SDN - Killer Apps

2013-02-25 Thread Glen Kent
Hi, I am trying to understand how SDNs can dramatically change the networking paradigm and this is my understanding. Yahoo, Google, etc applications are running on one server and each application could be theoretically associated with a unique VXLAN tag. This way service providers will be able to

Re: SDN - Killer Apps

2013-02-25 Thread Simon Perreault
Le 2013-02-25 09:23, Glen Kent a écrit : Yahoo, Google, etc applications are running on one server and each application could be theoretically associated with a unique VXLAN tag. This way service providers will be able to provide QoS per application (by effectively providing QoS to the VXLAN carr

Re: SDN - Killer Apps

2013-02-25 Thread Saku Ytti
On (2013-02-25 13:53 +0530), Glen Kent wrote: > I understand that this is just some bit of what we can do with SDN. The > amount of what all can be done is limitless. So, a question to all out > there - Is my understanding of what can be achieved with SDN, is correct? Frankly I don't think there

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Brian Reichert
On Sun, Feb 24, 2013 at 12:10:20AM +1100, Mark Andrews wrote: > > When I did my initial development with OpenSSL, I observed: > > > > - If I did not have the rooted domain name in the SAN, then any SSL > > client stack would fail the verification if a rooted domain name > > was used to connect

Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - > From: "Brian Reichert" > On Sun, Feb 24, 2013 at 12:10:20AM +1100, Mark Andrews wrote: [I believe this is Brian, then Mark: ] > > > When I did my initial development with OpenSSL, I observed: > > > > > > - If I did not have the rooted domain name in the SAN, then an

Re: SDN - Killer Apps

2013-02-25 Thread Jeff Hartley
On Mon, Feb 25, 2013 at 3:23 AM, Glen Kent wrote: > Yahoo, Google, etc applications are running on one server and each > application could be theoretically associated with a unique VXLAN tag. This > way service providers will be able to provide QoS per application (by > effectively providing QoS t

What are you doing about Six Strikes?

2013-02-25 Thread Jay Ashworth
This just in from Lauren Weinstein. This is, of course, today. Have people actually deployed changes to support this? Cheers, -- jra - Forwarded Message - > From: "PRIVACY Forum mailing list" > ISP six-strikes starts tomorrow, and the expected results are ... > > http://j.mp/W47lA7 (

Re: can you share ipv6 addressallo cation

2013-02-25 Thread bmanning
don't think of this in terms of waste (v6 has an unthinkable number of numbers) and think of security. by announceing more space than you are actually using, you create "dark-space" that attackers can hide in-plain-sight. so, for example, in your P2P links, you can use tools that lazy develope

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Brian Reichert
On Mon, Feb 25, 2013 at 09:49:19AM -0500, Jay Ashworth wrote: > - Original Message - > > From: "Brian Reichert" > > > On Sun, Feb 24, 2013 at 12:10:20AM +1100, Mark Andrews wrote: > [I believe this is Brian, then Mark: ] > > > > When I did my initial development with OpenSSL, I observed:

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - > From: "Brian Reichert" > My understanding is this: > > Unless you're doing client certificate verification (wherein the > server is making decisions about which clients attempting a > connection), all validation/verification is done by the client. Right; my apolog

Re: 10 Mbit/s problem in your network

2013-02-25 Thread Owen DeLong
Correct. However, while A is 5Ghz (only), it's not significantly better than G. The true performance gains come from 5Ghz and N together. N on 2.4Ghz has limited benefit over G. N on 5Ghz is significantly better. Owen On Feb 24, 2013, at 8:56 PM, "Frank Bulk" wrote: > The IEEE 802.11n standard

Re: What are you doing about Six Strikes?

2013-02-25 Thread Seth David Schoen
Jay Ashworth writes: > This just in from Lauren Weinstein. This is, of course, today. > > Have people actually deployed changes to support this? Six Strikes is not a law; it's a private agreement. http://www.scribd.com/doc/91987640/CCI-MOU -- Seth David Schoen | No haiku patents

Re: 10 Mbit/s problem in your network

2013-02-25 Thread Warren Bailey
I should probably know this, but doesn't N just spread better and have the ability to send receive on multiple polarizations? As an RF engineer I should probably know this, but I can't think of many people in my industry who really care about 802.11_. I really don't even use wireless in my house

