new post: networking

blog/index.html

@@ -548,6 +548,11 @@ pre[class*="language-diff-"] {
 	<details><summary>2025</summary>
 	<ol reversed="" class="archivelist">
 		
+			<li class="archivelist-item">
+				<a href="/networking/" class="archivelist-link">Networking</a><br>
+				<time class="archivelist-date" datetime="2025-05-11">11 May 2025</time>
+			</li>
+		
 			<li class="archivelist-item">
 				<a href="/gitea/" class="archivelist-link">Gitea</a><br>
 				<time class="archivelist-date" datetime="2025-04-20">20 April 2025</time>

feed/feed.xml

@@ -5,11 +5,26 @@
   <subtitle>The long-running and erratically updated blog of Kathleen Fitzpatrick.</subtitle>
   <link href="https://kfitz.info/feed/feed.xml" rel="self" />
   <link href="https://kfitz.info/" />
-  <updated>2025-04-20T14:56:45Z</updated>
+  <updated>2025-05-11T12:39:42Z</updated>
   <id>https://kfitz.info/</id>
   <author>
     <name>Kathleen Fitzpatrick</name>
   </author>
+  <entry>
+    <title>Networking</title>
+    <link href="https://kfitz.info/networking/" />
+    <updated>2025-05-11T12:39:42Z</updated>
+    <id>https://kfitz.info/networking/</id>
+    <content type="html">&lt;p&gt;This post is going to put my full nerdiness and my full cluelessness simultaneously on display, but I am building a home network that is going to include a server hosting much of my online presence, and I am running into some issues that are making the limitations in my knowledge all too apparent. (Also the limitations in internet search in the year of our lord 2025: I can find answers for solving issues in specific one-to-one connections within this network, but they leave out other crucial components such that I can&#39;t get the whole thing going all at the same time.) So I am here, appealing to you, to help me think this through.&lt;/p&gt;
+&lt;p&gt;I have AT&amp;amp;T fiber coming into my house, with a BGW320 modem/router combo. I have a 3-device Eero mesh wifi network, with the gateway Eero connected to the BGW320 via ethernet. I have a Synology NAS connected to the Eero gateway via ethernet, and I&#39;m soon going to have a mini server that... will get connected to all of this somehow that I haven&#39;t yet figured out.&lt;/p&gt;
+&lt;p&gt;I have turned off the wifi radios on the BGW320, so that I only have the wifi network provided by the Eeros. Right now, I have IP Passthrough turned on on the BGW320, set to DHCPS-dynamic; the WAN IP address is being picked up properly by the gateway Eero and the WAN type on the Eero is set to DHCP (Default). The bajillion devices in my house are being doled out IP addresses appropriately vis DHCP, including the NAS, and are for the most part getting good bandwidth (though the gateway Eero seems to have to reconnect to the internet periodically, so there&#39;s clearly some setting in the BGW320 that needs futzing with already).&lt;/p&gt;
+&lt;p&gt;But here&#39;s where things start to get complicated: I have purchased a block of 5 static IP addresses from AT&amp;amp;T (really 8, but one gets assigned to the router and 2 are unusable), with the intent of assigning the NAS and the forthcoming server a static IP. So in the BGW320 admin interface, I have both a private LAN subnet and DHCP range (of the &lt;a href=&quot;http://192.168.1.XXX&quot;&gt;192.168.1.XXX&lt;/a&gt; variety) and a public subnet that includes my public gateway address, my public subnet mask, and the 5-address DHCP range.&lt;/p&gt;
+&lt;p&gt;In passthrough mode, the BGW320 just hands off all DHCP stuff to the Eero mesh, which has the gateway address of 192.168.4.1 (the Eero default). In the Eero admin interface, I can use Reservations &amp;amp; port forwarding to assign a static IP address to a device, like the NAS. However, my static IP addresses are outside the Eero&#39;s subnet range, so it won&#39;t accept them.&lt;/p&gt;
+&lt;p&gt;On the NAS, I can use the admin interface to assign the static IP address right there, and it will accept the address, but doing so breaks a bunch of connections between the NAS and the outside world, like Synology&#39;s software updaters, whose IP addresses it cannot resolve. I am guessing that this is because assigning the static IP on the device breaks the DNS connection, but it&#39;s also possible that it&#39;s got something to do with the way I&#39;ve set up the NAS&#39;s firewall rules, which, ugh.&lt;/p&gt;
+&lt;p&gt;Anyhow, I am wondering at this point whether going with IP Passthrough on the BGW320 is at the root of the problem. If instead I let the AT&amp;amp;T device handle all the WAN/DHCP stuff, and put the Eeros into bridge mode, will the static IP addresses become assignable to devices via the BGW320? If so, will devices connected to the private subnet via the Eeros still be able to talk to the devices on the public subnet? And aside from the &lt;a href=&quot;https://support.eero.com/hc/en-us/articles/115000825206-What-advanced-features-do-I-lose-access-to-if-I-put-my-eeros-into-bridge-mode&quot;&gt;&amp;quot;advanced features&amp;quot; that Eero tells me I&#39;ll lose if I go the bridge mode route&lt;/a&gt;, are there other drawbacks?&lt;/p&gt;
