporate company. I don't I'm not saying it's not use enterprise It's not used as frequently as people seem to think it's used.  Maybe once I have no opinion on it though. I don't I don't use it actively at all So, um, I'm not the person to ask because other people have some videos on it though It's tonight the udm pro update night might have to get some red bowls I don't know the update button and for us. It's press the update button. We're not using the thing So if it breaks whatever Oh, yeah, I mean microsoft uses the dark networks, uh Do d nato and all that I mean Oh, yeah, there's government places that use it and things like that But I I'm I'm gonna go with you're probably not working for the dod. I mean, maybe you are I mean Anyone can join my live stream, but Um, we actually I just worked with a big company that they moved off of theirs They're like why why are we paying so much for this vpns are a thing guys and vpns are fast now yep Uh, so to wrap it up go for the acl or ac pro 6 l r and pro right I think 6 l r and 6 pro primarily if you can't get a six ac l r If you're doing outdoor I am not it says outdoor. I'm not super Uh, I don't know. I haven't I haven't field tested it yet the they make a six mesh the the tube I haven't tested it yet, but they show it as outdoor my go-tos for outdoor are the old ac mesh and ac mesh pro And we have put these things up like in michigan We actually have four of these sitting on a dock In michigan that have been through the winters here. No hovering. No like completely 100 exposed sunlight rain snow ice Still working years later And one of them's not working because boats keep bumping into the wire and breaking it, but It's a whole different problem every issue we have had with these being outdoor and These ones have been a wire issue like um We had one the wire was on the roof of the building and after three four years the uv broke the wire down and ended up, um uh It ended up breaking down the sheeting on the wire because the wire wasn't uv rated And then rain got in it ran through the wire down up into the building and Corrowed at the end of the rj45. Yeah, and it took three years for that to happen Yep, so we replaced the wire and we're like, hey, we can get you a uv rated wire And the client's like i'm not paying extra. I'm selling the business. It's next guy's problem. Yep Um I do see someone has an opinion like I haven't played much of guacamole Someone says guacamole is good for one user but doesn't seem to scale for multiple sessions seems to be single threaded. Um I mean, it's a popular project, but I just don't really have a use case for it Well, let's see. I ssh. This is my thing I use ssh for everything so but I Straight ssh. I don't need some extra layer in between like guacamole I don't know maybe one day. I'll play with it because I'll then I'll see the light and go Ha, this is what I'm missing But that today today is not that day Oh Oh, your point is that uh to need an interconnection to get more and more problematic for these air gap networks Uh microsoft hates you, uh if you want to do air gap networks microsoft is not your friend for air gap networks Um windows likes being online not your friend. What's that microsoft is not your friend full No, they are not Microsoft's not your friend. Let's let's that'll let's a standalone sentence right there But uh, yeah, they're definitely microsoft's approaches getting more and more hostile to um anything that's not ad bait or ad or subscription based they'll probably I wouldn't be surprised if they're like, oh, yeah We'll offer some new utility for it at a price I could call that for money Yeah, and I think any smart company is Especially and this is the thing new companies versus old companies old companies are still clutching away putting garbage solutions on top of Born poorly written solutions all built with some microsoft proprietary tool that requires windows when we see new startups They're like microsoft what we use g-suite and we use web apps and we build things new and we don't rely on legacy applications And it's gonna be as it goes forward as microsoft Is becomes worse with windows 11 all their problems with it I think we're actually going to see a big competitive advantage that startups are going to have because they don't have to drag all that Um, you know just old legacy code around that is windows They don't have to deal with all the challenges with it. I mean the technical debt from You know using windows is pretty heavy and it's a heavy lift for some of these companies You look at these younger companies that go we never we never started with the reliance on microsoft We've built everything as you know more web even if they're internally hosted But web based control applications where the operating system doesn't matter and you can run linux and you can run Some other even chromebooks and then tied to the web application. They're just further ahead. So How is the true nascale benchmark going february 15th to release a new version although I should wait till after february 15th We built the system for I just haven't done it. Do you think ubiquity will continue to Produce and support their edge router line. I I was gonna like term support loosely Um, I don't I don't think it's gonna go away a lot of people use it and love it And it's it's an easy sell for them. Um, yeah, it's cheap. That's why people like they're cheap I personally hate working on them, but it's one of those things that if you're if you're well versed in it And you know how to use them. I know a handful of people that that's all they use Yep, um I don't I don't think you need Um, do you need the video card plugged in for the ip mi to work? On the extra words No, I didn't think so No, in fact the gpu breaks the ip mi if I remember correctly Yeah, so you don't need it We ordered the video card for the ones we built because I thought you might need them Um But they have a built-in video chip I bought them because the Ryzen we were buying didn't have the on board video chip But the boards have an on board video chip and then that's actually what it uses to render the ip mi So I remember if I think if you put a video card in it actually causes problems Yeah We have a video card in there. So don't we no we can no Oh, okay. I ordered it. Do they have on board video? Yes. Oh, that's why okay They have on board video, but this is where it wasn't clear. That's right Normally to get on board video with ryzen's you have to have a specific chip that supports video We didn't so I ordered a video card When I had the video card in I couldn't get the ip mi video to work When I took the video card out the ip mi video started working And that's also when I found out oh the on board video still works because they have their own video processing chip built into the board Yeah, um Random Is usb drive better than a portable hard drive look spinning rust is more susceptible to impact So usb or solid state. I mean I have to usb but solid state's gonna be better There's a jumper to use a pcie gpu Okay, I just didn't see it. Nope, but it breaks ip mi. Okay. Well then it doesn't matter Yeah moot point again. Yeah, because I think the the way the ip mi works on it It is integrated into that on board chip And so we ended up selling the video card to somebody else who needed one. There was a we still worked out Yeah I like the ip mi on these they're not bad The as rockboards. I thought they're The hard drive died on the cloud key two plus Hard drive in the cloud key two plus died on the third customer. Do you have a recommendation for replacement hardware? Are you running protect on these?  Oh, okay Five no go get a unify nbr anything after especially with the higher res cameras because they don't do the g3 bullet anymore um I would definitely just look at if you're running protect go put it on the unify nbr to solve the hard drive dying issue And then you could always just replace that dead drive with a small solid state Yep, um Any surge breaker recommend I would probably say we like these don't we Well, he wants an ethernet surge protector. I've I've not actually oh Oh, yeah, I just see I just seen an ethernet in there. I've never used an ethernet one. So I don't either Yeah So I got I would I thought he just I didn't read the word ethernet in there I like these cheap belkin ones like they weren't great. They were great. We buy a lot of these I think I actually have I don't I think it's a belkin belkin makes a plug one that is uh, it's like a one-to-one surge protector plug Yeah, and I actually have one up above my rack And I like these too. I have I have one of these at home They're cool because they got plugs on all sides. Mm-hmm and they have three usb's So I these are pretty cool. Um, I'm using one of these at home because it's just really convenient So I'll throw a link to that in there if people are interested Oh Yeah, I apparently literally works on the motherboard. It's vga buffer. Yeah, I know it seems obvious, but yeah Uh, you xg pro thought steve is that out or is that still in early access? Yeah, if it's in early access, it's like the first rule of early access is you don't talk about early access No, I just I don't look at early access enough. I I get questions about it and I always go to the main store page And then I end up there. I end up looking and they're like, oh, it's an early access and I'm always That's that's too many variables. I don't know. Um, yeah, because it's also gonna change