I maintain a double stack since 5 years and apart of some small nuisance I never had a real problem.
Ipv6 has been with us for more than 20 years, and It is true that to have that fine grain control in ipv6 you will need to go to a prosumer devices, but those are not that expensive and if you have a home lab you should check on them anyway....
To lose weight, everybody tells you that your metabolism start slowing down, so it takes longer for recovering from demanding sport activities.
What no body tells you is that this slowing down it also makes it for losing weight, you are not able to maintain that sport activity, takes longer to recover and in the long run it makes you difficult to lose weight without having a constant hungry feeling
The amount of swap used is not a good indicative, you need to check if there is a big exchange of data per second/minute. This is the only indicative of an out of memory system.
Sometimes, some regions of data memory "age" in ram without any access for a long periods of time, the the kernel here has two options, it could destroy the region knowing it could recreate it when needed (with some cpu overhead) or moved this to a swap file when the ram structure already in the swap file and release than section.
Which regions are good candidates for this? Buffers, specially in the fs, code region used for processes or even data sections of a long sleeping process...
Checking your data, if those 5gb are created over a long period of time I would not care a lot about it. Remeber how big the swap is, isn't that important vs real traffic (in or out) to it
OK, then assuming that you already discarded to run 2 cables and others in this thread provided a very good guide of how to do vlan, I can only recommend to setup some aggregation channels in your opnsense box and some switches to at least mitigated the performance hit.
Not now, of course, first you need yiur setup working
Mutations are passed into the next generation and if we assume that only chickens can laid chicken eggs then the paradox solution is as follows :
A proto chicken (soemthing extremely similar to a chicken but not yet one) laid a proto egg of which a chicken hatched and then it could laid a chicken egg.
Here there is a reduced scope version saying that proto chicken can lay eggs, which depends on the eggs definition may not be 100% acceptable
Got it, I thought it was a last segment attack (image substition) but now I see you are aiming to a fully supply chain attack.
And if you find an nswer to that, please let me know because this things have virtually not a solution that ticks all boxes
Assuming the risk of being naive... Why is checking the hash not enough?
Or didn't I understand your problem?
Install a mandatory VPN to your home, then at home setup a gateway to control everything.
Ensure you install a custom certificate from the gateway in the root certificate vault so you can do dpi even in the encrypted transmissions
Filtering is important but logging is even more important. Don't forget that
Don't know what to say,
I maintain a double stack since 5 years and apart of some small nuisance I never had a real problem.
Ipv6 has been with us for more than 20 years, and It is true that to have that fine grain control in ipv6 you will need to go to a prosumer devices, but those are not that expensive and if you have a home lab you should check on them anyway....
Things are mature despite your bad experiences
Well...
Ipv6 is needed for peer to peer networks, easier for vpn and full mndgoru if you want to have a vps...
With it, you can avoid Cgnats and home Nats and usually it is faster and more reliable than ipv4.
So, see it for yourself....
And no love for the old deluge?
To lose weight, everybody tells you that your metabolism start slowing down, so it takes longer for recovering from demanding sport activities.
What no body tells you is that this slowing down it also makes it for losing weight, you are not able to maintain that sport activity, takes longer to recover and in the long run it makes you difficult to lose weight without having a constant hungry feeling
The amount of swap used is not a good indicative, you need to check if there is a big exchange of data per second/minute. This is the only indicative of an out of memory system.
Sometimes, some regions of data memory "age" in ram without any access for a long periods of time, the the kernel here has two options, it could destroy the region knowing it could recreate it when needed (with some cpu overhead) or moved this to a swap file when the ram structure already in the swap file and release than section.
Which regions are good candidates for this? Buffers, specially in the fs, code region used for processes or even data sections of a long sleeping process...
Checking your data, if those 5gb are created over a long period of time I would not care a lot about it. Remeber how big the swap is, isn't that important vs real traffic (in or out) to it
Please, develop that idea.
I fail to see the connection with our discussion
I have the impression you don't know in which world you live.
Nobody is banalizing anything, without an army you are simply a passive subject subjected to external forces.
Palestine, Venezuela, Ukraine, Libia, Syria...
You know why those countries are in chaos and however north korea isn't?
You should think about the world again
The alternative if somebody attacks you is to surrender and/or be defeated.
And usually the losers have to repay the legit war, so your life is going to chango to the worse by a a lot...
OK, then assuming that you already discarded to run 2 cables and others in this thread provided a very good guide of how to do vlan, I can only recommend to setup some aggregation channels in your opnsense box and some switches to at least mitigated the performance hit.
Not now, of course, first you need yiur setup working
Then I really recommend you not to play with vlan and use different eth ports as different segments.
The performance will be significant better this way
Just for me to fully understand your setup.
How many eth ports do you have in your opnsense box?
Try to find a rev3, the cpu upgrade really is really worthy
Which hw revision?
If it is a ver3 it is the same I have, good for FW and red services, you can make complex setups.
It is a bit short on cpu for ips systems(suricata and zenarmor) , but it is able to do dns filtering via adguard or unbound.
100€ sounds good to me if it comes with AP, people here are happy with that brand
Good luck
Take a sophos second hand FW.
Intel nic, low power consumption processors and full opnsense support.
Go at least for 4gb ram and the most powerful processor you can safely get. It will come with a lot of eth ports too on top.
And it will cost close to 100€, probably less if you struck a good deal
I could bet that this is not 100% true.
The single thread part only is the netdata used for ids/ips. Pure FW and nat goes multicore
Dawkins solved it time ago.
Mutations are passed into the next generation and if we assume that only chickens can laid chicken eggs then the paradox solution is as follows :
A proto chicken (soemthing extremely similar to a chicken but not yet one) laid a proto egg of which a chicken hatched and then it could laid a chicken egg.
Here there is a reduced scope version saying that proto chicken can lay eggs, which depends on the eggs definition may not be 100% acceptable
https://youtu.be/h0CbqV8pPTU