pquerna

21 ms·

151.
by pquerna 12y ago
Yes, most definately. OpenStack Ironic[1] can do this today, given you had right hardware. Making that hardware "mutli-tenant" is not a trivial project, mostly because the firmware stacks are still very closed, but it can be done
152.
by pquerna 12y ago
When you use a remote blockstore like they are as your storage, you also generally are always booting via PXE, and so far have a provider controlled kernel. I used to work on Rackspace OnMetal: http://www.rackspace.com/cloud
153.
by pquerna 12y ago
The crew at Mailgun are kinda doing this, and its been enabled by vulcan proxy: https://github.com/mailgun/vulcand At first, sure, Vulcand is just another reverse proxy, but what they have been doing is registering ind
154.
by pquerna 12y ago
From a quick read, this looks like more or less a ground-up rewrite of OpenShift? Is anyone a user of 2.x? How does this feel?
155.
by pquerna 12y ago
Correct -- the base OS would auto-update, but with how it works today, you would still need to upgrade your own containers. I don't believe this problem of updating dependencies in containers will last forever -- its pretty reasonable
156.
by pquerna 12y ago
This works OK when you have direct relationships with the YC Founders -- but when you are only tangentially connected in a big company... It is hard to know where rumors go.
157.
by pquerna 12y ago
I may or may not of applied to YC before; I decided to tell all of YC founders working at the same company ahead of time for this reason. It can get at least a little complicated when some of them are managers... of people applying. Most
158.
by pquerna 12y ago
Have you thought about a "read at timestamp" construct in RethinkDB? It's not really an MVCC thing, and you can work around it in data model, but for lots of reports (say, running in a cronjob), I want to run a query "as
159.
by pquerna 12y ago
Is anyone using RethinkDB as a "lightweight" Business Intelligence / Analytics / Datawharehouse store? (Maybe for use cases like Amazon Redshift?) It seems like there could be a sweet spot of their nice query language, s
160.
by pquerna 12y ago
I've used `logrus` in a couple projects and been pretty happy with it. Easy to get rolling, easy to make chained loggers, and can do JSON in production or pretty colors when in dev environment.
161.
by pquerna 12y ago
Apache Software Foundation does not pay any software developers -- so its a very different model than what you are proposing.
162.
Google Domains Beta(venturebeat.com)
6 points by pquerna 12y ago|0 comments
163.
by pquerna 12y ago
In my experience partnerships in a SaaS-like thing tend to be binary: 0) Press-release and a few links on a website: Basically worthless. 1) Sales-team integration: you train the partners sales force, they get quota retirement (somehow, thi
164.
by pquerna 12y ago
It's common on these provider "isolated" networks to use a small /24 subnet by default. I'm more surprised that AWS isn't sending a gratuitous ARP when IPs are re-cycled to mitigate issues like this.
165.
by pquerna 12y ago
In theory, OVF is the 'answer' for Virtual Machines -- but its failure has been in adoption -- if you can't get Amazon and OpenStack to adopt it, what's the point? Before Rocket/ACI there wasn't even a contend
166.
by pquerna 12y ago
personally, I think the long term value of Rocket is not about Rocket -- its about the ACI specification for the formats of containers. Right now I'm already taking a Dockerfile, exporting it to a tar, and then running systemd-nspawn -
167.
by pquerna 12y ago
Hi, Apache developer here, kinda a request for feedback on how we can improve the situation: How would people feel about automatic key rotation that required time synchronization across a cluster? Eg, on all your webservers, you have someth
168.
by pquerna 12y ago
Yes, and BIOs are one of the parts that basically every major open source project uses: Apache, Nginx, Node.js, curl, etc -- they all use the BIO API to provide TLS as a filter over their internal streaming APIs. Having personally worked
169.
by pquerna 12y ago
Well, I don't know about the 'dark' side, but I know @kordless has been hacking on StackMonkey: https://www.stackmonkey.com/ Which lets you buy compute instances anonymously using BitCoin.
170.
by pquerna 12y ago
Yes, iptables is installed as a dependency of Docker, but is not configured to do anything: $ iptables -L -v Chain INPUT (policy ACCEPT 2172 packets, 459K bytes) pkts bytes target prot opt in out source des
171.
by pquerna 12y ago
That is a horrible glib answer. I was supposed to get a EASY TO USE, READY TO GO, Mesos development environment. So now I have to ssh to 5 boxes and manually add iptables rules? Why don't I just install Mesos myself then? Honestly th
172.
by pquerna 12y ago
This seems completely insecure. I just spun up the small cluster, and it does nothing to firewall off or isolate the instances from the internet? Eg, Zookeeper is listening on port 2181 on the public internet? How is this OK?
173.
CoreOS Now Available on Microsoft Azure(coreos.com)
10 points by pquerna 12y ago|0 comments
174.
by pquerna 12y ago
CGI is an interface first defined 1993, 21 years ago. No one thought setting user data in environment variables was a risky thing at the time. More modern interfaces between dynamic code and webservers, like even FastCGI or SCGI or dozens
175.
Rudder: An etcd backed overlay network for containers(coreos.com)
84 points by pquerna 12y ago|15 comments
176.
by pquerna 12y ago
Have you looked at Vulcan Proxy? http://vulcanproxy.com/ It doesn't have the SaaS thing y'all be doing, but the APIs and structure of the proxy seem pretty well thought out....
177.
by pquerna 12y ago
Strictly speaking, you can get traditional vendors to do firmware signing -- but getting them to put your public key in there will be more difficult, with volume most of the big vendors will be... accommodating. Dell's 12th generation
178.
by pquerna 12y ago
I'd like us (Rackspace) to publish a full whitepaper about what we have done, but I'll break down things into two topical areas: 1) Requiring signing of all firmwares, and putting those firmware private keys in control of Rackspac
179.
by pquerna 12y ago
Timezones are... unfortunate. I work in Pacific time, but have co-workers in Central, and Eastern. My 11am meeting is their afternoon.
180.
by pquerna 12y ago
hadn't realized it had been open sourced so recently, just 8 days ago was the HN discussion on AerospikeDB being open sourced: https://news.ycombinator.com/item?id=8093476

More ›