It may change. So just kind of like one of those things like as far as the usxg pro goes And actually I don't have a udm pro to log into right now But I also noticed it's it said coming soon. So they might be adding it back into the pro The whole reason for going the older usgs over the udm Was you could tie them all to the same controller have different sites and then the auto ip sec vpn was actually really good Especially when you had a bunch of small remote offices that you needed the vpn back And you didn't want to get static addresses and do all the routing set up in that you just deploy these tie them into the same controller and boom you got we actually had a client who He was looking at going that route because they just do accounting So he has a bunch of little offices and strip malls and that that are two to four person offices He doesn't need anything crazy and he and he wants all the sites to talk to each other Which becomes a scalability issue Even in like pf sense because you're now building tunnel to tunnel to tunnel versus the auto ip sec vpn Just works in unify really well. So that would be the one benefit of the new usg But I also saw in the and I don't know how they're going to implement it because You can't tie multiple udms together into separate sites like that. I don't know what they're going to do But I did notice the auto ip sec vpn Says coming soon on a udm pro Yeah, so we'll see how that works Um So they said it's out of ea. That's cool. So maybe we'll take a look at it Dream router for non-tech family. I would say yeah for home users My daughter has one. Um, and my daughter by the way is not technical She just I mean she does usual things like play games online. So she uses the internet But uh, it works fine for her it gets wi-fi for her house. Uh, it does Internet it lets her watch netflix and play video games. So it's check the two boxes So you just said the usg doesn't do auto ip sec then I don't see the point of it Uh, yeah Yeah, we you can tell we're not the biggest fans of any type of routing crap that unify makes it just has always got problems Yeah, it's great for small office home Small office home. That's it. It's wonderful As long as you don't need any of the vpn features and you only care about the internet working I would say go for it and as long as you're not getting crazy with vlands because they They have a scalability issue of managing the rules between all the vlands. Yeah Um, so they're great for grandparents according to travis Yeah, it's it's the dreamer. That's just our new marketing. It's not the unify disappoint machine. It's the unify Uh, it's trying to think of something begins a d that means old people. I'm trying to find some other word I'm out of acronyms It's the unify old people machine self-built desktop pc with intel or amd or rack server for xcp and g home lab use If you can get a all Yeah, they craft it if you can get a Cheap like awfully server go for it. Otherwise home building one's not that bad of a idea And rose will from new egg make some really nice dinosaurs better. I don't dinosaur is better. Um Anyway, rose will on new egg has some nice rack mount cases that you can do a custom build-in like we did Yeah Yeah, we have on that video for if you type in like rise in xcp and ga posted a video in the last month We get the full parts list in there. Yeah So you can run down that whole list as I um I do have the as track I logged into it. So it's curious like We've been using this for a while and it's worked really well So we're have 181 days and 17 hours worth of usage on it Still chugging away perfectly fine. No no events to really talk about So I don't know as far as home lab goes to it comes down to do It costs more to get the ipmi that's and that's a debate Yeah, I personally lean towards if you don't need it Don't get the ipmi buy some off the shelf board because when you're done with the home lab turn it into a nice gaming computer or something Yeah Mike yeah, that would work fine then you do like the unify Um, I need to make it so I could just respond. I think I got a sign in to do that um But no the uh the unify. What do they call the The dream router would work perfect for that. Yeah Unified dinosaur router Yeah, uh, it will do the filtering we actually have a few clients where we deploy They had usgs and we redeploy them in front of so they have a pf sense Coming out of the pf sense. They have it wired into the usg And then the usg just feeds the guest network because of the filtering so they can do uh p to p filtering You can actually remote into these the the basic ones will tie into the cloud So if you don't if you want to be able to like change a wi-fi Password or something like that if you register them with the cloud you can get it in the cloud dashboard and then without going to grandma's house You can you can go in there and change their ssid create a new one uh I won't lie because i'm older. So my dad is like grandpa And so we do things like put passwords on the devices so they don't lose it It's taped to the top of it. So if you want to know my dad's ssid It is there. Also. He lives in the middle of nowhere.  He lives in the middle of nowhere. He's well armed So don't sit in the driveway doing doing wi-fi things Uh, what memory speed?  Yeah, I I didn't even want to build the lab one with that board because of it as I think it's 2666 or 20 It's not it might be 3200. It's not 3600 like I wanted Yeah, I think one runs at 2666 And the other runs at 3200 because we bought 3600 ram and After the bios update, which there's actually a newer bios update. So it may have fixed it. We would have to test um After the bios update they enabled xmp profiles But the xmp profile would cause it to just lock up Because it was drawing more power than it liked for the ram Yeah, um, I seen someone ask this question. I just threw a link in here people tell me that the 10 gig now This link is a multi option one from amazon and granted you're cheaper on ebay I'm just telling you if you want to buy them new from amazon. They're only 116 dollars for 10 gig RJ45, but if you want ones that are DAC Um, they're oddly I don't know why these ones are cheaper than the DAC But those are both x520 chips Um, but nonetheless 139. These are new prices used on ebay. These go for like 50 bucks We built some new servers that needed 10 gig. So I put those in there, but yeah the um The what you call it definitely there's cheap to get 10 gig now And that's the new prices that you want cheaper go eBay and you'll find to use and definitely stay with the intel nix Unless you want to have incompatibility problems like the intel ones are the best supported I'm saying no other one will work. But if you want the Uh, best supported when you're setting things up. So Oh, and I think it's yeah, those are cheap. Yeah, I like the star tech racks Um, but jack I was just talking about for a case for the rack I like to build the server in I wouldn't buy like rose will for the rack itself That's star tech all day Can I get my dad to use bit warden? Uh, no comment He doesn't use computer. He has one password. He knows the password is email So his his email is his master password. So I don't think he has anything else he logs into to be honest And he barely logs into his email I know The problem is the way server racks cases The the problem is the way a rack case works the air is supposed to flow in the front out the back So putting it up like that is going to cause an airflow problem, but they make Uh wall mount racks I'm gonna pull it up right now Hold on. I gotta Steve's gonna appreciate this Yeah, I'm shocked that steve does not have this steve's actually Steve would make it fancy because he does good woodwork. Did you see mine? But you have a two by four one. Please tell me how to do my four. It's actually I took an Ikea shelf Cut it down and then bolted the rack into the metal brackets and then used aluminum bracing to stabilize it So yes, I do have a weird custom built rack That's funny Uh, but you can if you're feeling fancy This happens a lot Yeah Actually, this one looks really fancy I can't Look at the fancy putting this and everything else. I like that the website's called tom build stuff I like that they even built the the plexiglas framed in the plexiglass on the door.  