+&lt;p&gt;I think I&#39;ve talked myself into trying it and seeing what happens... but I&#39;m going to pause for a bit to see if anyone has other suggestions.&lt;/p&gt;
+</content>
+  </entry>
   <entry>
     <title>Gitea</title>
     <link href="https://kfitz.info/gitea/" />
@@ -131,22 +146,6 @@
 &lt;p&gt;That&#39;s on me, not them. I&#39;m thinking a lot this morning about what it would take for me to genuinely shut everything down and walk away from it all, even for a couple of days. It&#39;s tough to imagine.&lt;/p&gt;
 &lt;p&gt;Anyhow, Burkeman goes on from this passage to talk about the &amp;quot;pathological productivity&amp;quot; inspired in no small part by the collision of Calvinism and capitalism, and the ways that one&#39;s &amp;quot;tendency toward virtuous striving and thriftiness&amp;quot; were -- ahem, &lt;em&gt;are&lt;/em&gt; -- imagined to be a sign of one&#39;s state of salvation. Which rang all kinds of bells for me, and made me go in search of &lt;a href=&quot;https://kfitz.info/outward-and-visible-signs/&quot;&gt;this blog post from 2012&lt;/a&gt;, which reminded me how little I&#39;ve learned in the last twelve years, or rather how much I&#39;ve had to learn again and again and again.&lt;/p&gt;
 &lt;p&gt;Rest for its own sake. Rest for purposes that are non- -- or even anti- -- instrumentalist. All of this requires the ability to understand the value of the human in the world as about &lt;em&gt;being&lt;/em&gt; rather than &lt;em&gt;doing&lt;/em&gt;. And this is hard, hard, hard.&lt;/p&gt;
-</content>
-  </entry>
-  <entry>
-    <title>Preservation and Care</title>
-    <link href="https://kfitz.info/preservation-care/" />
-    <updated>2024-12-20T19:04:19Z</updated>
-    <id>https://kfitz.info/preservation-care/</id>
-    <content type="html">&lt;p&gt;I&#39;m finally getting a chance to do some sustained reading, now that my winter break has begun, and so managed at last to dive into &lt;a href=&quot;https://lil.law.harvard.edu/century-scale-storage/&quot;&gt;Maxwell Neely-Cohen&#39;s &amp;quot;Century-Scale Storage&amp;quot;&lt;/a&gt;. It&#39;s good to see foregrounded the idea that preservation is not a matter of technological development (quite the contrary) but of human care buttressed by financial investment. I found myself particularly struck by this:&lt;/p&gt;
-&lt;blockquote&gt;
-&lt;p&gt;The advantage of print is that it can be a practice. What was printed before can be reprinted. The downside is that, in order to take advantage of the full preservational powers of the codex form, what you are saving and printing has to be valued by the public.&lt;/p&gt;
-&lt;/blockquote&gt;
-&lt;p&gt;In the digital realm, of course, we&#39;ve long heard that Lots of Copies Keep Stuff Safe -- and it&#39;s true -- but we still have to care enough to make those copies, and to ensure that they&#39;re properly stored and checked and migrated as needed. Perhaps the public might be enlisted in preservation efforts by being &lt;em&gt;encouraged&lt;/em&gt; to make copies of cultural objects they value rather than by being &lt;em&gt;punished&lt;/em&gt; for doing so. As Neely-Cohen notes, &amp;quot;The most enduring decentralized [preservation] efforts don’t owe their success to technological or organizational innovation, but rather by having enlisted generations of people with an emotional and intellectual investment in their worth.&amp;quot;&lt;/p&gt;
-&lt;p&gt;The scale of the digital preservation problem is going to require massive investment, and the political will necessary to generate it -- a requirement easily generative of despair here at the end of 2024. But here we are, with stuff we care about and want to keep safe.&lt;/p&gt;
-&lt;blockquote&gt;
-&lt;p&gt;[I]f you, an individual reading this, want to store something and ensure it survives a century, what should you do? More than one thing. You should combine every method available to you, layers of backups, armies of copies, and most of all, practices and sites that encourage a culture of watchfulness and care. You should fight for a society that values the sciences and arts and that which they produce. And then, each day, you should do whatever it takes to keep your something safe, do whatever you can to empower the next generation to do the same, and then entrust that battle to them, to repeat into futurity.&lt;/p&gt;
-&lt;/blockquote&gt;
 </content>
   </entry>
 </feed>

