laz

7 ms·

31.
by laz 13y ago
The big thing they're crowing about is because you can spin something like this up quickly on demand in the G cloud. Most sites aren't remotely close to this artificial traffic pattern (1 packet request, 1 packet response). It&#x2
32.
by laz 15y ago
sigh. I'm now looking at http://tt-rss.org/
33.
by laz 15y ago
This isn't the only prep that you'd need, but this is a good one to get your mind in the right place. (I've given ~2 "big tech" interviews a week pretty solid for the past 6 years)
34.
by laz 15y ago
BWAHAHAHAHA. Dude, Larry IS the lunatic.
35.
by laz 15y ago
Google has moved past GFS, but the basic concept is right: every machine in the cluster is a storage server. There are some machines that are equipped with more disks than others where local density is needed.
36.
by laz 15y ago
the unsubscribe link was 404ing for days and days
37.
by laz 15y ago
Mentioning devops undermines your credibility. What service is 5 nines? How is that measured? In general, Google SRE just gets it done. Sometimes people screw up. It happens.
38.
by laz 15y ago
Missing certs in the chain are fixed, BTW. Thanks for pointing it out. We tracked down a bug in config autogeneration, and are going to add paranoia to monitor for it in the future.
39.
by laz 15y ago
AFAICT, the tool is broken WRT renegotiation detection. ~% openssl s_client -connect 69.171.228.13:443 2>/dev/null < /dev/null | grep Reneg Secure Renegotiation IS NOT supported
40.
by laz 15y ago
http://tools.ietf.org/html/draft-vandergaast-edns-client-sub... is an RFC to fix this problem.
41.
by laz 16y ago
here's the response by Adam Langley, the guy who kicked off the "ssl is cheap" thing with another blog post: http://www.imperialviolet.org/2011/02/06/stillinexpensive.ht...
42.
by laz 16y ago
Source IP persistence causes hot spots. Big web proxies etc end up clobbering a single machine.
43.
by laz 16y ago
The lack of mention of SNI is odd ... like the author doesn't know what they're talking about. Most of the latter part is FUD. One real problem that is encountered when moving to terminating SSL on many machines, instead of a single LB, is
44.
by laz 16y ago
Compared to HTTP DNS is crazy cheap to serve, but you'll still end up bottlenecking on the pps rate of your NIC and OS. Everybody optimizes for high throughput and ignores small packets. Speaking of DNS DDoS, DNS Made Easy saw a 40Gbit DNS