justinsb

47 ms·

1. 421.▲
   Seagate Kinetic [Drives with new direct-Ethernet interface](seagate.com)

   1 points by justinsb 13y ago|0 comments
2. 422.▲
   by justinsb 13y ago

   Thanks for the heads up. But the only IP I see in there is 172.31.254.1, which is the address we assign to the host in the VPN private network - part of the 172.16... range. Have you found a real IP I've missed?
3. 423.▲
   by justinsb 13y ago

   It's not a bad idea! I'm comparing the configuration to setting up an IPSEC or OpenVPN server&client, not just the client - that involves a lot of configuration. Certainly now that the server setup is almost eliminated (you
4. 424.▲
   by justinsb 13y ago

   Interesting - as long as SSH works, this will work. That said, I thought OpenVPN worked with the client behind NAT as well, so I guess I don't really understand the problem.
5. 425.▲
   by justinsb 13y ago

   You're right; my mistake. Sorry.
6. 426.▲
   by justinsb 13y ago

   Thank you so much for that (genuinely!). This is the reason I love HN: in this discussion we have someone that pointed out the probably-good-enough-for-the-99% SOCKS proxy (let them eat SOCKS!), and you've now pointed me to the &quot
7. 427.▲
   by justinsb 13y ago

   I agree that IPSEC should be the fastest & best, because it avoids the tun/tap device and works at the packet level. Anything that uses tun/tap and/or a TCP transport is not going to be as good; it needs tricks like sshu
8. 428.▲
   by justinsb 13y ago

   IPv6 was my primary motivation. The interesting thing here is that - once the tunnel is set up - we're really not running any extra software other than SSH (on the client or on the server). My script just finds unused tunnels and IPs
9. 429.▲
   by justinsb 13y ago

   No worries! I'm sorry you felt the title was unrelated; I like more "flowery" titles, and we have the "same title" rule on HN. The point I was trying to make with the title is that OpenSSH does a lot of what a full
10. 430.▲
    by justinsb 13y ago

    Good point - thanks for bringing it up. This option gives you a SOCKS tunnel (only), which is great for web-browsing and other apps, but won't just automatically do "all traffic". It does seem that SSH has a lot of ways to d
11. 431.▲
    by justinsb 13y ago

    Well, my script is free + open source, so I think "advertisement" has some connotations that aren't quite fair :-) It's not really "my" software - all the real work is done by OpenSSH, which is heavily reviewe
12. 432.▲
    The Best VPN Is The One You Use(blog.justinsb.com)

    49 points by justinsb 13y ago|45 comments
13. 433.▲
    by justinsb 13y ago

    MongoDB is optimized for Mongo Inc, not for you, not for me.
14. 434.▲
    by justinsb 13y ago

    Other databases are forgiving; they are configured "safe", even at the expense of speed. The intention is that you can deploy a small system immediately; if/as you grow you will see that the database is going too slowly. Yo
15. 435.▲
    by justinsb 13y ago

    It is not a sin of commission Mongo is accused of, but a sin of omission. MongoDB out of the box is configured to be fast-but-unsafe. Postgres and other databases out of the box are configured to be safe-even-if-slower. A benchmark which
16. 436.▲
    by justinsb 13y ago

    Thanks for pointing out the patch - I'll review the discussion. It's definitely an important use case - no argument here :-)
17. 437.▲
    by justinsb 13y ago

    Cool idea. I don't see any reason not to support CORS; all the OpenStack requests require a custom Auth http header anyway, so I don't think there's any danger in turning on CORS there. I didn't see anyone in the Launc
18. 438.▲
    by justinsb 13y ago

    Sounds interesting - would love a link to your work if it's open source!
19. 439.▲
    by justinsb 13y ago

    The APIs are re-implemented from scratch, from the OpenStack docs. The docs are pretty good, and the OpenStack community has been pretty good about improving them where there were gaps as well. Part of the idea was not to use _any_ of the
20. 440.▲
    by justinsb 13y ago

    Great question! Every container gets an IPv6 and an IPv4 address. The IPv4 address is private (behind NAT), the IPv6 address is routable. So outbound traffic from the instance works to both IPv4 and IPv6. For a simple instance, inbound t
21. 441.▲
    by justinsb 13y ago

    Wow - wasn't quite ready for this to go public, but I guess the (Octo)cat is out of the bag now. FathomCloud is an experiment in a really lightweight cloud, supporting existing cloud APIs, starting with the OpenStack API. It uses LXC
22. 442.▲
    by justinsb 13y ago

    I also remember user-space threading in Java (where N threads would be multiplexed onto M kernel threads), although my understanding was that we moved to the 1:1 threading model because it was faster and had fewer pathological edge cases. I
23. 443.▲
    by justinsb 13y ago

    This is a wonderful idea: I particularly like the aspect of reading outside of your primary field. It seems that many breakthroughs come from the rare person who can take a concept from one field and apply it to a seemingly unrelated field
24. 444.▲
    by justinsb 13y ago

    I bet "the feds" will happily return the money of any seller that is willing to provide them the complete records of their customers, as it would probably give them a whole bunch of real-world identities that they could then use t
25. 445.▲
    by justinsb 13y ago

    Edit: intslack has fixed the quotation :-) What are you quoting from?
26. 446.▲
    by justinsb 13y ago

    I really like the suggestion of doing the calculation for everyone in advance. We could even have sent a letter to everyone that would be better off if they enrolled.
27. 447.▲
    by justinsb 13y ago

    I don't think any of the questions being asked were particularly hard: certainly no harder than doing your taxes. The system could clearly say "based on the information you provided, here are your options". I know it's
28. 448.▲
    by justinsb 13y ago

    I posted this in another comment, but do you have any ideas as to why that information has to be verified in real time?
29. 449.▲
    by justinsb 13y ago

    Apparently integrating with "legacy" systems was a big bottleneck (e.g. to verify your SSN). I don't understand why this verification had to be done "live" though; the obvious alternative would be to collect all th
30. 450.▲
    by justinsb 13y ago

    I'm sorry you took offense; it was intended as friendly feedback. I'm familiar with Docker. If you have actual answers, it would be much more constructive to post relevant links.