hhw

22 ms·

151.
by hhw 12y ago
If routers are being directly attacked, the router IPs can just be null routed, as they don't need to be reachable by the Internet at large to be the next hop for passing traffic between routers. Some networks use unadvertised IP space
152.
by hhw 12y ago
A thread with some of the people most directly involved, including OpenBSD's founder, on how the fork happened is as relevant to the subject at hand as it gets. Not sure why you view it as gossip. It also directly answers your question
153.
by hhw 12y ago
There was a discussion about this on the OpenBSD misc mailing archives back in 2012: http://marc.info/?t=133961305400003&r=1&w=2 Theo's initial response to the thread, which may help illuminate the situation, w
154.
by hhw 12y ago
Best place to look is the webhostingtalk.com forums. There are a ton of providers who are active there, and people also often post reviews and outage reports.
155.
by hhw 12y ago
People tout EC2 scalability all the time, but the reality is it only allows you scale down. You can easily find dedicated servers more powerful than the hardware that EC2 runs on, for vertical scaling, with hardware specifications tailored
156.
by hhw 12y ago
OVH isn't really production grade hosting, so it's not quite fair to use them for comparison. On the flipside, SoftLayer has been overpriced for a while now, and the IBM acquisition really didn't help any. Thankfully, there a
157.
by hhw 12y ago
There's been a bit of revolution in OpenBSD as well, just smaller ones. OpenSSH, PF, and now LibreSSL were all fairly rapidly developed at inception due to issues with the original projects they replaced. They made it into the base sys
158.
by hhw 12y ago
One thing to note about FreeBSD is the new pkg-ng package management system is a big step forward in terms of usability vs the old pkg_ commands. It does not lose to Debian's apt in any way when it comes to binary packages, and FreeBSD
159.
by hhw 12y ago
The only caveat with FreeBSD's implementation of PF is that it's now effectively been forked but hasn't been appropriately renamed. They're still using OpenBSD 4.6 and earlier configuration syntax, and have added some no
160.
by hhw 12y ago
FreeBSD is or at least was capable of higher concurrent connections per server, which is presumably why Whatsapp uses it. FreeBSD also has a reputation for performing more consistently and being more responsive under duress. These might be
161.
by hhw 12y ago
Hi Nolan, thank you for responding to my question. In my naivete I presumed support for the ASICs would end up in the Linux kernel or at least made available due to GPL requirements, but I now see another post mentioned you have a proprieta
162.
by hhw 12y ago
You can buy an EX4550 new in the $6K range, albeit just with 32x 10Gb ports; you'd need to buy the modules for 40Gb or additional 10Gb ports. This is just on the grey market (check eBay), no negotiation or relationship required. If you
163.
by hhw 12y ago
If everything is more or less stock Linux, what value does Cumulus actually add for it to be worth the licensing costs? This all seems to be a giant step backwards. JunOS is now the gold standard for its CLI and configuration, due to being
164.
by hhw 12y ago
Perhaps, but there's an even bigger disconnect between Amazon's current market cap and the best case scenario of what they could be earning if they did focus on short-term profitability. Let's take a simplistic look at what t
165.
by hhw 12y ago
> 1b) Testing was not skewed by faster cores. CPU performance analysis was based on SPEC CPU 2006 using base rate runtime. SPEC CPU is a multi-core benchmark with metrics that scale linearly on number of CPU cores. I wasn't suggesti
166.
by hhw 12y ago
The problem with benchmarks are that it's really, really difficult to emulate real-world conditions. However, here some of the more obvious points that are unrealistic. 1) Comparing between same number of cores. The core count selected
167.
by hhw 12y ago
This feature, known as DDIO, is only on Intel's Xeon E5 and E7 v2 family CPUs. So, it's not quite ubiquitous yet, nor have there been any announcements on when it will become available (if ever) on the lower Xeon E3 or any of the
168.
by hhw 12y ago
Generally, a /24 is the smallest block for which most networks will accept BGP advertisements. You'd generally purchase a /22-/20 or larger though. Note that in most cases, these are (part of) blocks that were assigned b
169.
by hhw 12y ago
Only for a while. Right now, ARIN IPv4 addresses are easier to get than ever before, as providers are handing out IPv4 addresses out like candy so that they have as much IPv4 space under their control as possible when ARIN runs out. The nex
170.
by hhw 12y ago
I remember when that article came out. The basic premise is that it defines a secure OS as something that requires an add-on security framework (resulting in additional complexity), and concludes that OpenBSD is not secure because it doesn&
171.
by hhw 12y ago
Well, I'm no fan of Apple at all and haven't owned an Apple product since the II GS. And I'd argue against storing any significant data on a laptop or desktop drive, as this is one of the most likely components to fail. Data
172.
by hhw 12y ago
I disagree. Most of the pros are pros at finance, but not in the industries they actually invest in. By having expertise in a particular industry, you may be able to recognize disconnects between most pros and reality. Case in point, if you
173.
by hhw 13y ago
Try http://openntpproject.org/
174.
by hhw 13y ago
Megaupload had more legal use cases than this. They will have to stay under the radar, or else be busted by the feds like so many other torrent related sites. Kind of hard to do, when you'll inevitably end up with people torrenting usi
175.
by hhw 13y ago
Simple, seedboxes tend to be close to other seedboxes. They then potentially talk to each other over the same network, or a nearby one they peer with, meaning bits generally have less distance to travel and over bigger pipes. A disproportio
176.
by hhw 13y ago
AWS tends to pick locations based on cost rather than their proximity to major Internet hubs, so the number of physical locations they actually have for most of their services is deceptive. They only have 9 available regions, and their late
177.
by hhw 13y ago
You can just use BGP to find out all that information easily enough for any network with an AS number (i.e. any who speaks BGP). Just take a look here: http://bgp.he.net or a plethora of looking glasses like http://lg
178.
by hhw 13y ago
I think you mean 'tick' for a die shrink, which is Denverton, and is supposed to have "more cores and more of everything". 'tock' refers to a new microarchitecture, and the details on the generation that will f
179.
by hhw 13y ago
A custom domain address can also be used with a custom mail server configuration that includes spamassassin. You can even setup IMAP folders for you to drag and drop mail into to be learned automatically as spam, ham, or forgotten. You can
180.
by hhw 13y ago
The Avoton Atom C2750 which is already out now is also 8 cores, but at 2.4GHz and with the entire SoC at 20W. It's supposed to have comparable performance to a Xeon E5520 quad-core/8-thread 2.26GHz CPU from 3 generations back, or

More ›