Maybe we should have built one instead of buying one. I'm just saying now I know look at this I don't need the step by step, but yes Yeah, but I'm just showing our audience here if you're feeling clever Because you don't think anything on the market is right for you. Build it yourself. Mm-hmm. That's how I got mine um, but back to Steve doesn't skip on it. No What I do. Oh, hi, Eric You left me last night Eric's also one of our engineers Melanox is all right, too. We can always get Eric in here, too If you wants to join the links in the calendar Invite so so they make and I'm not recommending like this specific brand they Share window Okay, they make wall mount units where this bolts to the wall And then there's just two arms that come out. So don't put it vertically on the floor Please buy something and put it on the wall get it up off the floor If you laid it flat on the floor, that's fine. But if you wanted to stand it up to take less space Um, yeah, that's a problem because of the airflow and we have a few clients Uh, we actually have a client who they don't have a rack They have a bunch of these all over the place because they have Like a server in one spot that's used as a workstation So it's mounted to a little 1u version of these that behind a door Um, and then we have, you know, they have another one Down in the other part of the complex where it's just a switch in the other server I like those we we have one on all that steve thinks is stupid But I should take a picture of it because I like it I should have to take a picture I think it's stupid because of its placement and all the stuff coming out of it and the fact that it's like too big And sticking out and it was not intended It was it was hastily thrown up there. Yes, it was I point out of the office. So they just did it and I'm like I came in and I saw I like it I like it I told brett steel to switch out of it if we need it for a client Yeah, that's well, and that's our one of the things our lab is for We have a lot of things in it. We have way more things in our lab than we need But it's also a good way to keep all the switches up to date and online And lab switches can be stolen at any moment for emergency situations Yep, like things being out of stock, but we need to get something done Yeah, that's one of the reasons there's so much hardware at our office Yeah, we don't talk hard where we play with it and then oh, hey, we needed that for an emergency. Yeah I got one of those in my garage really helps with the deep switches. Yeah It's an easy solution. Yeah, because it's an it's unlimited depth and you it solves the problem of like a del rack server And you needing like a 36 inch deep rack throw it on the wall You know people ask us if you want to run the Xcp and g-center I I just don't recommend it and the reason why is it's essentially on life support. It's not getting much love anymore The little that windows utility it's a matter of time before people quit using it so The better thing to do is x o light and once x o light comes out Which is something that doesn't require any resources and runs directly on there. Actually I have Let's pull up x o light real quick Um, so I don't even know if you know about this steve. It's in beta. It's Yeah, I don't read Let's throw it in here real quick Oh the ikea. I'm I'm catching back up on the comments. Check out ikea table rack mount Yeah, they use a lack table because the the legs on the lack table are coincidentally like rack space um It's pretty basic, but this is where it's just they're working on it. It's um They're getting closer with it, but basically this is going to be the new You don't need to load anything interface to manage send servers. This will be Built right in you can turn it on now. It's just in beta. It does very little you can't matter of fact You're like that's a great interface and you're like, oh Oh Oh All this is Not done yet. It has this though, but you can start and stop vms and things like that. So it's nice You don't have to run it matter of fact you could go in here and start and stop the um Uh start and stop x o for example So if you didn't want it running all the time taking up any resources You can do that the downside is it's never going to have backups natively built into it because that's what zen orchestra does But for basic vm management, um, this is in beta right now. They're working on it They're hoping to get it a good release out later this year I don't have an I don't have an exact timeline But it's being they wanted to get a framework out there so people could see it But I would I wouldn't build too much reliance on that because the moment this comes out There's probably going to be nobody bothering to contribute to the little I've always hated the windows app that you use to manage Zen server It made sense about it 15 years ago. I don't think it makes sense today. I used it a couple times for something I think Because it was there and I they didn't like xo was the xo a was messed up and I'm like, I guess I'll use this thing and go fix that thing so I can go back to that Uh, we just use phillips bolts or rack studs I like rack studs My only complaint with the rack studs is if you have something heavy for a long time the plastic starts kind of Getting caught and they're hard to get off Yeah, um I don't see the point of using security bolts because It's not hard for me I'm gonna grab it and I'll leverage the thing right out if I'm truly if I've made it that far I'm taking your server whether you like it or not A wild eric has appeared erics also Much like steve does lots of the unify your network engineering consulting He spends a lot of time on trunas helping people. Um, it's doing storage things Stuff oh, and maybe he has microphone problems today. They only have his microphone problems. Oh, do I? Okay, there we go Since you don't have a face can I put an icon I wonder is there's an option for this Yeah, put something over my face put in this picture from the site Yes, that would be awesome Nope, it won't let me. Oh well That's a shame whatever you're just you're just an icon now I actually Xl light what is that xl light for managing xcp and g this is built in without low this doesn't run in a vm This is like so you oh, yeah, that's is that out yet? um, it's in beta I'd like to see it. Yeah, um here I'll drop a i'ma send you a link and signal right now You can't see it Because it's I set it up on one of our servers. So there you go. Click that link and signal and you can play with if you're vp And in there we go. I have an avatar now Oh Yes, that's erics for the site so No, I think that was taken with the red safety goggles. We got with the uh, laser laser Yeah Um, Europe loves proxmox they sure do Uh, yeah, we probably see it more in europe less than the u.s. But europe also loves xcp and g vates is based out of uh, france Well proxmox is from germany. So you're probably going to see it the most in germany Proxmox is fine. I don't use it. But I mean if it makes you happy use it. There's nothing like it's not a bad platform I would not say it scales as well as xcp and g that's been my experience with it Everyone wants to play about the cage nuts the only cage nuts. I've ever had a problem with I bought a bulk package on amazon for cheap The only ones I ever have a problem with are the unify ones. I don't know why the actual cage nut itself I can never I always have to take channel locks and bend the Little wings on it to get it in I I can't they won't go in half the racks here for some reason yeah, and there's also um I've seen a couple different ones of these they have nut tools No, thanks that that seems like too much it does There's another one right there actually the Far left on that row this one left. Oh my other left Yeah, we have the same Putting a wall up the other day move the board to the left your left or my left and the guy standing next to me I'm like we have the same left john Right there. Those are what I bought the two little I don't know They come in a little case like that But they're literally one box of the cage nuts and one box of the screws It says purchase two times. So this isn't our own amazon store. I didn't know it was weighing data. I don't know I don't know wing It's the it's the wing nuts Um, but yeah, those are what I bought They weren't great uh Yeah, Eric doesn't do video Eric's consulting is all done without camera I don't I don't even know if Eric has a camera to be honest. I'll each time I do but I lost it That's the best answer I actually need to test replacing mine. I'll I'll give you mine when I figure out what one I'm gonna use I'm sure I could find it if I felt like looking for it. Did the ferret run off with it? Probably I'm not gonna lie because it was on top of my monitors And then it disappeared into all the cables behind my desk. So I'm they pull it down all the time. Yeah, actually it's the cat. Yeah, the cat gets up in that window Yeah Uh X cpng data stores a bit confusing when compared to VMware especially for Locating the ISOs for the machines. Yeah, I don't know that it's confusing. It comes down to No, it is It is I have had to find the data source. I'm like, it's like broken up in all these chunks. I don't like it But I I have all these videos I did on it because it does do things differently But it's also beautiful and there's like a beauty to understanding how their storage works And if you put icons That's how I find them you just use icons and emojis For all of your data storage because why not? Well, I think he meant the uh The actual drive like in the data. Oh, yeah. Yeah, figuring out where to put them Yeah, like the ones that exist for it X cpng has like these broken up data sets For drives versus vmware is here's your or an even uh hyper v Here's your vhd file done. It's that file that file is that drive move on Um I have no idea on that question. It's metric. It's metric almost all As much as we joke about freedom units in that almost all machine parts here are metric. That is very true Moji's and vm data storage it works. I mean it makes it cool looking when you can put all that in there It's actually the concept. It's the Ikea concept.   Yes, he did Yeah The unify used the wi-fi one so Yeah, everything is a series of um silliness sometimes at the office like we do have this which is our uh tunnel bear and The re it's all of our vpn It's how you can have all your clients running pf sense no matter if they have dynamic ips vpn to you And create a single ip address that you can then get to all of your clients on for a vpn And I named it after the vpn provider tunnel bear because I love their uninstaller like Removing bear fur from hard drive.  