feed/masto.xml

@@ -545,13 +545,21 @@ pre[class*="language-diff-"] {
 	<subtitle>The long-running and erratically updated blog of Kathleen Fitzpatrick.</subtitle>
 	<link href="https://kfitz.info/feed/masto.xml" rel="self"/>
 	<link href="https://kfitz.info/"/>
-	<updated>2025-04-20T14:56:45Z</updated>
+	<updated>2025-05-11T12:39:42Z</updated>
 	<id>https://kfitz.info/</id>
 	<author>
 		<name>Kathleen Fitzpatrick</name>
 		<email>kfitz@kfitz.info</email>
 	</author>
 	
+	<entry>
+		<title>Networking</title>
+		<link href="https://kfitz.info/networking/"/>
+		<updated>2025-05-11T12:39:42Z</updated>
+		<id>https://kfitz.info/networking/</id>
+		<content type="html">This post is going to put my full nerdiness and my full cluelessness simultaneously on display, but I am building a home network that is going to include a server hosting much of my online presence, and I am running into some issues that are...</content>
+	</entry>
+	
 	<entry>
 		<title>Gitea</title>
 		<link href="https://kfitz.info/gitea/"/>

gitea/index.html

@@ -676,7 +676,7 @@ hr.new {
 <p>This morning, though, I spun up a <a href="https://about.gitea.com">Gitea</a> instance on a much smaller Digital Ocean droplet, which will run $14/month. It's super zippy and very lightweight, and has allowed me to migrate my repositories from GitHub quite seamlessly. And there's lots of room to grow, resource-wise, so if those friends decide they want to test things out I can invite them to join me.</p>
 <p>The next thing I want to investigate in whether I can run that Gitea instance on a shared server, using one droplet to host multiple applications and sites...</p>
 
-<ul class="links-nextprev"><li class="links-nextprev-prev">← Previous<br> <a href="/neh-path-forward/">On the NEH and Our Path Forward</a></li>
+<ul class="links-nextprev"><li class="links-nextprev-prev">← Previous<br> <a href="/neh-path-forward/">On the NEH and Our Path Forward</a></li><li class="links-nextprev-next">Next →<br><a href="/networking/">Networking</a></li>
 </ul>
 
 <hyvor-talk-comments website-id="9100" page-id="/gitea/"></hyvor-talk-comments>

index.html

@@ -14,7 +14,7 @@
 		
 		
 		
-		<style>.postlist { counter-reset: start-from 1801 }
+		<style>.postlist { counter-reset: start-from 1802 }
 /* This is an arbitrary CSS string added to the bundle */
 /* Defaults */
 @font-face {
@@ -560,6 +560,11 @@ Director, <a href="https://hcommons.org">Knowledge Commons</a>.</p>
 
 <ol reversed="" class="postlist">
 
+	<li class="postlist-item">
+		<a href="/networking/" class="postlist-link">Networking</a>
+		<time class="postlist-date" datetime="2025-05-11">May 2025</time>
+	</li>
+
 	<li class="postlist-item">
 		<a href="/gitea/" class="postlist-link">Gitea</a>
 		<time class="postlist-date" datetime="2025-04-20">April 2025</time>
@@ -580,17 +585,12 @@ Director, <a href="https://hcommons.org">Knowledge Commons</a>.</p>
 		<time class="postlist-date" datetime="2025-02-18">February 2025</time>
 	</li>
 
-	<li class="postlist-item">
-		<a href="/equality-justice/" class="postlist-link">Equality and Justice</a>
-		<time class="postlist-date" datetime="2025-02-17">February 2025</time>
-	</li>
-
 </ol>
 
 
 
 
-<p>1795 more posts can be found in <a href="/blog/">the archive</a>.</p>
+<p>1796 more posts can be found in <a href="/blog/">the archive</a>.</p>
 
