Remote access my home lab from Tesla

My home lab runs a few applications need remote access. I have wireguard tunnels setup for general use case, but when it come to Tesla in car experience, my journey started.

Personal Hotspot from mobile phone

This is the simplest solution, just connect to the wireguard tunnel and share the hotspot with Tesla.

But this solution requires root access for Android and not working for iOS, it’s a quick prototype I started.

Mobile router + personal hotspot

After the prototype, I added a small travel router to the solution.

I got a MikroTik mAP lite router, setup it connect to wireguard tunnel, use my personal hotspot for WAN, boardcast a new SSID for Tesla.

This solution perfectly working, the router is very small and can be powered by USB port.

IP whitelist

The next improvement I try is using the builtin network link. I setup a Discord bot, when access from unknow IP, it send me a message and let me approve or deny the future requests.

But Tesla cellular network changes IP really fast, it usually takes 3-5 times before I can whitelist a stable IP address. Further more, the IP looks like NAT through Tesla networks, potential shared with other cars, it’s not 100% safe.

Authentik

The final solution is Authentik authentication and proxy the public request with authorization. I setup my accounts and disabled the registration.

This is a balance of convenience and security.

Full screen

Lastly, I noticed there are some website provide a technique let the browser go full screen by jump through Youtube.

But they all focused on content, I want personalization. So I created a small tool deployed carbookmark.com. Let me keep my own bookmark links for full screen experience.

Published
Categorized as 其他

Keychron使用体验

入手Keychron的键盘三个月,它成了我工作的主力设备。

我用键盘的手感偏轻,以前用的最多的是Cherry银轴和NiZ的30g静电容,以前我所有的键盘都是有线全尺寸的,一月份被蓝牙5.1吸引,买了两把Keychron。

K8的机械青轴比Cherry青轴略重,声音也闷一些。K3的光电轴是可拆卸的,我买了红、白、Blue(青?)、Banana四套。现在字母键用Blue,方向键用Banana,控制键用白轴,其他用红轴。

Keychron替代以前的设备主要原因是小,80%和75%的尺寸都可以叠放在MacBook上,不占桌面额外的空间。我也很喜欢新键盘功能键和Mac系统匹配的更好。

说到不足,青轴很吵,K8放在MacBook上就更严重了,视频会议的时候完全不能用。K3的超薄设计对习惯了全高的我还是有挑战的,至少需要两周适应。K3的电池续航也比K8弱很多,同样的背光设置K3用不到一周,K8可以用一个月。

Published
Categorized as 其他

TL-R479GPE-AC设置VLAN

我前段时间为了买WiFi6 AP,顺手一起买了TL-R479GPE-AC。到手发现是4.0版硬件,除了PoE什么都没有,还不如买个更小的AC。这些AP支持VLAN,这个号称企业级的路由器竟然不支持。

虽然旁路连交换机也能用,但是闲置8个PoE我就想折腾折腾,既然是OpenWrt,最难也就是拆开接个Serial Console呗。搜到的文章大都是旧固件有备份漏洞的,然而新版本备份出来不是压缩包。主要参考了两篇文章,链接放在最后。绕了一个大弯子断断续续折腾了好久,最终成功达到目的,只有很简单的两步。

第一步,计算root密码。

下载固件解压缩以后能看到/etc/passwd里面root有一个默认密码,但是/etc/init.d/dropbear会在启动后根据MAC地址设置一个新的,算法与旧固件不同,是LAN MAC地址经过MD5后的前16位,旧固件是8位。

启用SSH在管理界面就有,叫“故障诊断模式”,端口默认是33400。

第二步,设置VLAN。

我只把这个设备当AC,为了省事就把所有端口都加了tag,没有分析对应的编号。这两行写到了/etc/rc.local,试了一下重启和断电后都还在,猜测是有特殊处理。

swconfig dev switch0 vlan 5 set ports '0t 1t 2t 3t 6t'
swconfig dev switch1 vlan 5 set ports '0t 1t 2t 3t 4t 7t'

参考文章:

https://www.right.com.cn/forum/thread-332822-1-1.html

Published
Categorized as 其他
Exit mobile version