Ah, sure They technically are yeah, I mean we speak a similar language, but It's not quite the same matter of fact. We speak it better. Oh, I think we yeah, um It's something that's like people ask what I watch on youtube And I do like some of the classic hardware stuff or whatever But there is a there's a funny guy on youtube who does this videos called across the pond And he moved from you know the uk to here and he talks about all the weird things about living in the us And it's actually interesting because he covers so many things. They didn't know and they're like Very crazy little esoteric details, but they're kind of funny of the words he uses Even when he goes out to eat how different it is going to restaurants And he does it in a very humorous way to present that so You get a free teabag with all the imperial tools in the us. Yeah We like coffee in the river though. We threw it in the river Oh, let's see. Is this a question cpu make better I like the freezing is that A question or a combination of words. I think it's a combination of words. Okay I think he's telling us what he has or he achieved Hmm. All right. I I don't have context for it, but I thought I'd at least share with the class Right Um, I have a post. Where is it at? Did I close the window? Probably I can pull it up though. Um, I have a post in the xcp ng forums Where's tom's posts? Good thing. I can't just run off with my camera. I go look at a fence post Like I know It's your post Yes I'm gonna put some pictures together. Do you see my post? Why can't I just click on these things? There we go Share this tab man. It was way too many clicks to figure out what the last thing I shared on there was Um, this is actually an interesting feature to coming out with but I did have some questions for clarification before I do a video on it They actually have a new thing called mbd for backups, which is network block data Uh, it's actually a way to parallel read 16 Blocks at a time of data From xo and makes it 16 parallel blocks faster Which doesn't mean double the speed or triple the speed or 16 times the speed But it is a substantial speed gain for doing the backups and uh, that's a new feature They actually just added we're going to be enabling we have it on our on our lab network I set up here, but what they didn't clarify was they updated it and where they put it is kind of strange So let me show you where the setting is if we go here pool It's right here. So I've turned it on but I had questions about how it works So you just choose mbd or non mbd connection You're only supposed to turn it on the network that you attach your zen orchestra to but i'm looking forward to it because backups take Some time on these, you know, there's uh There's parallel transfer problems with the zen api and this kind of addresses some of those Because you'd actually exposes the block device directly to the zen orchestra backup via a network instead of using the network api to call it It actually uh parallelizes it. It's kind of cool Um, can I see pd zfs? Yes, it can It does local raid. Uh, it'll do zfs and it will do md adm raid, but it doesn't monitor it. There's no monitoring. So like our local storage if we go here to storage This is a local raid storage, but it's just a raid mirror But it there's the monitoring is not done here The monitoring is all done from the command line using the md md adm tool The question nets to h and miles. So for a's Like miles per hour. What? I don't know the question Uh, cisco c. Oh Right did you get cisco business dash bar? I did a video on this and Guys It's hot hot garbage like I think me and eric talked about it. Did me and you talk about it steve? No So basically cisco's got this idea that are going to compete with unify Oh, you know what? I think you did bring it up a little bit. Okay. Yeah, I ran to the bottom like you can't be this bad And jen jason slagle says he messaged me, right? He's goes. Let me take a look at I don't want to see if it's this bad He's like because he likes cisco stuff and he I think it was like 24 hours later. This is terrible Like I know like who wrote this who whose job was it like what lacky got this job? We're like go grab some first level engineers come up with the worst way possible to make a business dashboard Oh, and when you're done hand it over to licensing because we want to be able to charge people for this And then hand it over to marketing and tell them it's a unify competitor and send one to tom That was like I want to know the whole story board of how that happened in management Because they did send it to me and I did dump all over it like my video on it is just why it's terrible and No one's disagreeing with me not even cisco or the people that sent it to me like no one's really Even cisco didn't rebuttal like how bad it is of a setup.  I don't know Is that it? I put him in time out Okay, okay, but that was actually the third time he's done that so yep We'll just uh, uh, resta will do against unify it it comes down to hardware costs and software the hardware is easy And what unify is doing isn't hard The problem is you get some high-level executive in there that says we need to you know make $1,000 a month on this and then everybody's like, why would I pay you when I can go use those guys? Currently a race to the bottom it seems It was the only people I have seen and the problem is their controller was hot garbage Was ingenious And they had they dropped it they dropped it The again though their own fault they had a good product affordable Let's make Three different product lines with three different controllers and one of them is only controllable not by a software you install But an ISO image you download and run on a raspberry pi or a vm Yeah, why it's terrible and I pointed out I did the review of the ingenious stuff The more recent stuff and they're not easy to work with because I actually was being kind and did a write-up and said This is what's wrong with your documentation your vlan documentation is wrong So I sent them an email before I did it. Can you fix this? A month went by and I said I give up they replied we'll work. We'll look into it. I mean you look into it Here's the write-up of how to do it. It's just incomplete And so I covered how to set up vlan's on it but also my review commented that their documentation is wrong and That's actually a challenge It shouldn't be that you have to find some guy on youtube doing a review to figure out how the product works It seems like the documentation at least the basic functions The second part that they still don't have an answer for that unify that ingenious switch has weird Extra options that even they could not answer me as to what they do I check the boxes. They don't actually seem to do anything But there's a bunch of ui elements in there There's these extra switch ports that don't make any sense And it's all speculative as to what they do because changing settings on them doesn't actually seem to do anything They're like virtual Someone said they're for bridging someone said they're for this but there's no documentation on them But it's just kind of weird when you go to lists There's all these extra switch ports that don't actually exist on the unit so thanks Xcpng seems built to use the external shared storage similar to vmware where you can have other stuff um I would say it's well built and well suited for that and this goes back to the corporate nature the enterprise nature Eric we're me and eric have worked on and I think steve too. We have a few clients with some really big setups with xcpng so Um, what did the one food company? Don't they have 100 gig connections? Do yeah, they're doing all with them like you know a couple couple gigs of backups and seconds It's it's funny because when we were doing testing We thought the backup failed or or the vm transfer failed one of them We are doing and we just took a second to realize it happened so fast at blink Do we thought it just wasn't doing it already done we just already done We just when you have 100 gig interconnects with these so We've seen some big enterprise use that we're actively engaged with with a lot of the xcpng stuff Um, what do you think of this one? I've had people ask me this tea, but I don't They're gonna run hot most 10 gig stuff just because the processing power is now we haven't used any um my client in canada actually Ordered a bunch So I I've assumed he put them in I don't know what he's doing with them but Even they're older This is a known problem with some of their stuff like we had that What was the one we had in the rack in the back tom wasn't it the old like gen 124 where yeah It would just overheat they would get a pull of 70 Celsius and we'd start seeing pings get kind of crazy We moved it out of the rack somewhere cooler works fine. Uh, we had the 80 8 port 150 watt Thing ran incredibly hot Um, like it hurt to touch. Yeah, so yeah, some other stuff does want run really hot But also keeps running it keeps running but that flex switch is gonna be I believe those are plastic chassis Passively cooled It's gonna be warm put it somewhere cool. Don't stack things on it. I it's really all you can do And that some of that is just the nature of 10 gig Um We just because we're doing with commercial companies gpu pass through is more something in labs than in production use It's just not as common like for the company. We just mentioned who's got over a You know, I mean 