iampims

16 ms·

181.
by iampims 7y ago
They all run the same software stack though, so despite being deployed on diverse hardware, so they can’t claim to only have independent failure modes.
182.
by iampims 7y ago
It doesn't have to be malicious. File Descriptors aren't part of the isolation offered by cgroups, a misconfigured pod can exhaust FDs on the entire underlying Node and severely impact all other pods running on that node. Network
183.
by iampims 7y ago
Updating 100 clusters bares less risk than updating a single giant one.
184.
by iampims 7y ago
Namespace are not always well suited to hermetically isolate workloads.
185.
by iampims 7y ago
But some other function will need to stitch all the small functions together, and you’re kind of back to square one, no?
186.
by iampims 7y ago
Related: Shaq's business Empire https://money.com/shaq-business-empire/
187.
by iampims 7y ago
Just say you took a sabbatical.
188.
by iampims 7y ago
You could also use https://tailscale.com which has, subjectively, a much nicer UI and iOS integration.
189.
by iampims 7y ago
That was mine too. It’s possible that this previously applied to primitives (cpu, memory, network, storage) and now refers to applications (keyvalue store, SQL database, message queues, etc.)
190.
by iampims 7y ago
Even with WAL enabled?
191.
by iampims 7y ago
Possible reason why it UA matters: https://blog.cloudflare.com/monsters-in-the-middleboxes/
192.
by iampims 7y ago
You can always use https://ngrok.com and other similar "tunneling" solutions. It works like a charm: https://ngrok.com https://github.com/cloudflare/cloudflared https://gith
193.
by iampims 7y ago
Disgusting business practices to cover pedophiles. This is despicable.
194.
by iampims 7y ago
To avoid leaking IPs, you can use cloudflared tunnel. It might get pricy if you move a lot of bytes, but it’ll isolate you from IP leaking issues.
195.
by iampims 7y ago
It has build-time annotations though, which often serve the same purpose.
196.
by iampims 7y ago
Really polished, congratulations! I agree with the anonaddy.com alias, and saw that you added another one for people on lite/pro plans. I'm just unclear on how the bring-your-own-domain feature works.
197.
by iampims 7y ago
I thought it was called “second mover advantage”.
198.
by iampims 7y ago
in my experience, it's not about the protocols, it's about all existing middleboxes blocking/intercepting all traffic on non 443 ports. UDP traffic is notoriously blocked by routers. The only viable option being: HTTPS.
199.
by iampims 7y ago
Which bank if I may ask?
200.
by iampims 7y ago
Not too dissimilar from google’s business model…
201.
by iampims 7y ago
I somewhat wish there was a way to test if any http2 server is vulnerable to these issues: * https://godoc.org/golang.org/x/net/http2 * https://www.haproxy.com/blog/haproxy-1-9-has-arrive
202.
by iampims 7y ago
Intermittent Fasting
203.
by iampims 7y ago
Do we know if since the recent incident, Verizon is looking at implementing RPKI? Or have they still not acknowledged the outage?
204.
by iampims 7y ago
You can already do this: GOGC=off [1] [1] https://blog.cloudflare.com/go-dont-collect-my-garbage/
205.
by iampims 7y ago
Can you share more details about this? Sounds very interesting!
206.
by iampims 7y ago
I feel like this would be neatly implemented as a Redis Proxy, keeping the same semantics but removing that concern for simpler clients.
207.
by iampims 7y ago
True. I believe version 1 of ngrok was open-sourced, or at least source available.
208.
by iampims 7y ago
Literally the last paragraph: "We can't always go through life-changing things to make other people happy ... and I had to learn that early on."
209.
by iampims 7y ago
I’m a big fan of Cloudflare Tunnels: https://www.cloudflare.com/products/argo-tunnel/ https://ngrok.com is also a very good alternative.
210.
by iampims 7y ago
Why is this on bitbucket.org? I don’t see a link between the author’s post and the bitbucket blog. Is it just “content marketing”?

More ›