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Brian Reichert
On Mon, Feb 25, 2013 at 11:26:47AM -0500, Jay Ashworth wrote: > > The upshot (assuming I'm not totally off base here), is that other > > than getaddrinfo(), nothing is acting on the semantics of the > > supplied hostname (or IP address). They are 'just strings', and > > are (essentially) compared a

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Owen DeLong
On Feb 25, 2013, at 6:30 AM, Brian Reichert wrote: > On Sun, Feb 24, 2013 at 12:10:20AM +1100, Mark Andrews wrote: >>> When I did my initial development with OpenSSL, I observed: >>> >>> - If I did not have the rooted domain name in the SAN, then any SSL >>> client stack would fail the verific

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread David Miller
On 02/25/2013 11:47 AM, Owen DeLong wrote: On Feb 25, 2013, at 6:30 AM, Brian Reichert wrote: On Sun, Feb 24, 2013 at 12:10:20AM +1100, Mark Andrews wrote: When I did my initial development with OpenSSL, I observed: - If I did not have the rooted domain name in the SAN, then any SSL client

Re: 10 Mbit/s problem in your network

2013-02-25 Thread Owen DeLong
N has a number of advantages… Better spread, the ability to take advantage of polarization, better use of MIMO, and IIRC, a better encoding scheme that allows denser constellation points (more bits per signaling element). N on 5Ghz takes advantage of the increased bandwidth of the 5Ghz channel w

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - > From: "Brian Reichert" > > Right. And I'm asserting that that's wrong: the client side libraries > > Really Ought To normalize that name before trying to compare it against > > the retrieved certificate to see if it matches, which would relieve you > > of having to

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Jay Ashworth
- Original Message - > From: "Owen DeLong" > However, that's for the resolver library. In terms of matching the CN > in a certificate, this should always be FQDN and the trailing dot > should not be present. If OpenSSL (the command line tool) is passing > foo.blah.com. to the SSL function

Circuit Bandwidth Simulator applet etc

2013-02-25 Thread JoeSox
I would like a applet or program I can feed it nodes and a network topology, then just set hypothetical transmit speeds at child nodes then have the applet or program display the Parent node bandwidth. Is there any Visio applets or macros out there I wonder? Sorry another tool question but I don'

Re: Circuit Bandwidth Simulator applet etc

2013-02-25 Thread Michael Loftis
Try http://www.nsnam.org/ (AKA NS2/NS3) whichis GPL/OSS or Tetcos NetSim - http://tetcos.com/ I've never used NetSim FYI, just heard of it. And NS only rarely. On Mon, Feb 25, 2013 at 9:22 AM, JoeSox wrote: > I would like a applet or program I can feed it nodes and a network > topology, then ju

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Owen DeLong
On Feb 25, 2013, at 9:18 AM, Jay Ashworth wrote: > - Original Message - >> From: "Owen DeLong" > >> However, that's for the resolver library. In terms of matching the CN >> in a certificate, this should always be FQDN and the trailing dot >> should not be present. If OpenSSL (the comma

Re: 10 Mbit/s problem in your network

2013-02-25 Thread Warren Bailey
If you want to see something pretty amazing, check this out.. http://www.popsci.com/science/article/2012-06/twisting-signals-vortex-researchers-beam-25-terabits-data-second These guys got close to 100 bits/hz using Orbital Angular Momentum in addition to the normal Spin Angular Momentum. There i

Re: Circuit Bandwidth Simulator applet etc

2013-02-25 Thread Warren Bailey
We use IXChariot for traffic simulation. It's pretty nice, albeit expensive. On 2/25/13 9:22 AM, "JoeSox" wrote: >I would like a applet or program I can feed it nodes and a network >topology, then just set hypothetical transmit speeds at child nodes >then have the applet or program display the P

Re: 10 Mbit/s problem in your network

2013-02-25 Thread joel jaeggli
On 2/25/13 8:42 AM, Warren Bailey wrote: I should probably know this, but doesn't N just spread better and have the ability to send receive on multiple polarizations? That would be a rather extreme over-simplifcation of spatial-division-multiplexing and space-time-coding. As an RF engineer I

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Brian Reichert
On Mon, Feb 25, 2013 at 12:18:00PM -0500, Jay Ashworth wrote: > If I understood Brian correctly, his problem is that people/programs > are trying to retrieve things from, eg: > > https://my.host.name./this/is/a/path > > and the SSL library fails the certificate match if the cert doesn't contain >

Re: What are you doing about Six Strikes?