100 something thousand dollars in hardware 100 gig setup and how many gpu pass you started using eric Would you say zero? Absolutely zero. Yeah, it's So can it be done? Yes. Are they gonna spend time on it? They're they are leaning a little bit towards enterprise. So Um, if your goal is to have easy pass through xcp and g yes, it can be done but It's not it's not a high priority feeling to make it uh ui elements to do it. So it's still kind of command line driven and limited Amount of I mean you can find forum post spot it and find write-ups on how to do it But there might be other things that are a little bit easier to do with that I do like this comment though. They could cisco could use chat gpt to assist on why What was it? There's that uh, there's that silicon valley episode like that where all the Everybody loves it. You gave it to a bunch of engineers Who are all very technical? Did you give this to any common people and they found out? Oh, everyone hates it like everybody who's not an engineer couldn't use it Yeah, it's just I don't know. I was playing with chat gpt and as I'm working on a video for it, but I wanted to um Be more concise And like one of the things about it is like I had it write a biography for Tom Lawrence and when it comes to things like doing Really deterministic things. I think jet gpt works well like hey write One plus one. What does that equal or let's write some code for something that's deterministic like we wanted to help with some regex We need we need this piece of code to have this input and process it in these ways with these rules to get this output That's a very deterministic output with jet gpt Where it starts falling flat is I'm a pretty easy person because my linkedin and everything's very public and it's all up to date Chat gpt has all my information wrong when I said write Tom Lawrence It says write a biography for Tom Lawrence from Lawrence systems and it got a bunch of facts wrong but there there are facts that anyone with a uh Google search and landing on my linkedin page could have had corrections for um, then I started doing this finders Let's say yeah, I wish you would have thrown that it would have been funny um What I my goal and I have more work that i'm doing before I do the video is product reviews Because one of the problem with chat gpt about product reviews is I figure people are probably using it for product reviews like I said, hey, does huntress endpoint detection response any good? And it gave some answers that are good But still not accurate and not even accurate to huntress's website It talked about things that it just doesn't do and these are where some of those problems come with gpt because I copied and pasted the answer for a reason and that reason is It's not cited with sources. So it confidently tells you everything But that's it. It's just confidently saying Tom Lawrence started his business in 2008 Well, that's not true But that's exactly what it says and because they're not telling you the source of the information And too many people just believe things that are single source Especially when we slap the ai on it going it's a magical ai system that is infallible No, it turns out it's not It sounds convincing.  So it's it's a really interesting That's why i'm working on a video from that context what it gets right what it gets wrong What it can and can't be used for or what it should and should not be used for um It's a laura mepsum generator right now. So sometimes it is it like that It does a hell of a job of writing corporate bs speak like it does a great job on that My favorite tweet it says everyone assumed chat gpt has gained Uh consciousness because of his ability to sound like a corporate manager not realizing corporate managers are the ones who are unconscious I was like, yeah, that's not the bar you two two it's uh Net box net box is really cool. I will probably use it in the future, but i'm not using it today I think net box is a great project. I'll bring it up in case anyone's never seen it Um, it's open source. What's that? I have never seen it. No, we'll share it with steve I'm weird. I don't everybody else here strays out of the things they do in tech to more things in tech I'm like, okay. Once I'm doing tech stuff. I'm building something So we're probably gonna use this internally, but it will expand to using it um Maybe for a few clients, but the premier network source of truth net boxes the leading solution for modeling and documenting modern networks Now what makes it kind of neat is the fact that you can tie to like our xcp and g And it will start listing listing all the different devices as we spin them up and automatically add them in here So you'll know the ip addresses everything else. Um, it's also got the ability to and it's probably easier if I found a image of here we go But one of the other things it can do Is you can actually build your rack and patch panels and then click and link everything over So you can actually lay everything out against a really neat tool Um, I just haven't gotten around to setting it up and configuring it But I know what it is what it does and I think it's pretty cool Uh, I want to say I appreciate these q&a Saturdays all the useful interesting us who comes from autumn Thanks for sharing your IT knowledge awesome Good morning. Hey, Eric is here Work with Aaron on a few occasions Well, and this is the excuse I've heard would chat gpt It was trained on data, which is a little older to some backdrop of date The date I started my business has not changed And my linkedin has been accurate since I started my business Well, because when I started my business prior to linkedin And then when I update a linkedin I put when I started my business. So it's never been that's not that's a static date So for it to have static information that is easily findable about me wrong Is just proving it's doing a lot of contextual searching instead of fact searching.  This is customers. So I haven't gotten back to you about schedule. We've got a few customers in here. I think I'm right Yeah, Eric and Steve do way more of the bookings than I do. I just so the names are popping up. We're like, I know that guy Exactly It's more of a text writer bot. Yeah, that's true, too Um, there's a few people who did videos on it. Um It's I maybe I'll do a video on net box uh So the question about what do you guys have to say on 40 net products? I actually I don't hate them. Um, they're not bad I yeah, 49 it's kind of a lot better. Did I skip over a 49 question? Yeah up to from yep. Yep When it comes to firewalls, I'd rather work with I'll take a 40 net over a sonic wall or that's the way I say any day Yeah, sonic wall is hot garbage. It is and people are still just we run into so many of them Well, can you log into my sonic wall? It's gonna cost you less for me to move this whole thing to unify Or I'm not unifying but pf sons not unify don't ever do later Yeah, I would take a usg over a sonic wall. That's true Sonic wall avoid them. I think my only complaints with 40 net is Um, and we're getting this complaint a lot and people are moving away from it They I believe they're the ones that charge you a license to have ha So what we're seeing is a lot of clients Why am I paying This license every license I pay for on my main I have to pay for to have on my secondary and it's costing me a fortune But you can also easily move the licenses. So they're moving away from ha setups on their 40 nets to cold spares Where if because of licensing fees exactly I've noticed a lot of the licensing on fordon that doesn't affect its ability to do a lot of basic tasks, which is no No, and but um, if you do have anything licensed my understanding is in ha you have to license both firewalls So people's complaint is I am paying the same amount as my production firewall or my backup firewall But they make moving the license is real easy So, um I've worked with a few people that this is their game plan They're moving the 40 net to a cold spare to eliminate the licensing and then they'll just like if it dies I'm going to take the backup put it over there and move my licensing and put it in place Yeah It makes it a bit of a harder sell too I don't really have any easy answer for this. I mean zavix you uh, who do you find devices templates? I mean some things aren't supported in zavix. That's just a challenge.  If it's depending on what it's relying on Um, it is like I see you mentioned walk.  Yes. Yes. I do have a question. Why do companies use their own mail servers? question My father did it and his father before him and his father before him That's really it it Cheap is also the answer. I don't even know that that's cheap anymore because of the maintenance costs and all that Oh, no, they're not maintaining them. That's for sure. That's why nobody wants to pay for a migration 20365 or google workspace Yeah, it's so most commonly when we see it It's because they had one from the you know late 90s early 2000s It's a larger company. They have all this data They don't want to pay a company to do all the migration because most most we do as well as most other companies They charge per mailbox um, we had one client who For him to get off of exchange The company that hit originally would have been maintaining the exchange didn't want to maintain it anymore And gave him a killer deal on the migration because they wanted him off They're like we'll take the hit on this to not have to deal with your exchange server I love how that conversation started with him. He's he started with I think this company charged me a ridiculous amount for the, um Migration sends us the price. We're like that's half what we charge. Yeah Yeah, like we're gonna double that because he's like could you get me a quote? I would go send me the one they sent you I look at it. Oh, yeah, go with them. Have them do it Like we're gonna we're gonna charge you double They are giving you a deal because they want you off this thing Yeah, yeah, there's there's not a reason you should be no one should be running exchange at all So no and our bigger thing is we're seeing less and less people running um On-prem exchange, but we're still seeing a lot of people who use like web mail From their web host provider and it's the same thing. It's because well when we set up the site in the early 2000s, that's what they did and Yeah Rackspace I bet they'll wish they didn't host exchange. They migrated the customer to m365.  