 
 

networking/index.html

@@ -0,0 +1,712 @@
+<!doctype html>
+<html lang="en">
+	<head>
+		<meta charset="utf-8">
+		<meta name="viewport" content="width=device-width, initial-scale=1.0">
+		<title>Networking</title>
+		<meta name="description" content="The long-running and erratically updated blog of Kathleen Fitzpatrick.">
+		<link rel="alternate" href="feed/feed.xml" type="application/atom+xml" title="kfitz">
+		<script async="" src="https://talk.hyvor.com/embed/embed.js" type="module"></script>
+		<link rel="webmention" href="https://webmention.io/kfitz.info/webmention">
+		<link rel="pingback" href="https://webmention.io/kfitz.info/xmlrpc">
+		
+		
+		
+		
+		
+		<style>/**
+ * okaidia theme for JavaScript, CSS and HTML
+ * Loosely based on Monokai textmate theme by http://www.monokai.nl/
+ * @author ocodia
+ */
+
+code[class*="language-"],
+pre[class*="language-"] {
+	color: #f8f8f2;
+	background: none;
+	text-shadow: 0 1px rgba(0, 0, 0, 0.3);
+	font-family: Consolas, Monaco, 'Andale Mono', 'Ubuntu Mono', monospace;
+	font-size: 1em;
+	text-align: left;
+	white-space: pre;
+	word-spacing: normal;
+	word-break: normal;
+	word-wrap: normal;
+	line-height: 1.5;
+
+	-moz-tab-size: 4;
+	-o-tab-size: 4;
+	tab-size: 4;
+
+	-webkit-hyphens: none;
+	-moz-hyphens: none;
+	-ms-hyphens: none;
+	hyphens: none;
+}
+
+/* Code blocks */
+pre[class*="language-"] {
+	padding: 1em;
+	margin: .5em 0;
+	overflow: auto;
+	border-radius: 0.3em;
+}
+
+:not(pre) > code[class*="language-"],
+pre[class*="language-"] {
+	background: #272822;
+}
+
+/* Inline code */
+:not(pre) > code[class*="language-"] {
+	padding: .1em;
+	border-radius: .3em;
+	white-space: normal;
+}
+
+.token.comment,
+.token.prolog,
+.token.doctype,
+.token.cdata {
+	color: #8292a2;
+}
+
+.token.punctuation {
+	color: #f8f8f2;
+}
+
+.token.namespace {
+	opacity: .7;
+}
+
+.token.property,
+.token.tag,
+.token.constant,
+.token.symbol,
+.token.deleted {
+	color: #f92672;
+}
+
+.token.boolean,
+.token.number {
+	color: #ae81ff;
+}
+
+.token.selector,
+.token.attr-name,
+.token.string,
+.token.char,
+.token.builtin,
+.token.inserted {
+	color: #a6e22e;
+}
+
+.token.operator,
+.token.entity,
+.token.url,
+.language-css .token.string,
+.style .token.string,
+.token.variable {
+	color: #f8f8f2;
+}
+
+.token.atrule,
+.token.attr-value,
+.token.function,
+.token.class-name {
+	color: #e6db74;
+}
+
+.token.keyword {
+	color: #66d9ef;
+}
+
+.token.regex,
+.token.important {
+	color: #fd971f;
+}
+
+.token.important,
+.token.bold {
+	font-weight: bold;
+}
+.token.italic {
+	font-style: italic;
+}
+
+.token.entity {
+	cursor: help;
+}
+/*
+ * New diff- syntax
+ */
+
+pre[class*="language-diff-"] {
+	--eleventy-code-padding: 1.25em;
+	padding-left: var(--eleventy-code-padding);
+	padding-right: var(--eleventy-code-padding);
+}
+.token.deleted {
+	background-color: hsl(0, 51%, 37%);
+	color: inherit;
+}
+.token.inserted {
+	background-color: hsl(126, 31%, 39%);
+	color: inherit;
+}
+
+/* Make the + and - characters unselectable for copy/paste */
+.token.prefix.unchanged,
+.token.prefix.inserted,
+.token.prefix.deleted {
+	-webkit-user-select: none;
+	user-select: none;
+	display: inline-flex;
+	align-items: center;
+	justify-content: center;
+	padding-top: 2px;
+	padding-bottom: 2px;
+}
+.token.prefix.inserted,
+.token.prefix.deleted {
+	width: var(--eleventy-code-padding);
+	background-color: rgba(0,0,0,.2);
+}
+
+/* Optional: full-width background color */
+.token.inserted:not(.prefix),
+.token.deleted:not(.prefix) {
+	display: block;
+	margin-left: calc(-1 * var(--eleventy-code-padding));
+	margin-right: calc(-1 * var(--eleventy-code-padding));
+	text-decoration: none; /* override del, ins, mark defaults */
+	color: inherit; /* override del, ins, mark defaults */
+}
+/* This is an arbitrary CSS string added to the bundle */
+/* Defaults */
+@font-face {
+	font-family: "Atkinson Hyperlegible";
+	src: url('/css/files/atkinson-hyperlegible-latin-400-normal.woff2') format('woff2');
+	font-display: swap;
+}
+@font-face {
+	font-family: "Atkinson Hyperlegible";
+	font-weight: bold;
+	src: url('/css/files/atkinson-hyperlegible-latin-700-normal.woff2') format('woff2');
+	font-display: swap;
+}
+@font-face {
+	font-family: "Atkinson Hyperlegible";
+	font-style: italic
+	src: url('/css/files/atkinson-hyperlegible-latin-400-italic.woff2') format('woff2');
+	font-display: swap;
+}
+
+:root {
+	--font-family: "Atkinson Hyperlegible", -apple-system, system-ui, sans-serif;
