The matrix is slow

[boo]

The matrix is slow.
Priority when building infrastructure has been security so shit is being routed through like 3 countries but in-turn is slow.

Speed is good but latency is high and matrix for some reason really doesn't cope well with high latency. It results in long times to load messages when joining a room and sometimes "Failed to join room" timeout errors. Occassionally element client will say "Disconnected from server" or such for 7-15 seconds and then go away.

Its annoying I know

I'm working on it

[cmdpirx]

Will be there general How-to-guide? Or some further info, on how to do stuff like that?

[boo]

Will be there general How-to-guide? Or some further info, on how to do stuff like that?

I certainly can. It would probably be beneficial to make the infrastructure setup public for community auditing, there is no security through obscurity after all.

It'll take some time to have a comprehensive write-up on things, is there anything specific youre curious about? In relation to the matrix service though, its being self-hosted, VPNd with two wireguard hops, and then ssh reverse proxied to an XMR paid VPS which serves as public gateway.

[cmdpirx]

To be honest, I've always wanted to know how guys host stuff on bunker hosting to make it really anonymous. I'm not really interested in the inherent configuration to make it pretty, but more in hardening the system and maximizing privacy. I'm just curious about how much and what layers of protection one can implement, if you are a paranoid schizophrenic looking to hide from aliens, NSA, KGB, Europol, OSHA, and HOA. It's like, I am interested in building bunkers, not because I want to build one, I am interested in victory of engineering thought over common sense.

[boo]

To be honest, I've always wanted to know how guys host stuff on bunker hosting to make it really anonymous. I'm not really interested in the inherent configuration to make it pretty, but more in hardening the system and maximizing privacy. I'm just curious about how much and what layers of protection one can implement, if you are a paranoid schizophrenic looking to hide from aliens, NSA, KGB, Europol, OSHA, and HOA. It's like, I am interested in building bunkers, not because I want to build one, I am interested in victory of engineering thought over common sense.

You mean how 'bullet-proof' VPS providers keep their infrastructure 'bullet-proof'? Or how people using such providers keep their individual VPS's and services hidden. For the former I don't know much a lot about it but I think it's mostly down to your host-countries data-privacy laws. For the latter, I could start a wiki draft on 'hosting internet services for the paranoid'

[pan]

I've been documenting and building up security and hardening policies for hosting our servers going forward. There are a surprisingly large attack surface on most server operating systems and networks. I would also like to figure a way to minimize the latency regarding the servers, though it may not be easy to remedy. I'm also working on setting up offline back-ups in case of any future issues with any deployments we may have. I don't want to give away too much about how the servers/networks are configured until I am confident that they are reasonably secure.

[cmdpirx]

To be honest, I've always wanted to know how guys host stuff on bunker hosting to make it really anonymous. I'm not really interested in the inherent configuration to make it pretty, but more in hardening the system and maximizing privacy. I'm just curious about how much and what layers of protection one can implement, if you are a paranoid schizophrenic looking to hide from aliens, NSA, KGB, Europol, OSHA, and HOA. It's like, I am interested in building bunkers, not because I want to build one, I am interested in victory of engineering thought over common sense.

You mean how 'bullet-proof' VPS providers keep their infrastructure 'bullet-proof'? Or how people using such providers keep their individual VPS's and services hidden. For the former I don't know much a lot about it but I think it's mostly down to your host-countries data-privacy laws. For the latter, I could start a wiki draft on 'hosting internet services for the paranoid'

THAT WOULD BE DOPE ASF!