2013-02-25 Thread Joly MacFie
Who said it's a law? On Mon, Feb 25, 2013 at 11:37 AM, Seth David Schoen wrote: > Jay Ashworth writes: > >> This just in from Lauren Weinstein. This is, of course, today. >> >> Have people actually deployed changes to support this? > > Six Strikes is not a law; it's a private agreement. > > ht

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Doug Barton
On 02/25/2013 09:49 AM, Brian Reichert wrote: On Mon, Feb 25, 2013 at 12:18:00PM -0500, Jay Ashworth wrote: If I understood Brian correctly, his problem is that people/programs are trying to retrieve things from, eg: https://my.host.name./this/is/a/path and the SSL library fails the certificat

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Jay Ashworth
- Original Message - > From: "Brian Reichert" > On Mon, Feb 25, 2013 at 12:18:00PM -0500, Jay Ashworth wrote: > > If I understood Brian correctly, his problem is that people/programs > > are trying to retrieve things from, eg: > > > > https://my.host.name./this/is/a/path > > > > and the S

Re: What are you doing about Six Strikes?

2013-02-25 Thread Warren Bailey
The federal agents who get the list of offenders every week?? :P On 2/25/13 10:05 AM, "Joly MacFie" wrote: >Who said it's a law? > > > >On Mon, Feb 25, 2013 at 11:37 AM, Seth David Schoen >wrote: >> Jay Ashworth writes: >> >>> This just in from Lauren Weinstein. This is, of course, today. >>>

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - > From: "Jay Ashworth" > > Who should implement the normalization logic? Not the SSL library, > > certainly. That sounds like the bailiwick of the resolver library... > > No, in fact, I think this is layer... 3 or 4, not 2; this *should* > be in the SSL library -- *y

Re: Circuit Bandwidth Simulator applet etc

2013-02-25 Thread Tarko Tikan
hey, I would like a applet or program I can feed it nodes and a network topology, then just set hypothetical transmit speeds at child nodes then have the applet or program display the Parent node bandwidth. Is there any Visio applets or macros out there I wonder? http://totem.run.montefiore.u

Re: looking for terminology recommendations concerning non-rooted FQDNs

2013-02-25 Thread Brian Reichert
On Mon, Feb 25, 2013 at 10:10:55AM -0800, Doug Barton wrote: > Brian, > > This may be a silly question, but what's your goal here? Your OP was > about terminology, but the thread has gone down several different > off-topic ratholes. That was indeed by original goal, and there have been a couple

Re: What are you doing about Six Strikes?

2013-02-25 Thread Valdis . Kletnieks
On Mon, 25 Feb 2013 13:05:48 -0500, Joly MacFie said: > Who said it's a law? If it was in fact a law, it would be a lot easier for the victims to fight back in a court of law. pgpYuNrgemCzm.pgp Description: PGP signature

Re: Circuit Bandwidth Simulator applet etc

2013-02-25 Thread JoeSox
TOTEM looks like it might fit my needs but the download link appears offline. The others I am looking at also. -- Thanks, Joe On Mon, Feb 25, 2013 at 11:06 AM, Tarko Tikan wrote: > hey, > > >> I would like a applet or program I can feed it nodes and a network >> topology, then just set hypothet

Re: What are you doing about Six Strikes?

2013-02-25 Thread Livingood, Jason
On 2/25/13 10:23 AM, "Jay Ashworth" wrote: >>Expected results: >> >> 1) Legit users are harassed due to IP address mix-ups, etc. Remember >> you must pay to file an appeal. >> Other than a few IP mix ups years ago, is this still really an issue? It seems ISPs have pretty reliable IP lease hist

Re: What are you doing about Six Strikes?

2013-02-25 Thread Gary E. Miller
Yo Jason! On Mon, 25 Feb 2013 20:07:43 + "Livingood, Jason" wrote: > >> 1) Legit users are harassed due to IP address mix-ups, etc. > >> Remember you must pay to file an appeal. > Other than a few IP mix ups years ago, is this still really an issue? It has been for me. My SWIP records are

Visio-fu

2013-02-25 Thread Warren Bailey
All, I have been searching our beloved internet endlessly for months on information regarding Visio technique. Does anyone have a good resource(s) for advanced visio drawings, or more to the point a good place for high quality connectors? There is some great quality work out there, this is some

Re: What are you doing about Six Strikes?