+	--font-family-monospace: Consolas, Menlo, Monaco, Andale Mono WT, Andale Mono, Lucida Console, Lucida Sans Typewriter, DejaVu Sans Mono, Bitstream Vera Sans Mono, Liberation Mono, Nimbus Mono L, Courier New, Courier, monospace;
+  font-size: 18px;
+}
+
+/* Theme colors */
+:root {
+	--color-gray-20: #e0e0e0;
+	--color-gray-50: #C0C0C0;
+	--color-gray-90: #333;
+
+	--background-color: #fff;
+
+	--text-color: var(--color-gray-90);
+	--text-color-link: #d61d4a;
+	--text-color-link-active: #853439;
+	--text-color-link-visited: #e8325e;
+
+	--syntax-tab-size: 2;
+}
+
+@media (prefers-color-scheme: dark) {
+	:root {
+		--color-gray-20: #e0e0e0;
+		--color-gray-50: #C0C0C0;
+		--color-gray-90: #dad8d8;
+
+		/* --text-color is assigned to --color-gray-_ above */
+		--text-color-link: #1493fb;
+		--text-color-link-active: #6969f7;
+		--text-color-link-visited: #a6a6f8;
+
+		--background-color: #15202b;
+	}
+}
+
+
+/* Global stylesheet */
+* {
+	box-sizing: border-box;
+}
+
+@view-transition {
+	navigation: auto;
+}
+
+html,
+body {
+	padding: 0;
+	margin: 0 auto;
+	font-family: var(--font-family);
+	color: var(--text-color);
+	background-color: var(--background-color);
+}
+html {
+	overflow-y: scroll;
+}
+body {
+	max-width: 40em;
+}
+
+/* https://www.a11yproject.com/posts/how-to-hide-content/ */
+.visually-hidden {
+	clip: rect(0 0 0 0);
+	clip-path: inset(50%);
+	height: 1px;
+	overflow: hidden;
+	position: absolute;
+	white-space: nowrap;
+	width: 1px;
+}
+
+p:last-child {
+	margin-bottom: 0;
+}
+p {
+	line-height: 1.5;
+}
+
+li {
+	line-height: 1.5;
+}
+
+a[href] {
+	color: var(--text-color-link);
+}
+a[href]:visited {
+	color: var(--text-color-link-visited);
+}
+a[href]:hover,
+a[href]:active {
+	color: var(--text-color-link-active);
+}
+
+main,
+footer {
+	padding: 1rem;
+}
+main :first-child {
+	margin-top: 0;
+}
+
+header {
+	border-bottom: 1px dashed var(--color-gray-20);
+}
+header:after {
+	content: "";
+	display: table;
+	clear: both;
+}
+
+footer {
+	border-top: 1px dashed var(--color-gray-50);
+}
+
+.links-nextprev {
+	display: flex;
+	justify-content: space-between;
+	gap: .5em 1em;
+	list-style: "";
+	border-top: 1px dashed var(--color-gray-20);
+	padding: 1em 0;
+}
+.links-nextprev > * {
+	flex-grow: 1;
+}
+.links-nextprev-next {
+	text-align: right;
+}
+
+table {
+	margin: 1em 0;
+}
+table td,
+table th {
+	padding-right: 1em;
+}
+
+pre,
+code {
+	font-family: var(--font-family-monospace);
+}
+pre:not([class*="language-"]) {
+	margin: .5em 0;
+	line-height: 1.375; /* 22px /16 */
+	-moz-tab-size: var(--syntax-tab-size);
+	-o-tab-size: var(--syntax-tab-size);
+	tab-size: var(--syntax-tab-size);
+	-webkit-hyphens: none;
+	-ms-hyphens: none;
+	hyphens: none;
+	direction: ltr;
+	text-align: left;
+	white-space: pre;
+	word-spacing: normal;
+	word-break: normal;
+	overflow-x: auto;
+}
+code {
+	word-break: break-all;
+}
+
+/* Header */
+header {
+	display: flex;
+	gap: 1em .5em;
+	flex-wrap: wrap;
+	align-items: center;
+	padding: 1em;
+}
+.home-link {
+	font-size: 1.5em; /* 16px /16 */
+	font-weight: 700;
+	margin-right: 2em;
+}
+.home-link:link:not(:hover) {
+	text-decoration: none;
+}
+
+/* Nav */
+.nav {
+	display: flex;
+	padding: 0;
+	margin: 0;
+	list-style: none;
+}
+.nav-item {
+	display: inline-block;
+	margin-right: 1em;
+}
+.nav-item a[href]:not(:hover) {
+	text-decoration: none;
+}
+.nav a[href][aria-current="page"] {
+	text-decoration: underline;
+}
+
+/* Posts list */
+.postlist {
+	list-style: none;
+	padding: 0;
+	padding-left: 1.5rem;
+}
+.postlist-item {
+	display: flex;
+	flex-wrap: wrap;
+	align-items: baseline;
+	counter-increment: start-from -1;
+	margin-bottom: 1em;
+}
+.postlist-item:before {
+	display: inline-block;
+	pointer-events: none;
+	content: "" counter(start-from, decimal-leading-zero) ". ";
+	line-height: 100%;
+	text-align: right;
+	margin-left: -1.5rem;
+}
+.postlist-date,
+.postlist-item:before {
+	font-size: 0.8125em; /* 13px /16 */
+	color: var(--color-gray-90);
+}
+.postlist-date {
+	word-spacing: -0.5px;
+}
+.postlist-link {
+	font-size: 1.1875em; /* 19px /16 */
+	font-weight: 700;
+	flex-basis: calc(100% - 1.5rem);
+	padding-left: .25em;
+	padding-right: .5em;
+	text-underline-position: from-font;
+	text-underline-offset: 0;
+	text-decoration-thickness: 1px;
+}
+.postlist-item-active .postlist-link {
+	font-weight: bold;
+}
+
+/* Archive list */
+.archivelist {
+	padding: 0;
+	padding-left: 2.5rem;
+}
+.archivelist-item {
+	align-items: baseline;
+	margin-bottom: 1em;
+}
+.archivelist-item::marker {
+	text-align: right;
+	margin-left: -1.5rem;
