• 0 Posts
  • 16 Comments
Joined 3 years ago
cake
Cake day: August 6th, 2023

help-circle





  • All are that the first year. I had someone in person tell me how they were put on a severely increased price despite being on a domain that should be very cheap. Sadly I don’t recall who it was, so I can’t ask them for the details.
    The jist iirc was their domain got popular (due to their website), so xyz decided it belonged to a higher price category.
    This was definitely not 1.111b specifically, but with a short search there I found reports that xyz has apparently decreased the scope of the 1.111b category before, making the minimum length 6 instead of 3, and then refused renewals for people that had 3-digit domains under the old price.

    So I would expect arbitrary price increases on 1.111b too, it’s not something I’d rely on. xyz always has the right to charge whatever they want, so you are one policy decision away from switching everything with no notice or shelling out whatever they think they can charge.

    Compared to say .com, where there is a rigid contract of what verisign can charge, mandating a single price category, a set number of price increases with a set maximum increase, no difference between first year and renewal, …
    Or .eu which is free and only has registrar fees, so you could just migrate to a different registrar.

    Edit: 1.111 not 1.1111







  • xyz isn’t that cheap (and shady (in reputation and pricing practices)), you might wanna pick a better tld.
    I don’t see a wholesale price so it’s hard to judge with certainty, but xyz might be around 14$/y. Dynadot is selling .com at a loss, so I assume they do the same for xyz. Don’t use them, they will make that money off you some other way.

    Wholesale for .com and .org is 11$; I recommend njal.la who charge 15$ and for those 4$ add the by far best privacy available for domain registration.

    For a cheap reliable tld, maybe .eu is a good pick. From the looks, the wholesale price is 0, so legitimage registrar’s costs can get very low. .eu only allows non-profit registrars.


  • With IPv4, assuming you have a residential contract without cgnat, your router has your ip. Loosely your device calls your public ip, realizes it is not on your local network, and sends it to your router. The router will nat it, and send it to its own internet-facing networking side, where the same router will realize that the target ip is the ip of it’s own interface and will immediately accept it. Then it is handled like any other packet arriving from the internet, presumably port forwarded to some internal machine.

    So we expect one hop to the router, then one internal hop from the private to the internet-facing interface of the router, and then presumably another internal hop back to the private network interface and another proper hop to the server on your lan.


  • since im not sure where in the boot process linux recognizes my raid and when the decryption happens

    Usually raid and decryption happen in the initram. This is because these are too complex to sit purely in the kernel, requiring userspace tools like cryptsetup, but you want to be able to boot off of them so they have to be handled before the disk is mounted.

    Usually that initram is dracut. Why dracut only partially completes the process here, likely figuring out the raid but not decryption, is anyones guess. In my experience dracut is quite hard to debug and configure.

    The simplest approach is probably to just eat it and write a startup service that does it. Basically a startup command. No need to worry about timing, as when the initram finishes the raid should already be up.
    There might be a prebuilt systemd service for it too iirc…

    If you really wanns go for it, there are other initram systems like ugrd, which are easier to configure and might figure your setup out properly. But you’ll probably have to manually install and update them. That would definitely be a very involved approach.


    There are some guesses I made here on your boot timeline. If you show your dmesg I can confirm if the raid really comes up at initramfs time. But it should be s solid bet.