2013-02-25 Thread Valdis . Kletnieks
On Mon, 25 Feb 2013 20:07:43 +, "Livingood, Jason" said: > Other than a few IP mix ups years ago, is this still really an issue? It > seems ISPs have pretty reliable IP lease histories for many years to > support LEA requests and other needs... The fact that the ISP has a good record of what

Re: What are you doing about Six Strikes?

2013-02-25 Thread Jay Ashworth
- Original Message - > From: "Valdis Kletnieks" > On Mon, 25 Feb 2013 20:07:43 +, "Livingood, Jason" said: > > > Other than a few IP mix ups years ago, is this still really an issue? It > > seems ISPs have pretty reliable IP lease histories for many years to > > support LEA requests

Re: Visio-fu

2013-02-25 Thread George Herbert
On Mon, Feb 25, 2013 at 12:20 PM, Warren Bailey wrote: > All, > > I have been searching our beloved internet endlessly for months on > information regarding Visio technique. Does anyone have a good resource(s) > for advanced visio drawings, or more to the point a good place for high > quality c

Re: SDN - Killer Apps

2013-02-25 Thread Peter Phaal
On Mon, Feb 25, 2013 at 2:10 AM, Saku Ytti wrote: > On (2013-02-25 13:53 +0530), Glen Kent wrote: > >> I understand that this is just some bit of what we can do with SDN. The >> amount of what all can be done is limitless. So, a question to all out >> there - Is my understanding of what can be ach

Re: SDN - Killer Apps

2013-02-25 Thread Valdis . Kletnieks
On Mon, 25 Feb 2013 13:53:13 +0530, Glen Kent said: > Yahoo, Google, etc applications are running on one server and each > application could be theoretically associated with a unique VXLAN tag. This > way service providers will be able to provide QoS per application QoS is, when you get down to it

Re: Visio-fu

2013-02-25 Thread George Herbert
On Mon, Feb 25, 2013 at 12:58 PM, George Herbert wrote: > [...] > My company has a Visio whiz, who I'm going to ping for his opinion on > that, but I am guessing it's a no. Our Visio guy's opinion concurred with mine; it's custom drawing, not off-the-shelf capability, and would most likely have b

Re: SDN - Killer Apps

2013-02-25 Thread Per Carlson
Hi Glen. Here's some thoughts how Networking can learn from SDN: http://forums.juniper.net/t5/The-New-Network/Decoding-SDN/ba-p/174651 /Pelle

Re: Visio-fu

2013-02-25 Thread Josh Baird
Check SmartDraw. On Mon, Feb 25, 2013 at 5:04 PM, George Herbert wrote: > On Mon, Feb 25, 2013 at 12:58 PM, George Herbert > wrote: > > [...] > > My company has a Visio whiz, who I'm going to ping for his opinion on > > that, but I am guessing it's a no. > > Our Visio guy's opinion concurred wit

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Mark Andrews
In message <15455394.7034.1361803759023.javamail.r...@benjamin.baylink.com>, Ja y Ashworth writes: > - Original Message - > > From: "Brian Reichert" > > > On Sun, Feb 24, 2013 at 12:10:20AM +1100, Mark Andrews wrote: > [I believe this is Brian, then Mark: ] > > > > When I did my initial

Re: Visio-fu

2013-02-25 Thread Warren Bailey
I've seen smart draw. I wish these drawing software companies would port their application over to mac.. Every big design guy I know is a mac fanboy, Adobe has it figured out but smart draw and visio have no excuse. Omni is about the only thing out there, but it is hell to use in my opinion. :)

Re: Visio-fu

2013-02-25 Thread Michael Hallgren
Le 25/02/2013 23:06, Josh Baird a écrit : > Check SmartDraw. pstricks, metapost, TikZ (pgf),... mh > > On Mon, Feb 25, 2013 at 5:04 PM, George Herbert > wrote: > >> On Mon, Feb 25, 2013 at 12:58 PM, George Herbert >> wrote: >>> [...] >>> My company has a Visio whiz, who I'm going to ping for h

Re: Visio-fu

2013-02-25 Thread Michael Hallgren
Le 25/02/2013 23:15, Warren Bailey a écrit : > I've seen smart draw. I wish these drawing software companies would port > their application over to mac.. Every big design guy I know is a mac fanboy, > Adobe has it figured out but smart draw and visio have no excuse. Omni is > about the only thin

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - > From: "Mark Andrews" > > > From what little research I've done (only OpenSSL), the SSL client > > > is relying on getaddrinfo(3) to do name resolution. In turn, I > > > haven't found an implementation of getaddrinfo(3) that rejects > > > rooted domain names as non-l

