majke

50 ms·

481.
by majke 11y ago
1) Not really. Connection resets have nothing to do here. Are you by any chance running on a slow network? We did some debugging of problems slow clients recently. 2) Correct. Increasing number of buckets is a bandaid. Improving the linux
482.
by majke 11y ago
Please read my other comment in this thread. https://news.ycombinator.com/item?id=11448987 Increasing the hash size doesn't fix the unhappy bucket, but it does reduce chance that packets will ever hit it. So yes, trave
483.
by majke 11y ago
:) The full answer is: depending on which RFC you read :) Initially the RFC's specified that you could only use TCP if you got UDP truncation _first_. Nowadays that's relaxed but it's very vague when you should use TCP except
484.
by majke 11y ago
I think I understand the confusion. The packets are hashed based on DESTINATION PORT. Now, from a server point of view there are two types of connections: inbound and outbound. Our servers accept connections but they also establish connecti
485.
by majke 11y ago
It would reduce the probability of collision. Sure, port 53 will always go to unlucky bucket. But port 16275 may or may not collide depending on thehash size.
486.
The revenge of the listening sockets(blog.cloudflare.com)
3 points by majke 11y ago|1 comments
487.
by majke 11y ago
I can definitely say that for IPv4 VMWare Fusion NAT does not forward inbound ICMP path MTU messages. For ipv4 vmware fusion hosts are a black hole.
488.
List of coroutine, fibers and green thread libraries and resources(github.com)
1 points by majke 11y ago|0 comments
489.
by majke 11y ago
It's a pity the article doesn't touch on BPF. BPF is the magical bit in tcpdump. https://blog.cloudflare.com/bpf-the-forgotten-bytecode/
490.
by majke 11y ago
Well, we did win first crypto wars, didn't we? Sure, the war was long, there were casualties.
491.
by majke 11y ago
Firefox's "tracking protection" only works in private mode, right?
492.
Pipes: A Brief Introduction (2006)(linfo.org)
1 points by majke 11y ago|0 comments
493.
by majke 11y ago
I must admit the description is pretty opaque for me. Can someone translate this to simple english? What "subpoena" is in this context? What most likely actually happened?
494.
by majke 11y ago
I skimmed the docs, but I'm unsure about the semantics. The pubsub, what happens to slow clients? The same for synchronization. Basically - how it behaves when the clients are not behaving.
495.
GPS error caused '12 hours of problems' for companies(bbc.com)
96 points by majke 11y ago|38 comments
496.
by majke 11y ago
Let me rant about a bigger point: What are coroutines conceptually? Well, it's a "thing" that we use in order to express sequential code (I'm sure there is more abstract definition). What is a difference between Erlang P
497.
by majke 11y ago
Nice idea. Shameless plug: this reminds me a ptrace hack I did a couple years back: fluxcapacitor https://github.com/majek/fluxcapacitor#fluxcapacitor https://idea.popcount.org/2013-07-19-how-to-sleep-a
498.
by majke 11y ago
just wow, from the snippet you linked: * - right-click ssh.c in the FileView * - click Settings * - select the C/C++ tab and the General category * - under `Debug info:', select anything _other_ than `Program *
499.
Capture the Flag by EFF (next Tuesday)(eff-ctf.org)
2 points by majke 11y ago|0 comments
500.
NGINX vs. Apache: Our View of a Decade-Old Question (2015)(nginx.com)
1 points by majke 11y ago|0 comments
501.
by majke 11y ago
Think about a bigger picture. Before NAT we used to have a symmetrical internet. Everyone could consume content from other servers. Everyone by definition was a server and could produce content for others. From a philosophical point of view
502.
by majke 11y ago
The introduction to SSE is not bad http://flatassembler.net/docs.php?article=manual#2.1.15
503.
by majke 11y ago
Element 115 just must be called Elerium! http://www.ufopaedia.org/index.php?title=Elerium-115
504.
by majke 11y ago
There is a fair bit of context behind this work. Some pointers: 1) Introduction. Receiving / sending packets with high throughput is hard: * https://blog.cloudflare.com/how-to-receive-a-million-packets... 2) Achieving
505.
by majke 11y ago
Interesting line of reasoning. Definitely mmaping 8.6TiB into user space process virtual memory is gonna take a toll. I tried to find why varnish doesn't use sendfile: https://www.varnish-cache.org/lists/pipermail
506.
Winamp's Old Gone Advanced Visualization Studio(en.wikipedia.org)
4 points by majke 11y ago|0 comments
507.
by majke 11y ago
Open recursors asking for random subdomains can generate bigger volume of attack, but still, they are smart and will fall back if the server is overwhelmed. Even if you're assuming 100 qps from each of the 94k recursors, that's on
508.
by majke 11y ago
Nope. The open recursive DNS servers, are real DNS servers, with caching and backoff logic. If, say, there are 94k [1] open DNS resolvers in the wild, each will ask you one DNS question for example.com, cache the answer and that's it.
509.
Lcamtuf's world's best exploit: ld-expl. Amaze your friends (2000)(lcamtuf.coredump.cx)
2 points by majke 11y ago|0 comments
510.
by majke 11y ago
Remember they have your location anyway from your IP address.

More ›