bauruine

Consumer routers are all extremely limited when it comes to many connections. Even an Ubiquiti UDM Pro only allows 65536 by default.

About [3]. In Switzerland most of the fiber network is built by Swisscom, a former telecom monopoly and still 51% state owned company that also owns the old copper network. Other ISPs can use the network but everyone has their own router with an integrated ONT. ONTs as a separate device are pretty much unknown. On XGS-PON only certified ONTs are whitelisted [0] The wholesale price list is public [1] For actuall prices see [2] They differentiate mostly through support, price and additional services like TV. Data caps are basically unheard of (I don't call something like the fiber7 FUP of 600TB a data cap) and CGNAT is, while not uncommon, at most a phone call to disable it.

[0] https://www.swisscom.ch/dam/swisscom/en/ws/documents/E_BBCS-...

[1] https://www.swisscom.ch/content/dam/swisscom/de/ws/documents...

[2] https://en.comparis.ch/telecom/zuhause/angebote/internet-abo

ONT = The device you have at home where the fiber goes in (router / modem)

OLT = The device where the fiber goes in on the provider side

That's still an order of magnitude more than what you can get with rented servers. I pay between 0.2 and 0.4 per TB doing nearly 2000TB a month.

I did 150TB+ on a 40 Euro Hetzner server for years without any issue and also did the same amount in a similar price range on multiple different providers. The cloud and CDNs charge a huge markup.

You need to ask your ISP either to announce it with their own ASN or peer with you if you have your own.

You only need an ASN (and at least for RIPE it's a requirement) if you have multiple upstreams.

If you are in RIPE land you can get a PI (provider independent) /48 from a LIR (a RIPE member) and ask your datacenter to announce it.

https://www.ripe.net/manage-ips-and-asns/ipv6/request-ipv6/h...

Why use Tailscale if you can just setup a WireGuard tunnel?

They mention a 700$ AWS bill using S3 + Cloudfront (0.08 per GB) so about 700/0.08 ~9TB. In the range of what every 10$ VPS can do a month.

About what? Running Tor nodes is pretty boring as long as you don't get a police visit which I luckily didn't have till now.

It's the provider I'm using that does it for the Tor exits people host with them. I don't have my own IPv4 space, which is something like 8k$ for the smallest useful subnet and that's too expensive for a hobby.

They just have a Russian ASN and IP space but it's still located in Norway.

Most (all?) of them aren't in Russia. I run half of the "Russian" exits and they are in Norway they just use Russian IPs.

You can get 4x22TB (60TB with RAID5) for ~120$ so for less than 250$ you get the storage with geo redundancy.

https://www.hetzner.com/dedicated-rootserver/sx65/

Yes it's only IPv4 where it's practical to scan the whole address space in minutes but there are methods to find IPv6 addresses [0] certificate transpareny logs are also scanned for hostnames to get AAAA records. But from my experience it's multiple orders of magnitude less than v4.

[0]: http://netpatterns.blogspot.com/2016/01/the-rising-sophistic...

Most ISPs don't allow BGP announcements smaller than /48 so you don't get any usefull information from that.

Tails is a single machine that runs Tor you are mixing it up with Whonix which uses a gateway VM with Tor on it and a workstation VM that gets routed via the gateway.

There was a talk about this at this years FOSDEM [0]

Regarding the "Several European countries are betting on open-source software for their technology. In the United States, eh, not so much." I thought software developed by the US govt is public domain? At least that's how I remember sqlite got it's license because it was developed for the US Navy.

[0] https://fosdem.org/2024/schedule/event/fosdem-2024-3401-the-...

>At present – Thunderbird version 128.0 is only offered as direct download from thunderbird.net and not as an upgrade from Thunderbird version 115 or earlier. A future release will provide updates from earlier versions.

Not only peering agreements but 70%-90% [0] is directly served from your ISPs data center. google sends your ISP the server but rackspace, power and network is provided by the ISP.

[0] https://support.google.com/interconnect/answer/9058809?hl=en

If you pay 1000+ for the flight an additional 40 Euros isn't that bad.

That's called domain fronting [0] and is disabled by all big CDNs now.

[0]: https://en.wikipedia.org/wiki/Domain_fronting

>However, we cannot yet endorse its appropriateness for production systems without further peer review. [0]

Not an alternative and won't be for the foreseeable future.

[0]: https://github.com/francoismichel/ssh3?tab=readme-ov-file#-s...

Because nobody has written an sshd in a memory safe language with the same track record of safety as OpenSSH. I personally wouldn't trust a new sshd for a few years at least.

I assume it's for people who smoke.

The site is about 10 packs.

Norway is a NATO member. One of the founding members even. I hope they are on the "Do NOT invade" list.

The interface to DSL or coax only has to be a layer 2 bridge. You can put many modems into bridge mode so they don't do any layer 3 (IP) at all. For fiber, if you don't use PON at least, even a standard SFP(+) will do.

The article says that the "modems" affected are the Sagemcom F5380 and ActionTec T3200 which from a quick search looks like full fledged CPEs aka routers with a web interface and NAT, WIFI and all the stuff. They also write about Censys and banners so it looks like they had their web interface exposed to the Internet.

When I hear people say they use OpenWRT I assume they have their modem in bridge mode so that it doesn't even have an IP. OpenWRT would save you in that case.

This gets written all the time but not once have I seen HOW this should work. How can IPv4 magically talk to IPv7 without ANY changes to v4?