+	font-size: 0.8125em; /* 13px /16 */
+	color: var(--color-gray-90);
+}
+.archivelist-date {
+	font-size: 0.8125em; /* 13px /16 */
+	color: var(--color-gray-90);
+	word-spacing: -0.5px;
+}
+.archivelist-link {
+	font-size: 1.1875em; /* 19px /16 */
+	font-weight: 700;
+	flex-basis: calc(100% - 1.5rem);
+	padding-left: .25em;
+	padding-right: .5em;
+	text-underline-position: from-font;
+	text-underline-offset: 0;
+	text-decoration-thickness: 1px;
+}
+.archivelist-item-active .archivelist-link {
+	font-weight: bold;
+}
+
+
+/* Tags */
+.post-tag {
+	display: inline-flex;
+	align-items: center;
+	justify-content: center;
+	text-transform: capitalize;
+	font-style: italic;
+}
+.postlist-item > .post-tag {
+	align-self: center;
+}
+
+/* Tags list */
+.post-metadata {
+	display: inline-flex;
+	flex-wrap: wrap;
+	gap: .5em;
+	list-style: none;
+	border-top: 1px dashed var(--color-gray-20);
+	border-bottom: 1px dashed var(--color-gray-20);
+	padding: 3px 0px 3px 0px;
+	margin: 0;
+	font-size: .8em;
+}
+.post-metadata time {
+	margin-right: 1em;
+}
+
+/* Direct Links / Markdown Headers */
+.header-anchor {
+	text-decoration: none;
+	font-style: normal;
+	font-size: 1em;
+	margin-left: .1em;
+}
+a[href].header-anchor,
+a[href].header-anchor:visited {
+	color: transparent;
+}
+a[href].header-anchor:focus,
+a[href].header-anchor:hover {
+	text-decoration: underline;
+}
+a[href].header-anchor:focus,
+:hover > a[href].header-anchor {
+	color: #aaa;
+}
+
+h2 + .header-anchor {
+	font-size: 1.5em;
+	font-weight: bold;
+}
+
+h1 {
+	font-weight: bolder;
+}
+
+summary {
+	font-size: 1.5em;
+	font-weight: bold;
+	margin-bottom: .5em;
+}
+
+img {
+	display: block;
+	margin-left: auto;
+	margin-right: auto;
+}
+
+blockquote {
+	display: block;
+	margin-left: 2em;
+	margin-right: 3em;
+	padding-left: 10px;
+	border-left: 10px solid var(--text-color-link);
+}
+
+hr.new {
+	border: none;
+	border-top: 1px dashed var(--color-gray-50);
+}
+/* Webmention Section */
+
+.webmentions {
+	display:block;
+	text-align: left;
+}
+.webmentions__facepile {
+	display:flex;
+	align-items: center;
+	flex-wrap: wrap;
+}
+.webmentions__face {
+	width: 2rem;
+	height: 2rem;
+	border-radius: 50%;
+	object-fit: cover;
+	flex: none;
+}
+.webmentions__list {
+	list-style-type: none;
+	padding:0;
+}
+.webmentions__item {
+	margin-bottom: 2rem;
+}
+
+/* Single Webmention */
+
+.webmention {
+	display:block;
+}
+.webmention__meta,
+.webmention__author {
+	display: flex;
+	align-items: center;
+	flex-wrap: wrap;
+}
+.webmention__meta {
+	margin-bottom:.5rem;
+}
+.webmention__author {
+	margin-right:.25rem;
+}
+.webmention__author__photo {
+	height: 3rem;
+	width: 3rem;
+	border-radius: 50%;
+	object-fit: cover;
+	margin-right:.5rem;
+}
+.webmention__pubdate {
+	font-style: italic;
+}
+/* Message Box */
+.message-box {
+	--color-message-box: #ffc;
+
+	display: block;
+	background-color: var(--color-message-box);
+	color: var(--color-gray-90);
+	padding: 1em 0.625em; /* 16px 10px /16 */
+}
+.message-box ol {
+	margin-top: 0;
+}
+
+@media (prefers-color-scheme: dark) {
+	.message-box {
+		--color-message-box: #082840;
+	}
+}</style>
+	</head>
+	<body>
+		<a href="#skip" class="visually-hidden">Skip to main content</a>
+
+		<header>
+			<a href="/" class="home-link">kfitz</a>
+			<nav>
+				<h2 class="visually-hidden" id="top-level-navigation-menu">Top level navigation menu</h2>
+				<ul class="nav">
+					<li class="nav-item"><a href="/">Home</a></li>
+					<li class="nav-item"><a href="/blog/">Archive</a></li>
+					<li class="nav-item"><a href="/about/">About</a></li>
+					<li class="nav-item"><a href="/projects/">Projects</a></li>
+					<li class="nav-item"><a href="/presentations/">Presentations</a></li>
+					<li class="nav-item"><a href="/teaching/">Teaching</a></li>
+					<li class="nav-item"><a href="/feed/feed.xml">Feed</a></li>
+				</ul>
+			</nav>
+		</header>
+
+		<link href="/pagefind/pagefind-ui.css" rel="stylesheet">
+		<script src="/pagefind/pagefind-ui.js"></script>
+		<div id="search"></div>
+		<script>
+			window.addEventListener('DOMContentLoaded', (event) => {
+				new PagefindUI({ element: "#search", showSubResults: true });
+			});
+		</script>
+
+		<main id="skip">
+			<heading-anchors>
+				
+<h1 id="networking">Networking</h1>
+
+<ul class="post-metadata">
+	<li><time datetime="2025-05-11">11 May 2025</time></li>
+	<li><a href="/tags/tinkering/" class="post-tag">tinkering</a></li>
+</ul>
+
