nottelling @ nottelling @lemmy.world

Posts

2

Comments

138

Joined

2 yr. ago

Devops will have more job openings, network will have a higher salary, especially as you become more senior.

Devops people who don't know networking and/or general traditional sysadmin work are a crushing pain in the ass for those of us who have to support them though. Networking background will make you better at devops, but not necessarily vice versa.

no. Arp bridges layer 1 and 2. It's switch local. With a VLAN, it becomes VLAN local, in the sense that 802.1q creates a "virtual" switch.

Broadcast traffic (such as DHCP) doesn't cross subnets without a router configured to forward it. It's one of the reasons subnets exist.

What in the world is "a proprietary OS I cannot trust". What's your actual threat model? Have you actually run any risk analyses or code audits against these OSes vs. (i assume) Linux to know for sure that you can trust any give FOSS OS? You do realize there's still an OS on your dumb switch, right?

This is a silly reason to not learn to manage your networking hardware.

A VLAN is (theoretically) equivalent to a physically separated layer 2 domain. The only way for machines to communicate between vlans is via a gateway interface.

If you don't trust the operating system, then you don't trust that it won't change it's IP/subnet to just hop onto the other network. Or even send packets with the other network's header and spoof packets onto the other subnets.

It's trivially easy to malform broadcast traffic and hop subnets, or to use various arp table attacks to trick the switching device. If you need to segregate traffic, you need a VLAN.

Edit: Should probably note that simply VLAN tagging from the endpoints on a trunk port isn't any better than subnetting, since an untrusted machine can just tag packets however it wants. You need to use an 802.1q aware switch and gateway to use VLANs effectively.

What you are asking will work. That's the whole point of subnets. No you don't need a VLAN to segregate traffic. It can be helpful for things like broadcast control.

However, you used the word "trust" which means that this is a security concern. If you are subnetting because of trust, then yes you absolutely do need to use VLANs.

Why are you so worried about bit rot? Aside from it not being a significant concern in general for decades, your backup solution should be using checksums anyway.

Just plug your extra disks in, use an LVM volume to make a big partition, and run daily incrementals, weekly and monthly fulls using something like Borg.

Then ship the full backups offsite because spinning disks (and SSDs) are terribly unreliable backup media and will fail when you need them.

1.20.1992:

In a 2012 Tumblr post, comedian Donovan Strain used the song's lyrics to determine that the titular "Good Day" likely occurred on January 20, 1992.[10] Strain wrote that this date was "the only day where Yo! MTV Raps was on air, it was a clear and smogless day in Los Angeles, beepers or pagers were commercially sold, Lakers beat the SuperSonics, and Ice Cube had no filming commitments".

Yup, was a Garmin. Part of me has been a little worried cause i can't find my way anywhere without GPS anymore, and Google has been getting shittier every day.

Hell, I remember the first time I used maps on a computer to plan and print a route, and the first time I could do it online with MapQuest.

Those were moments that the Internet really felt like the future.