donavanm

75 ms·

811.
by donavanm 14y ago
Increase the attack surface area. With anycast the nearest nodes to the attackers "sink" all of the traffic. The rest of the nodes continue to serve other customers with no I'll effect. With this product you will have a very wide base of un
812.
by donavanm 14y ago
Let me know how your compliance audits go. I'm sure the pci dudes won't mind that "root" logged in from 20 different hosts.
813.
by donavanm 14y ago
Check your SLA definitions. http://www.virtualizationpractice.com/technically-the-amazon... Edit: Not that I agree or disagree with that SLA. Just noting it is documented somewhere besides a glyph in a legend.
814.
by donavanm 14y ago
Sigh, I blame auto correct. See https://en.wikipedia.org/wiki/Equinix
815.
by donavanm 14y ago
The "scalability" thing isnt about adding some ram or getting a larger proc. It's about adding a few dozen (or hundred) instances in minutes. Or getting hosts turned up in 7 different regions. Anyone can do that right now with AWS, let me
816.
by donavanm 14y ago
Can you clarify? I assume you mean that you withdraw announcements and you see BGP convergence in about 6 seconds?
817.
by donavanm 14y ago
> They'll sell anything to anyone, anywhere, and they do so for ridiculously low margins. +1, no one ever seems to realize how important this aspect is. "Cloud" providers aren't competing with some fat margin software corp. AWS is a bil
818.
by donavanm 14y ago
All networking questions have one answer: maybe.
819.
by donavanm 14y ago
Disagree on the "dynamically increase" logging. Log everything all the time. When you enable logging/debug you've just changed your resource profile. Presumably your already in a precarious/high risk situation, don't add more change. Storag
820.
by donavanm 14y ago
Why do you assume amazon doesn't have " a backup diesel generator, redundant connectivity, and a good network/sysadmin"? And if they do have that why is your situation different?
821.
by donavanm 14y ago
I think the philosophy is that the trust boundry is your host, not your uid. We seem to be migrating towards "one instance per application" from of the traditional "one uid/proc per application". For the great majority of use cases this is
822.
by donavanm 14y ago
Pretty sure CDNs will be around. The value add of a cdn isn't their cheaper commit rates. The value is in location diversity and capital investment in infrastructure and ports in those locations. In new speak CDNs are "bit delivery as a ser
823.
by donavanm 15y ago
> The most important thing going on here is Anycast. ... This results in packets being routed to the nearest DNS server. Nearest in terms of AS path. This can be wildly different than latency as BGP isn't really implemented with cost/pe
824.
by donavanm 15y ago
No, AFAIk AWS does not have the ability to restrict usage based on expenditure. There are startups that do this though, check http://www.enstratus.com/ .
825.
by donavanm 15y ago
I created a quick demo at http://region.strewth.org/ and a introspective TXT record at region.strewth.org. More details http://www.strewth.org/words/ .
826.
by donavanm 15y ago
Wonder if the FreeBSD 9 AMI on a "windows" t1.micro is also free tier? http://www.daemonology.net/freebsd-on-ec2/