It's it's a big disaster. I like their answer to the problem though They're like when's it coming back to like it's not and they're like, what's the solution? We have an offer code for office 365. We get you a discount. What about our mail? It's encrypted When are you gonna recover it? Not part of our terms and condition Turns out you were supposed to back it up not us. We just did the hosting Uh, they actually threw their hands up in the air and just said we're done And that was like their answer when it got encrypted. What are you gonna do? I don't know just format all these and we'll use them for something else They just got out. They just noped it away right out of the exchange market. I think I'm pretty sure it's not even a service They offer now.  Oh, I know so the reason that was the worst The reason I love google so much more than microsoft is When it comes to mail For example, let's say I resell you google And you don't want to do business with me and now I'm not being responsive But you were bought it through a partner. So you contact google. Hey, I bought, you know this through this partner And he's not being responsive google sends a message And the partner has three days to respond Otherwise google just takes your account from the partner and gives it directly to you and we had to do that with a client who Their reseller just decided. Oh, we're not gonna actually do the transfer and all that. We're gonna lose money Hey, they're refusing to do it and google's like, oh fine, then we're gonna take it and we're gonna review their partnership details Microsoft on the other hand.  Let's give them a Special legacy one that you can't migrate out of and they can break functions all day on You want two factor? Yeah, no go daddy doesn't have to support that we we gave them special permissions Yeah, the um I'm not I'm on rack spaces. I don't even see it as an option. You can't I don't you can't even get host exchange from anymore They're like, no, that's not an exchange is just ms 365 now. It's that's it. Yeah Oh, yeah, that's this is a really interesting stuff. So the fbi having uh security updates from the fbi That's actually something that happened if you didn't know so This is a really weird thing that I don't I actually know a lot more about than I had to see if one day I can get the people I know the I know the people involved that actually did this um So what they had was a problem all there was a massive attack of exchange servers And a decision came down because you can get shell By really easily the proxy shell and they said, you know what we can do We can save all these people from this attack by Using the exploit to patch exchange So the fbi actually went and patched people servers The fbi blessed and I know who I actually know the people who did it and were involved in it And it was a great security discussion at a conference. I wish you could have been there, Eric I will I will tell you offline if you ever want to hear the story I'll share with you guys because I I don't know where the nda ends and begins for what I can say about it But I would actually love that now that it's been a long time I'd like to get them on and talk about how that decision came to be So it's people you can say that but that it was a tough way what? Yeah, it's a it's a great offline story. I'm sorry. I didn't mean to bring it up in there But someone did I don't usually to bring things to say that I know more about it and can't share But I will work to share um to publicly disclose what can be publicly disclosed about it I mean, that's fair Yeah Yeah, we kind of blanket nda stuff in our in our office so I can share it with the internal people But yeah, I don't know how much you can be publicly shared. It's really interesting. Yeah yeah, uh, we've done a few migrations to google and usually be Up two more Go did he moved our chamber commerce email to officer c5. Yeah, we heard they were doing that They did that to another client as well. They just moved it and didn't tell them. Oh neat I forget who it was But it turned into a whole disaster Oh, I know who it was. It was the banquet place. Oh, yeah. Yeah Yeah Option for on-prem s&p monitoring no interconnection. I have no idea I mean Xabbix like they're seeing there. So that's that's probably the best one there Like for us how we do this internally is we're going to use our ninja one rmm to do things like that so But home user why excuse me home user wise Xabbix is a good solution What's a good motherboard for horizon 9 5900 x desktop build? What are you doing with it? Yeah, that's that's the bigger question there If you're doing home lab server stuff and you want ipmi as rock is the only one to do that If you're just talking general. I want to use it msi Yeah in order of motherboard manufacturer so that I will take top to bottom msi gigabyte asus Next yep Um, this is very true. So years years ago. I was able to dig some oscent information out So I assume the lack of pf sense case studies is due to nda's when we're working with the company You've got extra discount from rocky, uh, if If we allowed the case study well, what happens is and I I actually pointed out an old video I have about the enterprise use of open source and It's it's changed a lot since I did that video where companies are even tighter about it probably because people like me using oscent Um, you could find that visa mastercard was hiring for pf sense engineers and that's because they use pf sense in the data centers for, um visa mastercard So yes, it's extremely used but these companies don't publicly disclose what infrastructure you're using Now that's actually gotten worse. My friend works for a fortune 100 company or does he he's not allowed to post on LinkedIn he's not allowed to post on Anywhere where he works and even if he did post for your work The name of the company on his payroll where he so to speak works is different than the company he works for Um, so the publicly traded name of the company is not the same as the pump people who pay him But they do that to add a layer of Like freaking confusion to that zero. Yeah, it's like it is a lot of obscurity. So you can't try to Sort out who works at a certain company Um, because he works specifically in their it security Oh, let's see Told us ahead of time. We did a ton to deal with them moving on my own soon. Oh, yeah, just move. Yeah MSI fans in the office. Yeah Yeah, I go MSI for motherboards and video cards video cards oddly there. They just have the best fan design. They're quiet My camera which one which one I recently bought I bought mine because it was on sale and had Without which video card do I have now I got a look didn't you get like a 30 60 or something? I don't remember who made it Oh, it's in the other room. So you didn't care That's also in the other room and I don't care. That's absolutely fact. Yeah, I did get a 30 60 But I don't know which model it is um It just says g4 30 60. It doesn't tell me the model. Yeah, it's not going to Yeah, I MSI for video cards if I had to do it go second on video cards probably asus um maybe Asus over EVGA because as far as I know asus, uh, didn't have a problem with cards bursting in the flames Oh, yeah Good thing That's any gaming built for ages for laptops um Eric if I send you a link because I don't have it set up to chat um If you throw it in you signal it to me or whatever. Yeah There's private chat in here. You can send it to me Can I send it just in that? If you hit the or you can yeah, you can probably drop it in the chat Just commenting from uh, so EVGA is out of the market apparently I don't care the cards got burst. Oh, but this is kind of funny to me. Oh the yeah Yeah, eGVA died. I forget why they were like maybe 10-ish years ago Maybe a little bit longer, but yeah now. Yeah rip EVGA So As far as laptops go I'll throw it in private chat and it's just an Amazon link um Acer makes these really nice nitro 5 series laptops That are incredibly powerful And have GPUs built in I I could have shared the screen. I didn't think of that one, but either way Yeah, I'm shortening the link too. Um, I know yeah Acer makes these as far as laptops go Acer has kind of been my go-to usually when in With the exception of any laptop that's designed ultra thin um Usually When an Acer dies It was the user It's like they just abused the They installed they installed Java. Yeah Yeah, most the Acer's we would see came in dead Were just beat Um, but as far as laptop quality I had I actually just gave my old