+<p>This post is going to put my full nerdiness and my full cluelessness simultaneously on display, but I am building a home network that is going to include a server hosting much of my online presence, and I am running into some issues that are making the limitations in my knowledge all too apparent. (Also the limitations in internet search in the year of our lord 2025: I can find answers for solving issues in specific one-to-one connections within this network, but they leave out other crucial components such that I can't get the whole thing going all at the same time.) So I am here, appealing to you, to help me think this through.</p>
+<p>I have AT&amp;T fiber coming into my house, with a BGW320 modem/router combo. I have a 3-device Eero mesh wifi network, with the gateway Eero connected to the BGW320 via ethernet. I have a Synology NAS connected to the Eero gateway via ethernet, and I'm soon going to have a mini server that... will get connected to all of this somehow that I haven't yet figured out.</p>
+<p>I have turned off the wifi radios on the BGW320, so that I only have the wifi network provided by the Eeros. Right now, I have IP Passthrough turned on on the BGW320, set to DHCPS-dynamic; the WAN IP address is being picked up properly by the gateway Eero and the WAN type on the Eero is set to DHCP (Default). The bajillion devices in my house are being doled out IP addresses appropriately vis DHCP, including the NAS, and are for the most part getting good bandwidth (though the gateway Eero seems to have to reconnect to the internet periodically, so there's clearly some setting in the BGW320 that needs futzing with already).</p>
+<p>But here's where things start to get complicated: I have purchased a block of 5 static IP addresses from AT&amp;T (really 8, but one gets assigned to the router and 2 are unusable), with the intent of assigning the NAS and the forthcoming server a static IP. So in the BGW320 admin interface, I have both a private LAN subnet and DHCP range (of the <a href="http://192.168.1.XXX">192.168.1.XXX</a> variety) and a public subnet that includes my public gateway address, my public subnet mask, and the 5-address DHCP range.</p>
+<p>In passthrough mode, the BGW320 just hands off all DHCP stuff to the Eero mesh, which has the gateway address of 192.168.4.1 (the Eero default). In the Eero admin interface, I can use Reservations &amp; port forwarding to assign a static IP address to a device, like the NAS. However, my static IP addresses are outside the Eero's subnet range, so it won't accept them.</p>
+<p>On the NAS, I can use the admin interface to assign the static IP address right there, and it will accept the address, but doing so breaks a bunch of connections between the NAS and the outside world, like Synology's software updaters, whose IP addresses it cannot resolve. I am guessing that this is because assigning the static IP on the device breaks the DNS connection, but it's also possible that it's got something to do with the way I've set up the NAS's firewall rules, which, ugh.</p>
+<p>Anyhow, I am wondering at this point whether going with IP Passthrough on the BGW320 is at the root of the problem. If instead I let the AT&amp;T device handle all the WAN/DHCP stuff, and put the Eeros into bridge mode, will the static IP addresses become assignable to devices via the BGW320? If so, will devices connected to the private subnet via the Eeros still be able to talk to the devices on the public subnet? And aside from the <a href="https://support.eero.com/hc/en-us/articles/115000825206-What-advanced-features-do-I-lose-access-to-if-I-put-my-eeros-into-bridge-mode">&quot;advanced features&quot; that Eero tells me I'll lose if I go the bridge mode route</a>, are there other drawbacks?</p>
+<p>I think I've talked myself into trying it and seeing what happens... but I'm going to pause for a bit to see if anyone has other suggestions.</p>
+
+<ul class="links-nextprev"><li class="links-nextprev-prev">← Previous<br> <a href="/gitea/">Gitea</a></li>
+</ul>
+
+<hyvor-talk-comments website-id="9100" page-id="/networking/"></hyvor-talk-comments>
+
+<div class="webmentions" id="webmentions">
+	<h3 id="webmentions-2">Webmentions</h3>
+
+	
+	<p>No replies yet.</p>
+	
+
+
+
+  
+
+
+
+
+</div>
+
+
+			</heading-anchors>
+		</main>
+
+		<footer>
+			<p><em>Built with <a href="https://www.11ty.dev/">Eleventy v3.0.0</a>. All content <a href="https://creativecommons.org/licenses/by/4.0/deed.en">CC BY 4.0</a> if you're human.</em></p><p></p>
+		</footer>
+
+		<script type="module" src="/dist/rJ3_G-2ArF.js"></script>
+	</body>
+</html>

