Aren’t there a few VPN providers that don’t even install writable storage in their servers? I can’t remember which, but I’m sure there’s at least one that boots their machines off of read-only media and only installation hard drives in the servers used for storing login credentials.

There are really two reasons ECC is a “must-have” for me.

• I’ve had some variant of a “homelab” for probably 15 years, maybe more. For a long time, I was plagued with crashes, random errors, etc. Once I stopped using consumer-grade parts and switched over to actual server hardware, these problems went away completely. I can actually use my homelab as the core of my home network instead of just something fun to play with. Some of this improvement is probably due to better power supplies, storage, server CPUs, etc, but ECC memory could very well play a part. This is just anecdotal, though.
• ECC memory has saved me before. One of the memory modules in my NAS went bad; ECC detected the error, corrected it, and TrueNAS sent me an alert. Since most of the RAM in my NAS is used for a ZFS cache, this likely would have caused data loss had I been using non-error-corrected memory. Because I had ECC, I was able to shut down the server, pull the bad module, and start it back up with maybe 10 minutes of downtime as the worst result of the failed module.

I don’t care about ECC in my desktop PCs, but for anything “mission-critical,” which is basically everything in my server rack, I don’t feel safe without it. Pfsense is probably the most critical service, so whatever machine is running it had better have ECC.

I switched from bare-metal to a VM for largely the same reason you did. I was running Pfsense on an old-ish Supermicro server, and it was pushing my UPS too close to its power limit. It’s crazy to me that yours only pulled 40 watts, though; I think I saved about 150-175W by switching it to a VM. My entire rack contains a NAS, a Proxmox server, a few switches, and a couple of other miscellaneous things. Total power draw is about 600-650W, and jumps over 700W under a heavy load (file transfers, video encoding, etc). I still don’t like the idea of having Pfsense on a VM, though; I’d really like to be able to make changes to my Proxmox server without dropping connectivity to the entire property. My UPS tops out at 800W, though, so if I do switch back to bare-metal, I only have realistically 50-75W to spare.

I have a few services running on Proxmox that I’d like to switch over to bare metal. Pfsense for one. No need for an entire 1U server, but running on a dedicated machine would be great.

Every mini PC I find is always lacking in some regard. ECC memory is non-negotiable, as is an SFP+ port or the ability to add a low-profile PCIe NIC, and I’m done buying off-brand Chinese crop on Amazon.

If someone with a good reputation makes a reasonably-priced mini PC with ECC memory and at least some way to accept a 10Gb DAC, I’ll probably buy two.

I think I’m misunderstanding how LDAP works. It’s probably obvious, but I’ve never used it.

If my switch is expecting a username and password for login, how does it go from expecting a web login to “the LDAP server recognizes this person, and they have permissions to access network devices, so I’ll let them in.”?

Also, to be clear, I’m referring to the process of logging in and configuring the switch itself, not L2 switching or L3 routing.

Like several people here, I’ve also been interested in setting up an SSO solution for my home network, but I’m struggling to understand how it would actually work.

Lets say I set up an LDAP server. I log into my PC, and now my PC “knows” my identity from the LDAP server. Then I navigate to the web UI for one of my network switches. How does SSO work in this case? The way I see it, there are two possible solutions.

• The switch has some built-in authentication mechanism that can authenticate with the LDAP server or something like Keycloak. I don’t see how this would work as it relies upon every single device on the network supporting a particular authentication mechanism.
• I log into and authenticate with an HTTP forwarding server that then supplies the username/password to the switch. This seems clunky but could be reasonably secure as long as the username/password is sufficiently complex.

I generally understand how SSO works within a curated ecosystem like a Windows-based corporate network that uses primarily Microsoft software for everything. I have various Linux systems, Windows, a bunch of random software that needs authentication, and probably 10 different brands of networking equipment. What’s the solution here?

I’m a big fan of ZFS, and I use it extensively. For a single hard drive, though, wouldn’t ext4 and a few NFS shares make a lot more sense?

This is a really interesting question. I remember a lot of very niche PCI (not PCIe) cards from the old days.

My current-day boring use-case: Multiple GPUs that have never once been used for gaming. One is an A2000 card that does video transcoding and tone mapping for Jellyfin. The other is an old Quadro card that handles encoding/decoding for my NVR.

.NET is infuriating enough on Windows. Any time I have to work with a .NET library, I always write a wrapper with a C or C++ interface first. Your friend who does .NET development on Linux has far more patience than I can ever hope to have.

RTX is one of those things that just isn’t optional for me. I may be in the minority, but I am far more concerned with how games look than how they run. As long as my FPS is above 30 or so, I’m generally okay with performance. I feel like Windows will always support those “extra features” like RTX before Linux, unfortunately. I really comes down to market share, I think; the developers at Nvidia and AMD are going to target Windows first, and the people who maintain Proton are stuck in second place. You’ll have to pry Windows 10 out of my cold dead hands, though; I liked Vista better than Windows 11.

For development, I’m locked into Windows at work, but my job isn’t specifically software development; it just happens to be a useful skill to have in my career. I do far more coding at home, and I certainly have the option of switching to Linux. I think I’ve just been spoiled by Visual Studio’s all-in-one approach for so long. My #1 concern is debugging. I haven’t seen an Linux IDE that allows for stepping back through the call stack and checking variable states inside the IDE quite like VS does it.

To be clear, I’m not bashing Linux at all. I’ve been a homelabber for longer than I can remember, and I have a total of 3 physical machines and VMs that run Windows compared to a total of probably 20 that run Linux, FreeBSD, or some other POSIX variant. I have so few Windows machines that I actually own legal licenses for all of them. I do feel like the people who say “Just run Linux on your desktop PC; it can do everything Windows can” are looking at the operating system through rose-colored glasses. Linux will always be the best choice for anything that doesn’t require having a monitor attached, but otherwise, it feels like it’s playing catch-up to Windows.

I’ve tried switching to Linux exclusively multiple times, and I always end up falling back to Windows on my desktop. I have multiple Linux servers and VMs, but there are two main barriers. First is gaming. Last time I tried, I couldn’t get RTX working in some titles, EA launcher was broken, and it was generally just buggy. The second reason is for coding. I’ve been coding for Windows for almost 20 years, and I am hugely reliant on Visual Studio. I just can’t find a comparable alternative for Linux.

I’d ditch Windows in a second if I could make Linux work for me, but so far I haven’t had much luck.