druiid

24 ms·

211.
by druiid 14y ago
Thinking about it on the other hand I suppose that is indeed true. I'm with a couple other posters on the other threat though and wondering how they plan to have this truly HA.
212.
by druiid 14y ago
I wrote up a long post wondering about the efficacy of deploying an openstack solution that combines so many features into one box (the network (quantum?) and controller)... and then I read further down into the article that the price per u
213.
by druiid 14y ago
Hey man, not sure how worried about your info getting out there, but generally when people troll for 'proof' here I ignore it. Essentially it's just one more avenue for people to use against you, especially in regards to linking a name/iden
214.
by druiid 14y ago
Yeah, I highly doubt 300G/sec is the largest attack ever as well. I've seen (well, we only saw a gigabit of it.. our host saw the rest) a 41G/sec attack. I imagine large attacks like this happen all the time but don't make the news because
215.
by druiid 14y ago
Honest question here. First: What year exactly was this deployment put in place? At least for Intel their CPU performance for VM has increased SUBSTANTIALLY even in the last couple years. I remember taking some VM hosts from some of their f
216.
by druiid 14y ago
Well, don't confuse I/O with throughput here. You can look at performance numbers for just about anything and tweak one direction or the other. For instance it's easy to make a benchmark showing huge throughput to any given storage solution
217.
by druiid 14y ago
VMWare sales from what I have heard, has a history of over-selling, over-promising and ultimately getting people to spend a crap-ton of money on their products. Honestly I have to say, it sounds a bit like you guys got taken for a ride. I'd
218.
by druiid 14y ago
Well nothing specifically is 'wrong' with VMWare, except for their notoriously terrible pricing... as in you might want to do the math and just buy more physical hardware and not virtualize anything unless you can get 10:1 or higher instanc
219.
by druiid 14y ago
20-30% hit in IO? It hasn't been at that level for a long time. With new KVM versions and good Intel processors there is a performance hit of as low as 5% these days. That's not to necessarily say your particular workload will see that, but
220.
by druiid 14y ago
I wish I had downvote ability right about now... so I could negative karma you even more. There is this constant argument about these kinds of stories on hacker news. It's not about being 'hacking' related, it's about being interesting and
221.
by druiid 14y ago
Dude, it is a single firetruck, not a fleet of firetrucks being driven around to pick up groceries. If he were starting a trend, then yes perhaps this would be a-bad-thing. Instead, it's one guy fulfilling a lifelong dream. The gas mileage
222.
by druiid 14y ago
You can say that as much as you would like... then go do a Google search. No one is saying to get drunk with a baby, but a glass (max) is fine.
223.
by druiid 14y ago
To me this seems kind of like what I was afraid of way-back-when, when choosing a CM system. I eventually went with Puppet because basically I was afraid of this kind of thing happening. Because Chef uses Ruby for the configuration language
224.
by druiid 14y ago
Up-voting you because, well, everyone always forgets about Corosync. About the only criticism one could have had about it was that when it only supported multicast you couldn't use it with EC2 and other providers that (for good reason) bloc
225.
by druiid 14y ago
Well, it kind of is a lot of the time, just not in the way the other commenter was thinking. The majority of DDoS traffic I have seen is from Russian, Turkish, Ukraine and Chinese IP address spaces. Basically I think a lot of 'eastern' coun
226.
by druiid 14y ago
Ossec is actively developed. They just had a new release a few months ago. Realistically it doesn't get updated as much as it used to, but it still is actively developed. I think more than anything it is just kind of at a near end-state whe
227.
by druiid 14y ago
Indeed. This was no few minute outage. There was very close to a full hour of zero traffic according to our MRTG.
228.
by druiid 14y ago
As always I'm glad to see Cloudflare post such detailed outage reports. They are one of the few providers I know of that is willing to go into such depth and that is one of the things I appreciate about them. That said, the outage that occu
229.
by druiid 14y ago
I know for certain that writing things down makes them more 'important' to my mind. Printouts and the like generally get forgotten a few minutes after they were printed. Whenever I need to map out an idea within a script/program I'm working
230.
by druiid 14y ago
Well, really Cloudflare was started AS a WAF service. That it sped up websites was a side benefit of the service. The DDoS protection and protection guarantees are relatively new. Until sometime last year they didn't even guarantee they wou
231.
by druiid 14y ago
Wait, what? That is, I'm sorry... but a stupid response on their part. A SQL injection attempt (successful or not) is an SQL injection attempt. If it makes it to the server how is anything the 'future' or 'working differently', it still mad
232.
by druiid 14y ago
Both. We were victims of up to something like 21GBps DDoS attacks (sorry to any other clients on that segment of the Cloudflare network... whistles and walks away :P). We've also seen directed attempts from toolkits and the like for SQL i
233.
by druiid 14y ago
As a Cloudflare user whom has been protected by these kinds of attacks in the past... I too would like to know what the eff is going on here. They supposedly (according to tech support in the past) USE mod_security... so what did they break
234.
by druiid 14y ago
I think there is always going to be some amount of overhead with physical or cloud services for scaling. I can say though that one thing you can do with physical servers which is pretty neat is shut down entire physical nodes when you don't
235.
by druiid 14y ago
Thanks for posting this. With some new hardware we purchased we'll be doing the same move Broadcom -> Intel, so I think I'll actually be bookmarking this to come back to later!
236.
by druiid 14y ago
But... I also highly doubt most cloud providers are bothering to tune NIC's. They are probably just throwing KVM/Xen up on some standard hardware (whatever is cheapest with highest memory density) and opening the machine up for access. Ther
237.
by druiid 14y ago
Yep, totally agree. There's this great 'OMG THE CLOUD' here on HN, but really as I'm sure you guys did, you have to sit back, actually do a cost-benefit analysis (even if it's two guys on a whiteboard and not a full report) and decide what
238.
by druiid 14y ago
I didn't see that as a lesson learned. You have effort involved in moving 'sites' regardless of if you host your own equipment or 'rent'. If you're on the 'cloud' you have to potentially learn about a new providers API, test to make sure th
239.
by druiid 14y ago
I would disagree. With modern processors and memory you can cram a LOT into one cabinet. We run with Dell C8000's and R620/R720's and they are 'wow' level fast. Given that you can cram dual processors and 256GB of ram * 8 into 4U with the n
240.
by druiid 14y ago
I'm wondering if this same graph can be applied to non-PhD track students, meaning people coming out of STEM programs with a Bachelors, or are you basically getting nothing by even bothering coming out of STEM without a PhD/Masters?

More ›