Re: Hulu / ESPN: Commercial IP Address

2018-10-15 Thread Stuart Henderson
On 2018-10-15, Brandon Butterworth wrote: > On Sat Oct 13, 2018 at 02:39:37PM -0400, Daniel Corbe wrote: >> I had a customer with a similar issue. I statically assigned them a >> different IP and it didn???t resolve it. The problem turned out to be >> tied to their Hulu account. > > I had

Re: ARIN RPKI TAL deployment issues

2018-09-28 Thread Stuart Henderson
On 2018-09-26, Mark Milhollan wrote: > On Tue, 25 Sep 2018, Job Snijders wrote: > >>We really need to bring it back down to "apt install rpki-cache-validator" > > You say this as if no packager has a way to display and perhaps require > approval of the license nor any way to fetch something remot

Re: Got a call at 4am - RAID Gurus Please Read

2014-12-10 Thread Stuart Henderson
On 2014-12-09, symack wrote: > Server down. Got to colo at 4:39 and an old IBM X346 node with > Serveraid-7k has failed. Opened it up to find a swollen cache battery that > has bent the card in three different axis. > * Can I change from an active (ie, disks with data) raid 5 to raid 10. Eve

Re: carping about CARP

2012-11-30 Thread Stuart Henderson
On 2012-11-30, Randy Bush wrote: >> case of the same situation all[1] 'software md5 tcp' implementations >> have? sign but never verify... > > and freebsd :( > > openbsd verifies these, btw.

Re: carping about CARP

2012-11-30 Thread Stuart Henderson
On 2012-11-30, Robert E. Seastrom wrote: > > I can't seem to recall anyone griping about this here on our august > little list but google finds that I'm by no means the first to have > been burned by an unholy interaction between VRRP and CARP. > > Let's skip the protocol discussions (same protoco

Re: OpenBGPd problems relating to misuse of RESERVED bits in BGP Attribute Flags field

2012-11-29 Thread Stuart Henderson
On 2012-11-29, Jeff Wheeler wrote: > I had two downstream BGP customers experience problem with an OpenBGPd bug > tonight. Before diving into detail, I would like to link this mailing list > thread, because this is not a new issue and a patch is available: > http://www.mail-archive.com/misc@openb

Re: IPv6 beta support for Android phones

2011-11-07 Thread Stuart Henderson
On 2011-11-07, Leigh Porter wrote: >> >> LTE does not have the dual attachment problem since there is the >> concept of having v4 and v6 in one attachment, but it does not change >> the fact that there are not enough IPv4 addresses to go around, >> especially from a strategic planning perspective

Re: Anyone using any Linux SSL proxies?

2009-03-15 Thread Stuart Henderson
On 2009-03-15, Mike Lyon wrote: > Howdy, > > I am wondering what folks are recommending/using these days for Linux SSL > proxies? I need to build a linux box that basically acts as an SSL offloader > would (like a BigIP / Cisco ACE / Netscaler would do). Listen on port 443, > decrypt the SSL and t

Re: L3: Google from DC via the Netherlands?

2009-02-06 Thread Stuart Henderson
On 2009-02-06, Peter Beckman wrote: > On Fri, 6 Feb 2009, Peter Beckman wrote: > >> I'm OK to that IP as well, but when I query www.google.com, I get multiple >> IPs, but here are the ones that in in 147: >> >> DNS Server IP Route (for me) >> 205.234.170.217 (tiggee)

Re: DNS Amplification attack?

2009-01-21 Thread Stuart Henderson
On 2009-01-21, Kameron Gasso wrote: > Christopher Morrow wrote: >> a point to bear in mind here is that... 'its working' is good enough >> for the bad folks :( no need to optimize when this works. Also, it's >> likely this isn't all of the problem the spoofed requestors are seeing >> these past fe

Re: Software router state of the art

2008-08-01 Thread Stuart Henderson
On 2008-07-28, Joe Greco <[EMAIL PROTECTED]> wrote: >> I have yet to look into *BSD based solutions, but hear very good things >> about firewall performance. I don't know about BGP/OSPF/MPLS etc support >> on FreeBSD but am going to wager a guess its on par with Linux if not >> better. > > The u

Re: Best utilizing fat long pipes and large file transfer

2008-06-13 Thread Stuart Henderson
On 2008-06-12, Kevin Oberman <[EMAIL PROTECTED]> wrote: > The idea is to use tuned proxies that are close to the source and > destination and are optimized for the delay. OpenBSD has relayd(8), a versatile tool which can be used here. There is support for proxying TCP connections. These can be mod

Re: [NANOG] OSPF minutia, and, technote publication venues

2008-05-05 Thread Stuart Henderson
On 2008-05-05, Paul Vixie <[EMAIL PROTECTED]> wrote: > also, in OSPF, ECMP is not optional, even though most BSD-based software > routers don't implement it yet (since multipath routing is very new.) Some readers might be interested to know the exception to "most" here; the OpenBSD kernel has supp

Re: 24x7 Support Strategies

2007-06-14 Thread Stuart Henderson
On 2007/06/14 15:11, [EMAIL PROTECTED] wrote: > I suspect that you would need to make special modifications to the > hardware of a server to install temperature and current measuring > devices in key locations The vast majority of modern machines have working temperature sensors; some just one or