gateway that was made by Acer when after Acer bought gateway And I had this thing since I bought it as an open box from Micro Center I've had it like 10 years roughly or something and I just re put an ssd in it and gave it to my friend So she would have something to browse on at her tattoo shop Oh, I think it's uh, it's somewhat rigid. It doesn't seem to have a problem. My mom has the BJs had a deal on them like 600 bucks and they had the intel with the 1650 a few years back Uh, she has that one and she uses it as her like desktop replacement and has that now granted She uses a mouse and we don't really use track pads, but uh Yeah And the other thing I love about Acer they give you all the parts for it like because they load it with an nvme They actually give you the little bracket and all the stuff for if you want to put another drive in it Yeah, um, I'll answer this person's question. Okay. What cost effective homeland hardware do you recommend for vSphere? um, I don't know the compatibility list because I don't You know outside of enterprise. I don't really know if it will work on all the general hardware But if you go and look for like used r720s Like dels those are really affordable right now depending on where you're at And they're they should be on the certified list for vSphere. Uh, let's see what else we have Uh, I've never used rate matrix or rocket chat for a client I and I I don't expect I would anytime soon most businesses are using slack um, some use teams and they got help them but That teams is awful, but uh teams and slack is pretty much dominant in business No What's that? Not really. Yeah, not a ton, but I I have had some random customers that do use it. Um, Really? Yeah, well, I just worked with that one customer on doing google ldat for open vpn and actually the the uh, Well, this question not the chat one What question right here. Okay. Yeah, this question. Okay, thank you. Yeah Yeah, do you guys see small medium vnc and 30 f using cloud-based directory service? Yes mostly for little stuff nothing too crazy Uh me and airport one they wanted it for vpn logins. Uh, I had another client that They did the same thing, but they broke theirs first by the company I'm the pf sense To the ldat login, but then it failed the ldat connection And then and then you can't authenticate again because that's they couldn't authenticate and log into their firewall to fix it now So he had to go in command mine in restore a backup Before and it's two business partners and the one said don't do it the second one said no This sounds like a great idea and then the first one was livid when it broke Now according to net gaze documentation if it fails ldat authentication like that it is supposed to fail back to local Uh local database. I don't know if that's changed since that's happened So yeah, they happened like a year ago Yeah Um, I don't know the answer is because I even I haven't imported an msp st file forever I'm pretty sure There is just full support for that. Like I'm pretty sure thunderbird just supports an import for that. There's an option Yeah, I haven't have you tried it. I've done it.  Have you tried that yet? Oh If you say it's been years since I did it it was super common to do when uh, We had a bunch of older people getting off who had to get off outlook express when xp went away Yeah Hey, you know, let's bring this whole conversation back around Microsoft just announced that they're going to be entering integrating chat gpt into teams I don't know why I guess so you can just like I I guess so you can have all the corporate managers doing corporate bs speak talking to Chat gpt that's also doing corporate bs speak someone pointed posted and read the other day a good post about how It's great for writing long form hr how they want like a performance review that's full of words They said yeah, I just put into my bullet points and chat gpt wrote the whole performance review for me Of all my staff that made hr happy That was beautiful just automate that my god. Well, when you think about it and I when I my brief, uh Stint and corporate that was one of the things that you said to me They did not like brief bullet points hr's like just has to have more words And I'm like I wish chat gpt because I could just All's you do is you take something that could have been three bullet points and turn it into three Paragraphs and then corporate people go. Oh, this looks good. It's it's a heavy piece of paper with lots of ink on it now So it's so dumb because that that kind of defeats the purpose of bullet points You want to keep it brief and simple So they're just kind of making bs work apparently Yep, I don't know if we should answer this question. I mean Am I bad to work for eric? Not at all. Okay, probably probably one of the most, uh, I don't know forward thinking bosses that I've worked for I tried to be Uh Thunderbird just uh auto picks it up neat. Yeah, I'm gonna say I'm pretty sure it just understands psds They spent a whole lot of money on chat gpt makes sense. Yeah Uh, what intel cpu is good for a whole lot and so Go into rock rack makes Uh few boards with rise and support so you can get a rise and that's actually what we're using So if you go to tom's video on that You'll see the board we're using but um as far as What intel if you want to go the intel route? um Just go to cpu benchmark and we're using I think the 5900 x and you just find something comparable Just look at the benchmarks for it And pick out one that it's the board you're looking at Yeah Honestly though rise ends way better to go for that and it's that is cool running less power It's also the single thread performance and the way it's optimized in zen This is right from oliver. He was in my live stream on thursday And he was just singing the praises like they've moved more of their development all over to ryzen because it's just so much faster There's a known teams desktop with certain bluetooth headsets where there'll be a constant beep every five seconds That's awful. I hate that Yeah, I'm actually kind of amazed the way microsoft's done a lot of this that Teams isn't just a the teams. That's not bad. It isn't just a web wrapper It is when they that's why it's so it's a research hog. They're running it all in um What do you call that electron? This is actually why there's been uh, there's been a few more vulnerabilities in it and it's because the way electron works is electron is a compatibility layer A lot of things use it But it's also kind of scary because they basically take like the a web engine and I believe it's all based on the chromium They take chromium and they wrap it in there and then they take things that can just be opened up as a website and slack For example, uh, this is what makes the slack app or the teams app cross compatible. You can do this on mac windows and linux It's really easy the downside is We know there's updates to chromium when we see our google chrome browsers or whatever need an update because of security problems That doesn't necessarily mean they're gonna update the electron wrapper because they're like well We don't have a new product version of teams. So why would we update it?  Yeah, but we're not probably using those things And then pwn to own comes along and proves that those things can be executed Inside of your teams session and that's where the flaws keep uh prop cop Coming up in it. Um, it's also not necessarily very optimized. So that's why it also becomes a big resource hog So it's a mess Yeah, so I said teams is a wrapper. Yep Not the kind of wrapper you want I don't know a single application anymore that isn't web wrapped Yeah, it's actually well, it's one of the things and this is what's going to make us more platform agnostic to get rid of windows is because Like eric runs linux primarily and so do I and we get our job done because The tools we need all work either cross platform or work through some type of web wrapper Usually an electron app or just a web-based app in general. Um, so it works really well Considering upgrading to 5 gig fiber that mean I'd have to upgrade my sg4100 to an sg6100. Yep Now you're not poor I know you I seen you just did a video in your budget or is that the video that got you in trouble? He did he did how much his own lab is worth right now Just if you're gonna get a 5 gig connection, you're gonna have to pay the piper Um 6100. Yeah, because you need something with a 10 gig connection You're gonna go 6100 or bill it yourself. But I mean, I feel terrible that you have a 5 gig connection Another tidbit is you might want to look at getting net gates transceiver for that because the compatibility and transceivers with net gate devices have been kind of weird, oh, yeah Make sure you get one they have it on their site Yeah, I don't think it's expensive to buy the transceiver from them. It's like 49 dollars. Yeah, it's not net gate right on it Oh, I haven't tested it yet, but I'm pretty sure it's just a regular 10 g tech So I don't care it says net gate on it. They branded it even we'll know exactly that But I'm pretty sure it's just a 10 g tech that you could get that same one from amazon for like 20 bucks So just throwing it out there. Yeah, but he wants to try and let us know Do you think google ldap or other choices could be used msp style to offer directory services to one I don't really I don't get that use case. No actually google does. I don't know if they're continuing it google had and I did some testing with it