donavanm

77 ms·

691.
by donavanm 13y ago
As hire As, Bs hire Cs. A quip, but Ive certainly seen it in practice. My personal interpretation is that the best performers seek to be challenge themselves. Others, who may not strive or lack confidence etc, end up hiring those who are at
692.
by donavanm 13y ago
To quibble further the request line typically wont have a "host" section. Its almost always a uri path/stem and the 1.1 client sends an additional Host header. The request line must also have the protocol and version, HTTP&
693.
by donavanm 13y ago
What compelling business need is there for DNSSEC? The only thing I can think of are some of the compliancy rules for gov/corp work coming up in 2014 & 2015. Unless DNSSEC makes you money youre wasting your time. Secondly any comme
694.
by donavanm 13y ago
A bit late, but I worked in the Hardware Org there for ~3 years. There are notable limits on any sort of public comment or contribution. Just about everything has to approved by an external comms group, legal, and an open source approval gr
695.
by donavanm 13y ago
> Really, it isn't too hard to patch the logging in nginx and/or have a named pipe that writes to syslog. Be careful with high performance expectations on named pipes. The fifo is in memory, but the inode is on disk. It really
696.
by donavanm 13y ago
I havent used smartos, but you can only do solaris containers now? IIRC around the Indiana release one of the demos was running a RHEL5 container. I also seem to recall at least one person getting deb working.
697.
by donavanm 13y ago
> they say software doesn't cost them that much. Just because someone says it does not mean it's true. The Internet says SDE comp at amazon is $90-130K. Seems safe to estimate total cost per employee to $125K on average. They&#
698.
by donavanm 13y ago
Assume an SDE/SE/NE costs $125,000 per year on average. Multiply that by 10,000 employees to reach $1.25B per year. A 3% raise costs you $37M dollars. Not an insubstantial amount of profit to give up.
699.
by donavanm 13y ago
I suppose so, or maybe *.tld? Im thinking it would depend on your clients behavior. Clients dont go to that many unique fqdns, dynamic creation + caching should quite achievable.
700.
by donavanm 13y ago
If you own the client and the proxy its still possible. Install a controlled root cert on the clients. On the proxy dynamically create & sign certs for each domain the client requests. Present these false certs to the clients connection
701.
by donavanm 13y ago
As last summers negative leap second fiascos demonstrated even a trusted source isnt enough.
702.
by donavanm 13y ago
Ntp is good. Assuming that time is coordinated, much less monotonically increasing, is a bad plan. Just the other week i got paged in the middle of the night because a clock moved backwards.
703.
by donavanm 13y ago
IIRC the choice to favor neighborhoods like central, chinatown, and beacon hill was intentional. The thinking was that the traditional franchise agreements allowed incumbents to choose to compete in the neighborhoods with the greatest dispo
704.
by donavanm 13y ago
For the past year the city of Seattle has been hyping "gigabit seattle" as the solution. The idea is that a private group would get access to city fiber at/near cost and manage the actual service. The private group in this ca
705.
by donavanm 13y ago
For PACs in the 2012 cycle Amazons PAC spent $220K, Microsoft spent $2.3M, Oracle $540. In direct lobbying this year Amazon spent $1.7M, Microsoft $5.5M, and Oracle $3.7M. So yeah, Amazon is paying to get representation. But they're st
706.
by donavanm 13y ago
Yeah, i was specifically thinking of the prefixes jn the tor and agg layer. I read it as having all the vips in the rack as next hop /32s. Add a bunch of intra rack ecmp groups and its not insignificant. Im not sure i buy the feasabili
707.
by donavanm 13y ago
I really have no idea what this comment even means. The entire ordering and sign in pipeline has been https forever. Once you are on https it stays https until you explicitly got to http:// , iirc. Lastly theres no content, that
708.
by donavanm 13y ago
> Scale: Running an all layer2 network requires devices that have large enough CAM tables to support all connected devices ... in the broadcast domain. Maybe you save on CAM, but now youre buying more TCAM/SRAM for your route table.
709.
by donavanm 13y ago
Virtual topology. Someone is still running cables at the end of the day. And fat switch fabrics have some scary cabling indeed.
710.
by donavanm 13y ago
> My understanding is that CloudFlare is already tackling the security aspects of hosted services Im curious; which aspects are they tackling, specifically? Authn, authz, byte validation... Or ?
711.
by donavanm 13y ago
"Gatekeepers" are usually HR, recruiters, or some sort of sourcing agency. Unfortunately resume buzzword bingo is a fundamental of that type of low quality screening. You can get high quality contacts through other methods. Open
712.
by donavanm 13y ago
Demonstration is the best path forward. Show, dont tell, your abilities. The rest of my comment assumes this is based on a real life issue. Youre interviewing at the wrong place, with people you shouldnt work with. When leveling a candidate
713.
by donavanm 13y ago
Use S3, and their website feature if youd like. If you expect moderate traffic use CloudFront. The CloudFront data transfer rates are cheaper than S3, IIRC.
714.
by donavanm 13y ago
I do believe its your friendly neighborhood JTAC/ANGLICO/JFO/etc who has the picture "on the ground".
715.
by donavanm 13y ago
do note that it's per cert. you could, for example, use a wildcard cert and serve multiple distributions & fqdns off a single cert. ps: check out the insane pricing for dedicated certs & https on some other CDNs. $600/mo d
716.
by donavanm 13y ago
theres the (lack of) security when the client advertises the expected cert cn outside of the secure session. bu the real reason is simply client support. last i looked about 50% of requests looked like they came from clients that didnt supp
717.
by donavanm 13y ago
i didnt catch it in the pdf but a single deployment is supposed to push 200tb/s. Id ball park the capital cost aaround 1.25M USD. the original 4u boxes do/did ~9gb/s of prod traffic each. peak/lab util was about 15gb/s. IIRC two of these bo
718.
by donavanm 14y ago
Know how to implement basic data structures and when to use them. Know graph/tree traversal, breadth v depth etc. Explain Big O notation of your implementation and efficiency trade offs. know how how/when to use alternatives when resource c
719.
by donavanm 14y ago
Related, http://cloudscare.com
720.
by donavanm 14y ago
The us-east and SEA end points for US Standard buckets are directly addressable as well. Consistency will be tighter if you PUT and GET to the same endpoint. Edit: that's be s3-external-1.amazonaws.com for us-east and s3-external-2.amazonaw

More ›