Akamai contact

2017-05-02 Thread James Harr
Hi, Can someone from Akamai contact me off-list? We're having a problems accessing a testing website served from the Akamai CDN during finals week. -- James Harr Lead Network Engineer University of Nebraska at Omaha 402-554-4925 M:402-660-5466

Re: Akamai contact

2017-05-02 Thread James Harr
Akamai contacted me off-list. Thanks! -- James Harr Lead Network Engineer University of Nebraska at Omaha 402-554-4925 M:402-660-5466 From: NANOG on behalf of James Harr Sent: Tuesday, May 2, 2017 8:38:26 AM To: nanog@nanog.org Subject: Akamai contact Hi

Re: IPv6 - a noobs prespective

2011-06-14 Thread James Harr
Really -- just go play with it. I started by setting up a tunnelbroker.net account at home. A majority of the packet slapping functionality of routers work just fine. It's when you get into things like applications, load balancing, NAT64/DNS64 where things start to get a little buggy. And you'll n

Re: best practices for management nets in IPv6

2011-07-13 Thread James Harr
I couldn't agree more. If you set up private address space, it's going to come back and make more work for you later. Set up public IPv6 addresses. If you need stateful connection filtering, put in a stateful firewall. If you really really need address obfuscation, you can still do NAT, but NAT fr

Re: Why are we still using the CA model? (Re: Microsoft deems all DigiNotar certificates untrustworthy, releases updates)

2011-09-11 Thread James Harr
https://bugzilla.mozilla.org/show_bug.cgi?id=647959 --- SNIP --- This is a request to add the CA root certificate for Honest Achmed's Used Cars and Certificates. The requested information as per the CA information checklist is as follows: 1. Name Honest Achmed's Used Cars and Certificates 2. W

Re: automated config backups for SFTOS

2011-11-23 Thread James Harr
Second rancid. If SFTOS supports per-command authorization (via RADIUS/TACACS), you can limit the script account to only be able to use 'show run' and whatever else it needs (even when it logs in). That said, if you're looking for on-the-cheap, I haven't seen a free TACACS+ server that does autho

Re: High throughput switches...

2011-05-19 Thread James Harr
Bonding usually involves some sort of flow-based hashing mechanism for balancing across the links. The logic behind it being that reordering TCP packets (among other things) negates the benefit of the aggregation in CPU costs and retransmissions. So it's important to keep one flow (really one direc

IPv6 day non-participants

2011-06-08 Thread James Harr
I noticed that one of our vendors wasn't actually participating when they very publicly put on their home page that they would. So I queried the IPv6 day participation list to see who didn't have 's for their listed website. It turned out to be around 9.5% Before you read the list, here's me s