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Brian Reichert
On Tue, Feb 26, 2013 at 09:07:24AM +1100, Mark Andrews wrote: > > In message <15455394.7034.1361803759023.javamail.r...@benjamin.baylink.com>, > Ja > y Ashworth writes: > > More formally: "is a host/domain name with a trailing dot *actually a > > legal host name? > > No. See RFC 952 In the ca

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - > From: "Brian Reichert" > > > More formally: "is a host/domain name with a trailing dot > > > *actually a legal host name? > > > > No. See RFC 952 > > In the case of URIs, RFC 2396 (circa 1998) seems to allow for it, > if I read the ABNF for 'hostname' right in sect

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Mark Andrews
In message <32423329.7280.1361833741738.javamail.r...@benjamin.baylink.com>, Ja y Ashworth writes: > - Original Message - > > From: "Mark Andrews" > > > > > From what little research I've done (only OpenSSL), the SSL client > > > > is relying on getaddrinfo(3) to do name resolution. In t

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Mark Andrews
In message <32423329.7280.1361833741738.javamail.r...@benjamin.baylink.com>, Ja y Ashworth writes: > - Original Message - > > From: "Mark Andrews" > > > > > From what little research I've done (only OpenSSL), the SSL client > > > > is relying on getaddrinfo(3) to do name resolution. In t

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - > From: "Mark Andrews" > > > No. See RFC 952 > > > > I think 952 is functionally obsolete, requireing a <24 char name > > length; > > I would have expected citations, perhaps, to 1535. > > > > Care to expand? > > Ok. RFC 952 as modified by RFC 1123. This covers all l

Demarc in FTTH ?

2013-02-25 Thread Jean-Francois Mezei
What are you thoughts about whether FTTH GPON systems have a demarc or not ? Would it be the ONT ? (since beyond the ONT, the end user has no ability to test the line). or should FTTH be viewed more like DOCSIS systems where there is no official demarc ? In Canada, the telcos charge a "DMC" char

Re: Visio-fu

2013-02-25 Thread Justin M. Streiner
On Mon, 25 Feb 2013, George Herbert wrote: Our Visio guy's opinion concurred with mine; it's custom drawing, not off-the-shelf capability, and would most likely have been in a graphics program (though he thinks it might have been possible with Visio, it would have been much easier in for example

Re: Demarc in FTTH ?

2013-02-25 Thread Justin M. Streiner
On Mon, 25 Feb 2013, Jean-Francois Mezei wrote: Would it be the ONT ? (since beyond the ONT, the end user has no ability to test the line). I would tend to think the ONT is treated as the demarc point. Most carriers I've seen treat them as the optical equivalent of copper NIDs or smartjacks

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Mark Andrews
In message <17812038.7306.1361835383974.javamail.r...@benjamin.baylink.com>, Ja y Ashworth writes: > - Original Message - > > From: "Mark Andrews" > > > > > No. See RFC 952 > > > > > > I think 952 is functionally obsolete, requireing a <24 char name > > > length; > > > I would have expec

Re: Demarc in FTTH ?

2013-02-25 Thread Jay Ashworth
- Original Message - > From: "Jean-Francois Mezei" > What are you thoughts about whether FTTH GPON systems have a demarc or > not ? > > Would it be the ONT ? (since beyond the ONT, the end user has no > ability to test the line). > > or should FTTH be viewed more like DOCSIS systems whe

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jimmy Hess
On 2/25/13, Jay Ashworth wrote: >> From: "Brian Reichert" [snip] > name it's looking up before doing the SSL interaction with the server side, > a process with which I'm not familiar enough to know if the client actually > send the host/domain name to the server end. Assuming it does -- and I >

Re: Should host/domain names travel over the internet with a trailing dot?

2013-02-25 Thread Jay Ashworth
- Original Message - > From: "Jimmy Hess" > By the time the hostname is sent over HTTP, the SSL connection is > already established, and all the SSL negotiation already happened.. Correct, and yes, I did already know that (though, this morning, before coffee, it would have been hard to t

RE: 10 Mbit/s problem in your network

2013-02-25 Thread Frank Bulk (iname.com)
There's only 83.5 MHz to work with at 2.4 GHz, while in most countries you have at least two hundred MHz in the 5 GHz range (http://en.wikipedia.org/wiki/U-NII). So if you choose to have 40 MHz channels for increased throughput, you can have many more (non-overlapping ones) at 5 GHz than 2.4 GHz,