pagefind/pagefind-entry.json

@@ -1 +1 @@
-{"version":"1.3.0","languages":{"en":{"hash":"en_6e1e19224e","wasm":"en","page_count":1874}}}
+{"version":"1.3.0","languages":{"en":{"hash":"en_ff47512527","wasm":"en","page_count":1875}}}

sitemap.xml

@@ -9051,8 +9051,13 @@
 		<lastmod>2025-04-20</lastmod>
 	</url>
 	
+	<url>
+		<loc>https://kfitz.info/networking/</loc>
+		<lastmod>2025-05-11</lastmod>
+	</url>
+	
 	<url>
 		<loc>https://kfitz.info/feed/feed.xml</loc>
-		<lastmod>2025-04-20</lastmod>
+		<lastmod>2025-05-11</lastmod>
 	</url>
 </urlset>

tags/tinkering/index.html

@@ -14,7 +14,7 @@
 		
 		
 		
-		<style>.postlist { counter-reset: start-from 54 }
+		<style>.postlist { counter-reset: start-from 55 }
 /* This is an arbitrary CSS string added to the bundle */
 /* Defaults */
 @font-face {
@@ -546,6 +546,11 @@ pre[class*="language-diff-"] {
 
 <ol reversed="" class="postlist">
 
+	<li class="postlist-item">
+		<a href="/networking/" class="postlist-link">Networking</a>
+		<time class="postlist-date" datetime="2025-05-11">May 2025</time>
+	</li>
+
 	<li class="postlist-item">
 		<a href="/gitea/" class="postlist-link">Gitea</a>
 		<time class="postlist-date" datetime="2025-04-20">April 2025</time>