a while back. They had that integration that you could tie your entire Windows login to Their directory services it actually worked really well Our only complaint with it was the remote wipe of the computer um, there were options in there that you could remote wipe the computer But it could be Stopped at certain times and it would break the whole function. So if you had a user who For example went rogue and you changed their password and then told it wipe the computer It would try to wipe the computer next time it was on But if they were never online it never updated the password So their old password would still work so as long as they didn't put it online They could circumvent the process but as far as managing login and that it worked quite well Right, but honestly like the majority of people are going to have um, your usual azure ad setup To do all their authentication tied to their network a lot of people don't though not everybody does but like if a small office You're kind of weighing azure versus google if you're already in that g and the I'm still calling it g suite. I don't care what they keep yeah, whatever whatever they're calling it this week If you're already in that g suite market for your email and then you wanted to Just transition to also having that be their computer login. Yeah google did have a thing for that and it worked quite well Yep Ah, let's see I'm pretty sure it says 10 g tech right there. Yeah, it does actually it is Have you guys seen I mean you can slap the naked sticker on there. They give you plenty I could not fit but I'm pretty sure we got one one time though Or maybe it was the dat cable that actually said like net gate on that little sticker and I was like me Somewhere yeah, we did we got sent something You know my I wonder if they had a run of them with net gate branding on it and then eventually they're just like screw it They're 10 g techs You got the net gate back scratcher. Yep I got a lot of focus net gate net gate scratches my back Have you guys seen 15 second ping spikes with macbooks on you?  I don't know And am I correct in saying that uh, unify was Founded by the same engineers that did the apple airports. Yes so the um, my understanding is the background for the unify itself is they were The developers of and this was a really popular wi-fi solution like what 10 12 13 years ago a long time ago Apple had there was it called airport extreme. I'm not Travis might remember he's more of a mac guy, but yeah, they're their old ones used to be They they had a really quality product before other companies had some more products that market space But then apple for reasons I don't understand because it would have been a good consumer space from the bn Got out of the wi-fi space and then they said well, we're smart. We know wi-fi. Let's go build a wi-fi company and Ubiquity was born. It's roughly the history I mean to See a lot of stuff. Oh Build it or buy it. Um, that always is the question. Is it worth it? I mean it comes down to for homeland people Yeah, the 6100 is going to be kind of pricey comes down to your budget You can build a pretty beefy machine to run pf sense It doesn't cost much. I mean a del 720 is not an ideal system run pf sense on you can get the little um The little uh quote on boxes Yeah, quote on boxes or something like that. You can get them $300 on amazon I think that about 300 right now on amazon are a little less and they're five Intel 2.5 gig ethernet ports Yeah, so there's definitely some You know merit to doing some of those because it's going to be a little bit cheaper Um question for steve and eric Do you guys want to keep going longer because I have to grab some water? Um, you wonder me? It's up to you. You guys want to keep going. I'll come back and we'll keep it going I don't have anything to do this morning. It's really cold out here in michigan And I don't want to do anything outside. Yeah, that's a nine. Is it up to nine? 23 sun's out.  It's when I got up this morning. I think it was nine when I looked dude It was really cold this morning. Mm-hmm um Oh f degrees So Yeah, that's In Celsius. Yeah in Celsius. That's negative Yeah negative in Celsius What would it be? Um About negative eight roughly No, no about negative five negative six Oh, it only shows partly because it doesn't show um It doesn't show the temperature history like I thought It's this whole week's been Bad, uh-huh, but oh by the way every morning when I got up Um, this is a known issue. They broke. They I just updated last night and they broke my sonology Oh, no, no, no, they're supposed to fix it. Um, it's a known issue So I there's a github report. I'm still waiting for them to agate update mine I'm waiting for them to add group time or group slider stills for the lights I'm hoping they add it Oh, this is an easy one to answer. How much your work is actually done on a job site? Extremely small amounts of it quite a bit of mine. Well, yeah, it depends what the job is Um, the one who still ends up having to do all the onsites Steve does more of the onsites, um, but when it comes like the consulting work we're doing We're not really onsite that notch, you know, most of that's remote because our, uh, people I mean, we do travel two sites, um as needed, but Like our general consulting is a lot of consult We work with a lot of other it people So usually they're the boots on the ground that are plugging things in And we're the ones just telling them how to configure it Yeah, typically Yep Oh man negative 25c. Yeah, that's really cold. I can't speak for that Recommendations for an open source firewall. No, not that does layers I mean Arista is the only thing you're gonna find that's The and I don't know what the current license status is But Arista the untangled is the only thing I'm gonna you're gonna find that I'm aware of that has the open source name And has some layer seven filtering features That are good They're in they're not perfect unless you install well, even if you saw a certificate You just have a different headache The untangled does allow you to install a certificate so you can actually do good filtering on it But we don't do filtering via the firewall We do it via the endpoint It's just a better way if you're gonna filter websites and web traffic and manage it It's just manage better at the endpoint than it is at the firewall. Yes Yeah, then marco says layer seven filtering. Yeah, exactly It kind of is and by the way, it's not free That's not free at all because the reason it's not free is because the feeds have a cost to get updated It's free if you use the unify, but yeah, but I said that's actually where That's where uh, I talked about that earlier in the stream We have clients who they're using a pf sense firewall And then after that they put the usg just to filter out the guest network because they had a problem With guests coming in and just opening up a laptop and torrenting things So they're getting notices like hey, we see you're downloading this movie We're not downloading that and they you know, they start digging into it and they're oh There's some ip on the guest network of some guy who came in and sat down with his laptop and just went down Yeah So, I mean there's stuff And I I was waiting for someone to throw this in there open sense has zen armor Which is I think they have a free and a paid version. I don't know None of it's great. That's the thing if you want good filtering Like the level that we use like for professionally Endpoint filtering is where it's at and someone commented already here Yes, if you're using tls 1.3 and it's properly implemented You're right if you have sni encrypted sni e sni is what it's called Where you actually encrypt the sni connection as in what the url is just throw all the filtering it out the door Matter of fact, this is one of the reasons your web application firewalls and things like that because of the challenges of breaking the traffic tls encryption is a When you get to tls the the latest version it double encrypts. There's a security key for your ssl layer There's another layer of encryption that's put into here And that is ephemeral that is only negotiated after the first negotiation of key sets Then it's thrown away though between your browser and a website. There's this extra key that can't be broken The way this is the stupid part and the way it works If you have um a proxy in between to do the filtering It terminates the connection unwraps it does the filtering rewraps it and sends it back. It's complicated. It's intensive It can't be done. I can't remember the name of the company. There's some there's some expensive commercial companies that do it I don't know too many firewalls. It's usually like a proxy setup to be able to break and uh do it And it also causes even more problems with things like qic I don't you have to drop back off of qic to make this work So it's just it's just not worth it. There's a reason we do endpoint filtering because that's what works This is why all is supposed to be done at the client level. Yep I did a video on qic a long time ago As a matter of fact, uh, I it has been a while since I looked at how entangle if they've ever solved this But one of the things they do when you turn it on Um, it actually forces qic to be disabled. So because it can't filter it properly It just like that's our answer We're just going to stop that traffic and qic traffic because if you block qic traffic, which is udp 4 4 3 Your browser will go bac